What Are the Three Levels of Liability in Health Care?

When a patient is harmed by medical care, responsibility can fall on any or all of three parties, and the three levels of liability in healthcare are the individual clinician who provided the treatment, the hospital or facility where the care took place, and the company that made any drug or device involved. These levels operate under different legal standards, and a single injury often triggers claims against more than one. A surgical mistake, for instance, may expose the surgeon to malpractice, the hospital to corporate negligence for weak oversight, and a device maker to product liability if faulty equipment contributed.

Level One: The Individual Provider

The clinician who treated you — doctor, nurse, pharmacist, or other licensed professional — is the most familiar target of a healthcare claim. This is medical malpractice, and it turns on whether the provider met the standard of care: the level of skill and attentiveness a competent professional in the same specialty would have shown under the same circumstances. Perfection isn’t the benchmark. Medicine involves uncertainty, and a bad outcome by itself proves nothing. What matters is whether the provider’s judgment or conduct fell below what peers would accept.

A patient generally has to prove four things to win. A professional relationship existed, which created a duty of competent care. The provider breached that duty by doing something wrong or failing to do something necessary. The breach directly caused the injury rather than some unrelated factor. And the patient suffered real harm, whether physical, financial, or emotional.

Why Expert Testimony Usually Decides the Case

Most malpractice claims live or die on expert testimony. In nearly all cases, the patient must present a qualified medical expert who can explain what the standard of care required and how the defendant fell short.¹ Judges and jurors don’t have the training to evaluate clinical decisions on their own. Without an expert willing to back the claim, dismissal often comes before trial.

There’s a narrow exception for situations so obviously negligent that no medical training is needed to see the problem, such as a surgeon operating on the wrong limb or leaving an instrument inside a patient.¹ Everything else needs an expert.

Informed Consent as a Separate Claim

A provider can be liable even when the procedure itself was performed competently, if they failed to obtain meaningful informed consent. Signing a form isn’t enough. The provider has to explain the diagnosis, the proposed treatment, its significant risks, reasonable alternatives, and what could happen if the patient declines. If that conversation never happens and a hidden risk materializes, the patient may have a claim.

Courts measure informed consent one of two ways. Some states ask whether a reasonable physician would have disclosed the information. Others ask whether a reasonable patient would have considered it important. The patient-centered standard generally makes claims easier to bring. Either way, the patient must show that a fully informed person in their position would have chosen differently, and that the undisclosed risk caused the harm.

Level Two: The Healthcare Facility

Hospitals, clinics, and similar facilities carry their own layer of liability, independent of what any single clinician did. This organizational responsibility comes in two forms: the institution’s own negligence, and its answering for the negligence of its people.

Corporate Negligence

The idea that a hospital has independent duties to patients, rather than just providing a building where doctors happen to work, was established by the Illinois Supreme Court in Darling v. Charleston Community Memorial Hospital. The court rejected the old view that hospitals merely “procure” doctors who then act on their own responsibility, recognizing that modern hospitals hold themselves out as providing care and charge patients for it.² Hospitals must monitor the quality of care delivered within their walls and step in when something is going wrong.

Corporate negligence claims usually involve one of a handful of institutional failures:

Negligent credentialing, where the hospital failed to properly investigate a physician’s qualifications, training, malpractice history, or discipline before granting privileges, including periodic re-credentialing.
Inadequate supervision, where staff weren’t monitored or the hospital failed to intervene when a provider’s performance raised red flags.
Understaffing, where too few qualified personnel were on duty to deliver safe care.
Unsafe facilities or equipment that created hazards for patients.

The important point for patients: a hospital can be liable under corporate negligence even when the clinician who treated you was technically an independent contractor. The hospital’s own failure in screening, supervising, or maintaining its facility is what creates the liability.²

Vicarious Liability for Employees

Under respondeat superior, an employer is responsible for the negligent acts of its employees when those acts happen within the scope of the job. If a hospital-employed nurse gives the wrong medication, the hospital is on the hook regardless of whether it did anything careless in hiring or training that nurse.³ The employer profits from the work, so it bears the risk when the work goes wrong.

Whether a clinician counts as an employee turns mostly on control. If the hospital directs the details and manner of the work, the clinician is generally an employee. If the clinician runs an independent practice and sets their own methods, they’re likely an independent contractor, and respondeat superior generally does not reach them.³

Apparent Agency: The ER Loophole That Isn’t

Many hospital-based physicians — emergency room doctors, anesthesiologists, radiologists — technically work as independent contractors. On paper, the hospital shouldn’t be vicariously liable for their mistakes. But patients walking into an emergency room don’t investigate anyone’s employment status. They assume the providers work for the hospital.

Courts addressed this through the doctrine of apparent agency, sometimes called ostensible agency. If the hospital held a provider out as its own, or did nothing to clarify the independent contractor arrangement, and the patient reasonably relied on that appearance, the hospital can still be held liable. The key question is why the patient went to that facility and whether the hospital did anything to create the impression that its physicians were employees.³ Emergency rooms are the classic battleground, because patients rarely choose their ER doctor.

Level Three: The Product Manufacturer

The third level targets the companies that design, manufacture, and sell medical devices, drugs, and other healthcare products. When a defective product injures a patient, anyone in the commercial chain of distribution may be liable. Product defects fall into three categories, each with its own standards.

