An active clinical device records a great deal about its own behaviour, and almost none of it is designed to be preserved for a lawyer. Event logs roll over, alarm histories are bounded, volatile memory clears on power loss, and a biomedical technician doing exactly the right thing for patient care can overwrite the record within an hour. Unlike a fractured implant, which will still be fractured next year, the strongest evidence in a device malfunction is perishable on a timescale of hours to days. What survives is largely decided in the first shift after the event, usually by people who have no idea a dispute is coming.
What as-found means for a powered device
For a pump, ventilator or monitor, the as-found state is not only the physical unit. It is the settings displayed at the moment of the event, the mode in use, the alarm limits then active, the accessories and disposables installed, the mains or battery status, and the position of every clamp, connector and switch.
Photographing the screen before anyone touches it costs seconds and frequently proves more than the teardown that follows. The serial or unique device identifier deserves the same treatment: it is the only reliable way to be certain later that the unit examined is the unit involved.
The log is not a single thing
Most devices maintain several distinct records with different retention behaviour: a clinical event log of programming changes and deliveries, an alarm history, a technical error or service log, trend or waveform data, and internal counters. They are not extracted the same way, and a vendor pulling one does not mean the others were captured.
There is usually a second copy elsewhere. Monitoring networks, middleware, alarm notification systems and the medical record hold timestamped data derived from the same device, on their own retention schedules. Where the device log is contested or sparse, that record can constrain the timeline independently.
Clock accuracy governs everything
Every reconstruction depends on aligning the device log with the clinical record, and device clocks drift, are set by hand, and are not always synchronised to hospital time. An offset of minutes changes which alarm preceded which intervention. The offset should be measured against a known reference before the unit is disturbed, because once it has been powered down and restarted that opportunity may be gone.
Power state and battery are evidence, not logistics
Where the allegation involves an unexpected shutdown, reset or failure to run on battery, the battery is the exhibit. Its charge at recovery, cycle count, age, date of last replacement and whether it was an original or third-party cell are all recoverable, and none of them survive a routine swap by a technician restoring the unit to service.
The outlet used and whether it was on emergency power matter for the same reason. A device that shut down and was immediately plugged in and restarted has already lost the state that would distinguish a brownout from a firmware fault.
Disposables and accessories leave with the patient
Administration sets, sensors, probes, cuffs, circuits and cables are consumables. They are discarded as a matter of course, and they carry lot numbers, physical evidence of loading or seating, and in some cases the identifying tag the device reads.
Whether the correct set was installed, seated properly and compatible with that device are questions the electronics cannot answer. The item itself answers them, and it is in a waste stream within minutes unless someone intervenes.
How the record is routinely destroyed
Rarely by bad faith. The common paths are a power cycle to clear a fault, a factory reset, a firmware update pushed across the fleet, a battery replacement, cleaning and reprocessing, redeployment, or a maintenance visit that resets counters and clears logs.
Rental and loaner equipment adds a further exposure: the unit returns to a shared vendor pool, after which identifying which physical device was involved may be impossible. Quarantining the unit under a written hold is the single most effective step available in the first hours.
Returning the unit to the manufacturer
Manufacturers are entitled to investigate. Complaint handling and medical device reporting under 21 CFR Part 803 depend on their evaluating the device, and a facility that reports an event is often asked to ship it back.
The difficulty is that the returned-goods investigation is conducted by an interested party, often before anyone else has seen the unit, and log extraction typically requires proprietary tools. A joint inspection protocol agreed in advance resolves this far more cheaply than a spoliation argument afterwards.
Order of operations once the unit is secured
Non-destructive first. Photograph and document as found, extract data before any functional testing, radiograph or CT the assembly before opening it, then disassemble under documented conditions with all parties on notice.
Functional testing runs last because it writes to the log, cycles the mechanism and consumes battery, all of which alter the exhibit. A defensible sequence is often what makes the findings admissible.
What a preservation notice should actually say
Naming the device is not enough. A useful notice identifies the unit by serial or unique device identifier, directs that it be removed from service unaltered, prohibits reset, update, servicing and battery replacement, calls for the disposables in place at the time, and separately demands monitoring network, middleware and medical record data before those retention windows close.
Care comes first, and equipment that is needed can usually be substituted rather than restored. The distinction worth drawing is between restoring clinical capability and erasing the record, which are separable with a little deliberate sequencing.
This article is general technical orientation, not a failure analysis, an engineering opinion, or advice on any specific matter. Determining the cause of a particular incident requires hands-on examination by a credentialed expert.