Wrong-site and wrong-patient surgery are classified as sentinel events by The Joint Commission and as never events by CMS: occurrences that are preventable by following established protocols and that signal a fundamental failure in patient safety systems. When a surgeon operates on the wrong knee, removes the wrong kidney, or performs a procedure on a patient who was never scheduled for it, the liability picture is almost never in genuine dispute. The litigation challenge lies elsewhere: in documenting the full scope of the injury, conducting discovery into the systems failures that allowed the event to occur, and holding the right defendants accountable at both the individual and institutional level.
The Standard of Care and Universal Protocol
The Joint Commission's Universal Protocol for Preventing Wrong Site, Wrong Procedure, and Wrong Person Surgery has been in effect since 2004 and is incorporated into the accreditation requirements for every Joint Commission-accredited hospital. The protocol has three components: a pre-procedure verification process that confirms the correct procedure, patient, and site from all available information sources; site marking by the performing surgeon before the patient enters the operating room; and a time-out immediately before the procedure during which the entire surgical team verbally confirms the correct patient, procedure, and site.
Deviation from the Universal Protocol is negligence per se in most jurisdictions where the hospital is Joint Commission-accredited and the deviation is the proximate cause of a wrong-site procedure. The protocol documentation is discoverable: pre-operative checklists, time-out documentation in the anesthesia and nursing records, and any hospital policies governing the pre-operative verification process. Where the documentation shows that the time-out was conducted but documented incorrectly, or shows that no time-out documentation exists, the inference of protocol failure is self-proving.
Site marking deserves separate attention. The surgeon is responsible for marking the operative site before the patient is sedated. Cases where the wrong site was operated on despite a site marking process typically involve: the mark was made on the wrong side by an error in reading pre-operative imaging; the mark was made by a resident or other non-surgeon without the surgeon's verification; the mark was covered by positioning drapes before the surgeon re-confirmed it; or the mark faded or was inadvertently removed during the prep process. Each failure mode points to a different responsible party and a different systemic argument.
Building the Discovery Record
The operative record and the root cause analysis are the two most important documents in wrong-site litigation. The operative record establishes what was done, by whom, and when; the root cause analysis is the hospital's own internal investigation of how the event occurred. Many hospital attorneys argue that the root cause analysis is protected by the peer review privilege. That argument is contested: courts are divided on whether a root cause analysis performed in response to a sentinel event is peer review work or simply an incident investigation, and the distinction matters for discovery.
In California, Evidence Code Section 1157 protects the work product of peer review committees. The question is whether the root cause analysis is the work product of a peer review committee or whether it is an operational document produced by a patient safety or risk management function. The hospital's organizational structure, the identity of the committee that conducted the root cause analysis, and the purpose for which the document was created all bear on whether the privilege applies. Challenge the privilege assertion aggressively; the root cause analysis often contains the most candid admissions of systemic failures that will not appear in any other discoverable document.
Also discoverable: the hospital's prior sentinel event reports for the same type of event, if any; the hospital's Universal Protocol policies and any revisions made after prior wrong-site events; credentialing files for the surgeon including any prior wrong-site events at other institutions; and scheduling and pre-operative planning records showing how the scheduling error that contributed to the wrong-patient scenario (if applicable) originated.
Defendant Identification and the Institutional Theory
Wrong-site events almost always involve multiple failure points and multiple defendants. The surgeon who operated is directly liable under res ipsa or negligence per se. The hospital is liable both vicariously for employed surgical team members and directly under institutional liability theories for failing to implement an adequate Universal Protocol verification system. Where a resident or scrub tech made the site marking error, the attending surgeon and the supervising program (if a training hospital) are also potentially liable.
In wrong-patient surgery cases, the scheduling and admissions systems are also in the chain of causation. Patient identification errors that originate in the scheduling system, electronic health record interface, or wristband verification process implicate the hospital's administrative infrastructure as well as the surgical team's verification failure. The discovery scope in those cases is broader and includes the hospital's patient identification policies, EHR system configuration, and any prior patient identification errors that resulted in adverse events.
Damages in Wrong-Site Cases
The damages in wrong-site surgery depend heavily on two factors: what was done to the wrong site, and whether the correct procedure was ever performed. A wrong-side appendectomy followed by a second surgery to perform the correct appendectomy carries a different damages profile than a wrong-side amputation or a wrong-site laminectomy that removed healthy disc material leaving the pathological disc untouched. Map the injury at the wrong site and the injury from delayed treatment at the correct site separately; they are distinct damages elements.
In wrong-patient surgery, the damages to the patient who received an unneeded procedure may be significant: an unnecessary anesthesia event carries morbidity risk, unnecessary tissue disruption delays healing, and the patient's actual condition may have progressed while they were recovering from a surgery they never needed. The patient who was supposed to receive the procedure but did not may have experienced harm from delay of the intended treatment; that harm should be evaluated as a separate damages element.
For standard-of-care framework in other surgical malpractice contexts, see our medical malpractice practice area. The institutional liability and credentialing discovery discussed here also applies to the emergency physician and hospital liability cases covered in our case law and settlements section.