Spoliation of Medical Records: Spotting Altered or Missing Records

Verify it yourself — free, no login

See how AI medical-record review links every fact to the exact Bates page that proves it — click any citation and jump straight to the record.

See the 60-second demo →

By John Mahoney · Founder, MedLegal AI · May 2, 2026

Almost every medical-malpractice case turns on the chart. So what happens when the chart you receive is not the chart that existed at the time of care? Records get altered, late entries appear, and pages go missing. As a plaintiff's attorney, knowing how to spot and prove spoliation of medical records can change the entire posture of a case.

This is a practical walkthrough of what spoliation is, why electronic health records (EHRs) make alteration both easier and easier to catch, the red flags worth chasing, and the discovery steps that turn a hunch into leverage.

What Spoliation Means in a Med-Mal Case

Spoliation is the destruction, alteration, or failure to preserve evidence that a party knew or should have known was relevant to litigation. In a malpractice case, that evidence is usually the medical record itself.

It is important to be precise about terminology, because the legal consequences depend heavily on jurisdiction. Some states recognize an independent tort of spoliation; many do not. Most courts address it through evidentiary sanctions rather than a standalone claim. The available remedies range widely and may include:

Because the standards, the required mental state, and the menu of sanctions all vary by jurisdiction, confirm the controlling rule in your venue before you frame a spoliation argument. What earns an adverse inference in one state may require a showing of bad faith in another.

Why EHRs Cut Both Ways

Paper charts could be quietly rewritten, and proving it often came down to ink analysis and handwriting experts. The shift to electronic records changed the dynamics in two opposing directions.

On one hand, EHRs make it easier to alter a record. Editing an entry can be as simple as opening a note and retyping it. Copy-forward and templating features can propagate a single error across dozens of encounters. A provider can add a "clarifying" note days after an adverse event.

On the other hand, EHRs make alteration far easier to detect. Certified systems are generally built to log activity. Most maintain metadata about who accessed a record, when an entry was created, and whether it was later modified. That logging is the single most powerful tool a plaintiff's attorney has when the printed chart looks too clean.

The printed PDF a defendant produces is a presentation layer. The underlying system usually knows more than the page shows, and the gap between the two is where spoliation lives.

Red Flags Worth Chasing

You will rarely see a record stamped "altered." Instead, you learn to read the chart against the clinical reality and look for friction. Common red flags for altered medical records in a malpractice context include:

None of these is proof on its own. Each is a reason to look at the layer beneath the printed page.

The Audit Trail Is the Truth Serum

The EHR audit trail (sometimes called the access log, audit log, or metadata) is the system-generated record of activity around the chart. Depending on the system and configuration, it can show:

This is where a "contemporaneous" note can be exposed as something written after the fact. If the printed chart shows a note timestamped during the patient's stay, but the metadata shows it was authored or edited days later, you have an objective, machine-generated basis to argue the record was changed. Timestamps are difficult to explain away because they were not created by the witness.

The audit trail is not a magic wand. Configurations differ, retention policies differ, and some systems log more than others. But it is the most reliable starting point for separating what was documented in real time from what was reconstructed afterward.

To see how creation and modification metadata can be reconstructed into a single coherent narrative, walk through the interactive chronology demo, which renders timeline output from synthetic record data, including a flagged late amendment.

Getting the Audit Trail in Discovery

Defendants rarely volunteer the audit trail, and a generic request for "the medical records" will get you the printed chart, not the metadata. EHR audit trail discovery requires asking for it by name and with specificity.

Practical steps:

  1. Send a preservation letter early. As soon as you are retained, put the provider and facility on notice to preserve the complete record, including all metadata, audit logs, and the native electronic file. A timely preservation letter helps establish the duty to preserve and undercuts any later claim that deletion was routine.
  2. Request the record in native format. Ask for the chart as it exists in the system, not a flattened PDF, so creation and edit metadata travels with it.
  3. Name the audit trail explicitly. Request the audit log, access report, and any revision history. Reference the system's own audit functionality rather than a generic description.
  4. Ask for the data dictionary or report definitions so you understand what the system logs and how to read it.
  5. Be ready to meet and confer on scope, format, and burden, and to move to compel if the production is incomplete.

Spell out the relevant date range and custodians. The more specific the request, the harder it is for the other side to produce a sanitized export and call it complete.

The Leverage a Documented Alteration Creates

A clean liability case is one thing. A liability case plus a documented alteration is another, because it reframes the dispute around credibility.

Once you can show that a note was changed after the outcome was known, the defense narrative shifts from "we met the standard of care" to "why does the record not say what the system says it should." That is a much harder position to defend in front of a jury, and it informs settlement posture long before trial.

Documented spoliation can also support the sanctions discussed above and can shape how the defense's own experts are treated. An opinion built on a chart that has been shown to be unreliable invites a challenge to its foundation, a familiar line of attack under FRE 702 and the Daubert v. Merrell Dow line of cases. Always tie the argument back to the specific rule and case law that govern your jurisdiction.

Where to Start

If you suspect a record has been altered or that pieces are missing, the workflow is straightforward: preserve everything, request the native record and the audit trail by name, and compare the metadata against the printed chart and the clinical timeline.

To pressure-test a chart for the friction points described above, run it through the case record search tool to surface inconsistencies and locate the entries worth scrutinizing. When you are ready to demand the metadata, use the audit trail request tool to generate a preservation and discovery letter that asks for the EHR audit trail specifically and on the record. The earlier you send it, the harder it is for anyone to claim a missing entry was lost in the ordinary course.

Explore these and the rest of the free tools for plaintiff attorneys to build the record-integrity argument before the other side has a chance to clean things up.

Run a free Daubert workup on your expert

Six-pattern audit on a sample case in 90 seconds. No credit card.

Try the free Daubert workup →
MedLegal AI is software, not a law firm. We do not provide legal advice and no attorney-client relationship is created by use of this service. All outputs are AI-generated and must be independently reviewed by a licensed attorney before use in any legal proceeding, expert report, or client communication.
See the AI cite its source — no login
Most legal AI is wrong 17–33% of the time. Watch MedLegal AI pin every finding to the exact record page — click any citation and it jumps to the line that proves it.
Watch the 30-second demo →