A medical syringe pump has a first processor (21) responsible for controlling infusion and a second processor (22) that functions as a watchdog to monitor operation of the first processor. A data communication connector (27) is located in the pump battery compartment (25) so that the batteries (24) have to be removed before external access can be made using an external connector (4). Removing the batteries (24) disables the infusion function of the first processor and ensures that the pump is prevented from infusing medication. When the external connector (4) is connected the first processor (21) can reprogram the second processor (22) or information about historical operation of the pump can be downloaded.
