Risk Management in Cyprus Healthcare: The Duties of Law 89(I)/1996

By

Enhancing Risk Management in Cyprus Healthcare

Introduction to Occupational Safety and Health in Cyprus Healthcare

Navigating the complex landscape of risk management in a healthcare setting requires a robust understanding of both statutory obligations and practical implementation strategies. In the Republic of Cyprus, the cornerstone of occupational safety and health (OSH) is the Safety and Health at Work Law of 1996, formally cited as Law 89(I)/1996 (Ο περί Ασφαλείας και Υγείας στην Εργασία Νόμος του 1996). For a compliance lead operating within a Cypriot hospital, clinic, or care facility, mastering the provisions of this legislation is not merely a regulatory necessity; it is the foundation for protecting staff, patients, and visitors from preventable harm.

While Law 89(I)/1996 explicitly states that matters of general public safety and public health are regulated by other specific laws (Republic of Cyprus, 1996, Art. 2), the statute creates a vital bridge between occupational safety and patient safety. Specifically, the law mandates that employers must conduct their operations in a manner that ensures, so far as is reasonably practicable, that persons not in their employment—which in a healthcare context includes patients, families, and visitors—are not exposed to risks to their safety or health (Republic of Cyprus, 1996, Art. 13(5)).

This article explores the comprehensive duties imposed by Law 89(I)/1996, detailing the structural requirements, specific hazard management protocols, and the integration of these legal mandates with international best practices to achieve compliance success.

The Core Duties of Healthcare Employers

The primary burden of risk management under Law 89(I)/1996 falls upon the employer. The legislation establishes a broad, overarching duty: every employer must ensure the safety, health, and welfare at work of all their employees (Republic of Cyprus, 1996, Art. 13(1)). The law acknowledges that employers are exempt from liability only in cases of abnormal and unforeseeable circumstances beyond their control, or exceptional events where consequences could not have been avoided despite all due care.

Provision of Safe Systems and Environments

Without prejudice to the general duty, the law delineates specific obligations that a healthcare facility must fulfil. Employers are required to provide and maintain facilities, systems, and methods of work that are safe and without risks to health (Republic of Cyprus, 1996, Art. 13(2)(a)). This extends to the safe use, handling, storage, and transport of articles and substances (Republic of Cyprus, 1996, Art. 13(2)(b))—a critical requirement in healthcare where the handling of pharmaceuticals, biological samples, and hazardous chemicals is a daily occurrence.

Furthermore, the employer must provide and maintain a working environment that is safe, without risks to health, and adequate regarding facilities and arrangements for employee welfare (Republic of Cyprus, 1996, Art. 13(2)(e)). This includes specific welfare provisions, such as the requirement to provide suitable seats for employees whose work involves prolonged standing, or to implement organizational measures and rest areas to allow for occasional resting (Republic of Cyprus, 1996, Art. 27(1)). Where the number of persons or the nature of the work dictates, separate and appropriate rest areas must be provided (Republic of Cyprus, 1996, Art. 29).

Information, Instruction, and Training

A critical component of compliance is the provision of information, instruction, and training. Law 89(I)/1996 is highly specific regarding how this must be delivered. Healthcare employers must ensure that training and information are provided to the employee from their very first working day, and crucially, in a language and format that the employee understands (Republic of Cyprus, 1996, Art. 13(2)(c)).

Moreover, the law strictly prohibits passing the financial burden of safety compliance onto the workforce. During any period of training and education, the employee must receive their full salary from the employer (Republic of Cyprus, 1996, Art. 13(2)(c)), and employers are forbidden from levying any charges on employees for anything done or provided to comply with the law (Republic of Cyprus, 1996, Art. 13(7)).

Protection of Vulnerable Groups

Healthcare compliance leads must also account for the specific protections afforded to vulnerable groups. The employer's duty to ensure health and safety explicitly includes the obligation to protect the reproductive function of employees. Furthermore, employers must protect pregnant employees from risks to the foetus, and nursing mothers from risks to themselves or their newborns for an adequate period after childbirth (Republic of Cyprus, 1996, Art. 13(8)). Workplaces must also be arranged to take into account the specific needs of disabled persons at work, including the adaptation of doors, corridors, staircases, sanitary facilities, and workstations (Republic of Cyprus, 1996, Art. 30).

Principles of Risk Assessment and Prevention

To discharge the duties outlined above, Law 89(I)/1996 requires employers to implement measures based on a strict hierarchy of prevention principles (Republic of Cyprus, 1996, Art. 13(3)). This hierarchy must form the backbone of any healthcare facility's risk management strategy:

1. Avoid risks: Eliminate the hazard entirely where possible. 2. Evaluate unavoidable risks: Conduct thorough risk assessments for hazards that cannot be eliminated. 3. Combat risks at source: Address the root cause of the hazard rather than merely treating the symptom. 4. Adapt work to the individual: This includes the design of workplaces, the choice of work equipment, and the choice of working and production methods, particularly to alleviate monotonous and repetitive work. 5. Adapt to technical progress: Continuously monitor and integrate technological advancements that improve safety. 6. Substitute the dangerous: Replace dangerous substances or processes with non-dangerous or less dangerous alternatives. 7. Develop a coherent overall prevention policy: This policy must cover technology, organization of work, working conditions, social relationships, and the influence of factors related to the working environment. 8. Prioritise collective protective measures: Measures that protect the whole workforce take precedence over individual protective measures (e.g., personal protective equipment). 9. Provide appropriate instructions: Ensure all workers know how to execute their tasks safely.

