Cross-connections and gas interchange — why the test must be repeated after every modification
2026-01-30 · Medpipe technical team
In brief. The cross-connection test is repeated in full after every modification of the pipeline system — this is required by point 12.6.3.2.5 of the standard PN-EN ISO 7396-1:2016-07. During the test, one system at a time is filled with gas and all terminal units are checked. A cross-connection cannot be detected by any human sense or bedside procedure. The test result goes into the register required by Art. 63 of the Act of 7 April 2022 on medical devices.
A cross-connection is the only failure of a medical gas installation that no sense and no bedside procedure will detect. The standard answers this with a single requirement: after any modification of the pipelines, the test for cross-connections is repeated in full.
Why can no human sense detect a cross-connection?
Oxygen and nitrous oxide are colourless, odourless and indistinguishable without an analyser. An anaesthetist running intravenous anaesthesia and delivering oxygen from a flowmeter to a mask with the gas monitor switched off has no physical means of establishing that something other than what is written on the front plate of the terminal unit is reaching the mask.
This is what distinguishes a cross-connection from every other fault in an installation. A leak hisses. A pressure drop triggers an alarm. A gas swap does nothing — it works quietly, stably and exactly as a sound installation would. Between the supply source and the patient's mask there is only a pipe, a valve, a terminal unit and the assumption that someone once checked what is really flowing on the other side of the wall.
A medical gas installation is the only system in a hospital that delivers a medicinal product to the patient without human involvement. There is no nurse checking the label, no pharmacist verifying the batch, no second pair of eyes at the bedside. All verification takes place earlier — in the test report.
Three documented cases, one common denominator
| Event | What was established | What was missing |
|---|---|---|
| Melbourne, The Alfred Hospital, 1983 | The patient died during anaesthesia for emergency surgery. The investigation showed that throughout he had been receiving 100% nitrous oxide. | Crossings of oxygen and N pipelines2O was carried out during earlier repair work on the supply to the operating theatre block. |
| Japan, 23–24 December 1987 | Two deaths in adjacent operating theatres. A swap of the oxygen and nitrous oxide pipelines was established. | Installing new ventilation ducts in the ceiling of the adjacent room made it necessary to cut through the gas pipelines. The pipes were neither labelled nor colour-coded, no tests were carried out at the terminal units of the adjacent, operational room after the works, and the anaesthesiology department was not informed of the works. |
| United States, AHRQ root cause analysis | A terminal unit labelled as oxygen was connected to nitrous oxide. | The error arose after maintenance work performed by an insufficiently trained new employee. The breathing circuit of the anaesthesia machine had no oxygen analyser, the machine's self-test did not verify the gas source, and the allocation of responsibility for supervising and accepting the completed work was unclear. |
Three continents, decades apart, different legal systems — and the same mechanism: work on the installation after which the tests were not repeated. The Japanese case became the direct impetus for introducing that country's standards for medical gas installations.
The Warsaw incident of December 2025 — without prejudging
In December 2025, at one of Warsaw's hospitals, a patient in the 14th week of pregnancy came in for a planned, minor gynaecological procedure. During anaesthesia she was given an oxygen mask, her condition deteriorated rapidly, and after more than ten days of hospitalisation at another facility the patient died. According to unofficial media reports, the cause was said to be an incorrect connection of medical gases in the anaesthesia pendant in a theatre that had recently been refurbished.
The proceedings are being conducted by the prosecutor's office, experts have been appointed, and the actual course of the event and its causes have not been established in a binding manner. No one should prejudge liability before the proceedings are concluded. We cite this case solely as an illustration of the risk mechanism — and because the system's response was immediate: on 9 January 2026 the Mayor of the Capital City of Warsaw ordered inspections of installations and equipment delivering medical gases in all municipal hospitals, and the Patient Ombudsman opened an ex officio investigation.
When must the cross-connection test be repeated?
PN-EN ISO 7396-1:2016-07 does not treat this scenario in general terms. Clause 12.6.3 requires proof that no cross-connections exist between the pipelines of different gases or vacuum. The test is carried out:
- at one system filled with gas at a time,
- we all terminal units — not in a selected sample,
- with the result documented on form D.8.
Detailed procedures are given in Annex C.3.3, together with a recommendation to test from a more oxygen-rich gas to a less oxygen-rich one and the use of a separate discriminating test for non-oxygenated gases: nitrous oxide, carbon dioxide and nitrogen.
The key provision, however, is that of clause 12.6.3.2.5: the test must be repeated in full if any modifications whatsoever are made to the pipeline system. The same applies if a cross-connection or a gas identification error is detected — once the error has been identified and eliminated, the full test is repeated. Not the part covering the repaired section. The full test.
When a "modification" is a modification
The practical problem is not that someone deliberately forgoes the test. It is that the works are not recognised as an intervention in the medical gas installation. In the cases cited, the intervention consisted, respectively, of: repair work on the supply to the operating theatre suite, the cutting of pipelines forced by the installation of ventilation ducts, and routine maintenance work. None of these activities was a "reconstruction of the medical gas installation" in the client's everyday understanding.
Check questions worth asking after every completed task in the area of the pipelines:
- Following construction, renovation or installation work in the area of the pipelines, was there carried out full testing for cross-connections, recorded on form D.8?
- Were the terminal units in the rooms also covered by the testing adjacent and live, where no one was carrying out any work — as in the Japanese case?
