Manager of Clinical Research Operations

AI scribes, patient consent, and expanding governance risk in clinical documentation. A newly filed class-action lawsuit may be one of the clearest signals that documentation integrity has moved beyond a clinical and coding concern, and into an enterprise-level governance issue. For executive leaders, this is not simply about adopting artificial intelligence (AI). It is about how documentation technologies across a rapidly expanding vendor landscape intersect with legal risk, data governance, and the integrity of the medical record itself. In April 2026, patients filed a proposed class-action lawsuit against Sutter Health and MemorialCare in the U.S. District Court for the Northern District of California, alleging that ambient AI scribe technology was used during clinical encounters without appropriate patient knowledge or consent.[1] These tools, designed to capture physician-patient conversations and generate real-time clinical documentation, are being rapidly deployed across health systems as part of broader digital transformation strategies. The allegations center on three primary issues: the absence of meaningful patient consent, the capture of sensitive protected health information (PHI), and the potential transmission of those recordings outside the clinical environment for processing.[1] In a state such as California, where all-party consent is required under the California Invasion of Privacy Act (CIPA), the legal exposure is significant.[2] However, the implications extend far beyond this case - and far beyond a single category of technology. Historically, documentation integrity has been approached through clinical and operational lenses, with a focus on ensuring that the medical record accurately reflects patient acuity, supports coding, and aligns with reimbursement and quality frameworks. That model is no longer sufficient. Documentation must now be understood as a governed enterprise asset, shaped not only by clinical decision-making, but by the technologies used to generate it, the vendors that process it, the workflows that support it, and the policies that govern it. This case underscores a fundamental shift: the integrity of the medical record is no longer defined solely by its content; it is defined by the systems, workflows, and decisions that produce it. While this lawsuit focuses on ambient AI scribes, it represents only one segment of a rapidly evolving documentation ecosystem. Health systems are increasingly adopting a wide range of tools, including AI-assisted note generation embedded within the electronic health record (EHR), digital dictation and transcription platforms, clinical summarization tools, and automation technologies that influence both coding and documentation workflows.[3] Each of these solutions is designed to reduce provider burden and improve efficiency, and in many cases, they succeed. But when these tools are selected or implemented primarily to address provider experience or departmental efficiency, a critical gap begins to emerge. Ease of documentation does not equate to integrity of documentation. More importantly, it does not ensure regulatory compliance or downstream defensibility. Across organizations, documentation technologies are often adopted through decentralized decision-making. Clinical teams prioritize usability and provider workflow. IT teams focus on integration, scalability, and performance. Operational leaders emphasize efficiency and throughput. Each of these priorities is valid. However, without enterprise-level governance, these decisions can introduce unintended consequences across revenue integrity, compliance exposure, audit risk, and payer defensibility. A tool that simplifies documentation may inadvertently introduce variability in how consent is obtained or communicated. A vendor solution may process data in ways that are not fully aligned with organizational policies or regulatory expectations. AI-generated documentation may lack the specificity required for accurate coding, risk adjustment, or quality reporting. Documentation workflows may not support medical necessity in a manner that withstands payer review. While these issues may appear isolated, their cumulative effect creates systemic risk. The most significant vulnerability is not the technology itself; it is who is or isn't included in the decision-making process. Documentation technologies are frequently evaluated without full representation from the stakeholders most directly impacted by their downstream use. Effective governance requires the deliberate inclusion of clinical documentation integrity (CDI), revenue integrity, compliance and legal, and physician advisors. Each of these groups brings a critical perspective. CDI ensures that the clinical story is complete, accurate, and aligned with how it ultimately will be coded and reported. Revenue Integrity evaluates the downstream financial implications, including reimbursement and denial risk. Compliance and legal establish defensible consent frameworks and ensure alignment with regulatory expectations. Physician advisors provide essential clinical context, ensuring that documentation reflects medical necessity and withstands external scrutiny by payers and auditors. Without this multidisciplinary approach, organizations risk implementing solutions that optimize the front end of documentation while destabilizing the back end. At the center of this is the concept of documentation provenance, the ability to clearly define how the medical record is created. In a traditional model, documentation provenance was straightforward, with providers authoring the record directly. Today, documentation may be dictated, scribed, AI-assisted, or generated through hybrid workflows. Each pathway introduces different considerations for transparency, consistency, and defensibility. This raises a critical question for executive leadership: can the organization clearly explain and defend how its documentation is created? If the answer is unclear, the implications extend well beyond privacy or compliance concerns. Documentation provenance directly impacts medical-necessity determinations, risk-adjustment accuracy, quality performance, and payer audit outcomes. If the process behind the documentation is questioned, the documentation itself becomes vulnerable, regardless of its clinical accuracy. These risks are further amplified by the speed at which documentation is now accessed and evaluated. With increasing interoperability and application program interface (API)-enabled data exchange, clinical documentation is no longer reviewed weeks after discharge. It is often accessed within days or even hours of creation.[4] This creates a new reality in which documentation workflows are exposed to external scrutiny almost immediately. There is little opportunity to correct inconsistencies, clarify intent, or address gaps once documentation has been created. For executive leadership, this means that governance can no longer be retrospective. It must be embedded directly into the documentation process at the point of care. One of the most significant risks introduced by modern documentation technologies is variability. Even well-designed tools can be used differently across providers, departments, and care settings. When consent is explained inconsistently, when documentation workflows vary, or when AI tools are used differently across clinical areas, issues arise. From a legal, compliance, and revenue perspective, inconsistency is difficult to defend. It signals a lack of control and increases exposure to denials, audit findings, and legal risk. This case should not be viewed as an isolated legal event. It represents a broader inflection point where AI adoption, vendor-driven documentation solutions, regulatory expectations, and payer scrutiny are converging. Organizations that continue to approach documentation technology as a localized or departmental decision will face increasing exposure. Those that approach it as a governed enterprise strategy, with multidisciplinary oversight and clear accountability, will be better-positioned to manage risk and maintain defensibility. Healthcare organizations have made significant progress in improving documentation to support coding, quality, and reimbursement. That work remains essential. But the standard has evolved. Documentation is no longer just a clinical record. It is a governed data asset, a legal artifact, and a reflection of the integrity of organizational processes. And in this environment, the question is no longer just whether documentation is accurate. It is whether it can withstand scrutiny, before, during, and after it is created. Because in this next phase of documentation integrity, defensibility is no longer retrospective. It begins at the moment the record is born. References * Techtarget. Sutter Health, MemorialCare face class action lawsuit over AI scribe use. Published April 2026. https://www.techtarget.com/healthtechsecurity/news/366641717/Sutter-Health-MemorialCare-face-class-action-lawsuit-over-AI-scribe-use * California Invasion of Privacy Act (CIPA), Cal. Penal Code § 632. https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN&sectionNum=632 * American Medical Association. Augmented intelligence in health care: AI and clinical documentation. https://www.ama-assn.org * Centers for Medicare & Medicaid Services. CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F). 2024. https://www.cms.gov

