A hospital's crisis response after unexpected patient harm should begin with the patient and family, not with the press. The AHRQ's CANDOR toolkit says the first disclosure conversation with the patient or family should happen within 60 minutes after an event has been identified. A communications team's job in that hour is to support that conversation, protect accuracy and prepare for the questions that follow, without getting ahead of the people who were harmed.
What does the CANDOR toolkit say about the first hour?
The CANDOR toolkit says the first disclosure communication should happen within 60 minutes after the event has been identified, and that this first conversation is with the patient, the family or both. CANDOR stands for Communication and Optimal Resolution. It is a process published by the U.S. Agency for Healthcare Research and Quality, known as AHRQ, that hospitals can use to respond when unexpected events cause patient harm.
AHRQ describes the contrast clearly. The traditional approach is often "deny and defend," which provides limited information to patients and families and avoids admission of fault. CANDOR is a more patient-centered approach that emphasizes early disclosure of adverse events and a proactive effort to reach a fair resolution for the patient, the family and the clinicians involved. The toolkit was developed from AHRQ's patient safety and medical liability grant initiative, which launched in 2009, and AHRQ's materials describe a CANDOR event as one involving unexpected harm to a patient, whether physical, emotional or financial.
The toolkit also names roles. A communication lead coordinates all communications and makes sure that caregivers stay consistent. Only a designated disclosure lead or other trained communicator handles follow-up conversations with the family after the first one. The first conversation is described as the start of a process, not a single event.
I am a communications adviser and not a clinician or a lawyer. What follows is about the communication side of the response. Any specific case needs the hospital's risk management, privacy officer and legal counsel in the room.
Why should the patient and family hear first?
The patient and family should hear first because they are the people most affected, and because learning about harm from a news report, a social media post or a hallway rumor damages trust in a way that an honest early conversation can often prevent. A hospital's reputation with its community depends on whether people believe it will tell the truth when something goes wrong.
There is also a practical reason. In a crisis, information spreads from staff, from other patients and from outside sources, often faster than any official statement. If the family has not been told, the hospital loses control of the order in which people learn. The family may then hear a version from a stranger, and the hospital's later explanation will sound like a reaction.
From a communications point of view, this changes the sequence. The first call is not to the media team. The first call is to the clinical and risk leaders who will speak to the family. The communications team joins them quickly, but behind the disclosure and not in front of it.
What should a communications team do in the first hour?
A communications team should use the first hour to confirm the facts it can share, protect privacy, prepare staff and hold external statements until the family has been told. Five actions cover most of it.
- Confirm who is leading. Name the communication lead and the person who will speak to the family. Make sure everyone knows the names. A hospital with an existing CANDOR-style process already has these roles assigned in advance.
- Separate what is known from what is not. Write a short internal note with three headings: confirmed facts, unknowns and what is being done. Do not guess. A guess that proves wrong becomes the story.
- Protect patient privacy. Privacy rules limit what a hospital can say publicly about an individual patient. Ask the privacy officer and counsel what can be shared, with whose consent, and to whom. Do not post or confirm patient details to the press or on social media on your own.
- Brief the staff who need to know. Tell the clinicians and front-line teams who are closest to the event what to say and what not to say. Give them one point of contact for questions. Staff who learn about an event from the news feel betrayed, and they are also the people families will ask next.
- Hold the external statement. Prepare a holding statement but do not release it until the family has been told. If a reporter calls first, the spokesperson can say that the hospital is aware of the matter, is reviewing it and will share what it can when appropriate, and that the hospital's first obligation is to the patient and family.
The AHRQ materials note that the first disclosure is followed by later conversations, including after an investigation is complete. The communications plan should follow that rhythm. Plan for a second and third round of messages, not for a single statement.
What should the first public statement say?
The first public statement should be short, plain and human, and it should say only what is confirmed. It should express concern for the patient and family, say that the hospital is reviewing what happened, state what the hospital is doing and say when more information will be available. It should not blame, speculate or minimize.
Here is a structure, not a quote from any hospital.
We are deeply sorry for what has happened to one of our patients and their family. We have spoken with them directly and will continue to support them. We are reviewing the event carefully and will share what we can when we have confirmed it. We take our responsibility to every patient seriously.
