A Tale of Two Stories
National Patient Safety Foundation

  Report from a Workshop on
Assembling the Scientific Basis
for Progress on Patient Safety

 

 

 
 
Day One
Contrasting Cases

 


For the first day of the workshop, the discussion was organized around specific cases of celebrated accidents and uncelebrated areas of research related to patient safety. These cases served as a framework within which to elaborate issues, opportunities, obstacles and perspectives on failure.


Celebrated Accidents

The "celebrated" cases are medical accidents that have attracted a great deal of attention from the public and the press (Table 1; Figure 1). The reports of these cases have led to a variety of reactions from health care professionals, regulators, and the public. Interestingly, many of these cases have achieved such a level of prominence in the collective public psyche that one can elicit a collection of images simply by mentioning the "Florida wrong leg or Willie King case" or the "Betsy Lehman case" or the "Libby Zion case." All of these cases evoke our empathy for some tragic loss.

These cases also have become symbolic in other ways. The case of Willie King in Florida, in becoming the "wrong leg case," captures our collective dread of wrong site surgery. The death of Libby Zion has come to represent not just the danger of drug-drug interaction but also the issues of work hours and supervision of residents - capturing symbolically our fear of medical care at the hands of overworked, tired, or novice practitioners without adequate supervision. Celebrated cases such as these serve as markers in the discussion of the health care system and patient safety. As such, the reactions to these tragic losses become the starting point for discussions of obstacles and opportunities to enhance safety.

The sourcebook distributed to participants contained background on a selection of these cases. Most of the available material comes from newspaper articles on a specific case. Also included were two broader perspectives from reporters looking across multiple health care accidents and attempting to synthesize a more coherent picture of accidents in general (Lisa Belkin, New York Times, June 15, 1997; Steve Twedt, Pittsburgh Post-Gazette, October 24-31, 1993).

The sourcebook also included a column by the news commentator Sidney Zion, father of Libby Zion. This commentary appeared following a media briefing conducted by the National Patient Safety Foundation. It conveys some of the charged atmosphere surrounding public discourse on patient safety issues. It may presage the sorts of communication difficulties that will confront those who seek to develop and explore a more technically grounded view.

Typically there are no independent investigations of the sequence of events and contributors to the outcome such as those done by the National Transportation Safety Board (NTSB) following aviation accidents. As a result, we often must rely on news reports, but other sources of information may be available. In the "wrong leg" case there is also an official document prepared by a Florida hearing officer. This provides the legal rationale for the revocation of the surgeon's license and gives an account of the chain of events leading to the amputation of the wrong leg. The materials for the Ben Kolb case include a set of statements giving the perspectives of the hospital CEO, the risk manager, the physician, the medical liability insurer, and the family.
 

 

  


The View of Patient Safety from Celebrated Cases

The First Story
Each of the celebrated cases consists of a relatively straightforward, simple, and easily understood story constructed after the accident. This first story typically explains the accident in terms of a simple cause, usually human operator error. The people held responsible are those closest in time and space to the final outcome, especially those who, it is believed, could have acted in another way that would have led to a different outcome. Their behavior, with knowledge in hindsight of the tragic outcome, appears to be outrageous, willful disregard of critical cues or factors. In retrospect, each failure seems preventable by relatively simple means, such as new policies and procedures or calls to increase the "vigilance" of practitioners. Finding the culprit ends the investigation.

Each celebrated case has come to represent a specific threat to safety for the public and for people in health care. Figure 1 shows schematically the relationship between the celebrated cases and the sources of failure they seem to represent. However, the reactions in these celebrated cases provides only a partial view of the hazards and of the factors that contribute to failures.

In the "wrong leg case," for example, public attention focused on the surgeon. However, this case represents a larger class of failures that arise because of the symmetry of the human body. Bilateral symmetry (paired organs, limbs, etc.) creates the inherent risk of wrong site, wrong side, wrong limb failures. This risk is well known. Health care practitioners and organizations recognize this risk and have a variety of defenses against just this sort of accident. Cases like the Florida wrong leg amputation are situations where all the defenses broke down or were ineffective. They point, not so much to inadequate defenses, as to a systemic inability to maintain these defenses in working order in the face of a variety of pressures. Indeed, the accident is a potential source of data about the larger system that delivers care, not simply about a flawed individual. Understanding the factors that bypassed or undermined the defenses in this case would help us learn in ways that could be applied to other situations, practitioners, and organizations.

