EHR Evidence
What the printed chart leaves out, and what to request.
The electronic health record holds far more than the printed chart shows: audit trails, metadata, alert logs, and native data. This is where we prove that the printed record is not the complete record of care.
In this guide
The evidence behind the chart.
Full explanations of each topic below are being finalized from our evidence library. For now, the EHR Discovery Checklist covers what to request.
- Why the printed chart is incomplete
- What an audit log is
- Types of EHR evidence
- Why timestamps require interpretation
- Clinical decision support and alerts
- Order-set history
- Access and activity records
- Documentation metadata
- Interoperability and interface failures
- Downtime evidence
- Native data versus printed output
- What attorneys should request
Common questions
EHR evidence, in plain terms.
- What is an EHR audit log?
- An audit log, or audit trail, is the electronic health record system’s own record of activity on a chart. It captures who accessed the record, when, what they did (view, create, modify, print), and often from which device. Practitioners describe it as the chart’s black box. It is usually not part of the standard medical record and must be requested specifically.
- Can an audit trail show whether a medical record was altered or backdated?
- It can show the true creation and modification times of entries, which may differ from the clinical times shown on the printed note. Late entries and amendments are often legitimate, so the presence of an edit is not proof of wrongdoing. The relevant question is whether the timing and disclosure were proper and whether the printed record fairly represents the sequence of care.
- Why does documentation time differ from event time?
- The printed chart shows the time a clinician entered, which is not always when the event occurred. Care during a busy shift is often charted later, and during system downtime staff document on paper and enter it afterward. Metadata and the audit trail can separate when something happened from when it was documented.
- What EHR evidence should attorneys request in a medical malpractice case?
- Beyond the printed chart, consider the native audit trail, entry creation and modification timestamps, result view and acknowledgment logs, clinical decision support and alert logs, order-set and configuration history with effective dates, downtime records, and native data with its data dictionary. These are generally not produced by a standard record request and should be requested in native form and reviewed before depositions.
- Does an overridden clinical decision support alert prove negligence?
- No. Roughly nine in ten drug-interaction alerts are overridden, and most overrides are clinically appropriate, in part because high alert volume causes alert fatigue. An alert log shows what warning was presented at the decision point and how it was handled, which must then be evaluated in clinical context.
These explanations are educational and describe documentation practices and evidentiary potential, not proven misconduct or any outcome. Audit-log and timestamp evidence requires interpretation.