Disclosure, apology and adverse-event reporting after harm

The hours and days after a patient is harmed decide more than the clinical recovery. They decide whether the patient and family learn what happened from the people who cared for them or from a records request two years later; whether the institution's account of the event is formed while memories are fresh or reconstructed for litigation; and whether a mandatory report reaches the regulator on time. Each of these is governed by a different rule, and the rules are frequently confused with one another.

This chapter separates four questions that arise together. What may a clinician say to a patient or family after harm, and how can those words be used later? What must a hospital or accredited outpatient setting report to the state, and when must it tell the patient? How does disclosure interact with the time limits for filing a claim? And what does a disciplined disclosure program look like in practice? The law supplies the floor in each case; good practice supplies most of the structure.

Two statutes govern what an apology means in evidence

California has two separate rules about statements made after an injury.

Evidence Code section 1160 is the general rule for any accident, in force since 2001. Statements, writings or benevolent gestures expressing sympathy or a general sense of benevolence about the pain, suffering or death of a person involved in an accident are inadmissible as evidence of an admission of liability in a civil action. The same section is explicit that a statement of fault, whether part of the expression of sympathy or added to it, is not made inadmissible by section 1160.

Health and Safety Code section 104340, added by AB 35 (Statutes of 2022, chapter 17) and effective January 1, 2023, is the health-care-specific rule, and it is considerably broader. It covers statements, writings or benevolent gestures expressing sympathy, regret or a general sense of benevolence, or suggesting, reflecting or accepting fault, relating to the pain, suffering or death of a person, or to an adverse patient safety event or unexpected health care outcome, in relation to an act or omission in providing or failing to provide health care. When such a communication is made to the patient or to the patient's family or representative before a lawsuit or demand for arbitration is filed, it is:

• confidential, privileged and protected, and not subject to subpoena, discovery or disclosure;
• not admissible or usable as evidence of an admission of liability, or for any other purpose, in any civil, administrative, regulatory, licensing or disciplinary proceeding, or in relation to any sanction or penalty; and
• entitled in addition to the protections of Evidence Code sections 1119 (mediation), 1152 (offers to compromise), 1157 (peer review) and 1160.

The statute defines an "adverse patient safety event or unexpected health care outcome" to include the events listed in the hospital and outpatient adverse-event reporting statutes, and any act or omission by a health care provider resulting in, alleged to have resulted in, or with the potential to result in injury or death that is not the result of knowingly or purposefully harmful action. "Family" is defined broadly, including domestic partners, stepparents, guardians, grandchildren, siblings and in-laws.

What the protection does and does not do

Section 104340 protects the communication. It does not make the underlying facts disappear. The medication that was given, the result that was not acted on, the timing of a response and the documentation in the chart remain provable from the record and from witnesses. A clinician who says "I am sorry; I should have called you about that result" has not created admissible evidence of fault by saying so before a claim is filed — but the unread result, the date it arrived and the absence of a call remain in evidence regardless.

Three practical limits follow. First, the protection depends on timing: the statute speaks of communications made before the filing of a lawsuit or demand for arbitration. After filing, ordinary evidentiary rules and the advice of defense counsel govern. Second, the protection belongs to statements made to the patient, family or representative; it is not a general privilege for internal emails, conversations with colleagues or social-media posts. Third, the statute does not authorize misleading statements in either direction — neither an apology that misstates facts to soothe, nor a careful "sympathy only" script designed to conceal what the clinician knows.

Disclosure is also a professional and ethical expectation

Separate from evidence rules, disclosure of harm to patients is a professional expectation. Ethical guidance from physician organizations and accreditation expectations for hospitals call for informing patients about unanticipated outcomes of care. The federal Agency for Healthcare Research and Quality's CANDOR (Communication and Optimal Resolution) program translates that expectation into a structured process for hospitals and practices: early identification of harm events, prompt and empathetic communication with the patient and family, an event investigation that feeds back into the conversation, and, where care was unreasonable, a proactive approach to resolution, including compensation where appropriate.

What these programs share is a sequence rather than a script:

1. Attend to the patient first. Clinical stabilization and the patient's immediate needs come before any analysis of cause.
2. Tell the patient and family what is known. What happened, what it means clinically, what is being done, and what is still unknown. Speculation about cause or about other clinicians' conduct is avoided until an investigation supports it.
3. Express sympathy, and regret where it is warranted. Section 104340 now protects pre-claim statements of regret and fault, removing the main legal reason many clinicians were once advised to say less.
4. Commit to follow-up. Name who will be the point of contact, when the family will hear back, and how the results of the review will be shared.
5. Investigate and return. The event review — often protected as peer review or patient-safety work product — should inform a second conversation that explains what was learned and what is changing.
6. Resolve fairly. Where the review concludes that care was unreasonable and caused harm, programs modeled on CANDOR consider an early offer, usually through the insurer.

Mandatory adverse-event reporting

California requires certain facilities to report defined adverse events to the state, and to tell the patient.

Hospitals. Under Health and Safety Code section 1279.1, a general acute care hospital, acute psychiatric hospital or special hospital (facilities licensed under subdivisions (a), (b) or (f) of section 1250) must report an adverse event to the California Department of Public Health no later than five days after it is detected, or no later than 24 hours after detection if the event is an ongoing urgent or emergent threat to the welfare, health or safety of patients, personnel or visitors. The reportable events fall into groups — surgical events (such as surgery on the wrong body part or patient, or a retained foreign object), product or device events, patient protection events, care management events, environmental events and criminal events — together with any adverse event or series of events that causes the death or serious disability of a patient, personnel or visitor. The facility must inform the patient or the party responsible for the patient of the adverse event by the time the report is made. Under section 1280.4, the Department may assess a civil penalty of up to $100 for each day an adverse event goes unreported after the five-day or 24-hour period.

