Abstract
Background
For over 20 years, healthcare policy documents and the research literature have sought to encourage the reporting and analysis of near misses in patient care.1–3 However, progress to harness their learning potential has been slow.4,5 One fundamental barrier to the reporting of, and therefore learning from near misses is that their definition is not agreed nor understood.5–7
At its simplest, a near miss may be seen as something that almost happened. 8 However, when exploring definitions of a healthcare near miss, there is significant variation.4–7 Variation relates to the features of a near miss, meaning one organisation's near miss may be different to another. In the National Health Service (NHS), for example, national definitions vary between bodies, and between national bodies and providers. 5
Along with the statements of the need for healthcare to learn from near misses is a recognition that other industries, such as aviation, have harnessed their learning.1,2,9 The process and transportation industries have long had clarification of the features of a near miss following their exploration in 1989 in Eindhoven (Netherlands). 10 The result was the ‘Eindhoven Model’ (Figure 1). 11

The Eindhoven Model. 11 .
The Eindhoven Model was published some 30 years ago, but no similar model exists in healthcare despite some attempts to apply it.12,13 The features of a healthcare near miss have never been formally described which is contributing to variation in definitions. 5 The authors therefore set out to seek insights from healthcare organisations and non-healthcare high-reliability industries to inform description of the features of a healthcare near miss for an evidence-based model.
Methods
This study took a mixed-methods approach – qualitative exploration of the features of a near miss, and assessment of agreement on features between participants.
Qualitative component
Healthcare participants were approached from sectors representative of the English NHS – general practice, secondary care (acute hospital, mental health and ambulance) and regional/national bodies (regulatory and policy). For non-healthcare participants, representatives of ‘High Reliability Industries’ (HRIs) were approached. HRIs have rich reporting and learning cultures which include near misses. 14 Due to the range of HRIs, it was pragmatically chosen to focus on aviation, maritime, rail and nuclear.
Participants were safety leads purposively approached via organisational websites to take part in semi-structured interviews. The interview protocol (Supplemental material) was developed with nine safety professionals. One researcher undertook interviews to support consistency. Each interview was audio recorded, transcribed and thematically analysed using a recognised approach. 15 Two researchers undertook the analysis independent of each other. Themes were agreed amongst the researchers.
Quantitative component
To support exploration of the features of a near miss, a ‘scenario’ was developed, inspired by Henneman and Gawlinski. 13 The scenario (Table 1) was tested during protocol design. It was shown to participants by asking whether they term each outcome as an incident, near miss, non-event or something else (depending on their industry). Discussion of responses contributed to the qualitative data. To quantify agreement between participants Fleiss’ Kappa was used.
The scenario and its associated outcomes (O1–O4).
Enhancing trustworthiness
Research approvals were granted prior to commencement. Relevant standards were followed to support rigour. 16 Trustworthiness was created through the protocol, triangulation of perspectives and by reaching theme saturation. There was no predetermined sample size as this was predominantly qualitative. Draft themes/findings were shared with participants for verification.
Results
Interviews were undertaken between 2019 and 2022. Twenty-one healthcare participants took part across 17 organisations – acute hospitals (n = 3), general practice (n = 6), mental health (n = 2), ambulance services (n = 2), regional bodies (n = 2) and national bodies (n = 2). Thirty-six HRI participants took part across 35 organisations – aviation (n = 12), maritime (n = 7), nuclear (n = 7) and rail (n = 9). Further detail is available as Supplemental material.
Quantitative findings
Fourteen healthcare participants responded to the scenario. Fleiss Kappa showed perfect agreement that O1 was an incident (ĸ = 1.00, 95% CI [0.88, 1.00]); fair agreement for O2 as an incident (n = 9) or near miss (n = 5) (ĸ = 0.26, 95% CI [0.14 to 0.38]); fair agreement for O3 as a near miss (n = 10) (ĸ = 0.29, 95% CI [0.17, 0.41]); and slight agreement for O4 as a near miss (n = 7) or non-event (n = 6) (ĸ=0.09, 95% CI [0.00 to 0.21]).
Twenty-two HRI participants responded. Fleiss Kappa showed perfect agreement for O1 as an incident (ĸ = 1.00, 95% CI [0.93, 1.00]), fair agreement for O2 as an incident (n = 14) (ĸ = 0.27, 95% CI [0.20, 0.35]), fair agreement for O3 as a near miss (n = 14) (ĸ = 0.23, 95% CI [0.15, 0.31]) and very good agreement for O4 as a non-event (n = 21) (ĸ = 0.86, 95% CI [0.78, 0.94).
Qualitative findings
All participants contributed data to the qualitative analysis. Table 2 provides a summary of the themes with example quotes. Themes are explored in turn below.
Themes identified and example quotes.
