Policy vs. Practice: Finding Hospital Protocol Deviations (Free Tool)

By John Mahoney · October 29, 2026 · 8 min read

A hospital policy is the one document in a malpractice file that the defendant wrote about what the defendant should have done. It states who must act, how often, within what time and at what threshold, in the institution's own words. Laying that text next to the chart and asking, requirement by requirement, did the chart document what the policy required, when it required it, produces either a clean record that the defense will want to put in front of the jury, or a table of deviations that the plaintiff will. This post covers how to do the comparison honestly, why "policy is not the standard of care" is the defense's first line and how plaintiffs use policies anyway, and how to request policies so you get the version that was actually in force.

Break the policy into testable requirements

Policies are written as prose. Comparison needs rows. The first step is to turn each sentence that imposes an obligation into a discrete requirement with four parts:

• Who must act (the RN, the charge nurse, the provider, "staff").
• What they must do (assess, reassess, notify, document, escalate, apply an intervention).
• When or how often (on admission, every shift, within 30 minutes, every 2 hours while in restraints).
• At what threshold (a score at or above a cutoff, a vital sign outside a range, a lab value).

Keep the policy's own numbers and wording. Do not add requirements a typical policy would contain if this one does not; the comparison is against this institution's rule, not an idealized one. Note the effective, revised and approved dates on the document, and note any reference to another document, appendix, order set or algorithm you do not have. Those references are discovery requests.

List the chart events, then line them up

From the chart excerpt covering the period the policy governs, list every dated or timed entry relevant to the requirements: assessments, scores, vital signs, notifications, interventions, orders. Then build one row per requirement with a status:

Two disciplines make the table credible. First, the gap detail must be arithmetic where possible: "policy: reassess within 30 minutes; chart: next documented assessment 2 hours 10 minutes later," using only times that appear in the record. Second, silence in a partial excerpt is "unclear," never "not met." A table that marks every absent entry as a violation will be taken apart in the first ten minutes of the expert's deposition, and deservedly.

Flags worth separating from the table

Some findings are not a single row's status but a pattern across the documents:

• A documented value that crosses a policy threshold (a fall-risk score, an early-warning score, a blood pressure) with no documented response in the following period.
• A late entry or addendum covering exactly the window where a requirement was otherwise unmet.
• An entry whose time precedes the event it describes.
• A policy effective date later than the dates of care, which means the version in hand may not have been in force and the comparison must be redone against the prior version.
• A policy that references another document you do not have.

"Policy is not the standard of care"

Expect this in the first defense brief and the first defense expert report, and expect it to be largely correct as a statement of law in most jurisdictions. The standard of care is what a reasonably prudent provider would do under the circumstances, established through expert testimony. A hospital's internal policy may set a higher bar than that standard, a lower one, or the same one, and hospitals argue, with some force, that treating every internal rule as a legal duty would discourage institutions from writing ambitious policies at all. How far a policy may be used as evidence of the standard, whether a violation is admissible, and what instruction the jury receives on it vary by jurisdiction.

Plaintiffs use policies anyway, and for reasons that survive the defense's framing:

1. Jurors understand it. "The hospital's own rule said every two hours, and the chart shows six" requires no medical training to follow. The expert supplies the standard; the policy supplies the narrative.
2. It anchors the expert. An expert who testifies that a reasonable nurse reassesses within a given interval is on firmer ground when the defendant institution wrote the same interval into its policy.
3. It frames every deposition. Each nurse and physician was trained on the policy and signed a competency. "Were you aware of this policy? Were you trained on it? Did you follow it on this date? Why not?" is a sequence with no comfortable answer when the chart says no.
4. It converts a one-off into a pattern or disproves one. Unit compliance audits and education records show whether the deviation was isolated or routine, which bears on institutional claims.
5. It cuts both ways. A chart that meets every requirement of a demanding policy is defense evidence of the same quality, which is why defense counsel should run the comparison first.

The practical rule: present the policy comparison as what the institution required and what the chart shows, and let the expert, not the table, say what the standard of care was.

A worked example (hypothetical)

The facts below are invented for illustration. No real patient, facility or policy is described.

The patient is admitted to a medical unit and scores above the facility's fall-risk cutoff on the admission screen. The unit's fall-prevention policy, as pasted, requires: a fall-risk screen on admission and every shift; for patients above the cutoff, a bed alarm, non-skid footwear and hourly rounding, each documented; reassessment within 30 minutes after any change in condition or any fall; and provider notification "immediately" after a fall with the time documented. The policy's effective date precedes the admission, and it references a "Post-Fall Huddle form" that is not in the excerpt.

