All 27 chapters in this guide
Published
- Physicians
- Attorneys
- Institutions
Reviewed by Kanwar Partap Singh Gill, MD · sources checked
A medical record has several purposes: supporting treatment, communicating among clinicians, documenting decisions, and preserving a reliable account of care. Litigation adds another task: reconstructing what information was available to whom at a particular time. A printable chart may answer some of that question while omitting the route by which a result, order, or statement reached the final record.
Separate the clinical timeline from the documentation timeline
For a disputed encounter, construct parallel sequences: the patient's condition and events; the information available to each clinician; the decisions, orders, and communications; and the creation, editing, signing, or later amendment of the record. A note signed the next morning does not establish that its author first learned the information then. An order timestamp does not necessarily show medication administration. A portal release does not necessarily establish that the patient read or understood the message. These are questions to resolve from system definitions, testimony, and corroborating records.
California Civil Code §56.101(b) requires an EHR or EMR system to protect electronic information integrity and automatically preserve changes or deletions with identifying and timing information. That makes change history a serious evidentiary subject. The statute does not, by itself, decide whether every requested technical log must be produced to a particular requester. Patient access, civil discovery, privilege, relevance, proportionality, and protective-order questions require separate treatment. [R1]
A focused records map
| Evidence category | What it can help establish | What it cannot establish alone |
|---|---|---|
| Progress notes, consultations and discharge summaries | Recorded assessment, reasoning and plan | That every sentence was contemporaneous or independently verified |
| Orders, medication administration and pharmacy records | Prescribing, dispensing, administration and cancellations | That ordering, dispensing and administration occurred at the same time |
| Laboratory and imaging records | Acquisition, preliminary/final results, amendments and critical calls | That the responsible clinician received or acted on the result |
| Inbox routing and message status | Destination, reassignment, opening or acknowledgment events | Clinical comprehension or adequate follow-up |
| Audit trails and note version histories | Who changed what and when, within the log's actual capabilities | Motive, falsification or negligence without context |
| Scheduling, referral and authorization records | Requested and completed steps, barriers and cancellations | That an appointment request resulted in specialty care |
| AI inputs, outputs and version identifiers, if retained | The suggestion displayed and available opportunity for review | That a later model run recreates the earlier output |
| Downtime tickets, interfaces and configuration records | Technical failures and institutional knowledge | That a particular defect caused this patient's injury |
The matrix is an evidence-organizing method. Production depends on the records' existence, custody, lawful access, and case-specific discovery rulings. Do not assume that an ordinary patient portal contains the complete litigation record or that every application retains raw audio, prompts, model weights, or all intermediate drafts.
Patient access and technical discovery are distinct routes
Health and Safety Code §123110 generally provides eligible patients and representatives inspection within five working days and copies within 15 days, subject to the statute's conditions and exceptions. HIPAA access covers protected health information in designated record sets, including more than the progress note. HHS explains that certain quality, peer-review, and business records may fall outside the designated record set even though the underlying patient information remains accessible. Neither rule should be converted into a blanket entitlement to every internal security or engineering file. [R2–R3]
Counsel evaluating a disputed EHR should first define the factual question. A request for an audit history tied to a disputed amendment, a critical result, or an alleged missed alert is easier to evaluate than a demand for every log in the enterprise. Preserve the native data when appropriate, the data dictionary, export settings, time zone, system version, and any explanation of automated events. Compare a human action with the corresponding system event; an automated batch process may otherwise look like a clinician's manual entry.
Corrections should preserve the record
An accurate correction identifies its author, date, reason, and relation to the original entry. It does not silently replace history. A physician who discovers an error should correct care and documentation through the authorized process, including communicating material changes to people who may rely on the original information. Litigation does not justify leaving a clinically dangerous error unaddressed; it changes the need to coordinate preservation and transparent correction.
California patients also have an addendum route under Health and Safety Code §123111. The Medical Board describes a signed, dated statement of up to 250 words per allegedly incomplete or incorrect item, attached to the record and included with disclosure of that disputed portion. This is different from compelling a physician to adopt the patient's clinical conclusion. [R4]
Retention is a floor, not a destruction instruction
Since January 1, 2024, Business and Professions Code §2266 requires adequate and accurate physician records for at least seven years after the last service. Other rules can require longer retention; the Medical Board identifies a ten-year rule for certain Medi-Cal records. A preservation duty arising from reasonably anticipated litigation, an investigation, a contract, or other applicable law can require retention beyond a routine schedule. Do not apply the shortest period without checking the record type and setting. [R5]
The clinical-record minimum should not be assumed to answer every question about raw audio, temporary AI drafts, security logs, or vendor telemetry. Identify what exists, its legal classification, the applicable integrity and retention rules, and any specific preservation obligation before deciding what may be deleted.
A new 2027 authorship provision
AB 1637, Chapter 536 of 2026, adds Business and Professions Code §2266.1. Its nonurgency provision takes effect January 1, 2027. The chaptered text places responsibility for patient notes on the authoring physician and limits alterations, with specified exceptions for delegated authorized individuals, physician additions following transfer of care, and supervising physicians editing trainee notes. It covers notes, after-visit summaries, and diagnosis and treatment plans. This is not a basis for declaring every pre-2027 edit unlawful, nor a rule eliminating the listed exceptions. [R6]
For institutions, the practical implementation questions are who has editing permission, how delegated authority is recorded, how authorship remains visible, and how amendments are communicated. For counsel, the question is what law governed at the time of the disputed act and what the actual record shows.
Sources
- R1: Civil Code §56.101, reproduced statutory text.
- R2: Health and Safety Code §123110, reproduced statutory text; Medical Board patient access guidance.
- R3: HHS, scope of individual access to protected health information.
- R4: Medical Board medical-record FAQs.
- R5: Business and Professions Code §2266, reproduced text; Medical Board retention FAQ.
- R6: AB 1637 official bill page; chaptered text reproduced by LegiScan; Governor's September 27, 2026 signing announcement. Official bill-page access was unavailable during this review; the final reproduced text and official signing announcement were inspected.