What does “Corrective and preventive action” mean?
Short answer
CAPA (corrective and preventive action) fixes the cause of a problem, then checks that the fix worked. Healthcare rules often say corrective action.
Also known as: CAPA, corrective action, corrective action plan
What CAPA covers
Corrective action removes the cause of a problem that has happened. Preventive action removes the cause of one that has not happened yet, such as one found in a near miss or an audit.
Each needs an owner, a due date, proof it was done and a check that it worked.
In IncidentKit, each action has an owner, due date, evidence and an effectiveness check. Nothing closes until it is verified.
Where it is in the rules
- CMS, nursing homes: fixes that change systems and are tracked for results (42 CFR 483.75(d)(2) and (f)(5)).
- CMS, surgery centers: judge every improvement for effect (42 CFR 416.43(e)(2)).
- Joint Commission: strong actions that remove or control hazards and last, with a timeline and measures.
- OSHA process safety management: resolve incident findings fast and record the fixes (29 CFR 1910.119(m)(5)).
- FDA: device makers follow the Quality Management System Regulation (effective February 2, 2026). It adds ISO 13485 to 21 CFR Part 820.
Mix-up: CAPA is internal. A plan of correction answers a survey finding. Training and new policies are the weakest tier in VA's ranking of actions. Use them with, not instead of, changes to equipment or process.
Frequently asked questions
What is the difference between corrective and preventive action?
Corrective action fixes a problem that already happened, like repeat wrong-dose events. Preventive action fixes one that could happen, like a hazard found on a walk-through.
Is CAPA the same as a plan of correction?
No. A plan of correction is the facility's written answer to survey findings. CAPA is internal. A CAPA record can supply the proof a plan of correction describes.
When can a corrective action be closed?
When it is done and a check against a measure set in advance shows it worked. Finishing a task shows work was done, not that the problem stopped.
Sources
- 42 CFR 483.75: Nursing home QAPI
- 42 CFR 416.43: ASC QAPI condition for coverage
- Joint Commission: Sentinel Event Policy (SE chapter), Comprehensive Accreditation Manual, Update 1, July 2026
- OSHA 29 CFR 1910.119: Process safety management of highly hazardous chemicals
- FDA: Quality Management System Regulation (QMSR)
- 21 CFR 820.10: Requirements for a quality management system
- VHA National Center for Patient Safety: Root cause analysis (page and Guide to Performing a Root Cause Analysis, rev. 02/05/2021)
Reviewed against the sources above on Oct 5, 2026. Rules change: confirm current requirements with the issuing body or your counsel before relying on any summary.
Put the definition to work.
IncidentKit turns these terms into workflow: reports, investigations, corrective actions and packets.