Vaccine storage is easy to underestimate because it can look like a fridge check. In a small GP practice, travel clinic or private clinic, someone reads the temperature, writes it down, closes the door and gets on with the day. But from a CQC perspective, the cold chain is not a paperwork exercise. It is a live medicines-safety system.
The basic clinical risk is simple. Vaccines can lose effectiveness if they become too hot or too cold. The problem is that a damaged vaccine may look unchanged. The evidence therefore has to show that the provider controlled the conditions before administration, recognised excursions, made safe decisions, and learned from any failure.
That makes cold chain a Regulation 12 and Regulation 17 topic at the same time. Regulation 12 is engaged because vaccines are medicines and safe care depends on safe storage, competent staff, safe equipment and risk management. Regulation 17 is engaged because the provider needs systems that monitor quality, keep accurate records, identify problems and drive improvement. In practice, that usually means the cold-chain procedure sits inside a wider CQC medication policy template, rather than living as a stand-alone fridge document.
What CQC-ready cold chain evidence is really showing
The evidence needs to answer four questions.
First, who owns the cold chain? There should be a named lead and a named deputy. In a very small clinic, that may be a nurse and practice manager. In a travel clinic, it may be the clinician who administers vaccines and a manager who orders stock. The point is not the job title. The point is that responsibility is explicit and does not disappear when one person is on leave.
Second, are vaccines stored within the expected range? The UK Health Security Agency (UKHSA) Green Book describes the cold chain as keeping vaccines within the manufacturer's recommended range, usually +2C to +8C, until administration. The fridge should be suitable for medicines storage, not an ordinary domestic fridge, and the service should have a thermometer system that records current, minimum and maximum temperatures.
Third, what happens when the range is breached? A cold chain excursion is not solved by writing "fridge high" in the margin. The affected stock should be identified, separated or quarantined while kept in the cold chain where appropriate, advice should be sought through the relevant clinical or immunisation route, and the decision to use or dispose of stock should be recorded. If patients have already received affected vaccines, the service needs a clear record of advice, risk assessment and follow-up.
Fourth, does the provider learn from patterns? One fridge excursion caused by a door left open may be a human-error incident. Repeated excursions, overpacked shelves, gaps in weekend checks, delayed servicing, unclear ownership or staff uncertainty are governance findings. They belong in the risk register, training matrix, incident log or improvement plan, not only on the temperature sheet.
The cold chain is a chain, not a fridge
The most common weakness is thinking about vaccine storage only once the box is inside the clinic fridge. The chain starts before that.
Ordering matters. Overstocking increases the risk of out-of-date vaccines, poor air circulation and avoidable waste. Stock rotation matters because short-dated vaccines should not sit behind longer-dated stock. Delivery matters because staff need to know what to do when vaccines arrive and who can accept them. Fridge layout matters because vaccines should not be pushed against the back or side walls where freezing risk is higher.
That is why a good record is more than a month of temperature readings. It shows:
- named cold chain responsibility
- staff training and competence
- ordering and receipt controls
- stock rotation and expiry checks
- suitable fridge and thermometer arrangements
- routine temperature recording at the service's defined cadence
- action taken when readings fall outside range
- servicing, calibration and maintenance evidence
- quarantine and advice records for excursions
- incident reporting and improvement actions where needed
The shorter version is this: a service should be able to show that it controlled the vaccine from receipt to administration, and that it had a safe answer when control was lost.
What inspectors tend to test
CQC inspectors do not need to become vaccine specialists to test whether the governance is credible. The inspection questions are usually practical.
Show me the fridge. Show me today's reading and the last month of readings. Show me who checks the fridge when the usual person is away. Show me what staff do if the temperature is outside range. Show me the last time that happened. Show me whether stock was quarantined. Show me who gave advice. Show me how you decided whether the vaccines could be used. Show me whether the problem created an incident record or an action.
If the service can move through those answers calmly, the evidence is doing its job. If the answer depends on one person's memory, the system is fragile.
One of the most useful checks is to pick a real cold chain event and follow it through. If there has never been an excursion, pick a servicing issue, a stock-waste event, a missed temperature check, a delivery problem or a staff-training gap. A perfect record with no exceptions can be true, but it can also mean exceptions are being corrected informally and never becoming visible.
Small services need proportionate controls
A private travel clinic does not need the same governance machinery as a large NHS immunisation programme. But proportionate does not mean informal. The service still needs a policy that describes how it actually works, a named lead, staff who know the procedure, reliable records and a tested response to failure.
For GP practices, the added risk is familiarity. Vaccination may be so routine that cold chain becomes background administration. For travel clinics, the added risk is variety: different products, private supply routes, patient group directions, travel seasons and more frequent stock decisions. For private clinics that only hold occasional vaccines, the added risk is low frequency. Staff may not rehearse the procedure often enough for it to work under pressure.
Each setting needs the same governance shape, adjusted to the service:
- what vaccines are held
- who can order, receive, store and administer them
- what equipment is used
- what temperature system is used
- what happens when the cold chain is broken
- where advice is obtained
- how affected stock and affected patients are managed
- how the provider checks the system still works
For GP practices, that vaccine procedure normally sits alongside the wider GP safe prescribing and high-risk medicines policy, so cold chain is treated as part of medicines safety rather than a separate admin task.
The evidence that carries weight
The strongest evidence is connected. A high temperature reading creates an incident. The incident identifies the affected stock. The stock is quarantined. Advice is recorded. The decision is documented. Waste or re-vaccination is handled where required. The root cause is reviewed. A staff briefing or fridge-layout change is completed. The next audit checks whether the problem returned.
That connected trail is much stronger than a clean-looking temperature sheet that hides all the judgement. CQC does not expect a provider never to have problems. It expects the provider to recognise risk, act safely and improve.
The registered manager should also be able to see the cold chain in the wider governance picture. If vaccine checks are late, is that a staffing issue? If the fridge is overpacked, is that an ordering issue? If staff do not know the breach procedure, is that a training issue? If the same problem repeats, is there a risk-register entry?
A practical monthly check
A registered manager can strengthen this area without making it complicated. A practical way to test whether the written procedure still matches reality is to walk through a vaccine storage and cold chain checklist against one real fridge, one real set of readings and one real exception.
Pick one month of cold chain records. Check whether every working day is complete. Check whether minimum and maximum readings are recorded, not only current temperature. Look for gaps, handwritten corrections, repeated edge-of-range readings or comments without action. Find the last exception and ask whether it created a clear decision trail.
Then check the people. Is there a named lead and deputy? Have staff who handle vaccines had training? Do reception or administrative staff know what to do if they accept a delivery? Does everyone know not to use affected stock until advice has been taken?
Finally, check the equipment and stock. Is the fridge appropriate? Is servicing or calibration documented? Is stock rotated? Are expired or damaged vaccines removed safely? Is there a plan for power failure, fridge failure or building closure?
That is the difference between a fridge record and cold chain governance. One shows a number. The other shows a safe system.
Verivius supports this by linking recurring checks, staff competence, incidents, risks and improvement actions. The judgement remains clinical. The value of the system is that the judgement, and the evidence behind it, do not vanish into memory.
Related guidance
- Sample policy: GP vaccination and cold chain
- Sample policy: GP safe prescribing and high-risk medicines
- Sample policy: Medicines management
- Sample policy: Safe care and treatment
- Sample policy: Emergency medicines and equipment checking
- Checklist: Vaccine storage and cold chain checklist
- Sector overview: GP
- Sector overview: Private clinic
- Guide: GP and primary care compliance guide
- Guide: Private clinic compliance guide