Automated Dispensing Cabinet Errors: Suing for Pyxis and Omnicell Mistakes

What Are Automated Dispensing Cabinets?

Automated dispensing cabinets (ADCs) are computerized drug storage and dispensing systems used in hospitals and healthcare facilities to manage medication inventory and control access to medications. The two dominant manufacturers are:

• BD (Becton Dickinson) Pyxis — The most widely used ADC system in U.S. hospitals
• Omnicell — The second-largest ADC manufacturer

ADCs are designed to:

• Secure medications in controlled-access drawers
• Track medication dispensing and returns
• Interface with the pharmacy information system and electronic health record (EHR)
• Require user authentication and patient selection before dispensing
• Generate alerts for high-alert medications requiring pharmacist verification

When used correctly, ADCs reduce medication errors. But when safety features are bypassed, cabinets are stocked incorrectly, or software malfunctions, the very system designed to prevent errors becomes the source of harm.

[Link to: /medical-malpractice/medication-errors]

How ADCs Work

The typical ADC workflow is:

1. Order entry — A physician enters a medication order via CPOE (Computerized Physician Order Entry)
2. Pharmacy review — A pharmacist reviews and verifies the order
3. Cabinet dispensing — The nurse logs into the ADC, selects the patient and medication, and the cabinet releases the medication
4. Barcode administration — The nurse scans the patient's wristband and the medication barcode before administration

However, ADCs also have an override function that allows nurses to remove medications without pharmacist verification. Overrides are intended for emergency situations — such as when a patient needs a medication immediately and waiting for pharmacist review would be dangerous. But studies consistently show that override rates are far higher than emergency situations warrant, and override dispensing is a major source of medication errors.

Types of ADC Errors

Override Errors

The override function is the single most dangerous feature of ADCs. When a nurse overrides pharmacy verification, the safety check that catches wrong-drug, wrong-dose, and wrong-patient errors is eliminated. Common override errors include:

• Removing the wrong medication — A nurse selects the wrong drug from the cabinet
• Wrong concentration — The cabinet dispenses a different strength than intended
• Duplicate therapy — The override allows dispensing of a medication that duplicates an existing order
• Unordered medications — The override allows removal of medications that were never ordered for the patient

The ISMP recommends that override rates be kept below 5% of all dispensing transactions. Many hospitals significantly exceed this benchmark, with override rates of 15-25% in some facilities.

Stocking Errors

ADCs are restocked by pharmacy technicians. When medications are stocked in the wrong bin or drawer, the ADC displays the correct drug name on screen, but the physical medication in that bin is different. This can lead to:

• LASA dispensing errors — A look-alike drug is stocked where the intended drug should be
• Wrong strength — A different concentration is stocked in the bin
• Expired medications — Outdated stock is not removed during restocking

Stocking errors are particularly dangerous because they defeat the ADC's verification system — the cabinet believes it is dispensing the correct drug because the bin was stocked incorrectly.

Software and Interface Errors

ADCs interface with the pharmacy information system and EHR. Software or interface failures can cause:

• Failed order transmission — Orders don't reach the cabinet, leading to override use
• Wrong patient selection — A software bug associates the medication with the wrong patient
• Inventory desynchronization — The cabinet's inventory doesn't match the pharmacy system, leading to dispensing of unavailable or substituted medications

Security and Access Errors

ADC access should be limited to authorized users with individual login credentials. When credentials are shared or left logged in, the system cannot track who actually dispensed the medication, making it impossible to identify the responsible party and undermining accountability.

The Override Problem: When Safety Systems Become Liability

The override feature is at the center of many ADC-related malpractice cases. The ISMP has issued multiple alerts about override abuse, noting that nurses frequently override pharmacy verification for convenience rather than clinical necessity.