The Three Types of Defect

Manufacturing defects, where a specific unit or batch departs from the manufacturer’s own intended design because of an error in production. The design was fine; something went wrong at the factory. True strict liability applies here, so the claim can succeed even if the manufacturer took every reasonable precaution.
Design defects, where the entire product line is unreasonably dangerous because of how it was designed, even if every unit was built exactly as intended. Most courts require the plaintiff to show a reasonable alternative design existed that would have reduced the risk without sacrificing usefulness.
Warning defects, where the product lacked adequate instructions or failed to alert users to foreseeable risks. A drug label that omits a dangerous interaction, or a device with a non-obvious misuse risk the manufacturer never warned about, can trigger this type of claim.

One nuance often gets glossed over. Strict liability in the traditional sense — liability regardless of fault — applies most cleanly to manufacturing defects. For design and warning defects, courts increasingly apply something closer to a negligence-like analysis, asking whether the manufacturer’s choices were reasonable given the foreseeable risks.⁴ The label still gets used, but the practical standard is more demanding than plaintiffs often expect.

The Learned Intermediary Doctrine

Pharmaceutical companies have a distinctive shield against warning-defect claims. Under the learned intermediary doctrine, a drug manufacturer satisfies its duty to warn by providing adequate information to the prescribing physician, not directly to the patient. The physician is treated as best positioned to weigh a drug’s risks and benefits for each patient and communicate them accordingly. If the manufacturer gave the prescribing doctor sufficient warnings and the doctor failed to pass them on, the manufacturer may escape liability while the doctor may not. The doctrine applies broadly across most states.

FDA Preemption for Medical Devices

Devices that went through the FDA’s premarket approval process carry a powerful defense for their manufacturers. In Riegel v. Medtronic, Inc., the U.S. Supreme Court held that state tort claims challenging the safety or effectiveness of an FDA-approved device are preempted when they would impose requirements “different from, or in addition to” federal standards.⁵ Put plainly, if the FDA already reviewed and approved the device’s design, a state lawsuit can’t second-guess that approval.

Claims can still survive if they “parallel” federal requirements, meaning they allege the manufacturer violated the FDA’s own rules rather than imposing new ones.⁵ Proving a parallel claim is difficult. Preemption applies primarily to Class III devices, the highest-risk category like implantable defibrillators and artificial joints, that go through premarket approval. Lower-risk devices cleared through the less rigorous 510(k) process generally don’t get the same protection.

What Can Stop a Claim Before Anyone Reaches the Merits

Knowing which level of liability applies is only half the picture. Several defenses and procedural rules can end a case regardless of how strong the underlying evidence is.

Comparative Fault

If the patient’s own actions contributed to the injury — ignoring medical advice, hiding a pre-existing condition, skipping follow-up care — recovery can be reduced or barred. Under pure comparative negligence, a patient found 60% at fault still recovers 40%. Under modified comparative negligence, used in most states, a patient whose fault exceeds 50% or 51% recovers nothing. A small number of states still follow contributory negligence, where any fault by the patient eliminates recovery entirely.

Statutes of Limitations and Repose

Every state sets a deadline for filing a malpractice suit, and missing it kills the claim regardless of the evidence. Deadlines range from one year in states like Ohio and Louisiana to five or more in states like Georgia and Kentucky. Many states apply a discovery rule that starts the clock when the patient discovers or reasonably should have discovered the injury, rather than when the treatment occurred.

Statutes of repose are a separate, harder deadline that runs from the medical act itself, regardless of when the patient learned about the harm. These typically range from four to ten years. A patient who discovers years later that a surgical sponge was left inside them may get a discovery-rule extension on the statute of limitations but still be blocked by the statute of repose.

Certificates of Merit

A significant number of states require the plaintiff to file a certificate of merit, sometimes called an affidavit of merit, alongside or shortly after the complaint. This is a sworn statement from a qualified medical expert confirming the claim has a reasonable basis: the expert has reviewed the case and believes the standard of care was breached and caused the injury.⁶ Filing without one in a state that requires it typically ends the case.

Pretrial Screening Panels

Roughly half the states require some form of pretrial screening before a malpractice case can move to litigation. These panels, typically made up of physicians, attorneys, and sometimes laypersons, evaluate whether the claim has enough merit to proceed. The goal is to filter out baseless claims and push legitimate ones toward settlement.⁷ Panel findings are not always binding, but an unfavorable result can weaken the plaintiff’s position at trial.

Damage Caps

Many states cap non-economic damages like pain and suffering in malpractice cases. Caps vary widely, from $250,000 in some states to over $1 million in others, and several include inflation adjustments. Some states exempt catastrophic injuries or wrongful death from the cap or set a higher ceiling for those cases. The practical effect matters: a cap can mean that even a successful plaintiff with devastating injuries recovers far less than a jury would otherwise award.

1
PubMed Central. The Expert Witness in Medical Malpractice Litigation
2
Justia Law. Darling v Charleston Community Memorial Hospital
3
PubMed Central. Responsibility for the Acts of Others
4
Legal Information Institute. Products Liability
5
Justia US Supreme Court. Riegel v Medtronic Inc – 552 US 312 (2008)
6
National Conference of State Legislatures. Medical Liability/Malpractice Merit Affidavits and Expert Witnesses
7
PubMed Central. Medical Malpractice Reform – The Role of Alternative Dispute Resolution