The report was four sentences long.
When Dorothy Hayes’s son requested her records after finding bruising across her upper arms and a deep laceration above her left ear, the facility handed him a manila envelope three days later. Inside was the incident report he had specifically asked about. It was dated the same day as her injury. It described “resident found on floor near bed, no witnesses present, vitals stable, physician notified.”
No witness names. No description of the wound. No documentation of how long she had been on the floor. No mention of the bruising on her arms, which predated the fall by at least a week based on the coloring. No indication of whether staff had checked on her before the fall. No record of any investigation into how or why it happened.
Four sentences. No answers.Her son read it three times. It told him almost nothing. And yet it existed, which meant the facility could claim they had documented the incident.
A report that reveals nothing is not documentation. It is a legal shield wearing the shape of one.
Incident reports are the documents that facilities do not want families to understand. Not because the reports are hidden, though some are. But because most families do not know what a proper incident report is supposed to contain, which means a four-sentence summary looks like compliance when it is not.
I have reviewed incident reports in malpractice cases and elder abuse investigations for years. The gap between what these documents are required to contain and what facilities actually produce is one of the most consistent patterns I see. And the legal architecture protecting those inadequate reports from scrutiny has grown significantly stronger in the past two years.
A 2025 investigation by the HHS Office of Inspector General found that U.S. hospitals failed to capture 49% of all patient harm events among Medicare patients. For nursing homes specifically, a companion report found that 43% of serious falls resulting in hospitalization were never reported in required federal assessments. OIG HHS, 2025
That is a system structured to miss what it does not want to record.
- What a proper incident report must contain under federal and Arkansas law
- How facilities sanitize, suppress, and legally shield incident reports from families
- The federal law that allows facilities to hide reports behind a privilege wall
- What the absence of a report means in court and how Arkansas law addresses it
- How to request the right documents and what to do when they do not exist
It documents what the facility chose to say happened.
- Reports with no witness names and no description of how the injury was discovered
- Injuries documented without any mention of investigation or corrective action
- Reports filed days after the incident with no explanation for the delay
- Serious injuries with no corresponding report anywhere in the file
- Facilities claiming PSQIA privilege to block report access in litigation
- Star ratings on CMS Care Compare that do not match the facility’s actual fall history
What a Proper Incident Report Must Contain
Incident reports should answer five questions: who, what, where, when, and why. When they answer none of them, the document is doing something else.
Before a family can identify what is wrong with an incident report, they need to know what a proper one looks like. This is information facilities count on families not having.
Under federal standards from the Agency for Healthcare Research and Quality, and under Arkansas regulations at 20 CAR § 401-310, an incident report is not a summary. It is a structured administrative record with specific required components. Code of Arkansas Rules
A complete incident report must include the full names of all witnesses, including staff and any other residents present. It must include a fact-based narrative of exactly what was observed, with no conjecture, no passive voice erasure of who was responsible, and no omission of relevant physical findings. It must document the immediate clinical response, including the exact time a physician was notified and what orders were given. It must include a severity rating indicating whether off-site care was required. And it must identify the individuals to whom the incident was internally reported and when.
The report Dorothy’s son received failed every one of those requirements. No witnesses. No physical description of the wound. No physician notification time. No severity rating. No internal escalation trail.
Facilities are also required under Arkansas law to submit a follow-up investigation report, Form DMS-762, within five working days of the initial notification. That form must detail the results of a thorough internal investigation and any corrective actions taken. Arkansas Office of Long Term Care
An incomplete report is still a document. What facilities do with serious incidents is more strategic than simply filing less.
Arkansas Reporting Timelines and How Facilities Exploit Them
- Accidental or unexplained death: Telephone report to OLTC within 1 hour
- Violent acts, fires, elopement: Telephone report to OLTC within 1 hour
- Alleged abuse or neglect: Form DMS-7734 by fax, 11:00 a.m. next business day
- Unexplained injury, property misappropriation: Form DMS-7734 by fax, 11:00 a.m. next business day
- Follow-up investigation: Form DMS-762 within 5 working days
Arkansas reporting timelines are specific by design. The state requires certain incidents to be reported by phone within one hour to prevent facilities from having time to coordinate a narrative before authorities are notified. The next-business-day deadline for Form DMS-7734 serves the same purpose for less immediately severe events.