Near misses depend on context
This theme represents how a near miss is dependent on the industry in which it occurs. HRI near misses were described in relation to operations, such as driving a train. Several participants shared lists of specific situations that constitute a near miss. These ‘operational’ near-miss definitions often include detail of the actors (e.g. ship), situation (e.g. close proximity) and potential outcome (e.g. collision). Some of these definitions had specific names, such as Airprox. 17
Healthcare examples commonly related to situations involving medication. Participants described that these are easier to conceptualise. Definitions given, whether an individual's or organisation's, were often generic without reference to actors or situation. The generic nature of healthcare definitions made them difficult to apply.
Near misses involve control
This theme demonstrates the role of controls in near-miss situations. A control represents something that prevents the progression of events. Controls were also referred to by other terms, such as barriers.
When exploring the scenario, participants who responded to O3 and O4 as near misses or non-events qualified their responses with reference to controls – the nurse (O3) and prescribing system (O4). O2 led to debate about ‘luck’ in a near miss and whether this is a control.
Several HRI participants felt that the type of control is relevant to the definition. The human control in O3 was thought to represent a greater risk of future incident, than the system control in O4. The rationale was that a prescribing system may have functionality to prevent incidents, while a human is fallible. O4 was therefore seen as a non-event by most HRI participants.
Near misses vary in complexity
This theme represents how near misses involve different types and numbers of factors and controls. Most participants described near misses as linear with a single control, much like the scenario. However, several HRI participants, particularly from aviation and nuclear, challenged the linear representation when multiple factors and controls are likely to be involved.
The presence of the patient in the scenario led to differing views as to whether a near miss could still occur if events reached them. This was also demonstrated by the terming of O2. Some thought events reaching a patient must mean an incident has occurred, without harm. However, others argued that the no-harm outcome was the near miss. No participant termed O1 a near miss, but some questioned whether this is a near-miss death.
Near misses are vulnerabilities
This theme recognises that near misses represent risk of future incidents and need reporting. Several healthcare participants described the need to turn near misses into ‘positives’ to change the culture around them and celebrate the staff involved. In contrast, HRI participants described how their industries saw near misses as ‘vulnerabilities’. These vulnerabilities were of greatest concern when a human needed to be involved or where multiple controls had been overcome.
Discussion
Learning from near misses has the potential to support improvements in patient safety. However, without a clear, agreed and usable definition, near misses will continue to go unrecognised.5–7 The authors set out to explore the features of a healthcare near miss to inform an evidence-based model. Those features are explored below, aligned with the literature.
Feature 1 – context-specific situations
The generic nature of definitions leads to ambiguity and difficulty identifying situations as near misses. As a result, learning is lost that would otherwise provide insights into contributory factors to incidents and activated controls to prevent those incidents.4,5
To address the challenge of ‘missing’ the near miss, several HRIs have listed specific situations that meet criteria for a near miss.18–21 While some argue that lists limit the breadth of reporting, 22 they can support focus on significant situations.19,23 Specifying what should be reported may be beneficial in industries such as healthcare where underreporting is problematic. 24
The specific situations meeting HRI criteria also show that a near miss in one industry is different to another. While operating contexts (e.g. plane versus ship) will contribute to differences, so will the angle with which the situation is viewed. For example, ‘pilot incapacitation’ 18 was described as a near miss by several HRI participants, but could be argued an incident from the perspective of the pilot. One person's (or plane's) near miss may be someone else's incident. A near miss is a situation defined by the context in which it occurs and their safety focus. 25
Feature 2 – complex human-based control systems
The number, nature and effectiveness of controls were found to be important features of a near miss. Near misses occurring in complex systems are likely to be the result of multiple factors and therefore multiple controls may be needed. Very rarely is safety dependent on a single decision or action. 26 Viewing near misses as single cause and control may limit learning by being too simplistic.27,28 There is value in understanding the range of controls in a near miss, including any that were unsuccessful. In HRIs such as nuclear, events that overcome some controls before being stopped represent higher-risk near misses. 29
Controls will differ in their effectiveness. For example, those that engineer out a risk are likely to be more effective than relying on a human to follow a safety rule. 30 If luck is considered a control, it will be weak control due to being unplanned. 31 The HRI terming of O3 and O4 demonstrates the differing effectiveness of controls. The nurse following a procedure will not always be reliable in preventing an incident, while a designed system with forcing functionality is more likely to. The terming of O4 as a non-event by HRI participants also highlights an interesting difference in perceptions between them and healthcare participants. This may be representative of differences in safety understanding and maturity across the industries. 14 As described by one participant, ‘healthcare always needs to find someone to blame’. It may also be because HRI participants perceived prescribing systems to be ‘error proof’ when in reality their control functionality varies depending on the system.