MemorialCare Long Beach Medical Center has appointed Gary Purushotham as chief executive officer and Sapna Mehta, D.O., as chief medical officer, establishing a dyad leadership model. Purushotham previously served as CEO of Detroit Medical Center Sinai-Grace Hospital for nearly four years, whilst Dr Mehta has worked as a hospitalist at Long Beach Medical Center for over seven years. Purushotham's first-year priorities include realigning with physician partners, implementing cost transformation initiatives to improve care access and surgical throughput, and advancing the hospital's high-reliability organisation journey. Dr Mehta will focus on improving patient experience from emergency department through discharge, reducing redundancies and continuing high-reliability efforts. She will maintain a scaled-back clinical schedule whilst serving in her administrative role.

MemorialCare Saddleback Medical Center achieves tenth national "A" Safety Grade from Leapfrog. PR Newswire Today at 12:00am PDT LAGUNA HILLS, Calif., May 6, 2026 /PRNewswire/ - MemorialCare Saddleback Medical Center has earned an "A" Hospital Safety Grade from The Leapfrog Group, a national nonprofit watchdog that sets rigorous standards for excellence in patient care. This marks the tenth time Saddleback Medical Center has received an "A" grade, recognizing Saddleback Medical Center's achievements in protecting patients from preventable harm and error in the hospital. "Receiving Leapfrog's 'A' Hospital Safety Grade for the tenth time demonstrates our sustained commitment to patient safety and quality care," said Shela Kaneshiro, RN, Chief Executive Officer, MemorialCare Saddleback Medical Center. "It speaks to the dedication of our physicians, clinicians and staff who continuously work to create a safe, healing environment for our community." Leapfrog assigns grades of "A," "B," "C," "D" or "F" to general hospitals nationwide based on over 30 national performance measures. These measures evaluate errors, accidents, injuries, infections, and the systems hospitals have in place to prevent harm. Established process improvements and clinical standards at Saddleback Medical Center support a strong focus on clinical quality and patient experience, reflecting Saddleback Medical Center's continued commitment to community health and patient safety. In addition, Saddleback Medical Center has earned national recognition, including designation as one of America's 250 Best Hospitals(TM), and maintains a Level 3 Geriatric Emergency Department, reflecting its commitment to high-quality, age-friendly care. The Leapfrog Hospital Safety Grade is the only national ratings program focused exclusively on how well hospitals prevent medical errors, infections and injuries - issues that contribute to more than 500 patient deaths each day in the U.S. The Leapfrog Hospital Safety Grade is peer-reviewed, fully transparent, and free to the public. Grades are updated twice annually in the fall and spring. About MemorialCare Saddleback Medical Center MemorialCare Saddleback Medical Center, part of MemorialCare, a not-for-profit, integrated healthcare system, has served South Orange County for more than fifty years. It is recognized for excellence in cancer, heart, orthopedics, women's health, maternity care and minimally invasive and robotic-assisted surgery. It is a STEMI receiving center for stroke and heart attacks, holds a Geriatric Emergency Department Accreditation and is a certified Thrombectomy-Capable Stroke Center. Saddleback Medical Center is the only Orange County hospital to centralize women's specialty care under one roof at the Women's Health Pavilion. Saddleback Medical Center is nationally recognized for maternity care by U.S. News & World Report and Newsweek; named one of Healthgrades America's 250 Best Hospitals; and ranked as a top hospital in the Los Angeles Metro area by U.S. News & World Report. Visit memorialcare.org/saddleback. About The Leapfrog Group Founded in 2000 by large employers and other purchasers, The Leapfrog Group is a national nonprofit organization driving a movement for giant leaps for patient safety. The Leapfrog Hospital Safety Grade, Leapfrog's other main initiative, assigns letter grades to hospitals based on their record of patient safety, helping consumers protect themselves and their families from errors, injuries, accidents and infections. SOURCE MemorialCare Saddleback Medical Center This is a paid placement. For further inquiries, please contact PR Newswire directly.