Medical Malpractice Discovery Checklist for Attorneys

By John Mahoney · April 2026 · 15 min read

Discovery in medical malpractice cases is where cases are won or lost. The evidence that proves negligence, causation, and damages is buried in medical records, institutional policies, staffing data, billing systems, and electronic monitoring logs that hospitals do not voluntarily produce in response to generic records requests. If you do not ask for it specifically, you do not get it. And if you do not get it, the evidence gap benefits the defense.

This checklist is designed as a comprehensive reference for medical malpractice attorneys at every stage of discovery — from the initial preservation demand through expert discovery. It covers what to request, why each category matters, and the common oversights that leave critical evidence on the table.

Not every item applies to every case. Use this as a master checklist and select the categories relevant to your specific facts. But review the full list for every case, because the categories you did not initially think were relevant often turn out to be the ones that make the case.

Phase 1: Pre-Litigation Preservation

Before you file, send a preservation demand to every potential defendant and records custodian. Medical records are subject to routine destruction schedules, and electronic data is particularly vulnerable to overwriting. The preservation demand should specifically identify the following categories.

Preservation demand checklist

• Complete medical record — all electronic and paper records, including metadata, audit trails, and amendment history
• Electronic health record audit trail — the log showing who accessed, entered, modified, or deleted entries in the patient's chart, with timestamps
• Electronic monitoring data — raw data from bedside monitors (pulse oximetry, cardiac telemetry, capnography, fetal monitoring, arterial lines, ventilator data)
• Imaging studies — DICOM files (the actual images, not just the radiology reports), including all views and sequences
• Laboratory information system data — complete lab results with specimen collection times, processing times, and critical value notification logs
• Pharmacy dispensing records — automated dispensing machine (Pyxis, Omnicell) logs showing medication pulls, overrides, and returns
• Communication records — pages, secure messages, phone logs, and nurse call system records
• Video and audio recordings — if the facility has surveillance cameras in relevant areas (some states restrict this in patient care areas)
• Policies and procedures — all clinical policies applicable to the patient's care, in the version effective at the time of treatment
• Staffing records — schedules, assignments, and census data for the relevant unit during the relevant time period
• Equipment records — maintenance logs, calibration records, and incident reports for any equipment used in the patient's care
• Incident and adverse event reports — note that many states provide qualified privilege for peer review and quality improvement documents, so frame the request to capture reports that fall outside the privilege

Send the preservation demand by certified mail and retain proof of delivery. Document the date sent and the specific categories identified. If evidence is later destroyed, this documentation supports a spoliation argument.

Phase 2: Medical Records Requests

The initial medical records production is the foundation of your case analysis. Do not rely on generic HIPAA authorization forms. Prepare detailed, specific requests that capture the records most hospitals omit from standard productions.

Core medical records

• History and physical — the admitting physician's initial assessment
• Progress notes — all physician notes (attending, resident, consulting) for every day of the relevant admission or treatment
• Nursing notes and assessments — all nursing documentation, including shift assessments, flowsheets, vital signs, intake and output records, wound care documentation, fall risk assessments, and nursing care plans
• Physician orders — all written and electronic orders, including standing orders, PRN orders, and order modifications
• Medication administration records (MAR) — complete documentation of every medication administered, including time, dose, route, and administering nurse
• Operative reports — dictated operative notes for every procedure
• Anesthesia records — pre-operative assessment, intra-operative anesthesia record (both electronic and handwritten), and PACU records
• Consultation reports — notes from every consulting specialist
• Discharge summary — the discharge narrative, discharge instructions, and follow-up plan
• Informed consent forms — all consent documents signed by the patient or their representative

Diagnostic records

• Laboratory results — complete lab reports with reference ranges, critical value flags, and specimen collection timestamps
• Radiology reports and images — reports for all imaging studies, plus the actual DICOM image files (not just the report)
• Pathology reports — surgical pathology, cytology, and any frozen section reports
• Microbiology culture and sensitivity reports — all culture results with antibiotic sensitivity panels
• EKG/ECG tracings — the actual tracings, not just the computer interpretation
• Pulmonary function tests — complete PFT data if applicable
• Cardiac catheterization reports and images — if applicable