- Were the newly commissioned operating theatres, pendants and panels tested before the first patient, with documented gas identification at every terminal unit?
- Are the cut or reinstated sections labelled and colour-coded?
- Have the operating suite and the wards been informed about the works and about the return of the system to service?
This has more than a technical dimension. A medical gas installation is a medical device, and art. 63 of the Act of 7 April 2022 on Medical Devices requires the device to be correctly installed, maintained and used (ust. 1), prohibits putting into operation and using a device with defects that may pose a risk to patients and users (ust. 2), and imposes the obligation to hold documentation of the installations, repairs, maintenance, inspections, checks and safety checks carried out, together with dates, details of the contractor, description, results and remarks (ust. 3). The cross-connection test report is precisely such a record — and the only proof that, after the works, anyone checked what is flowing in the pipe. We write in more detail about which activities are a repair and which an upgrade that changes the scope of responsibility in a separate post: inspection, maintenance, repair or modernisation.
Who on the hospital's side is to oversee this
Annex G to PN-EN ISO 7396-1:2016 assigns this role to the Authorised Person (AP). The standard recommends that this person be appointed in writing by the chief executive, possess the technical knowledge needed to understand the hazards associated with operating the system and was independent of the contractor carrying out the work on the installation. Their tasks include, among others, issuing permits to work on the pipeline system, informing the wards of planned interruptions, marking terminal units that are faulty or require supervision, and deciding on taking the system out of service and returning it to service. An unclear division of responsibility for signing off completed work — precisely the one identified by the AHRQ analysis — is excluded by definition in this model. We discuss the AP role in detail here: Authorised Person (AP) and Annex G.
The practical conclusion fits in one sentence: completing work on medical gas pipelines is not an acceptance of the works until a signed form D.8 exists for all terminal units.
Frequently asked questions
The crew replaced a section of pipeline in one room only — is it enough to test that room?
No, the cross-connection test must be repeated in full. Point 12.6.3.2.5 of PN-EN ISO 7396-1:2016-07 requires the test to be repeated in full upon any modification of the pipeline system, and point 12.6.3 requires it to cover all terminal units, not a sample. Terminal units in adjacent and operational rooms where no one has worked must also be checked, and newly commissioned theatres — before the first patient is admitted. The same rule applies after a cross-connection has been detected: the entire test is repeated, not only the repaired section.
On what grounds may the technical department refuse to accept works on medical gas pipelines?
The basis is the absence of a signed form D.8 for all terminal units — without it, the completion of the work is not an acceptance of the works. PN-EN ISO 7396-1:2016-07 requires the result of the cross-connection test to be documented precisely on form D.8, and art. 63 of the Act of 7 April 2022 on Medical Devices requires the installation documentation to contain the results of all tests and safety checks with dates and details of the contractor. The decision to take the system out of service and to restart it is taken by the Authorised Person (AP), appointed in writing by the chief executive and independent of the contractor.
Is the staff in the theatre able to notice that nitrous oxide is flowing from a terminal unit marked as oxygen?
No — without a specialist analyser this cannot be distinguished, because both gases are colourless and odourless. An installation with swapped gases works quietly and stably, exactly like a sound one, so the symptoms typical of other faults — leaks or pressure-drop alarms — will not appear. This is confirmed by the documented cases from Melbourne (1983), Japan (1987) and the AHRQ analyses, where the swap came to light only after harm to a patient. That is why the only safeguard is testing the installation after works, not vigilance at the patient's bedside.
Basis
- PN-EN ISO 7396-1:2016-07 — pkt 12.6.3 (cross-connection test, one system filled with gas at a time, all terminal units), pkt 12.6.3.2.5 (repeating the test in full after any modifications to the pipeline system), Annex C.3.3 (detailed procedures, testing from the more to the less oxygen-rich gas, a separate discriminating test for non-oxygen-rich gases), Annex D — form D.8 (documenting the result), Annex G (the roles EM/FEM/AP/CP/QC/DMO/DNO/DP, including the Authorised Person).
- Act of 7 April 2022 on medical devices — Art. 63 (1), (2) and (3).
- Source materials for the cases: M. Pauling, C. M. Ball, Delivery of Anoxic Gas Mixtures in Anaesthesia, 2017 (Melbourne 1983); Anesthesia Patient Safety Foundation (APSF), Fatal Pipeline Accidents Spur Japanese Standards (Japan 1987); AHRQ WebM&M, Hypoxic Gas Supply from Cross-Connected Pipelines.
- Press reports on the Warsaw case (proceedings ongoing, causes not established in a binding manner): TVN24 / TVN Warszawa, RMF24, Polityka Zdrowotna — January 2026.
- Medical Gases in Practice, Booklet 1, 2026 edition, INMED S.A. — testing and acceptance, Operational Management Documentation, procedure and form templates.
The topic is developed in the guide „Medical gases in practice. Volume 1" (GMWP) developed by INMED S.A. — the legal qualification of the installation, staff competences, types of service activities, tests and acceptances, and the Operational Management Documentation together with template procedures and forms. Order the GMWP guide.
Prepared by: the technical team of Małgorzata Dopierała, Damian Czyczyro and Przemysław Kostera — Medpipe Sp. z o.o., design, audits and inspections of medical gas installations. This article is based on the guide „Gazy medyczne w praktyce. Zeszyt 1” (Medical Gases in Practice, GMWP), INMED S.A.