Electronic medical records preserve more than notes. Their audit trails can reveal who accessed a chart, when changes were made and how the system recorded events. New York’s broad disclosure rule (CPLR 3101), “full disclosure of all matter material and necessary,” sets the stage, but courts police scope.
Defendants who preserve and produce targeted, relevant audit-log data fare better than those who ignore audit trails entirely or, conversely, reflexively resist any production. The statute itself signals the breadth. The case law supplies the boundaries.
On preservation, New York’s First Department adopted the Zubulake-style duty to issue timely litigation holds in VOOM HD Holdings v. EchoStar. Delay or half-measures can justify sanctions. The Court of Appeals then clarified in Pegasus Aviation that even negligent loss of ESI may draw sanctions if the evidence should have been preserved and its loss prejudices the other side. For providers, that means locking down audit logs and disabling auto-purge settings as soon as litigation is reasonably anticipated, documenting collection steps and coordinating with vendors on export formats.
Required production
On scope, New York appellate courts have required production when the requesting party shows the audit trail is reasonably likely to yield relevant evidence. However, they have also affirmed limits when requests are overbroad or unsupported.
Vargas v. Lee is a leading Second Department example requiring production of targeted audit-log segments tied to the issues. But, courts will curb fishing expeditions.
In short, tie requests to disputed facts, and tailor objections and productions accordingly. A defensible approach blends early preservation with reasoned negotiations over the “what” and “how” of audit-trail exports under CPLR 3101.