Integrating International Best Practice

While Law 89(I)/1996 provides the legal mandate for these prevention principles, international best practice provides the methodology for implementation. For example, when addressing the duty to combat risks at the source and develop a coherent prevention policy (Republic of Cyprus, 1996, Art. 13(3)(c) & (g)), healthcare facilities should look to the International Labour Organization's guidelines on occupational safety and health management systems (ILO-OSH 2001). The ILO recommends integrating OSH management system elements as a core component of overall policy and management arrangements, ensuring that safety is not siloed but built into the dynamic management strategy of the organization (ILO, 2001, p. 1).

Similarly, to fulfill the duty of adapting measures to changing circumstances and seeking to improve existing situations (Republic of Cyprus, 1996, Art. 13(2)(f)(iii)), compliance leads should implement robust incident reporting systems. The World Health Organization (WHO) advises that effective measurement and reporting systems must collect and disseminate knowledge that results in action and improvement, moving beyond merely asking "what happened?" to proactively identifying and preventing harm (WHO, 2020, p. 55).

Organizational Structures for Safety Compliance

Law 89(I)/1996 mandates specific organizational structures to ensure that risk management is a collaborative and continuously monitored effort within the enterprise.

Safety Representatives and Committees

Employee consultation and participation are legal requirements. In every workplace, premises, or enterprise where more than two persons are employed by the same employer, a Safety Representative must be elected, selected, or designated by the employees (Republic of Cyprus, 1996, Art. 7(1)). This representative acts on behalf of their colleagues regarding protection from workplace hazards (Republic of Cyprus, 1996, Art. 7(3)). Employers must provide these representatives with adequate time off work, without loss of pay, and the necessary means to fulfill their duties (Republic of Cyprus, 1996, Art. 13(2)(z)).

Furthermore, depending on the geographical location and a minimum number of employees (as defined by specific regulations), employers must establish a Safety Committee, which serves in an advisory capacity (Republic of Cyprus, 1996, Art. 8(1)). The employer is legally bound to consult with employees or their safety representatives on matters relating to OSH, including the planning and introduction of new technologies and their consequences for safety and health (Republic of Cyprus, 1996, Art. 13(11) & 13(14)).

The Safety Officer

For larger healthcare facilities, the law imposes a stringent requirement: any employer who employs, on average throughout the year, more than 200 persons must appoint a Safety Officer (Republic of Cyprus, 1996, Art. 10(1)).

The Safety Officer role is not a secondary duty; the law explicitly states they must be engaged exclusively and on a full-time basis with matters of occupational safety and health. Furthermore, the appointment of the Safety Officer is subject to the approval of the Chief Inspector (Republic of Cyprus, 1996, Art. 10(2)).

The employer must ensure the Safety Officer possesses sufficient knowledge and experience to: * Control and manage all issues relating to the safety and health of persons at work and the premises where activities are conducted. * Carry out inspections. * Prepare reports, submit recommendations, organize courses, and train persons at work on occupational safety and health matters (Republic of Cyprus, 1996, Art. 10(3)).

Managing Specific Hazards in the Healthcare Environment

Part V of Law 89(I)/1996 outlines specific provisions for safety and health that are highly relevant to the physical infrastructure and daily operations of hospitals and clinics.

Fire Safety and Emergency Evacuation

Healthcare facilities present unique evacuation challenges due to the presence of non-ambulatory patients. The law requires that every premises used as a workplace must have adequate means of escape in case of danger, leading quickly to a safe area without exposing fleeing persons to risk (Republic of Cyprus, 1996, Art. 31(1) & 31(2)).

Crucially for facility managers, all doors intended for use as emergency exits must open outwards and must be properly maintained. The law explicitly forbids the use of sliding and revolving doors specifically as emergency exits (Republic of Cyprus, 1996, Art. 31(3)). Emergency routes and exits requiring illumination must be equipped with backup lighting of adequate intensity in case of normal lighting failure (Republic of Cyprus, 1996, Art. 31(7)), and all exits must be clearly and permanently marked with signs in a language understood by the persons at work (Republic of Cyprus, 1996, Art. 31(6)).

Regarding fire safety, premises must be equipped with adequate and suitable firefighting equipment, and where required, fire detection and alarm systems. This equipment must be maintained and tested by a competent person at appropriate intervals (Republic of Cyprus, 1996, Art. 32(1)). Furthermore, an adequate number of persons must be trained in the correct use of firefighting equipment (Republic of Cyprus, 1996, Art. 32(3)). Stocks of highly flammable or flammable substances—common in medical laboratories and pharmacies—must be kept in fireproof or fire-resistant stores, or in safe places outside the premises (Republic of Cyprus, 1996, Art. 32(4)).

