A cold chain breach is not a paperwork problem — it is the moment a batch of vaccine may have silently lost its potency. For GP practices, pharmacies, and outreach clinics running community immunisation sessions across London, the question is rarely whether a fridge alarm or a mislaid cool box will ever happen; it is whether staff know exactly what to do in the first hour after it does. This piece sets out the response sequence, not the storage standards that precede it.
Why a Breach Is Different From a Storage Failure
Vaccines must stay between +2 degrees C and +8 degrees C from the moment they leave the manufacturer to the moment they are drawn up for administration. A breach is any excursion outside that range, however brief — a fridge door left ajar overnight, a compressor fault, a cool box that ran out of cold life on a long outreach round, or ice packs placed in direct contact with vaccines during transport, which can freeze and destroy potency just as reliably as overheating. The damage from many vaccines is not reversible and is not visible: a vial that has been frozen or warmed can look, and even test, identical to one that never left the fridge. That is why the response has to be procedural rather than judgement-based — staff are trained to act on the fact of an excursion, not on how the vaccine appears.
Step One: Embargo, Don’t Discard
The first action after any suspected breach is to isolate the affected stock immediately. Every vial or pack that may have been exposed is labelled clearly as "do not use" and, where possible, moved to a fridge or validated cool box that is holding the correct temperature. The faulty unit itself is left switched on rather than unplugged, since continuing to record its behaviour is part of the evidence the investigation will need. All staff on site are told, verbally and in writing, that the embargoed stock is out of use until further notice. Crucially, nothing is thrown away at this stage. Discarding vaccine before an assessment has been completed destroys the only evidence that could confirm the stock is actually safe to use, and wastage that turns out to be unnecessary is itself a cost to a programme that is often working with a tight vaccine budget.
Step Two: Establish What Actually Happened
With the stock isolated, the team’s job shifts to reconstructing the timeline. The current, maximum and minimum readings on the affected unit are recorded straight away. Where a continuous data logger was fitted, this stage is far faster and far more reliable — a logger stores a rolling history of readings rather than the two data points a manual daily check provides, so it can show precisely when a fridge left range and for how long, rather than leaving staff to estimate a window that might span an entire weekend. Without one, the investigation has to work backwards from the last confirmed-good reading in the manual log, the fridge’s service and defrost history, and any plausible explanation — a new delivery held the door open, a thermometer that wasn’t reset, a member of staff unfamiliar with the storage routine. A qualified engineer may be asked to inspect the unit and its thermometer before it is trusted with vaccine stock again.
Step Three: Report and Take Advice — Don’t Guess
The incident is logged through the practice’s or pharmacy’s standard reporting route, and advice is sought before any decision is made about the stock itself. That advice typically comes from the vaccine manufacturer directly, or from a specialist pharmacy service that holds stability data for cold-chain products, since the answer depends on the specific product, the temperature reached, and how long the excursion lasted — there is no single rule that covers every vaccine. If there is any doubt, the stock stays embargoed. This is also the point at which the practice considers whether anyone has already received a dose from the affected batch, since that determines whether a wider clinical review is needed alongside the equipment question.
Step Four: Risk Assessment and Recovery
Once advice has been received, a risk assessment closes out the incident — either the embargoed stock is confirmed safe and returned to use, or it is formally recorded as wasted and replaced. Either way, the incident and its resolution are documented, because storage records for administered vaccines are expected to be retained for years, and fridge maintenance and incident logs for even longer. The final step is often overlooked under pressure: making sure stock is replenished quickly enough that the next scheduled immunisation session isn’t disrupted, which for a community programme covering multiple boroughs can mean coordinating a replacement delivery at short notice.
Building a Breach-Ready Cold Chain
The single biggest factor in how well a breach response goes is how much evidence is available the moment it starts. A daily manual log tells a team that something went wrong; a continuous digital logger, ideally one with a door-open or out-of-range alert, tells them precisely when, for how long, and often before anyone has walked back into the room. The same logic applies to transport: a cool box used on an outreach round is only as good as its own temperature record, since a session held in a community hall or care home has no fixed fridge to fall back on if something goes wrong en route. Building that evidence trail into daily practice — rather than trying to reconstruct it after the fact — is what turns a cold chain breach from a clinical incident into a routine, manageable correction.
Breach Response at a Glance
- Embargo — isolate and label affected stock; move it to a validated unit; leave the faulty fridge switched on.
- Investigate — record current and min/max readings; check logger data, service history, and possible causes.
- Report and seek advice — log the incident; contact the manufacturer or a specialist pharmacy service before deciding on the stock.
- Assess and recover — complete a risk assessment, document the outcome, and replenish stock to protect the next session.
None of this replaces good baseline storage practice, but it is the layer that determines whether an inevitable equipment hiccup becomes a minor, well-documented correction or a genuine clinical risk. For programmes delivering immunisation across dozens of sites with varying levels of fixed infrastructure, that breach-response discipline is arguably as important as the fridge itself.