Vaccine Refrigerator Locks and Access Control: A Canadian Clinic Checklist

Summary: A keyed refrigerator can help control vaccine access, but it is only one part of a secure cold-chain process. This checklist helps Canadian pharmacies and clinics assign authorized users, protect temperature settings, manage keys, route alarms and preserve emergency access.

The Public Health Agency of Canada’s National Vaccine Storage and Handling Guidelines for Immunization Providers, 2026 say vaccine storage units should be in a secure location away from unauthorized and public access. The same guidance limits vaccine-supply access to authorized personnel and says only designated vaccine coordinators or delegates should adjust a storage unit’s temperature.

Those requirements are operational, not merely mechanical. A cabinet key cannot decide who is trained, prevent an authorized person from changing the wrong setting, call an after-hours responder or ensure that emergency staff can enter a locked room. A practical access-control plan therefore needs several layers.

Use four separate access-control layers

1. Room access: Keep the storage area away from public traffic and restrict entry according to the clinic or pharmacy’s policy.
2. Cabinet access: Use the refrigerator’s keyed lock when it supports the site’s workflow, then control and document the keys.
3. Controller access: Limit setpoint and alarm-limit changes to the vaccine coordinator and trained delegate.
4. Alarm access: Decide who receives, acknowledges and escalates door, temperature and power alarms—including outside normal hours.

A locked room and a locked refrigerator solve different problems. A room door can restrict general entry, while a cabinet lock can provide an additional boundary within a shared medication room. Neither control substitutes for staff training, temperature monitoring, inventory procedures or an outage plan.

Define who is authorized before issuing keys

Start with roles rather than names. The primary vaccine coordinator and delegate normally need access to the cabinet, temperature controls, monitoring records and emergency procedures. Other trained immunizers may need access to inventory during defined clinic hours without authority to change settings. Maintenance, janitorial, reception and security staff may not need routine cabinet access, but they should know how to report an alarm, power interruption, open door or damaged cord promptly.

Record at least the following in the site procedure:

• who may remove or return vaccine;
• who may change the setpoint or alarm limits;
• who holds the working and spare keys;
• who can authorize temporary access;
• who responds after hours and how that person enters the building;
• how access is removed when duties or employment change; and
• where emergency instructions are kept without exposing security details to the public.

PHAC’s 2026 urgent-protocol guidance specifically calls for written instructions for entering the facility and vaccine-storage spaces when the building is closed, including the locations of keys, locks, alarms and circuit breakers. Security and emergency access must therefore be designed together.

Compare documented refrigerator controls—not just the presence of a lock

The following currently available Pharmacold models illustrate how a keyed lock fits into a broader control system. Both are listed for +2°C to +8°C operation and have glass doors, protected settings, a keyed door lock, self-closing door, audible and visual alarms, door-ajar alarm, power-failure alarm, high/low-temperature alarms, sensor-failure alarm, low-battery alarm and remote alarm contacts.

Documentation check: the linked NAB-60 specification sheet states 120 V/60 Hz while the current listing states 115 V/60 Hz. The NAB-140 sheet lists 136 L and 1.2 A, while the current listing states 140 L and 1.5 A. Confirm the exact ordered configuration, current specification sheet and data plate before approving a circuit, cabinetry or inventory plan. Cabinet litres are not verified usable vaccine capacity; shelf layout, original packaging and required airflow determine practical loading.

The NAB-60 can suit a site that needs a smaller countertop footprint and a reversible door. The NAB-140 provides more listed cabinet volume in an undercounter format and uses front intake and discharge vents according to the current listing. In either case, the keyed lock serves the workflow only if keys are controlled, the door can close freely and alarm response has been assigned.

Treat a remote alarm contact as an interface

A remote dry contact does not send a text message or place a telephone call by itself. It is an electrical interface that must be connected to a compatible building alarm, monitoring device or notification service. Confirm who supplies that integration, whether the connection is normally open or normally closed, which alarm conditions are transmitted, and how the complete path will be tested.

PHAC recommends considering continuous alarm or notification systems, especially where vaccine inventories are large or expensive. It prefers systems that can alert designated people and recommends occasional testing of external monitoring services. The site procedure should identify the first responder, backup responder, acknowledgement deadline and escalation path.

Do not confuse three different battery functions

Cold-storage documentation often uses the word “backup” for very different capabilities:

• Alarm or controller battery: keeps selected electronics or alarms operating for a documented period.
• Monitoring-device battery: keeps an independent data logger recording.
• Refrigeration backup: supplies enough power or emergency cooling to maintain the required storage temperature.

The current NAB-60 and NAB-140 documents list backup batteries for alarm/controller functions; they do not establish that the standard batteries run the compressor. A generator or correctly engineered UPS is a separate system. If a UPS is considered, PHAC says it should automatically detect power loss, start automatically and support the attached cold-chain equipment for the expected outage duration. See the related backup power, UPS and ice-lined refrigerator guide for the broader outage decision.

Build key control into routine operations

A simple key-control record can identify the key number, assigned role, issue date, return date and location of the sealed spare. Avoid attaching a label that identifies the refrigerator, room or facility address if the key is lost. Test each working and spare key without leaving the cabinet open longer than the site’s procedure allows.

Include these checks in the regular review:

• the lock operates without forcing or misaligning the door;
• the self-closing action fully engages the gasket;
• the door-ajar alarm activates through the manufacturer-approved test;
• authorized users can locate the emergency key;
• former staff no longer possess keys or access codes;
• setpoint and alarm limits match the approved procedure;
• remote notifications reach the assigned people; and
• after-hours responders can enter the building without delaying the response.

A seven-point access-control checklist

1. Place the refrigerator in a secure, non-public area.
2. Name the primary coordinator and trained delegate.
3. Document who may access inventory and who may change settings.
4. Control working keys, spare keys, codes and temporary access.
5. Test the door, lock, local alarms and connected remote alarm path.
6. Document emergency entry, alternate storage and after-hours contacts.
7. Review access whenever staffing, equipment or the site layout changes.

A keyed refrigerator is useful, but the strongest control is a complete process: secure location, named responsibilities, protected settings, tested alarms and workable emergency access. Browse the current medical and vaccine refrigerator collection, then confirm the ordered model’s current documentation and local public-health requirements before purchase or implementation.

Product status and specifications were checked November 2, 2026. PHAC’s national guidance complements—not replaces—provincial, territorial, local and organizational requirements.