Beyond Ebola: Environmental Regulatory Issues Creating Business Risks for Health Care Providers

by Pepper Hamilton LLP

Business and legal risks to health care companies reach far beyond scientific uncertainties in the prevention protocols for infectious diseases due to lack of clarity among regulators with public health responsibilities.


The host of exposure and risk issues raised by the treatment in the United States of health care workers exposed to the Ebola virus is the latest evidence that infectious diseases generate substantial public concern and trigger a wide spectrum of responses from agencies charged with protecting the public health. Although the Centers for Disease Control and Prevention (CDCP) assured the public that the risk of a large-scale Ebola “outbreak” in the United States was very low and that well-established infectious disease prevention protocols are adequate to protect human health, the governmental response, at times, has been incomplete, and continued diligence and oversight is warranted. Initial CDCP and state health advisories have changed based on reactions to conditions encountered in assessing the exposure of individuals and the treatment of patients in health care facilities. Guidance often was reactive and not “forward looking” and did not address such issues as how to handle, transport or dispose of the highly infectious waste generated by even a handful of Ebola patients.

The Environmental Protection Agency (EPA) (working in conjunction with the CDCP) exhibited a welcome degree of flexibility in its issuance of new guidance detailing when, and in what manner, manufacturers of disinfectants, sterilants and the like could claim these chemicals are effective in reducing or eliminating the spread of the Ebola virus specifically on “hard, non-porous surfaces” in health care settings (e.g., on tables or floors).1 Prior to the EPA’s issuance of this proactive guidance, reliable information on the effectiveness of disinfectants in reducing the risk of Ebola infection to patients, health care providers and the public from such hard, nonporous surfaces was needed, but not available, because no disinfectant had been tested specifically on Ebola.2

Therefore, no disinfectant manufacturer or distributor had received EPA regulatory approval to make claims that these existing disinfectants could kill or reduce the growth of the Ebola virus on hard surfaces. As a result, the EPA published a list of EPA-registered disinfectants that were expected to be effective in preventing the growth or killing of the Ebola virus on hard, nonporous surfaces based on the studies in its files on the effectiveness of these disinfectants on similar, often more difficult to kill, microorganisms.3

Although it may surprise some in the health care industry to learn that the EPA (not the Food and Drug Administration (FDA)) was the prime regulator in that circumstance, the Federal Insecticide, Fungicide and Rodenticide Act (FIFRA) has long regulated the sale or use in commerce of any substance or mixture of substances (including disinfectants, sterilants and the like) when used to destroy or suppress the growth of bacteria, viruses and other microorganisms that are harmful to humans and animals (including, but not limited to, the Ebola virus, EV-D68 and Legionella) when on inanimate objects and surfaces (e.g., tables, walls, floors) (i.e., the "pests" in "pesticide" are not just rodents and bugs). For simplicity, the remainder of the article will generally refer to disinfectants, rather than pesticides.

Attention should not be limited to the Ebola situation. Regulators will focus on all infectious diseases. For example, in 2014, the CDCP found a sharp rise in the number of children hospitalized for severe respiratory illness in Missouri and Illinois with Enterovirus D68. As a result, the EPA and the CDCP issued guidance concerning which disinfectants, in fact, are effective in preventing the spread of the Enterovirus D68 microorganism.4

Similarly, from 2000 to 2013, there was a fourfold rise in the annual cases of Legionnaires’ disease (or Legionellosis, a lung disease caused by the Legionella bacteria, that often leads to a serious, potentially lethal form of pneumonia). Based on the author’s discussions with EPA staff, the EPA, in collaboration with the CDCP and state co-regulators, is revising its Legionnaires’ disease guidance.5 There are also predictions that the number of new strains of infectious diseases may rise over the next few decades. As a result, the frequency of events involving infectious diseases (and the concomitant infectious wastes generated by patients) is likely to increase.

Business and legal risks to health care companies reach far beyond scientific uncertainties in the prevention protocols for infectious diseases or lack of clarity among regulators with public health responsibilities. Whenever a new or controversial health-based risk come to light, not far behind are opportunistic individuals seeking to exploit these circumstances and be “first to the market” with miracle solutions that solve the problem. We saw this phenomenon in response to the Legionnaires’ disease and AIDS epidemics, where a flood of products appeared on the market without prior review and approval by state and federal authorities. Health care organizations’ procurement personnel and end users (doctors, nurses, dentists and other health care professionals) could not readily distinguish between products that complied with regulatory requirements designed to ensure product efficacy and safety before being offered for sale in the United States and those that did not. As a consequence, patients, the public and health care workers were exposed unnecessarily to infectious diseases. In both of these instances, the EPA aggressively exercised its statutory enforcement authority, resulting in stop-sale orders, injunctions, substantial fines and bad press for those entrepreneurs who tried to short circuit the rules. Unfortunately, the unintended consequence of this governmental action was an uptick in third-party claims against well-intentioned health care providers and a significant disruption of the health care industry supply chain. If past is prologue, regulators or those potentially injured by infectious agents from noncompliant goods in the marketplace may seek to hold health care institutions and professionals liable, even where regulators blundered, simply acted too slowly, or were incomplete in their response actions.