Specialized records often omitted from standard productions

• EHR audit trail — the access and modification log for the patient's electronic medical record, showing every entry, edit, and deletion with timestamps and user identification
• Bedside monitor data — continuous monitoring data stored in the physiologic monitoring system, separate from the EMR
• Nurse call records — logs showing when the patient pressed the call button and how long it took for a response
• Telephone and communication logs — records of calls to physicians, specialist notifications, and rapid response or code blue activations
• Pharmacy records — automated dispensing system logs, pharmacist verification records, and medication interaction alerts
• Blood bank records — transfusion records, blood product orders, crossmatch results, and transfusion reaction documentation
• Respiratory therapy records — ventilator settings, weaning parameters, arterial blood gas results, and airway management documentation
• Physical therapy, occupational therapy, and speech therapy notes — often stored in a separate system from the main EMR
• Social work and case management notes — may contain relevant information about the patient's pre-admission functional status and discharge planning
• Dietary and nutrition notes — relevant in cases involving malnutrition, aspiration, or feeding-related complications

Phase 3: Institutional and Administrative Discovery

Beyond the patient's medical record, institutional records reveal whether the facility and its staff met systemic obligations that affect patient safety. These records are not part of the medical chart and must be specifically requested through formal discovery.

Policies and procedures

• Clinical protocols — the facility's written policies for the clinical situation at issue (sepsis protocol, fall prevention, surgical site infection prevention, medication administration, etc.), in the version effective at the time of the patient's care
• Nursing standards — nursing policies for assessment, monitoring, documentation, and escalation (chain of command policies for when nurses need to escalate concerns about physician orders)
• Infection control policies — hand hygiene policies, isolation protocols, catheter care bundles, and surveillance requirements
• Credentialing files — the defendant provider's application for privileges, training documentation, board certification status, and any restrictions on privileges
• Continuing education records — documentation of required training completion for the relevant provider(s)

Staffing and personnel records

• Unit staffing schedules — the actual staffing for the unit during the relevant time period, including nurse-to-patient ratios
• Assignment sheets — which nurses and aides were assigned to the patient
• Staff competency records — documentation showing that the assigned staff had been trained and deemed competent for the relevant clinical tasks
• Supervision and oversight records — for cases involving residents, fellows, CRNAs, or other supervised providers
• Overtime and fatigue data — hours worked by the relevant providers in the days preceding the incident

Quality and safety records

• Incident reports — adverse event reports related to the patient's care (note privilege limitations)
• Root cause analysis — if one was conducted related to the event (note privilege limitations)
• CMS survey reports — publicly available reports of regulatory inspections that may document deficiencies in areas relevant to the case
• Joint Commission survey findings — accreditation survey results noting areas of non-compliance
• Patient safety event reports — reports submitted to patient safety organizations (may be protected by the Patient Safety and Quality Improvement Act)
• Complaint files — prior complaints against the facility or provider related to similar issues

Phase 4: Billing and Financial Records

Billing records serve multiple purposes in medical malpractice discovery. They provide independent verification of what services were rendered, when they were rendered, and by whom. They also quantify the economic damages.

Billing discovery checklist

• Itemized hospital bill — the complete UB-04 with all charge codes, not just a summary statement
• CPT and ICD codes — the procedure and diagnosis codes submitted to insurers, which document what was done and what conditions were treated
• Professional billing records — CMS-1500 claims from individual providers (surgeon, anesthesiologist, radiologist, consultants)
• Explanation of benefits (EOBs) — from the patient's health insurance showing what was paid, what was denied, and the basis for any denials
• Medicare or Medicaid payment records — if applicable, including any Medicare Secondary Payer considerations
• Lien information — health insurance subrogation claims, Medicare conditional payments, Medicaid liens, and workers' compensation liens

Compare the billing records against the medical records. Charges for services not documented in the medical record, or medical record entries for services not reflected in the billing, are red flags worth investigating. Billing records sometimes document services that were performed but inadequately charted in the medical record, and vice versa.

