The Swiss Cheese Model: Why Doctors Get Sued and What Protects Them

Medical errors occur in healthcare systems around the world, including Canada, with a frequency that the profession has long acknowledged and worked to address. Yet not every error leads to a complaint. Not every complaint leads to litigation. And not every instance of substandard care results in a claim being filed, pursued, or won. Understanding why some errors produce legal claims while others do not (and what factors protect practitioners from litigation even when things go wrong) is illuminating for both potential claimants and for anyone seeking to understand how the medical malpractice system actually operates in practice.

At Acuity Medical Law, the factors that lead to civil litigation in healthcare settings are well understood from both the clinical and legal perspective. What emerges from that combined experience is a picture that is more nuanced than the simple narrative of error leading inevitably to lawsuit, and more instructive for understanding what the medical malpractice system is actually designed to address.

The Three Factors That Tend to Produce Civil Litigation

In the experience of medical malpractice practitioners, civil litigation in healthcare tends to arise from the convergence of three distinct factors. Each factor alone is not sufficient. It is their combination, their simultaneous presence in a single set of circumstances, that most reliably produces a legal claim. This convergence can be understood through what practitioners in this field sometimes describe as a Swiss cheese model of liability: the holes in each layer must align for the outcome to pass through.

Those three factors are: something substandard occurred, the patient was harmed, and the relationship between the practitioner and the patient broke down in a way that left the patient feeling that they had no recourse other than legal action.

Each of these factors deserves careful examination, both for what it reveals about the dynamics of medical malpractice litigation, and for what it suggests about the decisions and behaviours that are genuinely protective.

what substandard care means in the legal context and how it is established

Factor 1: Something Substandard Occurred

The first factor is the legal and clinical foundation of any medical malpractice claim: a departure from the standard of care that a reasonably competent practitioner in the same field would have been expected to meet. Without this element, there is no viable claim regardless of how seriously the patient was harmed or how acrimonious the relationship between patient and practitioner became.

As discussed elsewhere in this series, the standard of care is not a standard of perfection. It is the standard of reasonable competence, and reasonable competence, while it demands genuine professionalism and appropriate clinical judgment, does not require that every decision be optimal, that every diagnosis be made on first presentation, or that every treatment achieve its intended result. The law recognizes the genuine uncertainty of medicine and does not hold practitioners to an impossible standard.

What the law does hold practitioners to is the expectation that their clinical assessments are thorough relative to the complexity and risk level of the presentation, that their documentation reflects genuine clinical reasoning rather than perfunctory or absent engagement with the patient's condition, and that their decisions fall within a range that competent peers would recognize as defensible.

Where care falls clearly and significantly outside that range, where the assessment is conspicuously inadequate, where obvious risk factors are not addressed, where fundamental clinical steps are omitted without justification, the first factor in the litigation-producing convergence is present.

Factor 2: The Patient Was Harmed

The second factor is the harm element that Canadian negligence law requires: a measurable injury, whether physical, psychological, or financial, that resulted from the substandard care. Substandard care that produces no measurable harm is not the basis of a viable civil claim, regardless of how indefensible the conduct may have been.

This does not mean that harm is irrelevant to the moral assessment of substandard care. A practitioner who provides grossly substandard care but whose patient happens to suffer no adverse consequence has still provided grossly substandard care, and may face professional consequences through the regulatory college system. But the civil litigation system is designed to compensate for harm suffered, and without harm, there is nothing for a court to compensate.

The nature and severity of the harm is also directly relevant to whether a claim is practically viable to pursue. As has been addressed elsewhere in this series, the economics of medical malpractice litigation mean that claims where the measurable damages are very low may not be viable to pursue through formal litigation, even where the substandard care and the causal link are clear.

how the severity of harm affects the practical viability of a claim

Factor 3: The Relationship Between Practitioner and Patient Broke Down

The third factor is the one that is most often underestimated, and the one that, in the experience of medical malpractice practitioners, most reliably determines whether a patient who has experienced substandard care and suffered harm will ultimately pursue a legal claim.

The relationship between practitioner and patient, encompassing the quality of communication, the perceived genuineness of care and concern, and the degree to which the patient feels seen, respected, and honestly dealt with, is a powerful determinant of whether a patient who has been harmed concludes that legal action is the appropriate response. Where that relationship is strong, patients are significantly more likely to accept adverse outcomes, to attribute them to the genuine uncertainty of medicine rather than to negligence, and to decline to pursue legal action even where a viable claim may exist.

Conversely, where the relationship breaks down, where the patient perceives that the practitioner is dismissive, evasive, or dishonest; where appointments are cancelled without explanation following an adverse event; where the patient's concerns are minimized or deflected; where the patient feels that the practitioner is more concerned with their own protection than with the patient's wellbeing, the likelihood of legal action increases substantially, even in cases where the strength of the underlying claim is modest.