Companies and professionals in the health care industry need to understand the full extent of regulatory controls affecting the industry and its suppliers. There is no shortage of potential legal issues — e.g., those concerning patient treatment protocols and their uncertainties, the ability to dispose of or transport infectious waste, and the applicability of the provisions of the Occupational Safety and Health Act, the Americans with Disabilities Act, and the National Labor Relations Act — and many other questions must be addressed.6 This article narrowly focuses on the role that the EPA plays in regulating the sale and marketing of products to prevent the spread of infectious diseases.


Infectious disease events can challenge even the best of regulatory schemes (and recent events suggest that we do not have, as yet, the best of schemes). Jurisdictional boundaries among regulators are blurred, and prior approvals literally may not apply to an outbreak involving a different infectious microorganism (such as Ebola or Enterovirus D68), even though the prior approval involved a very similar, but not identical, infectious agent. The role of the CDCP in detecting disease outbreaks and providing advice on measures to minimize disease transmission (among other duties) is relatively well known. The FDA is the acknowledged regulator of drugs and other patient therapies. Less recognized is the EPA’s role in regulating products imported or produced in the United States and offered for sale as effective in destroying or suppressing the growth of disease-causing viruses and other microorganisms.

EPA’s Legal Authority

FIFRA regulates the sale or use in commerce of any substance or mixture of substances, including disinfectants used to destroy or suppress the growth of specific microorganisms that are harmful to humans and animals, such as bacteria, viruses or fungi, including, but not limited to, the Ebola virus, EV-D68 and Legionella, on inanimate objects, surfaces, or in the case of Legionella in water (e.g., tables, walls or floors).

FIFRA requires registration of such products for their intended uses by the EPA (and approval of specific marketing claims by the agency) prior to sale or distribution for sale in the United States. The EPA’s jurisdiction includes, among other things, offering for sale, distributing for sale, holding for sale, shipping, holding for shipment, delivering for shipment or releasing for shipment. 40 C.F.R. § 152.3.

To obtain the right to sell or distribute a disinfectant, a company must submit data demonstrating (a) the exposure over a lifetime, given the intended use, will not present an unreasonable risk to human health or the environment (e.g., to the health care workers who come in contact with the disinfectant over their entire working careers) and (b) the efficacy of the treatment claim on the label for the specific microorganism (e.g., that the use of the chemical as directed on the label kills 99.99 percent or higher of microorganism X within a given period of time).7 The EPA will not approve the generic use of a product; rather, approval, i.e., registration, only will be issued for a “specific” use of a “specific” substance on a “specific” inanimate object at “specific” concentrations over “specific” durations to support a “specific” claim that the substance is effective.

The EPA also must approve the precise language for the label, and that approved language limits all advertising claims for the “registered” disinfectant product. The approval even may be limited to the “specific” type of application surfaces (nonporous or porous) or clothing versus hard surfaces. Even physical devices (such as filters claiming to remove microorganisms from water) are deemed to be “pesticide devices” (because they physically remove harmful microorganisms from water), albeit they are subject to less stringent regulation under certain provisions of FIFRA.

When the Exception May Not Prove the Rule: The Treated Article Exemption

Generally, the EPA exempts from registration products “treated with, or containing, a . . . [regulated disinfectant] to protect the article or substance itself (for example, paint treated with a pesticide [e.g., a mold inhibitor] to protect the paint coating [from the growth of mold], or wood products treated to protect the wood against insect or fungus infestation [that deteriorate the wood]), if the pesticide is registered for such use.” 40 CFR § 152.25(a). Thus, the EPA FIFRA registration and label, on its face, must authorize the “specific” use (i.e., in the examples above, the label must state that treatment of wood or paint, respectively, were approved in the registration).

More importantly, the EPA excludes from this exemption (i.e., requires registration with the EPA) any product treated with a chemical if the manufacturer or distributor makes a public health claim8 (e.g., the EPA rejected the use of the treated article exemption for a product that treats air conditioning systems to prevent the spread of Legionella).9 Any claim to treat germs, bacteria, viruses or other disease-causing microorganisms will be closely reviewed by the EPA.