Accredited outpatient settings. Business and Professions Code section 2216.3 imposes a parallel reporting duty on outpatient settings accredited under Health and Safety Code section 1248.1 (for example, many ambulatory surgery settings): adverse events are reported to the Medical Board within five days, or within 24 hours for an ongoing urgent or emergent threat.

Reports are not findings. A report under these statutes records that a defined event occurred. It is not a determination that anyone was negligent, and many reportable events occur despite reasonable care. Conversely, many negligent injuries are not reportable events. Neither side in a later dispute should treat the existence or absence of a report as proof of the standard of care.

The later rows are explained in Medical Board investigations and reporting; they are included here because families and clinicians often assume that a disclosure conversation, a CDPH report and a licensing report are the same event. They are not.

Disclosure and the time limits for a claim

Disclosure has a legal consequence that clinicians rarely consider and attorneys always do: it can start the clock. Under Code of Civil Procedure section 340.5, an action must be filed within three years after the date of injury or one year after the plaintiff discovers, or through reasonable diligence should have discovered, the injury, whichever occurs first. A candid conversation that tells the patient an error caused harm may be the moment of discovery for the one-year period. That is not an argument against disclosure — it is a reason for patients and families to understand that a sympathetic conversation does not pause any deadline, and for institutions not to suggest otherwise.

The opposite conduct carries a sharper legal consequence. Section 340.5 states that the three-year outer limit cannot be exceeded unless tolled upon proof of fraud, intentional concealment, or the presence of a foreign body with no therapeutic or diagnostic purpose. Concealment of a known error is therefore not only an ethical failure; it is one of the few ways the outer limit can be extended. A deliberate decision not to tell a patient what the clinician knows can convert a claim that would have expired into a live one, and it can turn an ordinary negligence case into one that a jury reads very differently.

For patients and families, the practical rule is simple: an apology, an offer to review the care, an insurer's investigation, or a request for records does not stop any limitation period. The deadlines in deadlines and notice should be assessed promptly with a California attorney.

Insurance and representation

Most professional liability policies require prompt notice of an incident that may give rise to a claim, and many restrict a physician from admitting liability, making payments or settling without the insurer's consent. Section 104340 changes the evidentiary effect of an apology; it does not change the policy contract. Before a disclosure conversation that goes beyond sympathy and established facts — and certainly before any discussion of compensation — the physician should notify the carrier or the institution's risk management office, which may have its own disclosure program and trained facilitators. The insurance and training chapter discusses consent-to-settle and reporting provisions.

Documenting the conversation

The disclosure conversation should itself be documented in the medical record in factual terms: the date and time, who was present (including any interpreter), what clinical information was shared, the questions asked, and the follow-up plan. The record should not characterize fault, speculate about cause, or refer to incident reports, peer-review referrals or insurer notice — those belong in their own protected channels, and mentioning them in the chart can compromise the protections described in peer review and mortality review.

Fictional example: a delayed result and an early conversation

Fictional teaching example. A clinic receives an abnormal imaging report that is routed to a covering clinician's inbox during a vacation and not acted on for six weeks. When the treating physician returns and finds it, she calls the patient that day, explains what the report showed, apologizes that the follow-up did not happen when it should have, arranges the next study urgently, and tells the patient that the clinic will review why the result was missed and will share what it learns. She documents the call factually and notifies the clinic's risk manager and her carrier.

Under section 104340, her apology and her acknowledgment that the follow-up should have happened are privileged and inadmissible as admissions if a claim is later filed. The six-week gap in the record is not. The patient's one-year discovery period may run from that call. The clinic's review of its inbox-coverage process is likely protected if conducted through its peer-review or quality structure, and its findings can still be explained to the patient in general terms. If the delay changed the patient's outcome, the clinic's carrier may consider early resolution. If it did not, the conversation has still done what the law and ethics expect.

Questions each side should ask

Physicians and institutions. Is there a defined process for identifying harm events quickly and notifying risk management and the carrier? Who is trained to lead disclosure conversations? Are hospital adverse events reported within five days or 24 hours, and is the patient told by the time of the report? Are disclosure conversations documented factually without reference to protected processes?

Plaintiff's counsel. When did the patient first learn of the injury and its possible cause, and does that date start the one-year period? Was there concealment that bears on the three-year limit? Were pre-claim statements made that are now privileged under section 104340, so that the case must be proved from the record instead?

Defense counsel. Were the statements the plaintiff relies on made before filing and to the patient or family, so that section 104340 applies? Is the plaintiff offering an adverse-event report as if it were a finding of negligence? Did the institution's disclosure process create a discovery date that bears on timeliness?

Sources

• Health and Safety Code § 104340 (added by AB 35, Stats. 2022, ch. 17, effective January 1, 2023): official text; AB 35 bill text.
• Evidence Code § 1160: official text.
• Health and Safety Code § 1279.1 (hospital adverse-event reporting and patient notification): official text; § 1280.4 (penalties): official text.
• Business and Professions Code § 2216.3 (accredited outpatient settings): official text; § 801.01: official text.
• Code of Civil Procedure § 340.5 (limitation periods and tolling for fraud, intentional concealment and foreign bodies): official text.
• Agency for Healthcare Research and Quality, Communication and Optimal Resolution (CANDOR).

General legal and clinical education; not individual legal or medical advice.