This study found no theme around the proximity of controls to the point of incident for a situation to be defined a near miss. Participants varied from those who thought a near miss is where a control acts just prior to the point of incident (as per O3), to others who thought any control no matter when/where makes a situation a near miss. This debate is also had in the literature with no evident consensus.32,33 The lack of agreement may again highlight how near misses are dependent on the context in which they occur. More mature industries may seek reporting of near misses with more proximal control, while less mature, such as healthcare, may focus on near misses with controls just prior to the point of incident.
Feature 3 – include the patient
The patient is an important feature of a healthcare near miss. However, there was no consensus about whether events could reach a patient or not and be considered a near miss. The literature highlights a similar debate, 6 with examples of situations termed near misses that have harmed patients. 34 Several participants agreed that events reaching a patient means harm is possible, and so an incident must have occurred. From a patient-centred perspective this seems reasonable, and is also the interpretation held by almost 4000 participants of a survey undertaken by the Institute or Safe Medication Practices. 35
The debate about the position of the patient in relation to events may be academic, as long as all situations are reported. However, there is known underreporting of safety events in healthcare, and even when reported learning is superficial.4,5 If near misses are not recognised as such, there is a risk that efforts to learn will only focus on contributory factors, without attention to the controls involved.
Feature 4 – represent vulnerability
This study found differences in how near misses are viewed between HRIs and healthcare. Healthcare participants were keen to reframe near misses as positive events to encourage their reporting. Their rationale was that this reduces the fear of blame, aligns with efforts to learn from ‘what went well,’ and celebrates staff for providing resilience. The literature shows examples of near misses being reframed as ‘good catches’. 36
However, HRI participants and literature suggest risk with the positive reframing of near misses.37,38 Research cautions viewing near misses as evidence of resilience because it can inhibit future actions, resulting in riskier decisions.39,40 Celebrating the human may place an over reliance on their role in catching events, when the situation represents system vulnerability by the very fact a human was required. It is therefore important for near misses to be seen as representing vulnerability rather than resilience. 39 Rather than healthcare reframing near misses, it may be more appropriate to address the underlying reasons for why this is thought to be needed, such as punitive cultures.
Updating the Eindhoven Model
The findings offer an opportunity to translate and update the Eindhoven Model for healthcare, with acknowledgement of how safety science has evolved over the past 30 years. The original model is linear with two controls described – ‘defences’ and ‘recovery’. Defences were defined as the safety rules, training and equipment that bring systems back to normal states, while recoveries were final human controls.10,11
Much of the original Model is still relevant, however, the findings of this study challenge the original's inclusion of human involvement as a defence (whether by training or following safety rules). 11 This study suggests that any involvement of a human to prevent progression of events represents a system vulnerability and therefore a near miss. As systems have become more complicated and human fallibility understood, so too has our understanding of effective of controls. The proposed model therefore refers to barriers which are robust and reliable controls that can be relied upon. 41
The authors propose an updated Eindhoven Model for healthcare (Figure 2). This provides a representation of a healthcare near miss for future research. It includes contextualisation to healthcare with inclusion of the patient; recognition of complexity and their representation of vulnerability; and recognises the differences in effectiveness of controls.

The updated Eindhoven Model for healthcare.
Strength and limitations
This study has the potential to support improvements in patient safety through learning from near misses. The features were developed from a comprehensive exploration of primary and secondary data. While not all HRIs and healthcare sectors were included, theme saturation was reached. It is acknowledged that defining a near miss is only one part of a complex process for effective learning, and that a model can never represent the complexity of healthcare and the fact that some safety events are emergent. 42 Further research is required to validate the model and to better understand how learning can best be achieved. A future study may also seek to quantify the reliability of different controls to prevent incidents to help truly distinguish the distinction between a near miss and non-event.
Conclusion
Healthcare definitions for a near miss vary, with underreporting and loss of learning. Until now the features of a healthcare near miss have not been defined or modelled, unlike in other industries. With better recognition and reporting of near misses, these situations have the potential to provide insights into the factors that contribute to incidents, and the availability and effectiveness of controls. It may be beneficial for future research to validate the provided model and to look to develop specific definitions for healthcare situations that represent near misses, using the features found in this study.
Supplemental Material
sj-docx-1-cri-10.1177_25160435241247096 - Supplemental material for Updating Eindhoven: Clarifying the features of a patient safety near miss
Supplemental material, sj-docx-1-cri-10.1177_25160435241247096 for Updating Eindhoven: Clarifying the features of a patient safety near miss by Nick Woodier, Charlotte Burnett and Paul Sampson, Iain Moppett in Journal of Patient Safety and Risk Management
Footnotes
Declaration of conflicting interests
Ethical approval
Funding
Supplemental material
References
Supplementary Material
Please find the following supplemental material available below.
For Open Access articles published under a Creative Commons License, all supplemental material carries the same license as the article it is associated with.
For non-Open Access articles published, all supplemental material carries a non-exclusive license, and permission requests for re-use of supplemental material or any part of supplemental material shall be sent directly to the copyright owner as specified in the copyright notice associated with the article.
