Audit Trails and EMR Tampering in New York Hospital Lawsuits

What Are Electronic Medical Records (EMRs)?

Electronic Medical Records (EMRs) are digital versions of the paper charts that were traditionally used in hospitals and medical practices. EMRs contain all of the clinical data about a patient, including:

• Physician orders: Medication orders, lab orders, imaging orders, and consultation requests.
• Medication Administration Records (MAR): Documentation of when and how much medication was administered, by whom, and whether the patient was monitored. [Link to: /medication-errors/proving-medication-error]
• Nursing notes: Narrative documentation by nurses about the patient condition, treatment, and response.
• Vital signs: Blood pressure, heart rate, respiratory rate, temperature, oxygen saturation, and pain scores, often recorded continuously from bedside monitors.
• Lab results: Blood tests, urine tests, cultures, and other laboratory data.
• Imaging studies: X-rays, CT scans, MRIs, and ultrasounds, along with the radiologist interpretation.
• Physician progress notes: Documentation by physicians about the patient condition, assessment, and plan.
• Operative reports: Detailed descriptions of surgical procedures.
• Anesthesia records: Documentation of medications, vital signs, and events during anesthesia. [Link to: /anesthesia-errors/nyc]
• Discharge instructions: Instructions given to the patient at the time of discharge.

What Is an EMR Audit Trail?

An EMR audit trail is a behind-the-scenes log that records every interaction with the EMR. The audit trail tracks:

• Who accessed the chart: The username of every person who opened the patient chart.
• When they accessed it: The date and time of every access, to the second.
• What they viewed: Which sections of the chart were viewed.
• What they entered: What data was entered, including the text of notes and orders.
• What they modified: What data was changed, including the original text before the change (before-image) and the new text after the change (after-image).
• When they modified it: The date and time of every modification, to the second.
• Who they logged in as: The authentication method used to log in (e.g., username and password, biometric).

Why EMR Audit Trails Matter in Malpractice Cases

EMR audit trails can be critical evidence in medical malpractice cases for several reasons:

• Proving timing: The audit trail can show exactly when a note was entered, when a medication was administered, or when an order was placed. This can prove or disprove whether the timing of care met the standard of care.
• Detecting alterations: The audit trail can show whether a note was modified after an adverse event. If a nursing note was modified hours or days after the patient was injured, this can be evidence of an attempt to cover up negligence.
• Detecting backdating: The audit trail can show whether a note was backdated -- entered with a date and time that does not match the actual time of entry. If a note was entered days after the event but backdated to appear as if it was entered at the time, this is evidence of fabrication.
• Detecting late entries: The audit trail can show whether a note was entered long after the event it describes. A late entry may be legitimate (e.g., a physician catching up on documentation), but a pattern of late entries after an adverse event is suspicious.
• Proving who was involved: The audit trail can show exactly which providers accessed the chart and when, helping to identify all providers involved in the care.
• Detecting copying and pasting: The audit trail can sometimes detect whether a provider copied and pasted content from a previous note, which can indicate that the provider did not actually assess the patient.
• Contradicting the written record: The audit trail can sometimes contradict the written record. For example, if the MAR says a medication was administered at 2:00 PM, but the audit trail shows the nurse did not access the chart until 3:00 PM, the MAR entry may be false.

Types of EMR Tampering and Alteration

EMR tampering can take several forms:

• Altering a note: Modifying an existing note after an adverse event to make it appear that the standard of care was met. For example, changing a nursing note to add that the physician was notified, when the original note did not mention this.
• Adding a note after the fact: Adding a note after an adverse event to make it appear that care was provided when it was not. For example, adding a note that the patient vital signs were checked, when they were not.
• Backdating a note: Entering a note with a date and time that does not match the actual time of entry, to make it appear that the note was entered at the time of the event.
• Deleting a note: Deleting a note that is unfavorable to the provider. While EMRs typically do not allow true deletion (the note is retained in the audit trail), attempts to delete can be detected.
• Copying and pasting: Copying content from a previous note and pasting it into a new note, to make it appear that the patient was assessed when they were not. Copying and pasting can propagate errors and create a false impression of ongoing assessment.
• Charting by exception: Charting only when there is an exception to the normal, which can create gaps in the record that obscure what actually happened.

