All 27 chapters in this guide
Published
- Physicians
- Institutions
- Attorneys
Reviewed by Kanwar Partap Singh Gill, MD · sources checked
Quality review can improve care only if organizations understand both its protections and its limits. California Evidence Code section 1157 protects specified proceedings and records of qualifying review bodies from discovery and protects attendees against compelled testimony about what occurred at those meetings. It does not make every adverse-event document confidential, exclude every related fact from evidence, or create a universal shield against regulators. Federal patient safety work product protection is a different framework with different requirements. Sources: Evidence Code § 1157 and 42 CFR § 3.20.
The function of a review matters more than its title
A morbidity and mortality conference may perform qualifying peer-review work, but the initials “M&M” do not decide the legal issue. A root-cause analysis, incident report, credentialing file, or quality dashboard also requires examination of who created it, when, for what purpose, under what authority, and how it was maintained. A routine operational record does not become a protected committee record merely because someone later places it in a review packet.
For a defensible analysis, identify the qualifying committee and its purpose; separate its proceedings from independently existing records; identify the particular protection claimed; and evaluate exceptions and the procedural setting. A court may require an adequate factual showing for the claim of protection. Simply applying a “privileged” label is not that showing.
An evidence map for an adverse event
| Material | Starting point for analysis | What physician and attorney should preserve or examine |
|---|---|---|
| Original medical record, medication administration record, orders, images, and laboratory results | Independently existing care records do not become protected merely through committee use. | Complete records, provenance, timestamps, amendments, and relevant source systems. |
| EHR audit trail, interface messages, device logs, and ordinary system change records | Their original operational purpose matters; review by a committee does not automatically shield them. | Native data, retention schedules, field definitions, time zones, and custodians. |
| A witness's firsthand observations | Personal knowledge and what transpired at a protected meeting are different subjects. | An accurate account of care events without soliciting protected deliberations. |
| Minutes, evaluative discussion, and records of a qualifying peer-review committee | Section 1157 can protect against discovery, subject to its scope and exceptions. | Committee authority, chronology, and a specific description sufficient to evaluate the claim. |
| Incident report or root-cause analysis | Its title alone does not establish protection. California and federal frameworks require separate analysis. | The reason for creation, ordinary reporting duties, recipients, and any patient safety evaluation system pathway. |
| Documents supplied to a patient safety organization | Submission alone does not protect excluded original records or separately existing information. | What was created for the patient safety system, what existed independently, and applicable external reporting duties. |
| Information requested by the Medical Board | Investigative authority and access statutes differ from civil discovery rules. | The precise request, statutory authority, confidentiality requirements, and any particular objection. |
This matrix is a method for classifying evidence, not a determination that any specific document must be produced or withheld. An underlying fact may be discoverable even when a committee's analysis of that fact is protected.
Section 1157 is not a blanket rule of secrecy
The statute contains express, context-specific exceptions. These include provisions concerning statements made by an attendee who is a party to the action or proceeding whose subject matter was reviewed, certain staff-privilege proceedings, and specified insurer bad-faith litigation. Additional provisions concern particular professional-society committees and criminal proceedings. These exceptions have judicially interpreted limits. A patient should not assume that naming a physician as a defendant opens an entire committee file, and a hospital should not assume that the statute defeats every request merely because a committee considered the subject. Source: Evidence Code § 1157.
In West Covina Hospital v. Superior Court (1986) 41 Cal.3d 846, the California Supreme Court distinguished protection against compelled testimony from a prohibition against voluntary testimony. That distinction illustrates why “not discoverable,” “confidential,” and “inadmissible” are not interchangeable. Other evidentiary rules and other legal obligations still require analysis. This older decision is a foundational authority, rather than part of the website's separate 2001–2026 litigation survey. Source: opinion.
In Arnett v. Dal Cielo (1996) 14 Cal.4th 4, the Court held that section 1157's discovery protection did not bar the Medical Board's investigative subpoena in the circumstances presented. A civil discovery objection therefore should not simply be copied into a response to a Board demand. The decision does not mean that every privilege or confidentiality requirement disappears whenever the Board asks a question. Source: opinion.
Two later decisions illustrate other boundaries. Kibler v. Northern Inyo County Local Hospital District (2006) 39 Cal.4th 192 treated hospital peer review as an official proceeding for the relevant anti-SLAPP provision; it did not confer automatic merits immunity on every act connected with peer review. Fahlen v. Sutter Central Valley Hospitals (2014) 58 Cal.4th 655 held that the physician's Health and Safety Code section 1278.5 whistleblower claim did not require first overturning the peer-review decision through judicial mandamus. It did not abolish every exhaustion requirement for every claim. Review procedures, retaliation claims, immunity, discovery, and the merits are separate questions. Sources: Kibler opinion and Fahlen opinion.
Board access requires its own statutory analysis
Business and Professions Code section 805.1 provides access to specified underlying records concerning disciplinary action resulting in a reportable event. Section 805.01 separately addresses access associated with its reporting framework. Section 800 governs central-file confidentiality with statutory exceptions, including circumstances involving subsequent disciplinary proceedings. Section 2225 concerns investigations and confidentiality requirements; it should not be described as a generic override of all peer-review protection. Sources: BPC §§ 800, 805.1, 805.01 and 2225; Medical Board § 805.01 instructions.
The practical lesson is precise response, rather than categorical resistance or unrestricted disclosure. Identify the material requested and the authority supporting access. Preserve the records, evaluate a specific objection where appropriate, and comply with applicable production and patient-privacy requirements. A confidentiality rule governing a Board file also does not necessarily determine whether an original source can be obtained from another custodian in civil litigation.
Federal patient safety work product: a separate protection
The Patient Safety and Quality Improvement Act and its regulations protect qualifying patient safety work product, including material satisfying the applicable patient safety evaluation system and patient safety organization pathways, as well as certain system deliberations and analyses. They expressly exclude original patient and medical records, billing and discharge information, and other specified original information. Information developed or maintained separately from the patient safety evaluation system does not become protected merely because it is also submitted to a patient safety organization. Source: 42 CFR § 3.20.
HHS guidance emphasizes that the framework cannot be used to avoid external recordkeeping or reporting obligations. A facility should therefore be able to explain its system, identify which material satisfies the federal definition, and meet its separate legal duties. Membership in a patient safety organization does not turn the organization's entire adverse-event file into protected work product. Federal privilege, confidentiality, permissible disclosure, and exceptions also require separate attention. Source: HHS patient safety work product guidance, May 24, 2016.
Example: a preventable medication event
A patient receives an incorrect dose. The chart, dispensing record, pump history, interface messages, and staff observations exist before a committee convenes. Later, a qualifying committee discusses staffing, system design, and prevention. The organization should preserve the original records and its review material according to their actual character. It should not move the only copy of an ordinary operational record into a review folder and claim that the underlying facts disappeared from discovery.
Plaintiff's counsel can investigate dose selection, administration, warnings, timing, and injury through original sources. Defense counsel can make a properly supported claim for protection of actual committee material. Both should avoid treating the review's title as a substitute for legal analysis. Good review governance supports candid learning while preserving the evidence necessary to explain what happened.