What facilities have learned is that the classification of an incident determines which timeline applies. A fall that results in a laceration above the ear and unexplained bruising across both arms meets the threshold for an unexplained injury report. A facility that classifies it as a simple unassisted fall, without investigating the origin of the bruising, buys itself a slower timeline and a narrower reporting obligation.
The strategic risk for families: by the time a facility files anything, the event has already been categorized in a way that minimizes its severity, and that categorization follows the case through every subsequent review.
For incidents classified as internal-only, meaning events the facility determines did not directly threaten health, safety, or welfare, no external report goes to the state at all. These reports must be maintained on file for three years and are subject to audit. But they are not visible to families unless a surveyor specifically pulls them. Code of Arkansas Rules
If you receive records and the incident report is dated two or three days after the injury, ask specifically for the facility’s internal incident log for that period. The date on the log entry and the date on the report should match. When they do not, that gap is a documentation problem.
Even when facilities file reports on time, federal law gives them a powerful tool to keep those reports out of your attorney’s hands.
The Federal Privilege Shield Families Never Hear About
This is the pattern attorneys know about and families do not. It is also the one that has grown significantly more powerful in the past two years.
Facilities sometimes claim incident reports are legally protected and cannot be shared in lawsuits. This protection comes from a federal law called the Patient Safety and Quality Improvement Act, known as the PSQIA. It was designed to encourage honest reporting of medical errors by protecting those reports from being used as evidence in court. The idea was that if facilities feared their internal safety reviews would be subpoenaed in every lawsuit, they would stop conducting honest reviews. The law created a category called Patient Safety Work Product, or PSWP, which cannot be used in civil, criminal, or administrative proceedings. HHS.gov
In practice, many facilities now route incident reports directly into their Patient Safety Evaluation System, the internal structure that feeds a federally listed Patient Safety Organization. Once a report enters that system, it becomes untouchable.
In 2024, two court rulings made this shield even harder to break. In In re BayCare Medical Group, the Eleventh Circuit held that it does not matter whether a document was created for multiple purposes. If it entered the patient safety system, it is privileged. In Sunrise Hospital v. Eighth Judicial District Court, the Nevada Supreme Court ruled that the PSQIA privilege cannot be waived, meaning even if a facility representative accidentally testifies about a report’s contents, the report itself still cannot be produced in discovery. SACS Law
The result is a legal structure where the most factually complete account of what happened to your loved one is permanently shielded from the people who were harmed.
There is one important limit. The PSQIA does not protect the original medical record, billing information, or records maintained separately from the patient safety system. A 2025 Kentucky Supreme Court ruling clarified that routine incident reports required by state law remain discoverable even when root cause analyses are not. The line between what is privileged and what is not is actively being litigated, which is why this area requires an attorney who knows where to push.
When reports are hidden behind privilege, they become difficult to obtain. When reports disappear entirely, the law treats that differently.
When the Report Does Not Exist: Spoliation and Arkansas Law
In Part 1 of this series, the point was made that the absence of an incident report is itself evidence. Arkansas law goes further than that. It gives a jury specific instructions about what to conclude when a required document cannot be found.
The legal doctrine is called spoliation of evidence. It applies when a party destroys, loses, or fails to preserve a document they were required to maintain. For a nursing home, the duty to preserve an incident report is triggered the moment a serious adverse event occurs, not when they are served with a lawsuit. Munley Law
Under Arkansas Model Jury Instruction AMI 106, if a jury finds that a facility intentionally destroyed, lost, or suppressed a document with knowledge that it may be material to a claim, the jury may draw an inference that the contents of that document would have been unfavorable to the facility. This is called a spoliation inference, and it shifts the burden back to the facility to explain why the record is absent.
