...who the outfitter was, and don't care, but I think they have a responsibility to insure that safety gear (PFD, helmet) is properly fitted.

   Liability waivers be damned, that's just negligence, and if I was a member of that woman's family, I'd consider both criminal and civil charges.