Phase 5: Interrogatories

Well-drafted interrogatories in medical malpractice cases go beyond generic discovery requests. They should be tailored to the specific facts and designed to lock the defendant into positions that can be challenged at deposition and trial.

Key interrogatory topics

• Provider identification — identify every healthcare provider who participated in the patient's care, their role, their employer, and their contact information
• Chronology of events — a detailed narrative of the defendant's version of the relevant clinical events
• Standard of care contentions — what standard of care the defendant contends applied and how the defendant contends that standard was met
• Informed consent — what risks, alternatives, and expected outcomes were discussed with the patient, by whom, and when
• Prior similar incidents — whether the defendant or facility has been involved in prior claims, complaints, or incidents involving similar allegations
• Expert witness identification — the identity, qualifications, and opinions of the defendant's expert witnesses (timing governed by local rules)
• Insurance coverage — the identity of the defendant's malpractice insurance carrier and policy limits
• Record alteration — whether any entries in the medical record were modified, amended, or added after the date of the original entry, and if so, what changes were made and why

Phase 6: Depositions

Depositions in medical malpractice cases serve two purposes: locking the defendant into a version of events and obtaining testimony that supports your theory of liability. The order and preparation for depositions should be strategic.

Deposition sequence strategy

1. Fact witnesses first — nurses, technicians, and other support staff who may provide candid testimony before they are extensively prepared by defense counsel
2. Treating physicians next — physicians who participated in the patient's care but are not defendants
3. Defendant providers — the primary defendant(s) whose conduct is at issue
4. Corporate representatives — 30(b)(6) or equivalent witnesses for the facility on policies, procedures, staffing, and training
5. Expert witnesses last — after you have locked down the fact testimony and can challenge expert opinions against the factual record

Deposition preparation checklist for defendant providers

• Review the complete medical record and highlight every entry by the deponent
• Prepare a detailed timeline of events with the deponent's documented involvement at each step
• Identify all discrepancies between the defendant's documentation and other records (nursing notes, monitoring data, billing records)
• Review the defendant's prior deposition testimony in other cases (available through deposition transcript databases)
• Prepare questions that address the specific standard of care violations identified by your expert
• Prepare questions about the defendant's training, experience, and familiarity with the relevant clinical guidelines and protocols
• Prepare questions about the informed consent process specific to this patient
• Prepare questions about what the defendant would have done differently (if anything) and what the defendant learned from this case

Corporate representative deposition topics

• Applicable policies and procedures and how they are implemented and monitored
• Staffing levels, patient acuity, and nurse-to-patient ratios during the relevant period
• Training and competency assessment for the providers involved
• Quality improvement activities related to the type of event at issue
• Prior incidents of a similar nature at the facility
• Credentialing and privileging of the defendant providers
• Supervision and oversight structures

Phase 7: Expert Discovery

Expert discovery in medical malpractice is governed by specific rules that vary by jurisdiction but generally require disclosure of the expert's opinions, the basis for those opinions, the materials reviewed, and the expert's qualifications and compensation.

Expert disclosure checklist (plaintiff)

• Expert report — a detailed report covering the standard of care, how it was breached, causation, and (for damages experts) the calculation of damages
• Materials reviewed — a complete list of every document, record, and source the expert reviewed in forming their opinions
• Qualifications — current CV, board certifications, licensure, and any prior expert testimony (last 4 years in federal cases)
• Compensation — the expert's hourly rate and total compensation for work on the case

Challenging defense expert discovery

• Review the defense expert's prior testimony for inconsistent positions in other cases
• Verify the defense expert's clinical credentials and current practice status
• Check whether the defense expert has authored publications that support your position
• Assess whether the defense expert's subspecialty and clinical experience are appropriate for the specific clinical issues in the case
• Request documentation of any financial relationships between the defense expert and the defense firm or insurance carrier

Phase 8: Electronic Discovery

Electronic data is increasingly important in medical malpractice cases and requires specific discovery approaches that many attorneys overlook.