Legal Significance of Overrides

In New York malpractice cases, the use of an override can be evidence of negligence if:

• The override was not clinically justified (i.e., not a true emergency)
• The medication removed via override was a high-alert medication
• The override resulted in administration of a wrong drug, wrong dose, or wrong patient
• The hospital had a pattern of excessive override use without monitoring or intervention

Institutional Liability for Override Abuse

Under New York law, hospitals can be held vicariously liable for the negligence of their employees under the doctrine of respondeat superior. Additionally, hospitals can be held directly liable for:

• Failing to monitor override rates
• Failing to implement ADC override policies
• Failing to train staff on proper override use
• Failing to enforce ADC security protocols (individual logins, no shared credentials)

[Link to: /medical-malpractice/medication-errors/5-rights-of-administration]

Standard of Care for ADC Use

The standard of care for ADC use in New York hospitals is established by multiple sources:

ISMP Guidelines

The ISMP publishes best practices for ADC use, including:

• Override monitoring — Hospitals must monitor override rates and investigate high rates
• High-alert medication restrictions — High-alert medications should require additional verification even on override
• Barcode scanning — ADCs should support barcode verification of dispensed medications
• Profile-based dispensing — ADCs should be used in profile mode (requiring pharmacy verification) whenever possible

The Joint Commission Standards

The Joint Commission's Medication Management standards require:

• Secure storage of medications
• Pharmacy review of medication orders before administration (except in emergencies)
• Monitoring of medication error rates and adverse events
• Policies and procedures for ADC use, including override criteria

New York State Regulations

Under PHL § 2805-j and 10 NYCRR § 405, New York hospitals must implement patient safety programs that address medication safety, including ADC policies and monitoring.

Proving Negligence in ADC Error Cases

ADC Audit Trail

Modern ADCs generate detailed audit trails, including:

• User identity for each transaction
• Patient selection
• Medication removed
• Override status
• Date and time of transaction
• Return and waste documentation

This audit trail is critical evidence. In New York, a litigation hold letter should be sent immediately to preserve ADC data.

Pharmacy Policy Review

The hospital's ADC policies should be reviewed for:

• Override criteria and monitoring
• High-alert medication restrictions
• Restocking procedures and verification
• Security and access controls

Expert Testimony

ADC cases typically require:

• A pharmacy expert to testify about ADC standards of care, override policies, and restocking procedures
• A nursing expert to testify about medication administration standards
• A physician expert to testify about the medical consequences of the error

Frequently Asked Questions

What is a Pyxis override?

A Pyxis override is a function that allows a nurse to remove a medication from the automated dispensing cabinet without prior pharmacist verification. Overrides are intended for emergencies, but they are frequently used for convenience, which increases the risk of medication errors.

What is the safe override rate for ADCs?

The ISMP recommends that override rates be kept below 5% of all dispensing transactions. Many hospitals exceed this benchmark significantly, with override rates of 15-25% in some facilities. Excessive override rates are evidence of institutional negligence.

Can the hospital be held liable for ADC stocking errors?

Yes. When a pharmacy technician stocks the wrong medication in an ADC bin, the hospital (as the employer) is liable for the resulting error. Additionally, the hospital can be held directly liable for failing to implement proper restocking verification procedures.

Can I sue the ADC manufacturer?

If the ADC malfunctioned due to a software defect or hardware failure, you may have a products liability claim against the manufacturer (BD Pyxis or Omnicell). This is separate from a medical malpractice claim against the hospital and providers.

How is ADC data preserved for my case?

ADCs store detailed audit trails. Your attorney should send a litigation hold letter to the hospital immediately requesting preservation of ADC transaction logs, override reports, restocking records, and system configuration data. Under New York law, hospitals have a duty to preserve patient safety event data.

What is profile-based dispensing?

Profile-based dispensing requires pharmacy review and verification of a medication order before it can be removed from the ADC. This is the safest mode of ADC operation because it ensures pharmacist verification. Non-profile mode allows override dispensing without pharmacist review and should be limited to genuine emergencies.

This article is for informational purposes only and does not constitute legal advice. Prior results do not guarantee a similar outcome. No attorney-client relationship is created by reading this article or contacting MDLaw Firm.