Electrical Safety Testing
The four core measurements a safety analyzer runs, single-fault condition testing, and why a fail means the device leaves service immediately.
Electrical safety testing on patient-connected equipment in the US follows AAMI ES60601-1 (harmonized with IEC 60601-1); many facilities also reference NFPA 99 for the facility-level electrical requirements that surround the equipment itself. The whole discipline exists because a device that works perfectly from a clinical-function standpoint can still present a real electric shock hazard through a fault path no one has actually verified is absent.
The four core measurements
- Ground continuity / resistance - confirms the protective earth path from the chassis to the plug ground pin is intact; typical acceptance is well under 0.5 Ω. This is the simplest test and the one most often skipped when time is short, which is exactly backwards - a broken ground path is what turns an otherwise-survivable insulation fault into a lethal one.
- Chassis leakage current - measures current that could flow through a person touching the enclosure; limits are tighter for equipment with patient-applied parts than for equipment that never touches a patient.
- Patient leakage current - measured through each applied part, both under normal condition and single-fault condition (e.g. reversed line/neutral, open ground, or an ungrounded chassis). This is the test most directly tied to patient safety, since applied parts may contact the patient directly or even intracardially - a cardiac catheter or pacing lead has essentially no skin-resistance buffer, so the single-fault limits here are dramatically tighter than for surface-contact equipment.
- Insulation resistance - confirms the internal isolation between live parts and the enclosure hasn't degraded, typically from moisture ingress, insulation aging, or physical damage to internal wiring.
Why single-fault condition testing matters
Normal-condition testing verifies the device is safe when everything is working as designed. Single-fault testing verifies the device is still acceptably safe when exactly one thing has already gone wrong - because in the real world, a facility's electrical infrastructure does occasionally have an open ground or a wiring fault, and the device needs to fail safely rather than compounding that fault into a shock hazard. This is why a safety analyzer doesn't just measure leakage once - it cycles through reversed polarity, open neutral, and open ground conditions and re-measures each time.
Type B, BF, and CF applied parts
IEC 60601-1 classifies applied parts by how much protection they provide against leakage current, and the classification changes what limits apply: Type B parts (e.g. a patient bed frame) have the loosest limits, Type BF parts (e.g. a NIBP cuff, most ECG leads) are floating and isolated from earth with tighter limits, and Type CF parts (e.g. cardiac catheters, direct cardiac-applied leads) have the tightest limits of all because a fault current through them can reach the heart directly. Knowing which classification a given applied part carries - it's printed on the device and in the manual - tells you which limit actually applies before you even look at the reading.
The non-negotiable outcome
A device that fails any of these tests is removed from clinical use until repaired and retested - there is no acceptable-risk override for a failed patient-leakage test on in-service equipment, regardless of how urgently it's needed on the floor. The correct response to schedule pressure is finding a substitute device, not returning a failed unit to service on the assumption the fault is minor.