9.3 Service of Process and Accepting Legal Documents
Key Takeaways
- Service of process starts a statutory answer clock: generally 21 days after service in federal court under the Federal Rules of Civil Procedure, or 60 days when service is waived, while state deadlines vary and commonly run 20 to 30 days.
- Missing the answer deadline exposes the organization to a default judgment, which can lose a fully defensible case without any trial on the merits.
- Only the designated registered agent and a short list of trained authorized recipients may accept service; reception, unit clerks, and clinical staff must neither accept nor refuse but route the server immediately.
- Legal documents must be date- and time-stamped at the moment of receipt because the response period runs from service, not from the date risk management discovers the document.
- A subpoena signed by an attorney is not a court order, and any practitioner named individually in a suit must be notified promptly so that their own professional liability coverage is triggered.
Service of Process and Accepting Legal Documents
This topic sits in two domains at once. Domain 4 asks the risk manager to develop policies and procedures for acceptance of legal documents such as summonses, complaints, subpoenas, and court orders. Domain 5 asks the risk manager to manage the response to service of process and to notify appropriate parties of such service. One is the policy; the other is the execution. The exam tests both because the failure mode is identical and catastrophic.
Why an Envelope Gets Its Own Policy
Service of process is the formal legal delivery of a summons — the court's command to appear and respond — together with the complaint that states the plaintiff's allegations. Service starts a statutory clock. In federal court a defendant generally must serve an answer within 21 days after being served under the Federal Rules of Civil Procedure, or within 60 days where service was waived. State deadlines vary and commonly run 20 to 30 days, sometimes measured from a different triggering event. The risk manager must know the local rule and must never assume a national number.
If that deadline passes without a response, the plaintiff may seek a default judgment — a judgment entered because the defendant failed to answer, not because the plaintiff proved anything. A completely defensible case, with excellent documentation and a supportive expert, can be lost without a trial because a summons sat in a unit clerk's drawer over a holiday weekend. That consequence is the tested point. Setting aside a default is possible in many jurisdictions, but it is discretionary, expensive, requires showing good cause, and is never guaranteed.
Designing Who May Accept
The policy has two halves: a very small number of people who may accept, and unambiguous instructions for everyone else.
- Registered agent. The organization designates a registered agent for service of process with the state, often a corporate officer or a commercial registered-agent service. This is the intended front door and should be the address plaintiffs' counsel finds first.
- Authorized recipients. A short, named, trained list — typically the general counsel's office, a risk management designee, and the administrator on duty or house supervisor after hours — each with a named backup.
- Everyone else. Reception, registration, unit clerks, nurses, and physicians must neither accept nor refuse service on their own judgment. Refusing is often ineffective, because in many jurisdictions service may still be valid, and it looks evasive. Accepting without a process starts a clock nobody is tracking. Staff direct the server to the designated recipient and call risk management immediately.
- After-hours and weekend coverage. Servers appear at night and on Friday evenings for exactly this reason. The policy must name who is reachable at 8 p.m. on a Saturday and how to reach them.
Intake steps at the moment of receipt
- Date- and time-stamp the document and record the method of delivery and the name of the person who served it. The response clock runs from service, not from when risk management discovers the document.
- Scan or photocopy immediately and preserve the original intact, including the envelope where the postmark may matter.
- Log the document in a central legal-document register with a unique number, the parties, the document type, the date and time of service, and the calculated deadline.
- Notify the same day — risk management, legal counsel, and the professional liability insurer or third-party administrator (TPA).
- Calendar the response date in a system with layered reminders that do not depend on one person's memory or attendance.
A summons and complaint naming the hospital is properly served but the answer deadline passes without a response being filed. What is the most significant consequence the risk manager must anticipate?
