A Seattle hospital gave every employee, not just doctors, the right to stop patient care the instant they spotted something unsafe, borrowed directly from Toyota's andon cord

the problem

Patients moved in batches, and so did mistakes, with no formal channel for frontline staff to flag danger

background

what everyone would do

Add another layer of incident reporting or safety training aimed at senior clinical staff — the standard hospital response to patient-safety failures, since it works within the existing chain of command and assumes the fix is more diligence or more paperwork rather than a structural gap in who is allowed to act. It leaves the actual bottleneck untouched: a nurse or support staffer who spots danger still has to route the concern up a slow hierarchy that discourages reporting from junior staff, so the same class of error keeps reaching patients before anyone with formal authority hears about it.

what they saw

Kaplan saw that hospitals shared the exact structural defect Toyota had already solved on the assembly line: work moved through a multi-step process where the people most likely to spot a defect in real time, frontline staff, had no formal authority to halt it, so problems only surfaced after they'd already caused harm. Rather than build a healthcare-specific safety protocol from scratch, he imported Toyota's andon cord directly, giving every employee, regardless of seniority, explicit authority to stop the process and report the instant they saw something unsafe.

the move

Virginia Mason implemented a Patient Safety Alert (PSA) system modeled directly on Toyota's andon/stop-the-line concept: any employee who encountered a situation likely to harm a patient was required to make an immediate report and cease any activity that could cause further harm, regardless of their role or seniority.

why it works

Because the authority to halt work was extended to everyone rather than routed through a hierarchy, the people physically closest to a developing problem, often nurses or support staff rather than physicians, could act at the moment they noticed it instead of waiting for a report to climb the chain of command and reach someone empowered to intervene. This is exactly why the reporting pattern that emerged looked the way it did: 44% of Patient Safety Alerts came from nurses and 23% from support staff, far more than the 8% from physicians, showing the fix worked precisely because it unlocked reporting from the staff who previously had no protected channel to use. Monthly reports climbing from 3 in 2002 to 285 in 2006 reflects staff trust building as they saw the system actually used and acted on, the same trust-building curve Toyota observed when it first gave line workers stop authority — the mechanism only pays off once people believe using it won't cost them.

the payoff

By December 2006, the hospital had logged 6,112 total PSA reports, with monthly reports climbing from 3 in 2002 to 285 in 2006 as staff trust in the system grew; reports came from across the hierarchy — 44% from nurses, 23% from support staff, 20% from managers, and 8% from physicians — and most were resolved within 24 hours to a few weeks, according to the hospital's own published account in the Joint Commission Journal on Quality and Patient Safety.

where it breaks

The approach depends on leadership genuinely honoring stop-authority when frontline staff use it — if halting a process for a safety concern results in blame, delay penalties, or being overruled without explanation, staff quickly learn not to use the authority and reporting collapses back toward silence. It also requires the underlying process to be genuinely capable of being paused without catastrophic cost, which is easier on an assembly line building discrete units than in some emergency or continuous-care contexts where 'stopping the line' isn't always physically or medically possible. And it requires enough follow-through capacity to actually resolve reported issues promptly, since Virginia Mason resolved most alerts within 24 hours to a few weeks — a stop-authority mechanism that generates reports nobody has the resources to act on quickly erodes the same trust it depends on to keep working.

what came after

Virginia Mason became the reference case for lean healthcare in the United States, and its production-system model, including the Patient Safety Alert mechanism, has been studied and partially adopted by other health systems seeking the same combination of error visibility and sustained safety-culture change.

references

1. [1]Applying the Toyota Production System: using a patient safety alert system to reduce errorJoint Commission Journal on Quality and Patient Safety, via PubMed, 2007pubmed.ncbi.nlm.nih.gov
2. [2]Creating an environment for caring using lean principles of the Virginia Mason Production SystemJournal of Nursing Administration, via PubMed, 2007pubmed.ncbi.nlm.nih.gov
3. [3]Patient safety lessons from LEAN manufacturingFierce Healthcare, 2013web.archive.org

keep it

same kind of clever

• 2025 · AXA FranceAXA hid emergency housing for domestic-abuse victims inside the same boilerplate clause that already covered fire and flood
• 2026 · BCP (Banco de Crédito del Perú)BCP let Peruvians freeze their bank account at any corner-store card reader, since the stolen phone they'd normally call the bank with was gone too
• 2013 · Better Shelter (IKEA Foundation, with UNHCR)The refugee tent problem got solved by a flat-pack furniture company's own supply chain, not a new design