Electronic discovery checklist

• EHR metadata — the audit trail showing all access, modifications, and deletions in the electronic medical record
• DICOM imaging files — the native digital format of all imaging studies, which may contain information not visible on printed copies
• Physiologic monitoring data exports — continuous monitoring data in electronic format with full timestamp granularity
• Automated dispensing system logs — electronic records of medication dispensing events
• Laboratory information system data — electronic lab data with specimen collection, processing, and result notification timestamps
• Nurse call system data — electronic records of call button activations and response times
• Communication platform data — secure messaging (TigerConnect, Vocera, etc.) records between providers about the patient
• CPOE audit data — computerized physician order entry logs showing order creation, modification, and acknowledgment times

For each category of electronic data, specify the format you need it in. Native electronic format is preferable to printed summaries because it preserves the full data resolution and allows for independent analysis. Work with a health IT consultant if needed to ensure the produced data is complete and usable.

Common Discovery Pitfalls

Accepting the standard records production

The records a hospital produces in response to a HIPAA authorization are a curated subset of the complete medical record. The EHR audit trail, physiologic monitoring data, pharmacy dispensing logs, and staffing records are almost never included in standard productions. You must specifically request them in formal discovery.

Failing to request the right version of records

EHRs allow entries to be modified after the fact, with only the current version visible in the standard printout. The audit trail shows the original entries, the modifications, and the timestamps. If you only request the printed medical record, you get the modified version without knowing what was changed. Always request the audit trail alongside the clinical record.

Missing the electronic monitoring data window

Many facilities retain continuous monitoring data for limited periods — sometimes as short as 30 to 90 days. If you do not send a preservation demand specifically identifying this data immediately upon case intake, it may be overwritten before you file the lawsuit.

Not requesting policies in the correct version

Hospitals update their policies regularly. The relevant version is the one that was in effect at the time of the patient's treatment, not the current version. Request the policy in the version effective on the specific date(s) of treatment.

Overlooking billing records as evidence

Billing records are not just for calculating damages. They independently document what services were rendered and when. Discrepancies between billing records and medical records are red flags that can reveal undocumented services, timing inconsistencies, or billing fraud.

Using AI to Manage Discovery

Medical malpractice discovery routinely produces thousands to tens of thousands of pages of documents across multiple categories. Managing this volume manually — reading every page, extracting the relevant data, cross-referencing across sources, and building the timeline — is where cases bog down and where critical evidence gets missed.

AI tools built for medical-legal work can process the entire production, extract the clinical data, organize it chronologically, and flag inconsistencies between records from different sources. This does not replace the attorney's analysis or the expert's review. It ensures that when the attorney and expert sit down to evaluate the case, the data is organized, the timeline is built, and the gaps and contradictions are already identified.

The difference between spending 80 hours on manual records review and spending 8 hours reviewing AI-organized output is not just efficiency. It is thoroughness. When the data extraction is automated, you review every page instead of sampling. You catch the medication timing discrepancy on page 3,847 that you would have missed in manual review. You identify the nursing note on page 1,223 that contradicts the physician's operative report. The AI does not know which findings matter — but it puts all the findings in front of you so that nothing is missed.

Bottom Line

Discovery in medical malpractice is not a one-size-fits-all process. Every case requires a tailored discovery plan that targets the specific evidence relevant to the liability theory, the causation analysis, and the damages calculation. Generic records requests, boilerplate interrogatories, and unprepared depositions leave evidence on the table and give the defense an information advantage.

The checklist approach ensures nothing is overlooked. Start with the preservation demand, build the medical records foundation, expand into institutional and administrative discovery, and use depositions strategically to lock down testimony and fill in gaps. Every phase builds on the previous one, and the quality of your discovery directly determines the quality of your case at trial.

The evidence is there. It is in the EHR audit trail, the monitoring data, the pharmacy logs, the staffing records, and the policies that should have been followed but were not. Your job is to get it, organize it, and present it in a way that makes the standard of care violation undeniable. A thorough discovery plan — and the right tools to manage the volume — make that possible.

Questions? Contact us at [email protected] or (856) 979-6525