Compliance Issues

It is clear that the sale and distribution of a disinfectant with claims that it will prevent the spread of any strain of harmful virus or any other “specific” microorganism is prohibited, unless that disinfectant is “specifically” registered with the EPA for the “specific” microorganism and use. For example, in the cases of Ebola and Enterovirus D68 discussed above, the EPA allowed manufacturers, suppliers and distributors to inform their customers of the EPA’s determination. However, the EPA, out of necessity, warned manufacturers, based on current EPA-approved labels of registered disinfectants (none of which mention Ebola), that the manufacturers/distributors could not claim on their product labels that these disinfectants are effective on Ebola or Enterovirus D68.10 However, marketing material could cite to the EPA’s list of registered disinfectants that the EPA determined will be effective in controlling Ebola and the EPA and the CDCP Ebola guidances.

Furthermore, “[g]enerally, it is unlawful to use any registered pesticide [including a registered disinfectant] in a manner inconsistent with its labeling under FIFRA sec. 12(a) (2) (G).”11 However, FIFRA section 2(ee)(2) does allow the use of an EPA-registered disinfectant "against any target pest [which includes Ebola and other disease-causing microorganisms] not specified on the labeling if the application is to the crop, animal, or site specified on the labeling," if the label does not restrict the use to only certain pests (e.g., “for use only against rodents”), or if the label limits the use to only specified microorganisms.12

Therefore, using a disinfectant to suppress the growth of Ebola, Enterovirus D68 or other specific microorganisms also may be illegal if not authorized by the label. For example, arguably, the use of a registered disinfectant on porous surfaces or on garments may be a violation where the disinfectant’s EPA-approved label only mentions the treatment of hard, nonporous surfaces. Similarly, the use of an approved disinfectant may not be authorized if the label precludes use to treat any other microorganisms except those specified on the label. Although the EPA does not regulate the personal, private use of unregistered disinfectants (or other pesticides), the use of a disinfectant not registered for a given use by a hospital or a medical or veterinary practice may not be viewed by the EPA as personal use.

For example, the EPA does not allow bulletins written and distributed by agricultural extension services, universities or industry groups for “antimicrobial products with public health claims (i.e., targeted against human pathogens, 40 CFR §168.22(b) (5)) or other products with such claims.”13 More generally, the EPA has advised a manufacturer of burlap, jute or Hessian natural fabric packaging for handling and shipping harvested plants to nursery operators that the use of fabric treated for “rot resistance” does not qualify for the treated article exemption unless the EPA-registered label for the chemical has specifically been approved to treat fabric packaging for handling and shipping harvested plants to be rot resistant.14

Considering the EPA’s history of narrowly interpreting FIFRA and its aggressive and typically successful enforcement of this law, a careful analysis should be performed prior to either making claims in marketing materials about using a disinfectant in a manner that strictly may not be identified on the registered label or relying upon the treated article exemption. The business risks include not just enforcement by the EPA against the manufacturer or distributor, but could, in the appropriate circumstances, include enforcement against a company or an individual end user who misuses the pesticide (including disinfectants). In addition, a health care worker who becomes ill may seek damages for injuries, arguing, in part, that the illness was caused by the misapplication of the disinfectants or, at least, that the health care facility failed to warn the worker of the risks.

The Cost of Noncompliance

The cost of noncompliance can be substantial. The EPA may (and often does) order the manufacturer, supplier and/or distributor of an unregistered disinfectant to stop sales immediately and may bar imports at the port of entry, thereby disrupting the existing supply chain until an EPA registration can be obtained (a process that generally can take a year or more). The maximum civil penalty is $7,500 for each offense per FIFRA section 14(a)(1), as amended, which the EPA interprets as each sale.15

An indirect and noteworthy cost of noncompliance is that a stop-sale order not only lowers profits, but may expose the manufacturer or distributor to damage lawsuits due to disruption of the health care supply chain and, more importantly, damage to long-term commercial relationships. At the health care provider level, it is more difficult to provide services without the products that are essential for the protection of workers, patients and members of the public while appropriate federal product reviews are conducted. The old adage of "buyer beware" is still valid.


There are business risks facing the health care industry, but each of those enumerated in this article can be addressed either by manufacturers/distributors, individual institutions, individual practitioners or their professional or industry trade associations on behalf of the members of the association.

First, the ever-growing and more complex EPA regulatory requirements should be tracked and communicated in a usable format to individual health care institutions, individual practitioners and, as appropriate, health care workers.