The practical implication of this for practitioners is significant: how a medical error is handled in the immediate aftermath is often as determinative of whether litigation follows as the severity of the error itself.

The Protective Effect of Honest Communication and Acknowledgement

A body of research and accumulated practical experience in the medical malpractice field supports the conclusion that honest, empathetic communication following an adverse event (including the acknowledgement that something went wrong, an explanation of what occurred to the extent it is known, and a genuine expression of concern for the patient) is associated with reduced rates of litigation and, where litigation does occur, more straightforward resolution.

In Canada, it is important to note that an apology alone does not constitute an admission of legal liability. Several Canadian provinces have apology legislation that explicitly provides that an expression of apology or regret is not admissible as evidence of fault or liability in civil proceedings. In Atlantic Canada, apology legislation exists in Nova Scotia, New Brunswick, and Prince Edward Island, though the specific provisions vary by province. Practitioners and institutions should be familiar with the applicable legislation in their jurisdiction.

The existence of apology legislation reflects a deliberate policy choice: that the law should not disincentivize honest and compassionate communication following adverse events, because such communication serves both the patient's interest in understanding what occurred and the broader interest in reducing unnecessary litigation. A practitioner who acknowledges what happened, expresses genuine concern, and engages honestly with the patient is not only doing the right thing; they are, in many cases, reducing the likelihood that a legal claim will follow.

what patients should do when they believe something has gone wrong

What Genuinely Protects Practitioners When Things Go Wrong

Understanding the three-factor model of what produces litigation also illuminates what genuinely protects practitioners when adverse events occur. Several practical and well-established responses are associated with reduced legal exposure following a medical error.

Thorough and Accurate Documentation

The medical record is the primary evidentiary document in any medical malpractice claim. A record that thoroughly and accurately documents the clinical reasoning behind decisions made, the findings on examination, the risk factors identified and addressed, the information communicated to the patient, and the rationale for the management plan adopted provides the clearest possible picture of what occurred and why. A record that is sparse, cursory, or inconsistent with the complexity of the patient's presentation does not merely fail to protect the practitioner; it actively undermines their position.

Thorough documentation is not about defensive medicine or the generation of paper trails for legal purposes. It is the professional standard for clinical record-keeping, and it serves patient safety as well as legal protection. A record that accurately reflects what occurred is the practitioner's most reliable protection, because it provides an honest account that can be defended, rather than leaving gaps that opposing counsel will fill with inference and expert opinion.

Prompt Mitigation of Harm

Where an error is identified, whether by the practitioner themselves, by a colleague, or through subsequent clinical events, prompt action to mitigate the harm is both a professional obligation and a legally protective step. The formal mechanism for correcting the record through an addendum, notifying the patient of what occurred and what is being done in response, and ensuring that appropriate follow-up care is arranged, reflects the standard of professional conduct expected of a practitioner who discovers that an error has occurred.

Attempting to conceal an error, by altering records, failing to disclose what occurred, or discouraging the patient from seeking independent advice, is not only professionally and ethically indefensible. It is legally catastrophic if discovered, as it will be. The medical record is not a single document controlled by a single practitioner. It is a multi-authored record involving every member of the treating team, and inconsistencies between different practitioners' accounts are identifiable and will be identified in the course of litigation.

Notifying Professional Liability Protection

Where a practitioner becomes aware that an adverse event has occurred that may give rise to a claim, they have a professional obligation to notify their professional liability protection provider (for physicians, typically the Canadian Medical Protective Association) as early as possible. Early notification allows the liability protection provider to begin its own assessment and to provide guidance to the practitioner on appropriate conduct in the aftermath of the event. Delay in notification can complicate the response and may have implications under the terms of the protection arrangement.

how the CMPA's involvement shapes the defence of medical malpractice claims

The Broader Significance of the Swiss Cheese Model

The Swiss cheese model of medical liability, in which litigation arises from the alignment of multiple factors rather than from any single one, has implications that extend beyond the individual practitioner-patient relationship. It suggests that the medical malpractice system is not, in practice, a mechanism that captures every instance of substandard care. It is a mechanism that captures instances where substandard care produced measurable harm and where the patient-practitioner relationship failed to contain the consequences.

For claimants, this means that the absence of a legal claim following substandard care does not mean that the care was acceptable; it may simply mean that the harm was not sufficiently measurable, or that the practitioner's response to what occurred was sufficiently honest and humane that the patient chose not to pursue a claim. For practitioners, it means that the quality of the human relationship with the patient, and the integrity of the response when things go wrong, is a genuinely protective factor that operates alongside clinical competence and thorough documentation.

For the healthcare system as a whole, the model suggests that investments in honest communication culture, disclosure practices, and patient-centred responses to adverse events are not merely ethically desirable; they are associated with real reductions in the litigation burden that the system faces.

what claimants should understand about pursuing a claim and what it involves