Compliance is supposed to protect healthcare.
At its core, the purpose of compliance is patient and staff safety. Every regulation tied to the Physical Environment, fire protection systems, medical gas, emergency power, infection control, exists because failures in these areas can, and has, directly harmed patients. In a hospital, the building is part of the care delivery system. Healthcare
Healthcare care facilities professionals know that, even if the public doesn’t, that the building is part of the patient care system. Life Safety matters. Infection prevention matters. Environment of Care matters. And yes, documentation matters.
No one on the Healthcare Facilities Network conversation with Diana Kander, Mike Hatton, Dennis Ford, and Patrick Murphy suggested otherwise. In fact, it is their knowledge that the building is an integral part of patient care that raised the Zombie Compliance concern.
Somewhere inside healthcare facilities, a strange thing can happen. The system built to reduce risk can begin creating a different kind of risk. Not because compliance is wrong. Because compliance can become the work. This is where the Compliance Zombie begins. That is where the zombie starts.
When Compliance Becomes the Goal
A “zombie,” as Diana Kander framed it in the HFN discussion, is anything that consumes more time, energy, and resources than the value it creates. In healthcare facilities, few zombies are more powerful than the compliance zombie. It doesn’t look dangerous at first. It looks responsible. Organized. Disciplined. It looks like binders, dashboards, inspection logs, and recurring meetings. It looks like a team doing the right thing. And often, they are.
But the question isn’t whether compliance matters. Because of course it does. The question is whether the activity still creates value, or it is simply an exercise of checking a box on a list.
The Moment the Shift Happens
During the conversation, Mike Hatton put words to something many in the field feel but don’t always say out loud: Healthcare can become too focused on the checklist. And once that happens, something subtle shifts. Success can then be measured by “did we complete it?” as opposed to “is this activity we are doing actually reducing patient risk?”
Depending upon the answer to this question, this can become the moment compliance starts drifting toward a zombie. It becomes an activity that consumes more time, energy, and resources than the value it creates.
In the zombie environment, less time is spent solving problems and more time is spent proving that problems were addressed. Checking a box on a checklist. The organization becomes very good at showing compliance. But not always as strong at ensuring the underlying system is working.
Dennis Ford highlighted this gap through real-world examples, particularly in operating room environments where facilities teams balance clinical needs, engineering constraints, and regulatory expectations. When those don’t align, teams often manage around the issue instead of resolving it.
How Zombies Multiply
When something doesn’t work, the system doesn’t always remove it. It adds to it, typically via another process, workaround, or layer. As Mike Hatton noted, attempts to fix issues can sometimes create more complexity rather than less.
Compliance is necessary. But readiness is different. It’s not about preparing for survey. It’s about understanding your environment every day. Organizations that avoid compliance zombies reconnect compliance to purpose. They ask: What risk does this reduce? and Are we solving the problem or documenting it?
The compliance zombie doesn’t appear because people ignore regulation. It appears when regulation becomes routine. When the checklist replaces the question. in the end, compliance should support the mission, not consume it.
Checked boxes are not the compliance goal. Patient safety is.
If you would like to watch the full Zombie discussion on the Healthcare Facilities Network, please watch here:
Zombie Series Articles:
Part I: Zombies Running Healthcare Facilities
Part II: The Compliance Zombie: Checking the box versus the Mission
Part III: PDC Watermelon projects, and Why they Keep Recurring in Healthcare
Part IV: The Quietest Zombie: Your Calendar
Part V: A Deferred Zombie: “We will fix it later”