Energy and network uptime for medical offices

Energy use in a clinical building depends on which kind it is

Health care buildings are among the most energy-intensive commercial types. EIA's 2018 commercial survey puts health care at about 581 trillion Btu, roughly 9 per cent of commercial-building energy on about 4 per cent of the floorspace, and inpatient facilities dominate it: they were about 7 per cent of health care buildings but accounted for about 68 per cent of electricity and 82 per cent of natural gas use in the sector. An outpatient clinic sits at the other end of that range. In EIA's outpatient health care data, ventilation is a large end use — around 23 per cent — and lighting around 15 per cent, with space heating the single largest end use in both inpatient and outpatient buildings. For a medical office, then, HVAC and ventilation are usually the largest electricity items, which makes scheduling and setpoints a bigger lever than any single piece of clinical equipment.

• Health care used about 581 trillion Btu in 2018 — roughly 9 per cent of commercial energy on 4 per cent of floorspace.
• Inpatient buildings are about 7 per cent of health care buildings but 68 per cent of its electricity.
• Outpatient ventilation is about 23 per cent of end use and lighting about 15 per cent.
• Space heating is the largest single end use in both inpatient and outpatient buildings.

HIPAA already requires a downtime plan

The HIPAA Security Rule sets no uptime figure, but it does require a plan for when systems are down. The contingency plan standard at 45 CFR 164.308(a)(7) calls for a data backup plan, a disaster recovery plan, an emergency mode operation plan, and procedures to test and revise them, together with an analysis of the criticality of applications and data. The risk analysis that sits above it, at 164.308(a)(1)(ii)(A), requires an accurate and thorough assessment of the risks to the confidentiality, integrity and availability of electronic protected health information — availability included. Read together, the two provisions mean a practice is expected to have decided what it will do when the practice-management or EHR platform is unreachable, which parts of the record it must reach offline, and how it will test that the plan works. A circuit design answers a question the rule has already asked.

• 45 CFR 164.308(a)(7): data backup, disaster recovery, emergency mode, testing and revision.
• The same standard calls for an analysis of applications and data criticality.
• 164.308(a)(1)(ii)(A) requires risk analysis covering availability, not just confidentiality.
• HIPAA sets no uptime number; it requires a tested plan for the outage.

The essential electrical system a clinical building must have

What a clinical space must be able to do when normal power fails is set by NFPA 99, which classifies a health care facility's essential electrical system by the risk the space carries. A Type 1 system has three separately arranged branches — life-safety, critical and equipment — and serves spaces where an interruption could cause death or serious injury. A Type 2 system has life-safety and equipment branches but no critical branch. A Type 3 system is the limited arrangement that covers life safety and the safe cessation of procedures already under way, which is the classification some qualifying ambulatory surgical and outpatient settings can use. Whether a facility needs Type 1 turns on the activities, not the sign on the door: critical-care areas, anesthetising locations and electrical life-support equipment pull it toward Type 1, while a conventional examination-room office may not require a full Type 1 system at all. NEC Article 517 sits alongside the code for the wiring itself.

• NFPA 99 classifies the essential electrical system by patient-care risk: Type 1, 2 or 3.
• Type 1 has life-safety, critical and equipment branches; Type 2 has no critical branch.
• Type 3 covers life safety and the safe cessation of procedures in progress.
• The activity, not the building label, decides which type applies.

The generator behind the plan, and the testing it owes

An essential electrical system is only as good as the machine that carries it, and NFPA 110 sets the maintenance cadence. A health care emergency power supply system is generally inspected weekly and exercised under load at least twelve times a year, at intervals of not less than twenty and not more than forty days, for a typical minimum of thirty minutes — the familiar monthly thirty-minute test is one part of a programme, not the whole of it. Level 1 systems also carry a periodic endurance test, commonly four continuous hours every thirty-six months, at a minimum load expressed as a percentage of nameplate. The automatic transfer has its own clock: a Type 10 designation means emergency power reaches the load within ten seconds of a normal-source loss, which is the designation Type 1 health care applications commonly carry. Records matter as much as the tests — inspections, fuel and starting-system checks, transfer-switch exercises and repairs all have to be documented, and state licensing, CMS conditions and the authority having jurisdiction can add requirements on top of the code.