Second, rather than waiting for the next scare to hit the headlines, it may be prudent for those industry and professional organizations whose members are impacted to engage all of these agencies (but particularly the EPA) to modify their regulations and guidance to reflect the unique characteristics of infectious material and the nature of the industry.

Third, health care companies should consider requiring their suppliers to certify prior compliance with the appropriate legal requirements.

Fourth, since such self-certification may have its limits, some health care employers and purchasers of health care supplies may decide to perform an audit or a review to ensure that equipment and material suppliers’ products are cost-effective, the claims are accurate, and, at a minimum, the products comply with applicable EPA requirements. It is advisable that health care providers obtain an audit or have documentation demonstrating that the provider took steps to determine independently that the products acquired for use in its facilities and by health care employees are duly authorized for their intended uses and are efficacious, irrespective of whether the products are targeted for specific applications (e.g., disinfection against the Ebola virus) or more general health care infection exposure scenarios.


1 EPA, Guidance to Companies on Referring to Registered Disinfectant Products that Meet the CDC Criteria for Use Against the Ebola Virus (last updated Dec.‎ 18‎, ‎2014), available at [hereinafter Ebola EPA Guidance]. The Ebola EPA Guidance superseded EPA’s April 3, 2008 document, “Implementation of the Emerging Pathogens and Disinfection Hierarchy for Antimicrobial Products.” This EPA guidance also references the CDCP’s Interim Guidance for Environmental Infection Control in Hospitals for Ebola Virus, which is available at

2 Ebola EPA Guidance.

3 EPA, Disinfectants for Use Against the Ebola Virus (last updated Dec. 8, 2014), available at [hereinafter EPA List of Effective Disinfectants]. EPA will update this list.  This guidance also provides a mechanism for updating the list to add products, if a  product is already registered as a disinfectant and the appropriate information is provided. Id. The users of these disinfectants are cautioned that they must “follow the specific use instructions on the label for each disinfectant in order for the disinfectant to be effective. ” The product labels “will not specifically mention effectiveness against the Ebola virus.” Id.

4 EPA, Guidance to Companies on Referring to Registered Disinfectant, available at [hereinafter Enterovirus D68 Guidance]. EPA now has prepared lists of antimicrobial products registered by the EPA for health care use that are effective against the most common emerging pathogens. EPA, Selected EPA-registered Disinfectants (Oct. 2014), available at

5 It is anticipated that the revised guidance will include a characterization of the effectiveness of different treatment technologies and other approaches against Legionella, a technology and water quality issue evaluation, recommended operational conditions, and potential regulatory implications. A brief overview of EPA’s draft “Legionella Current Knowledge on Treatment Technologies” was presented during a monthly EPA web presentation entitled Understanding End Water Quality in Hospitals and Other Large Buildings (April 28, 2015), available at Currently, the EPA expects to publish the draft document for public review and comment by the health care industry and other stakeholders in 2015, but it is difficult to predict when the final document will be released.  Personal communication.  This guidance will likely assist, among others, affected facilities (e.g., hospitals, hotels, etc.) and mechanical system operators in their decision-making process regarding measures to control for Legionella in building finished water systems and the potential need to comply with federal and/or state regulations.

6 See Pepper Hamilton, Ebola: Legal Considerations for Health Care Employers (Oct. 20, 2014), available at A variety of other environmental requirements in addition to those discussed in this article may apply (e.g., EPA provided assurances for municipal wastewater treatment facility personnel regarding exposure potential to Ebola), but these other environmental issues are not the focus of this article.

7 Whether the product can be called a disinfectant, a sterilant or another common name is likely to depend on the testing performed and the final label language approved by the EPA. These details are beyond the scope of this article but are important to manufacturers seeking EPA registration of a product.

8 EPA, Pesticide Registration Notice 2001-1, Re: Treated Article Exemption (Mar. 6, 2000), available at

9 EPA, Use of Disinfectants and Sanitizers in Heating, Ventilation, Air Conditioning, and Refrigeration Systems (Mar. 14, 2002), available at

10 See Ebola EPA Guidance, supra note 1; EPA List of Effective Disinfectants, supra note 3; Enterovirus D68 Guidance, supra note 4.

11 EPA, Pesticide Labeling Questions & Answers - Exception to Use in a Manner Not Permitted (FIFRA Sec 2ee), available at (emphasis added).

12 Id.

13 Id.

14 Frank Sanders, Director, EPA Antimicrobials Division to D. Yale of Dayton Bag & Burlap (Oct. 14, 2005).

15 See EPA Pesticide Enforcement Cases Summary, available at

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Pepper Hamilton LLP | Attorney Advertising

Written by:

Pepper Hamilton LLP

Pepper Hamilton LLP on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.