The response to failure is the most significant feature of each of the celebrated cases. The affected organization usually creates new policies or procedures in the hope of forestalling any repeat of this particular accident. For example, several celebrated cases have involved medication misadministrations. Responses have included efforts to more tightly control the use of the particular drugs by imposing the requirements for more elaborate checks and additional steps in prescribing and dispensing medicines.

However, some drug misadministrations point to a broader risk related to drugs with a low therapeutic index. These are drugs where the effective dose is near the toxic dose. Recognizing this class of drugs and associated risks can help illuminate weaknesses in the defenses deployed to mitigate those risks. Drug-drug interactions, e.g. the Libby Zion case, represent a hidden low-therapeutic index situation that contributes to the outcome in complex ways.

The response to the failure also provides significant data about how attributions of causality are made and how responses to a widely publicized failure are driven by a variety of factors. The limited ability of the regulatory bodies to influence safety in a direct way is one remarkable characteristic of the 'wrong leg' accident. The regulators' choice to "send a message" by revoking the surgeon's medical license is itself an interesting feature of the case. The decision to send such a message and phrase it in this fashion signals a set of beliefs about which factors lead to failure, which interventions can change those factors, and how health care practitioners are expected to react to these messages. These beliefs constitute one model of how people contribute to safety and risk. The scientific question is, do these beliefs correspond to accurate models of the factors that affect success and failure and of the factors that enhance or degrade the performance of health care practitioners?

Taken together, the celebrated cases were tantalizing to the researchers. They indicate the potential for catastrophic failure in health care. They also demonstrate the way that these failures can capture public attention, evoke outrage, and provide impetus for regulatory action.

But the cases are also remarkable for their limitations. The workshop participants rapidly tried to move beyond this "first" story into a discussion of the deeper "second" story that lies behind such cases. However, in each instance, the story told after the event is too simple. Its details are too limited to serve as the basis for understanding the interplay of the multiple contributors that led to the accident. While the accounts of the celebrated failures do tell us a great deal about the social response to failure, the participants observed that the celebrated cases do little to broaden our understanding of the other risks that exist in health care, the sources of these vulnerabilities, or the means for reducing them.

To better understand systemic vulnerabilities to failure and to see how failure is usually prevented requires collecting a different kind of data, analyzed in different ways, that reveal a different story. To accomplish this requires analysis based on concepts grounded in the research base about the factors that affect the many different kinds of human performance relevant to health care settings. In particular, the researchers recognized the impact of hindsight bias on the construction of these first stories of accidents.

The Hindsight Bias
The tendency to attribute accidents in health care to simple causes such as isolated human failures is derived in part from a particular form of bias that clouds post-accident reviews of human performance. It is well documented that knowledge of outcome biases our later judgments about the processes that led up to that outcome (See Figure 2). The way we look back is shaped by the outcome. That outcome knowledge, however, was not available to the participants before the fact. In looking back we tend to oversimplify the situation the actual practitioners faced. This blocks our ability to see the more complicated, richer story behind the label human error.

The hindsight bias effect is a well reproduced research finding relevant to accident analysis and reactions to failure. In the typical study, two groups of judges are told a story and asked to evaluate the performance of characters in the story. The story is identically told for each group of judges with a single exception: the difference is the outcome of the story. One group is told the episode ended in a poor outcome (death, significant loss, etc.). The other group is told that the outcome was good (minor injury, insignificant loss or even some gain). The two groups of judges consistently differ in their assessment of the story characters' performance. Judges told of the bad outcome assess the performance as flawed. Judges told that the outcome was successful assess the performance as acceptable. The differences are stark, repeatable, and strong. In fact, hindsight bias impacts judgments even when judges are warned that the outcome knowledge may influence their ability to make assessments.

It is clear that hindsight bias poses a great obstacle to understanding patient safety through celebrated cases. The powerful outcomes of these accidents shape the way that post-accident (looking back) judgments of human performance are made. This bias limits the value of these cases because the debris of outcome obscures the complexity of the situation confronting practitioners. This leads to simple "first stories" of accidents and, paradoxically, limits what can be learned about safety from such events.

 

 


Uncelebrated Cases

The Second Story
The next phase of the workshop provided a contrast to the celebrated cases in the form of "uncelebrated" cases where some research base was available. The cases highlight some of the factors that affect success and failure in the practice of medicine. More importantly, the cases demonstrate the kinds of factors that affect the success and failure of research on human expertise and its role in system performance. In contrast to the celebrated cases, a multi-faceted story about how the system works and how it sometimes fails unfolds in the investigations.