Harmful Substances and Biological Agents

Hospitals are environments where exposure to harmful substances is a constant risk. Law 89(I)/1996 mandates that effective measures must be taken to prevent the exposure of persons at work to substances harmful to health. Where exposure cannot be avoided, measures must be taken for adequate control based on the general principles of prevention (Republic of Cyprus, 1996, Art. 36(1) & 36(2)). If these measures are insufficient, the employer must provide suitable personal protective equipment (PPE) and clothing, maintain it properly, and ensure its use (Republic of Cyprus, 1996, Art. 36(3)).

The law defines "substances harmful to health" broadly, explicitly including carcinogenic and mutagenic agents, dangerous chemical agents, and biological agents (Republic of Cyprus, 1996, Art. 36(7)).

To effectively manage these risks, compliance leads should integrate international best practices. For instance, the WHO provides comprehensive guidance on the safe management of healthcare waste, emphasizing that cleaning staff and waste handlers must be trained on the risks associated with healthcare waste, procedures for dealing with spillages, and the correct use of protective clothing (WHO, 2014, p. 220). Similarly, the WHO's global strategy on infection prevention and control recommends the use of multimodal strategies to implement standard and transmission-based precautions, which aligns perfectly with the Cyprus legal requirement to combat risks at the source (WHO, 2023, p. 68).

Safe Workplaces and Infrastructure

The physical environment of the healthcare facility must be maintained to prevent accidents. Sufficient, clean, and unobstructed space must be maintained around every machine (Republic of Cyprus, 1996, Art. 34(1)). Where any person works at a location from which they could fall from a height exceeding two metres, means must be provided to protect them from falling, such as fencing or other suitable methods (Republic of Cyprus, 1996, Art. 34(2)).

Additionally, all floors, steps, stairs, passages, and gangways must be of sound construction, kept free from obstruction, and free from substances that make them slippery (Republic of Cyprus, 1996, Art. 34(3)). Every internal or external staircase must have at least one handrail, and any open side of a staircase must be fenced with a secure and suitable railing of adequate height (Republic of Cyprus, 1996, Art. 34(5) & 34(6)).

The Role and Responsibilities of Healthcare Employees

While the employer bears the primary legal burden, Law 89(I)/1996 also imposes strict duties on employees. A successful risk management programme requires the active participation of the workforce.

Every employee, while at work, must: * Take reasonable care for their own safety and health, as well as that of other persons who may be affected by their acts or omissions (Republic of Cyprus, 1996, Art. 15(1)(a)). * Cooperate with the employer in the execution of any duty or obligation imposed by the law (Republic of Cyprus, 1996, Art. 15(1)(b)). * Use the protective equipment or clothing provided by the employer (Republic of Cyprus, 1996, Art. 15(1)(c)).

Crucially, the law states that no person shall intentionally or recklessly misuse or interfere arbitrarily with anything provided in the interests of health, safety, and welfare (Republic of Cyprus, 1996, Art. 15(2)). However, it is important to note that the obligations of employees in the field of safety and health do not affect the principle of the employer's overarching responsibility (Republic of Cyprus, 1996, Art. 13(12)).

Conclusion: Transformative Strategies for Compliance

Compliance with Law 89(I)/1996 in a Cyprus healthcare setting is a multifaceted challenge that requires dedicated resources, clear organizational structures, and a commitment to continuous improvement. By understanding the strict legal duties—from the appointment of a full-time Safety Officer in large facilities to the specific requirements for emergency exits and the management of biological agents—compliance leads can build a robust legal defence against liability.

However, transformative risk management occurs when these statutory duties are married with international best practices. By utilizing WHO guidelines for infection control and incident reporting, and ILO frameworks for OSH management systems, healthcare facilities in Cyprus can move beyond mere regulatory compliance. They can foster a proactive culture of safety that protects the wellbeing of their staff and ensures the highest standard of care for their patients.

References

ILO (2001) Guidelines on occupational safety and health management systems (ILO-OSH 2001)*. Available at: https://www.ilo.org/sites/default/files/wcmsp5/groups/public/@ed_protect/@protrav/@safework/documents/normativeinstrument/wcms_107727.pdf Republic of Cyprus (1996) Ο περί Ασφαλείας και Υγείας στην Εργασία Νόμος του 1996 - 89(I)/1996*. Available at: http://www.cylaw.org/nomoi/enop/non-ind/1996_1_89/full.html WHO (2014) Safe management of wastes from health-care activities (2nd ed.)*. Available at: https://iris.who.int/bitstreams/7587616f-069f-414a-856a-c770feb8c1ed/download WHO (2020) Patient safety incident reporting and learning systems: technical report and guidance*. Available at: https://iris.who.int/bitstreams/0343cd25-b374-4178-90e6-8fc8a299f337/download WHO (2023) Global strategy on infection prevention and control*. Available at: https://iris.who.int/bitstreams/00ccce39-d66a-4142-a4bf-3144d270c873/download