Patient safety work product
Two different protections get discussed on this site, and conflating them would be the easiest mistake to make. They are separate mechanisms with separate rules.
Patient safety work product — the federal mechanism
Under the Patient Safety and Quality Improvement Act of 2005 and the Patient Safety Rule at 42 C.F.R. Part 3, information developed by a provider within a patient safety evaluation system for reporting to a PSO can qualify as patient safety work product, which carries federal confidentiality and privilege protections. The Rule defines the terms — patient safety evaluation system, patient safety work product, disclosure, provider, workforce — at § 3.20, sets out confidentiality at § 3.206, and nonidentification at § 3.212.
The design intent is straightforward: a facility that can analyze its own failures without building the evidence against itself will analyze more of them. The Rule also contains exceptions to confidentiality — the disclosure permissions at § 3.206(b) — and the protections are not unlimited.
The regulation itself is public: 42 C.F.R. Part 3 in the eCFR.
Attorney work product — the mechanism the reporting channel uses
The CareGuard reporting channel transmits incident reports to the facility’s designated legal counsel, so that they are created for the attorney’s review rather than as routine business records. That is a different body of law with different tests, and it belongs to the facility and its lawyers, not to CareGuard. Legal work product.
Why they are described separately here
Because they protect different things, apply to different documents, and fail in different ways. Saying “your report is federally protected” would be sloppy at best. What is accurate is narrower: the reporting channel is designed to route reports to counsel, CareGuard retains no copy, and CareGuard’s status as a listed PSO is a separate fact about CareGuard.
None of this is legal advice. How either protection applies to a particular document in a particular proceeding is a question for a facility’s own counsel and, ultimately, a court. Anyone relying on either should get their own advice before they rely on it.
What this does not do
Neither mechanism turns a report into a filing with a regulator, and neither discharges a mandatory reporting obligation. Emergencies and official routes.