• Weekly inspection and at least twelve loaded exercises a year, 20–40 days apart.
• A typical exercise runs at least thirty minutes; the code, not habit, sets it.
• Level 1 systems commonly carry a four-hour endurance test every 36 months.
• A Type 10 transfer restores emergency power within ten seconds.

Cold chain, imaging and the loads that carry clinical risk

Some clinical loads matter for what happens to what they hold, not just for what they cost. Vaccine storage is the clearest case: refrigerated vaccines are held at 2°C to 8°C and frozen vaccines at −50°C to −15°C unless the manufacturer states otherwise, and continuing monitoring with a digital data logger recording at least every thirty minutes is the recommended practice, with minimum and maximum readings reviewed each working day. A power failure or a monitoring failure is treated as a possible temperature excursion, which means the affected doses are separated, labelled as not for use, documented, and referred to the manufacturer or the immunisation programme for a viability decision rather than simply discarded. Imaging equipment — CBCT, CT, larger modalities — appears as intermittent rather than continuous load, but its draw can set the demand interval when it coincides with ventilation and other equipment. The cold chain and the imaging load fail differently: one is about what is stored, the other about when the power is drawn.

• Refrigerated vaccines 2°C–8°C; frozen vaccines −50°C to −15°C, per CDC guidance.
• Continuous monitoring with a digital data logger, readings at least every 30 minutes.
• An excursion means quarantine, labelling and a viability decision — not disposal.
• Imaging draws in bursts, but it can still set the billed demand interval.

Connectivity decisions, in the order they matter

The order of the decisions matters more than the products. The first question is what the practice would do if the primary circuit failed during clinic hours, because that answer decides whether a second path is a design requirement or a convenience; emergency mode operation under the contingency plan is the standard that forces the question. The second is which systems must stay reachable when the practice-management or EHR platform is not, because that sets the offline access requirement and the local data the practice needs to keep. Only then does capacity enter: a cloud platform and messaging are modest, imaging is heavier on the uplink, and a second circuit changes the failure mode rather than the speed. Voice follows the same pattern — emergency-calling configuration and number portability are project steps with their own lead times, not features that appear when the service turns on.

• Start with the failure mode, not the speed: what happens when the circuit drops?
• Emergency mode operation under the contingency plan sets the offline requirement.
• Capacity follows the workload — imaging leans on uplink, not on headline speed.
• Emergency calling and number porting are configured project steps with lead times.

Vendors, subcontractors and where the agreement stops

Any vendor that creates, receives, maintains or transmits electronic protected health information for the practice is generally a business associate, and the practice needs a written agreement that meets the provisions at 45 CFR 164.504(e) before information is shared. The required terms are specific: the vendor must apply appropriate safeguards, use or disclose the information only as the agreement or the law permits, report uses and disclosures that are not permitted — including breaches — and bind its own subcontractors to the same restrictions where they touch the data. Breach reporting runs to a clock: under 45 CFR 164.410 a business associate must notify the covered entity without unreasonable delay and no later than sixty calendar days after discovery, and the covered entity's own notice duties to individuals run on the same sixty-day outer limit. The agreement is where the practice's exposure is defined, so the clause that matters most is the one that says who does what, and by when.

• Vendors touching ePHI are generally business associates needing a written BAA.
• 164.504(e) fixes the terms: safeguards, permitted uses, breach reporting, subcontractor flow-down.
• 164.410: notice without unreasonable delay and within sixty days of discovery.
• The clause that matters is the one stating who does what, and by when.

How a practice should sequence the next purchase

None of these decisions is best made in isolation, and the sequence is what keeps a practice from buying a remedy it does not need. Start with the risk analysis required at 164.308(a)(1)(ii)(A) and the contingency plan beneath it, because together they name the critical systems and the outage the practice is planning against. From there the electrical question follows the clinical activity — Type 1, 2 or 3, and the generator tested to the cadence the code sets — and the connectivity question follows the failure modes the plan identifies. Energy and telecom are separate purchases with separate contracts, but they share the same input: an accurate picture of what the building consumes, what it must keep running, and what it stores. Send those three and the proposals that come back become comparable.

• Lead with the risk analysis and the contingency plan; they name the critical systems.
• Let clinical activity set the essential electrical system type and the generator cadence.
• Let the plan's failure modes set the connectivity requirement.
• Send the load shape, the must-keep-running list and the cold-chain inventory.

PUT THE OPTIONS SIDE BY SIDE

Your comparison checklist

Common questions