How We Obtain and Analyze EMR Audit Trails

Obtaining and analyzing EMR audit trails requires specialized knowledge and tools:

• Request the audit trail: When we request medical records, we specifically request the EMR audit trail. Hospitals are required to produce the audit trail as part of the medical record, but they may not produce it unless specifically asked. [Link to: /resources/how-to-get-medical-records-for-a-lawsuit]
• Request in native format: We request the audit trail in native electronic format (e.g., CSV, XML) rather than as a printed summary, to preserve all data fields and timestamps.
• Engage a digital forensics expert: We work with digital forensics experts who can analyze the audit trail, reconstruct the timeline of events, and detect alterations, backdating, and other tampering.
• Compare the audit trail to the written record: We compare the audit trail to the written record to identify discrepancies. For example, if the MAR says a medication was administered at 2:00 PM, but the audit trail shows the nurse did not access the chart until 3:00 PM, the MAR entry may be false.
• Reconstruct the timeline: We use the audit trail to reconstruct the exact timeline of events -- who accessed the chart, when, what they viewed, what they entered, and what they modified.
• Identify all providers: We use the audit trail to identify all providers who accessed the chart, including those who may not have been identified in the written record.

Legal Framework for EMR Evidence in New York

In New York, EMR audit trails are discoverable and admissible as evidence in medical malpractice cases:

• Discoverability: Under CPLR 3120, EMR audit trails are discoverable as part of the medical record. Hospitals are required to produce the audit trail in response to a discovery request, but they may not produce it unless specifically asked.
• Admissibility: Under the business records exception to the hearsay rule (CPLR 4518), EMR audit trails are admissible as evidence if they were made in the regular course of business, at or near the time of the event, and by a person with knowledge.
• Spoliation: If a hospital fails to preserve the EMR audit trail after being put on notice of a potential claim, the court may impose sanctions for spoliation of evidence, including adverse inference instructions or dismissal of defenses.
• Authentication: EMR audit trails must be authenticated, typically through testimony from a hospital IT representative or records custodian.

Proving Your Case with EMR Evidence

To prove a case with EMR evidence, we:

• Obtain the complete medical record, including the audit trail: We request the full medical record, specifically including the EMR audit trail in native electronic format. [Link to: /resources/how-to-get-medical-records-for-a-lawsuit]
• Engage a digital forensics expert: We work with digital forensics experts who can analyze the audit trail and detect alterations, backdating, and other tampering.
• Compare the audit trail to the written record: We compare the audit trail to the written record to identify discrepancies and inconsistencies.
• Reconstruct the timeline: We use the audit trail to reconstruct the exact timeline of events.
• Identify all providers: We use the audit trail to identify all providers who accessed the chart.
• Engage medical experts: We work with board-certified physicians to independently review the records and the audit trail analysis. [Link to: /delayed-diagnosis-lawyer/loss-of-chance]
• Present the evidence: We present the audit trail analysis and expert testimony at trial to prove that the standard of care was breached and that the breach caused the harm.

Common Defense Arguments and How We Counter Them

Defense: The audit trail shows only routine documentation, not negligence.

Defense attorneys use several arguments regarding EMR evidence:

• Our Counter: While the audit trail shows routine documentation, it also shows the exact timing of events, any modifications, and who accessed the chart. If the audit trail shows that a note was modified after an adverse event, or that a medication was charted before the nurse accessed the chart, this is evidence of negligence or tampering.

Defense: The modification was a routine correction.

Our Counter: While routine corrections do occur, they should be documented as such (e.g., with a late entry designation or an addendum). If a note was modified without proper documentation, or if the modification changed the substance of the note in a way that benefits the provider, this is suspicious. We use the audit trail to show exactly what was changed, when, and by whom.

Defense: The audit trail is not reliable.

Our Counter: EMR audit trails are generated automatically by the EMR system and are generally considered reliable. They are used by hospitals for compliance, billing, and quality assurance purposes. We authenticate the audit trail through testimony from a hospital IT representative or records custodian.

What to Expect Working with MDLaw Firm

When you contact MDLaw Firm about a potential case involving EMR tampering:

• Free Consultation: We listen to your story and review the basic facts.
• Immediate Deadline Assessment: We evaluate the 2.5-year statute of limitations and any municipal notice of claim deadlines.
• Record Retrieval: We obtain the complete medical record, specifically including the EMR audit trail in native electronic format. [Link to: /resources/how-to-get-medical-records-for-a-lawsuit]
• Digital Forensics Analysis: We engage digital forensics experts to analyze the audit trail and detect alterations, backdating, and other tampering.
• Medical Expert Review: We engage board-certified physicians to independently review the records and the audit trail analysis.
• Causation Analysis: We establish that the negligence (and any tampering to cover it up) caused the harm.
• Litigation: We file within the statute of limitations and use the discovery process to obtain audit trails, depositions, and other evidence.
• Resolution: We pursue maximum compensation through settlement or verdict.

Frequently Asked Questions

The value of a medical malpractice case in New York depends on several factors, including the severity of the injury, the strength of liability evidence, and the economic and non-economic damages involved. New York is one of the few states with no caps on medical malpractice damages, meaning there is no artificial limit on what you can recover. Below are typical settlement ranges based on injury severity.