The chart excerpt covers the first 36 hours. The admission screen is documented with a score above the cutoff. The day-shift reassessment is documented; the night-shift reassessment is not, though the night-shift flow sheet otherwise has vital signs every four hours. Bed alarm and footwear appear once, on the admission care plan, with no later entries. Hourly rounding is documented through 2200, then resumes at 0400. The patient falls at approximately 0330; the next documented assessment is at 0455, and the provider notification entry reads "MD aware" with no time.

The analyzer's comparison table marks the admission screen met; the every-shift reassessment not met for the night shift, with the gap detail that the flow sheet covers the period and records no screen; the bed alarm and footwear unclear, because a single care-plan entry does not show whether they were in place at 0330; hourly rounding not met for 2200 to 0400, with the arithmetic; post-fall reassessment not met, with the gap detail "policy: within 30 minutes; chart: 1 hour 25 minutes"; and provider notification unclear, because "MD aware" has no time to compare against "immediately." The flags note the missing Post-Fall Huddle form and the rounding gap that coincides with the fall. The summary says, neutrally, what the policy requires, what the chart shows and what cannot be determined from the excerpt.

Nothing in that output says the nursing care was negligent, and it should not. It says exactly which records to request next and which questions to ask the night nurse. For defense counsel it identifies, before the complaint is amended, the two rows that will need an explanation.

How to request policies in discovery

The most common failure is receiving the current policy rather than the one in force on the dates of care, and the second most common is receiving the policy without the documents it references. Ask, in general terms adapted to your jurisdiction's rules, for:

• Each policy, protocol, procedure and guideline governing the subject (fall prevention, restraint monitoring, sepsis screening, medication administration, and so on) in force on each date of care, identified by title, number, and effective, revised and approved dates.
• The approval history and the immediately prior and superseding versions, so changes made after the event are visible.
• Every order set, algorithm, appendix, form or related protocol the policy references by name.
• Staff education and competency records on the policy for the personnel involved.
• Unit or department compliance audits on the policy for a defined period around the dates of care.
• Staffing and assignment sheets for the relevant shifts.

Whether compliance audits and some education materials are shielded by quality-improvement or peer-review protection varies by state; request them, expect an objection, and be prepared to litigate scope.

What to request next

• The policy version in force on the dates of care, with approval history and prior and superseding versions.
• Every document the policy references that was not produced with it.
• The EHR audit trail for the chart entries in the comparison, especially any late entry or addendum in a gap period.
• Flow sheets and monitoring strips for the covered period, if the excerpt in hand is a narrative-notes printout only.
• Staff education and competency records on the policy.
• The unit's compliance audits on the policy.
• Staffing and assignment sheets for the shift.

What the tool does not do

The analyzer organizes what the pasted policy requires and what the pasted chart documents. It works only from the two texts: every requirement, date, time, value and quote in its output appears verbatim in what you pasted, it defaults to "unclear" when the excerpt cannot decide a row, and it never treats silence in a partial excerpt as a violation. It does not say whether care met the standard of care, whether anyone was negligent, or what caused the outcome, and it never names a hospital or health system unless the pasted text does. If the policy references an appendix you did not paste, it will say so rather than guess at the contents. Check every quote against the source page before it goes into a memo.

Frequently asked questions

Is a hospital policy the same as the standard of care?

Generally no, and the defense will say so early. The standard of care is what a reasonably prudent provider would do under the circumstances, established through expert testimony. A hospital policy is the institution's own rule, which may exceed, match or fall short of that standard. Courts differ on how far a policy may be used as evidence of the standard, so how much weight it carries varies by jurisdiction.

If a policy is not the standard of care, why compare the chart against it?

Because the institution wrote it. A documented deviation from the hospital's own rule is evidence the jury understands without a medical degree, it anchors the expert's testimony about what a reasonable provider would do, it frames the deposition of every nurse and physician who was trained on the policy, and it points to the records that will show whether the deviation was isolated or systemic.

What does the free Policy vs. Practice Analyzer do?

You paste the policy or protocol and the chart excerpt for the period it governs. It breaks the policy into discrete requirements with their timing or threshold, lists the dated chart events, and lines them up requirement by requirement as met, not met, unclear or not applicable, with verbatim quotes and arithmetic gap detail. It also flags findings and lists records to request. It does not say whether care met the standard of care.

How do I request hospital policies in discovery?

Ask for the version in force on each date of care, identified by title and effective or revised date, with its approval history and the prior and superseding versions. Add the related order sets, protocols and appendices the policy references, the staff education and competency records on the policy, and any unit compliance audits. Specifics of scope and privilege vary by state.

Related: standard of care vs. standard operating procedure and how to get the EHR audit trail in discovery.