Document Types and the Response Each Demands
Not every legal envelope means the same thing, and a policy that treats them identically will either over-react or miss a deadline.
| Document | Who may accept | Immediate action | Notification target |
|---|---|---|---|
| Summons and complaint (new lawsuit) | Registered agent or named authorized recipient only | Time-stamp, log, calculate the answer deadline, open a claim file, institute the litigation hold | Risk management, general counsel, carrier or TPA, any individually named defendant |
| Subpoena duces tecum (produce records) | Authorized recipient; commonly routed to Health Information Management | Verify validity and scope, calendar the return date, complete the disclosure analysis before releasing anything | Risk management, counsel, HIM and the privacy officer |
| Deposition subpoena (testimony of an employee or practitioner) | Authorized recipient | Identify the witness, notify them, arrange representation and preparation, confirm the date | Risk management, counsel, the witness and their department leader |
| Court order (signed by a judge) | Authorized recipient | Read the exact command and the deadline; non-compliance risks contempt | Counsel immediately, then risk management and administration |
| Search warrant (law enforcement, on site, immediate) | Administrator on duty or security supervisor | Do not obstruct; call counsel immediately; observe and document what is taken; request or create an inventory | Counsel, risk management, administration, privacy officer |
| Regulatory or agency demand (state survey agency, licensing board, OIG, attorney general) | Authorized recipient | Determine the statutory response window and the exact scope; preserve responsive material | Compliance officer, counsel, risk management, administration |
Two points recur on the exam. First, a subpoena signed by an attorney is not a court order. It commands production, but the fact that it demands records does not by itself authorize the release of protected health information; the disclosure analysis is a separate step covered in the release-of-information section of this guide. Second, when a document names an individual practitioner, that individual must be notified promptly and their own coverage triggered. Whether they are covered under the organization's policy or their own carrier determines who assigns defense counsel, and an employed physician who never learns they were served personally can default personally while the organization answers on time.
At 6:45 p.m. on a Friday, a process server hands an envelope to a unit secretary on a medical-surgical floor and walks away. Which policy design best protects the organization?
Immediate Downstream Actions on a New Complaint
Receiving a summons and complaint converts a risk management file into litigation, and several things must happen in the first days.
- Institute the litigation hold. Routine destruction of anything potentially relevant stops. The mechanics and scope of holds are covered in the litigation sections of this guide; what belongs here is that receipt of service is one of the events that triggers one.
- Sequester the record and its metadata. Remove the legal medical record from routine circulation, preserve the electronic health record audit trail, and lock down associated imaging, monitor strips, infusion pump and device logs, telephone and paging records, and billing files. Never permit an amendment or a late entry after suit is filed. An altered record destroys a defensible case faster than the underlying care ever could.
- Identify and notify involved staff. Tell them a suit has been filed, that counsel will contact them, and that they should not discuss the case with anyone other than counsel. Do not rehearse them, do not tell them what to remember, and do not assemble them into a group session to build a shared account. That is coaching, it is discoverable, and it is devastating on cross-examination.
- Notify carriers up the tower. Report to the primary professional liability carrier or TPA, and, where the potential value may reach them, to excess and umbrella layers, consistent with the notice provisions in each policy.
- Calendar the answer date and confirm that defense counsel has been assigned and has the file well before the deadline approaches.
Scenario
At 6:45 p.m. on the Friday before a holiday weekend, a process server hands a thick envelope to the unit secretary on 4 West and leaves. She is told only that it concerns a patient, so she places it in interoffice mail to Health Information Management. It reaches risk management eleven days later.
The damage is already done, because the answer clock started at delivery. The correct design would have had the unit secretary make no judgment at all: direct the server to the administrator on duty per the posted procedure and call the on-call risk manager, who would time-stamp the document, notify counsel and the carrier that evening, and calendar the deadline before the weekend. The corrective action after such an event is not counseling one secretary. It is education for every registration and unit clerk, a laminated job aid at each reception point, a posted after-hours notification tree, and periodic testing of the pathway.
Exam Traps
- Trap: instructing staff to refuse service. Refusal does not defeat service in many jurisdictions and looks like evasion. Route; do not refuse.
- Trap: believing the clock starts when risk management sees the document. It starts at service, which is why the time stamp matters.
- Trap: assuming one nationwide answer period. Federal practice generally allows 21 days after service; state periods vary and commonly run 20 to 30 days.
- Trap: treating an attorney-issued subpoena as a court order. Different validity analysis, different response, different consequences for non-compliance.
- Trap: forgetting the individual defendant. A named practitioner must be notified and their own coverage triggered so counsel is assigned for them.
- Trap: clarifying the chart after suit. Sequester and preserve the record and the audit trail; never amend.
- Trap: no after-hours pathway. A policy that works only from 8 to 5 will fail on the Friday evening when it matters.
Risk management receives a properly served summons and complaint naming the hospital and an employed hospitalist. Which set of immediate actions is most appropriate?