Laboratory Impartiality: 5 Essential ISO 17025 Clause 4.1 Rules

Laboratory impartiality is the first substantive requirement in ISO/IEC 17025:2017 — clause 4.1, before confidentiality, structure or a single technical clause — and it is the one accreditation assessors have found most often documented as a sentence rather than managed as a risk.

The clause has five parts: laboratory activities are undertaken impartially and structured and managed to safeguard impartiality; management is committed to impartiality; the laboratory is responsible for the impartiality of its activities and does not allow commercial, financial or other pressures to compromise it; the laboratory identifies risks to its impartiality on an ongoing basis, including those arising from its activities, its relationships and the relationships of its personnel; and where a risk is identified, the laboratory demonstrates how it eliminates or minimises it.

The fourth and fifth parts are the work, and the note to 4.1.4 names where the risks come from — ownership, governance, management, personnel, shared resources, finances, contracts, marketing and commission payments. This guide sets out the five requirements, the eight risk sources, how to run an impartiality risk assessment that survives assessment, how the result feeds management review, and the five failures assessors record.

The five requirements of clause 4.1

“Ongoing” in 4.1.4 is the word assessors test. A risk assessment done at accreditation and never revisited fails the clause on its face; a new customer who is also a shareholder, a new service line that tests products the parent company makes, or a technician who joins from a major customer are all triggers. Our guide to ISO 17025 covers where the clause sits in the standard.

The eight sources of risk to laboratory impartiality

Running the laboratory impartiality risk assessment

1. Map the relationships. Owners, parent and sister companies, major customers, suppliers of tested products, consultancy or advisory work, and the personal relationships of authorised personnel.
2. Identify risks by source, using the eight sources as the checklist, for each relationship and activity — including the ones that seem obviously fine, because “no risk” is a conclusion that has to be recorded.
3. Rate and treat. Likelihood and impact on the credibility of results; a control for each risk above the accepted level, and a named owner.
4. Record the demonstration. 4.1.5 asks the laboratory to demonstrate how each risk is eliminated or minimised; the register carries the control and the evidence it operates.
5. Review on a cycle and on trigger. Annually at minimum, and on any change of ownership, structure, customer base, service or key personnel. Record the review even when nothing changed.

Where the result goes

Laboratory impartiality does not end with the register. Clause 8.9.2 requires management review inputs to include the outcome of the identification of risks to impartiality — one of the three inputs an Option B laboratory has to add on top of ISO 9001’s list. The impartiality register, its review and any new controls are therefore a standing management review item, and the review minutes are the evidence that 4.1.2’s management commitment is real. Impartiality risks also feed the general risks-and-opportunities process under 8.5 and, where a control is a contractual term, the contract review under 7.1. Our guide to ISO 17025 vs ISO 9001 covers the Option B additions.

Five laboratory impartiality failures assessors record

• A policy and nothing else. “We are impartial” on a signed page, with no risk identification behind it — a direct failure of 4.1.4.
• A one-off assessment. Dated at initial accreditation, unreviewed since; the “ongoing” requirement is not met.
• Personnel relationships ignored. The register covers ownership and contracts and says nothing about the people who authorise results.
• Controls asserted, not demonstrated. “Mitigated by procedure” with no evidence the procedure operated — 4.1.5 asks for a demonstration.
• Missing from management review. No impartiality item in the minutes, contradicting 8.9.2 and 4.1.2 at once.

Building the controls

• Structure first. Laboratory impartiality starts with reporting lines: Result authorisation reports to a technical manager, not to whoever owns the revenue.
• Declarations. Personal-interest declarations for authorised personnel at hire and annually; confidentiality undertakings alongside them under 4.2.
• Money. No fee, bonus or commission that varies with the result; customer concentration watched.
• Contracts. A contract review checklist that rejects outcome-dependent terms and customer choice of analyst.
• A route to speak. A stated channel for any employee to report pressure, and a record that it exists and is used.

Frequently asked questions

What does ISO 17025 require for laboratory impartiality?
Clause 4.1 of ISO/IEC 17025:2017: activities undertaken impartially and structured to safeguard it; management commitment; no commercial, financial or other pressure compromising impartiality; risks to impartiality identified on an ongoing basis from activities, relationships and personnel relationships; and a demonstration of how each identified risk is eliminated or minimised.

Where do impartiality risks come from?
The note to 4.1.4 lists ownership, governance, management, personnel, shared resources, finances, contracts, marketing and payment of sales commission — the checklist an assessment should follow.

How often must the risk assessment be reviewed?
The clause says ongoing; in practice at least annually and on any change of ownership, structure, customers, services or key personnel, with the review recorded even when nothing changed.

Is an impartiality policy enough?
No. The policy evidences 4.1.1 and 4.1.2; 4.1.4 and 4.1.5 require identified risks and demonstrated controls, which is what assessors examine.

Does impartiality go to management review?
Yes. Clause 8.9.2 lists the outcome of the identification of risks to impartiality as a required input — one of the three inputs an Option B laboratory must add to its ISO 9001 management review.

Where this leaves you

Treat laboratory impartiality as a managed risk with a register: map the relationships, identify risks against the eight sources, control and demonstrate each, review on a cycle and on trigger, and take the outcome to management review. Clause 4.1 is five sentences long; the assessment of it is a request for the register, the controls and the minutes.

References

• ISO/IEC 17025:2017 — General requirements for the competence of testing and calibration laboratories — Clause 4.1 impartiality and the note listing sources of risk; clause 8.9.2 management review inputs.

More on ISO 17025

• Laboratory impartiality — you are here
• ISO 17025: accreditation, scope and findings
• ISO 17025 vs ISO 9001
• Method validation under clause 7.2
• ISO 17025 accreditation cost
• Decision rules and statements of conformity

The Impartiality Policy, the Impartiality Risk Assessment Procedure, the Impartiality Risk Register, the Confidentiality Policy and Undertaking and the Review of Requests, Tenders and Contracts Procedure are in the ISO 17025 Toolkit, or start with the free templates.