In the 2026 Arkansas case Nichols v. Swindoll, a court applied the case-within-a-case requirement to a missing incident report. Because the report that would have identified which staff members were present during a fatal error had disappeared, the plaintiff could not meet the evidentiary threshold for proximate causation. The facility avoided liability not because it proved the care was adequate, but because the evidence of who was responsible had been removed from existence.
Facilities understand this calculus. Some will accept the risk of a spoliation instruction rather than produce a document that confirms liability. The economic calculation favors suppression in cases where the evidence is damning enough.
What this means for families: if you suspect a report was filed and then removed, ask your attorney to request the facility’s complete incident log for the relevant period. Ask for the DMS-7734 submission confirmation from the Arkansas Office of Long Term Care. If the facility submitted a report to the state and claims it no longer has a copy, that is a spoliation problem with a paper trail.
The suppression of incident reports is not limited to individual facilities. It is supported by the same corporate structures that profit from keeping the data invisible.
Star Ratings, Fall Data, and the Manipulation of Public Records
This matters because families often rely on CMS star ratings when choosing a facility. CMS Care Compare is the federal database families use to evaluate nursing homes before placing a loved one. Facilities receive star ratings based on health inspections, staffing levels, and quality measures. One of those quality measures is fall rates.
The 2025 OIG companion report on nursing home fall data found that facilities with the lowest reported fall rates on Care Compare were often those with the highest rates of non-reporting. High star ratings in some facilities reflect data manipulation rather than superior care. OIG HHS, 2025
For-profit and chain-affiliated nursing homes failed to report serious falls significantly more often than non-profit or independent facilities. The incentive is direct: underreporting reduces the number of deficiencies in the public record, which improves star ratings, which drives admissions, which increases revenue.
The Minimum Data Set, or MDS, is the federal assessment tool nursing homes use to report clinical data to CMS. Falls resulting in major injury must be reported in the MDS. When a facility classifies a fall as minor, or fails to complete the MDS assessment for a resident who was hospitalized after a fall, that event disappears from the public record entirely.
A 2017 whistleblower case involving Golden Living, settled for $72 million, revealed a corporate strategy of high rates of undocumented care across its chain facilities. Internal incident reports showed executives knew about systemic care failures, but those reports never reached the public record or triggered corrective action. The documentation existed inside the corporation. The residents paid the price outside of it. Medicare Advocacy
The star rating your family saw before placing your loved one may have been built on data that was never complete.
What You Can Do With This Information
Request the incident report by name and ask specifically for Form DMS-7734 and Form DMS-762. If the facility says no incident was reported, contact the Arkansas Office of Long Term Care directly and ask if a report was submitted for that date. The OLTC maintains its own records, separate from what the facility hands to families.
Ask for the facility’s internal incident log for the relevant time period. The log tracks every incident by date, whether or not an external report was filed. If a log entry exists for your loved one’s injury but no corresponding report exists in the file, that gap is evidence of a documentation failure.
If you are told documents are protected under PSQIA privilege, write that claim down and bring it to an attorney. The privilege is real, but its application is actively contested in courts. A 2025 Kentucky ruling confirmed that routine incident reports required by state law remain discoverable even when other safety documents are not. The line is worth challenging.
Look at the CMS Care Compare profile for the facility. Check the quality measures section for fall rates and compare them to the number of deficiency citations in the inspection reports. A facility with very low reported falls but multiple deficiency citations related to fall prevention has a data inconsistency worth examining.
If you suspect a report was filed and later removed, your attorney can request the facility’s EHR audit trail for that record. Every access, edit, and deletion of an electronic document is logged. That log is not the same as the incident report, and it is not shielded by the same privilege rules.
If you need help understanding what you have, Silent Voices accepts story submissions from families navigating exactly this situation. You do not need proof. You need to start somewhere.
Leave a Reply