In this section, we provide a summary of what was presented about the three uncelebrated cases. Then we draw out some of the larger implications of each case for patient safety in general based on the discussion at the workshop and the research results themselves.

While the details of the uncelebrated cases are distinct, they have at least five features in common.

First, each uncelebrated case shows that bad outcomes flow not from single-point failures but from a set of factors. The research reveals that these factors are each necessary but only jointly sufficient to cause an accident. The analysis in the uncelebrated cases exposes the system issues and latent factors that contribute to failure.

Second, these investigations show that enhancing safety begins with efforts to understand not just the sources of failure but also the sources of success. System operations are seldom trouble-free. In every close examination of complex systems in operation, observers find many more opportunities for failure than actual accidents. The difference between the high potential for failure and the low rate of failure is produced largely by practitioners.

Much of expertise and skill is directed towards preventing poor outcomes or recovering from problems before their consequences impact on the patient. Each investigation shows how practitioners resolve conflicts, anticipate hazards, accommodate variation and change, cope with surprise, work around obstacles, close gaps between plans and real situations, detect and recover from miscommunications and misassessments. In these activities practitioners regularly forestall or deflect potential accident trajectories.

Put another way, human practitioners are not so much the cause of occasional sporadic accidents as they are the active agents that regularly contribute to success. When they carry out their roles successfully, they are the active creators of safety. Safety research tries to identify factors that undermine practitioners' ability to do this successfully.

Third, the research results shift attention away from the people closest to the accident and toward the blunt end of the system where regulatory, administrative, and organizational factors reside. Complex systems such as health care or aviation have both a sharp end and a blunt end (Figure 3). The sharp end is where practitioners interact directly with the hazardous process in their roles as pilots, mechanics, air traffic controllers, and, in medicine, as nurses, physicians, technicians, pharmacists and others. At the blunt end of the health care system are regulators, administrators, economic policy makers, and technology suppliers. The blunt end of the system is the source of the resources and constraints that form the environment in which practitioners work. The blunt end is also the source of demands for production that sharp end practitioners must meet. The demands are often conflicted, as when the blunt end provides incentives for greater production while simultaneously demanding lower rates of failure.

The more safety researchers have looked at the sharp end, the more they have realized that the real story behind accidents depends on the way that resources, constraints, incentives, and demands produced by the blunt end shape the environment and influence the behavior of the people at the sharp end (Reason, 1997). Detailed examination of accidents in these systems consistently shows that the ability of sharp end practitioners to defend against failure in these cases depended directly and indirectly on a host of blunt end factors rather than on the isolated "error" of human practitioners.

Fourth, the research methods described in reviewing the uncelebrated cases demonstrate, in part, of how research that ultimately improves safety is done. The combination of methods chronicled in these cases may be unfamiliar to many, but they represent the kinds of techniques that have been developed to understand the role of human performance, human-machine cooperation, and cooperative work in complex evolving situations.

Fifth, and perhaps most important, the research on the uncelebrated cases points to areas where substantial progress can be made. Significantly, these are not single, local fixes or "magic bullets." Rather, the research reveals a set of factors involved in failure and shows that there are multiple directions for improvements that need to be coordinated in order to make progress on safety.

 
Uncelebrated Case #1:
Bile duct injuries during laparoscopic cholecystectomy

Uncelebrated Case #2:
Antibody misidentification and transfusion reactions

Uncelebrated Case #3:
Drug misadministrations via computerized infusion devices in the operating room

 

 
Table of Contents

 


Day One Footnotes

 

See Woods et al. (1994), chapter 6 for an overview of the research. For the original studies see Fischhoff, B. (1975). Hindsight ? foresight: The effect of outcome knowledge on judgement under uncertainty. Journal of Experimental Psychology: Human Perception and Performance, I, 288-299 and Baron, J. and Hershey, J. (1988). Outcome bias in decision evaluation. Journal of Personality and Social Psychology, 54, 569-579. For a replication in medicine, see Caplan, R., Posner, K., and Cheney, F. (1991). Effect of outcome on physician judgements of appropriateness of care. Journal of the American Medical Association, 165, 1957-1960.

Return to document

 

 

 

 

 

Copyright 1998 National Patient Safety Foundation at the AMA

Prepared for Web publication by
Annenberg Center for Health Sciences