Notice what the structure leaves out. It does not claim fault, because the facts are still being established, and counsel will want to review the wording. It also does not hide behind legal phrases. The apology is directed at the person who was harmed, and the actions are specific. If the hospital cannot say something yet, it says when it will.
How should a hospital talk about fault and apology?
A hospital should talk about fault and apology with care and with counsel, but it should not default to silence. The AHRQ toolkit describes the traditional deny-and-defend posture as one that avoids admission of fault and limits information. CANDOR argues for early, honest communication and a fair resolution. The legal rules about apologies and admissions vary by jurisdiction, so the wording must be checked locally.
My own view, as a communications adviser, is that empathy does not have to wait for a final finding. Saying that the hospital is sorry for what a patient and family are going through is different from saying who caused it. The first can be said early. The second is established through review. Teams that mix them up tend to say nothing, and silence reads as indifference.
The toolkit also asks organizations to care for the caregivers, because clinicians involved in a harm event are affected too. A communications plan should include internal messages that support staff and do not single anyone out.
How should a hospital handle media and social media?
A hospital should handle media and social media with one spokesperson, one set of facts and a steady update schedule. The first rule is consistency. If different people say different things, reporters will notice, and the gaps will become the story.
- One spokesperson. Choose someone who has been trained for hostile questions. The guide to media training explains how to prepare.
- One fact sheet. Keep a living document of confirmed facts, updated with timestamps, so that every answer comes from the same source.
- A schedule. Tell reporters when the next update will come, and keep to it, even if the update is that nothing new is confirmed.
- Social monitoring. Watch for posts from patients, families and staff. Do not argue with them publicly. Respond with the same short, human message, and direct private concerns to a named contact.
- Corrections. If a statement turns out to be wrong, correct it quickly and plainly. A fast correction costs far less than a slow one.
For the wider approach to working with reporters during a fast-moving story, see media relations.
What should a hospital prepare before a crisis happens?
A hospital should prepare roles, templates and a review process before a crisis happens, because the first hour is too short to invent them. Six items belong in the plan.
- Named communication and disclosure leads, with backups for nights and weekends.
- A contact list for risk management, privacy, legal, patient relations and the executive team.
- A holding statement template and a longer statement template, both reviewed in advance by counsel.
- A staff communication template and a clear way for staff to ask questions.
- A media and social media protocol, including who may speak and who may not.
- A practice run at least once a year, using a realistic scenario.
The structure of a crisis plan is covered in the crisis communications foundation, and other cases are collected in the crisis communications case library. 12 PR crisis examples gives one dated lesson for each of twelve cases. Sector-specific guidance for healthcare is in medical industry public relations, and the full set of sector guides is in the industry PR guides.
How does this connect to reputation over the long run?
This connects to reputation because the way a hospital behaves in its worst hour becomes part of its public record, and that record is what patients, referring physicians and AI engines later find. A hospital that discloses early and treats a family with honesty builds a different record from one that goes quiet. The principles are the same as in any crisis, and they are explained in reputation management.
Healthcare organizations and health technology companies that want help with communications planning can look at 5W's digital health and health technology PR practice.
Frequently asked questions
What is the CANDOR process?
CANDOR stands for Communication and Optimal Resolution. It is an AHRQ toolkit that hospitals can use to respond in a timely, thorough and fair way when unexpected events cause patient harm, with an emphasis on early disclosure and resolution.
When should a hospital first speak to a patient or family after a harm event?
According to AHRQ's CANDOR materials, the first disclosure communication occurs within 60 minutes after the event has been identified, followed by later conversations, including after the investigation.
Who should talk to the media first?
The patient and family should be told first. After that, one trained spokesperson should give a short, confirmed statement, with privacy and legal review.
Can a hospital apologize before the facts are known?
A hospital can express sympathy and concern early, without assigning blame. The exact wording should be reviewed by counsel, because the rules on apologies vary by location.
Is this legal or medical advice?
No. This article is about communications practice. A hospital should work with its risk management, privacy officer and legal counsel on any real event.