How Hospital Regulations Are Drafted, Reviewed and Approved

People say “hospital regulations” to mean two different things. Sometimes they mean national rules that bind hospitals, issued by a ministry. Sometimes they mean a hospital’s own internal rules, such as policies, regulations and SOPs. The drafting discipline is similar, but the approving authority is not. This guide explains the general good-practice lifecycle, and it separates what we could verify about Cambodia from advice that applies anywhere.

Two kinds of rule

	National rules	Internal hospital rules
Who issues them	A ministry or other state authority	The hospital’s own leadership
Who must follow them	All facilities in scope	Staff of that hospital
Example	A ministerial regulation (prakas)	A department regulation or SOP
Approval route	Set by the issuing authority	Set by the hospital’s document-control policy

What we verified for Cambodia is limited. The 1996 Law on the Management of Pharmaceuticals leaves details such as pharmacy procedures and advertising rules to Ministry of Health prakas, and a 2016 research assessment describes ministerial prakas defining professional competencies. Our guide to the hierarchy of Cambodian legal documents explains how prakas sit below laws and sub-decrees. We did not find, in any official source we could open, a published Cambodian procedure for how a hospital must approve its internal regulations. Follow your own hospital’s approved process and any Ministry instructions that apply.

Stage 1: Define the need and the owner

Good rules begin with a clear problem: an incident, an audit gap, a new service, or a change in higher-level law. Name one accountable owner and a small drafting group that includes people who will use the rule. Decide the document type early. A policy states principles, a regulation sets binding rules, and an SOP gives step-by-step instructions (see our guide to writing an SOP).

Stage 2: Draft from evidence

ISQua’s principles for developing health-care standards say they should rest on current research, evidence and experience, and take account of international guidelines, WHO recommendations and legal requirements. For a hospital, that means checking:

Higher-ranking laws and ministry instructions, so the draft never contradicts them.
Recognised clinical and WHO guidance.
Your own incident, audit and workflow data.
Any adapted text from a partner institution, which must be reworked to fit local law, staffing and resources.

Write in short, plain sentences; the OECD’s regulatory-policy recommendation asks for plain language and explanations people can understand. Each requirement should be specific enough to check: who does what, when, and how it is recorded.

Stage 3: Consult and test

ISQua advises obtaining views from government, professional, provider and service-user interests through workshops, surveys or comment periods, and testing draft standards to confirm they are relevant, understandable, measurable and achievable. Inside a hospital, this means circulating the draft to clinicians, nursing, pharmacy, infection control, quality, legal, IT and administration, then trying it in a pilot ward. Record every comment and what you did about it. At national level, the OECD recommends meaningful opportunities for the public to contribute, and Cambodia’s Master Plan for Quality Improvement in Health states an intention to consult the wider health system, including the private sector, when designing accreditation.

Stage 4: Check impact

The OECD recommends examining early whether a rule is necessary, comparing alternatives and weighing costs and benefits. A hospital version is a short impact check: Does this need new staff, equipment or training? Does it conflict with another rule? What happens if people cannot comply? Rules that nobody can follow create risk rather than reduce it.

Stage 5: Approve

ISQua says standards should receive formal approval from the governing body before implementation. The hospital equivalent is a named approver, usually a director or committee, whose decision is recorded in minutes or on the document. Typical approval steps are:

Owner confirms the draft is complete.
Reviewers sign off on technical accuracy.
Legal or compliance staff confirm consistency with higher rules.
The authorised approver signs and dates it.

This sequence is good practice, not a verified Cambodian requirement.

Stage 6: Control versions and distribute

WHO’s Laboratory Quality Stepwise Implementation tool offers a practical model for document control that transfers well to hospitals. It recommends a document control log recording the document code and title, author, reviewer and authoriser, current and previous versions, release and review dates, and who received copies. Revised documents are authorised in the same way as originals, outdated copies are replaced at every location, and superseded versions are clearly marked and archived.

Code	Title	Version	Approved	Next review	Owner
REG-001	Example department regulation	2.0	Date of approval	Date	Quality office

Distribution is not finished until staff are trained and can find the current version.

Stage 7: Review on a schedule

The WHO tool suggests reviewing documents yearly at first, lengthening to two-year cycles as the quality system matures. The OECD likewise recommends periodic evaluation of existing rules to confirm they remain relevant and justified. Review sooner after an incident, a change in law or a new service. Retire rules that are obsolete instead of letting them accumulate.

Common mistakes

Copying another institution’s text without adapting it.
Skipping consultation, so users discover problems after launch.
No version number, approval date or review date.
Approving rules without training or monitoring.

Frequently asked questions

Who approves a hospital’s internal regulation in Cambodia? We could not verify a national rule. Follow your hospital’s document-control policy and any Ministry of Health instructions.

How often should regulations be reviewed? The WHO tool suggests yearly at first, then possibly every two years. Your own policy and accreditation requirements decide.

Key takeaways

Distinguish national rules from internal rules; each has its own approving authority.
Draft from evidence, consult users, test, check impact and approve formally.
Version control means every document has a code, version, approval date and review date.
Review on a schedule and after triggers such as incidents or legal change.
For Cambodia, check current Ministry of Health guidance and your hospital’s own policy.

Sources

Eksastra is an independent project and is not a government body. This guide is general information, not legal or medical advice. Always follow the rules and instructions of the Ministry of Health and your own institution. See our Disclaimer.