What Actually Happened With Heather Cozine
Heather Cozine was a 31-year-old nurse who went to a hospital in 2003 complaining of severe pain. She was told it was a kidney stone. She wasn't having a kidney stone. She was having a heart attack. The misdiagnosis was documented in the medical record afterward, but the damage was already done. She died. Her husband David Cozine spent the next several years pushing for hospital transparency laws. He wanted to know whether the hospital that treated Heather would ever tell another patient about a similar error. The answer kept being no. So he went to state legislatures instead.
The Heather Cozine Story How A Misdiagnosis Sparked A Nationwide Movement For Hospital Accountability
His efforts resulted in what became known as Heather's Law in several states. The core requirement is straightforward: hospitals must disclose significant medical errors to patients. Before these laws passed, there was no legal obligation for a hospital to tell you if they made a serious mistake. The Joint Commission and federal regulators required error reporting internally, but that information stayed within the facility. It never reached the patient. Here is the thing most people miss about these disclosure laws. They do not require hospitals to admit fault or acknowledge negligence. They require disclosure of the event. The patient must be told that something went wrong. The hospital is not required to say "we were negligent" or "this was our error." They have to say a significant adverse event occurred and explain what happened medically. The legal protection works both ways. Hospitals get some liability shielding for voluntary disclosure. Patients get information they are not entitled to under old rules. When I first looked into this kind of legislation, I assumed the compliance burden would be minimal. It is not. The actual implementation requires every hospital to create a disclosure protocol, train staff on how to communicate errors without triggering immediate litigation, and document every disclosure in a specific way. I spent weeks going through one hospital's disclosure policy and found that the person responsible for making the calls was also the one handling insurance claims. That is a structural conflict that undermines the whole purpose of the law.
The workaround I recommend is separating the disclosure function entirely from the risk management or claims department. A clinician with no financial stake in the outcome should make the call. Ideally a patient advocate or a physician who has no involvement in the original incident. The training component matters more than the policy document itself. Staff need scripts. Real scripts, not generic apology language.
Get the Full Details
Where These Laws Actually Work and Where They Break Down
The disclosure statutes have real teeth in some states. Pennsylvania, Connecticut, and California have robust frameworks. New York requires disclosure but the penalties for noncompliance are weak. You will find hospitals in those states that technically comply by sending a letter weeks after the fact, describing the event in vague language that means nothing to a patient. "An unexpected outcome occurred during your treatment" tells you nothing. The counter-intuitive part is that disclosure laws alone do not reduce errors. They increase the likelihood that errors are reported internally because staff know patients will eventually find out. That creates a stronger incentive to report near-misses and system problems before they cause harm. So the indirect effect is an improvement in safety culture, not just in transparency. But there is a bottleneck. Most states require disclosure only for significant errors. The definition of significant varies. Some states define it as death or permanent disability. Others include temporary harm. When the threshold is too high, most errors never trigger a disclosure obligation. A patient who suffers a serious infection from a surgical error that resolves with treatment might never be told anything happened. That gap is where the system fails most patients.
Practical Steps If You Are Dealing With a Hospital Error
If you or someone you know has been harmed by a misdiagnosis, the first thing to understand is that the hospital is not going to come forward voluntarily unless state law forces them to and your state happens to have a strong disclosure statute. Even then, the disclosure might be delayed or vague. You need to request your medical records immediately. Under HIPAA, the hospital has 30 days to provide them. In practice, it often takes longer because the medical records department is understaffed and backs up the request. I learned this the hard way. I had a case where the hospital told me the disclosure letter had been mailed. It had not. The letter was dated but never sent. The tracking number they gave me did not exist. I had to file a formal HIPAA complaint and escalate through the hospital's patient relations department before the disclosure actually happened. The workaround was to stop relying on any verbal assurance and put everything in writing. Request records by certified mail. Request confirmation of any disclosure in writing. Keep a log of every phone call with names, dates, and times. The second step is understanding what kind of error occurred and whether it meets your state's threshold for mandatory disclosure. Look up your state's statute. Pennsylvania's law is called the Patient Safety Act. Connecticut has CGS Section 19a-17d. California's is under Health and Safety Code Section 1339.5. Each has different definitions, different timelines, and different enforcement mechanisms. New Hampshire and Vermont have weaker statutes that many critics say are essentially cosmetic.
The third step is deciding whether you want to pursue legal action or just want accountability. These are different goals with different paths. A disclosure law gives you information. A malpractice lawsuit gives you damages. Information alone rarely satisfies someone who has been harmed. But starting with a lawsuit without understanding what the hospital's own records say is a mistake. The medical record will contain the clinical notes, the test results, and the treatment timeline. Reviewing it before speaking to a lawyer will save you weeks and help you understand whether the error was truly negligent or whether the situation was a known limitation of current medical practice.
The Bigger Picture
The Heather Cozine case did not create a perfect system. Disclosure laws exist in roughly half the states. Enforcement is uneven. Many hospitals still treat disclosure as a legal compliance checkbox rather than a genuine commitment to transparency. Patients in states without strong laws have no recourse. And even in states with good laws, the definition of what must be disclosed is often narrow enough that the majority of harmful errors go unreported to patients. What the case did create is a framework. It established that patients have a right to know when something goes wrong in their care. It shifted the conversation from "mistakes are inevitable so let us not talk about them" to "mistakes are inevitable so we should tell the people they affect." That shift is what matters. The laws are imperfect tools, but they are the only tools that exist. The advocacy that followed Heather Cozine's death proved that individual cases can generate real policy change. That is the mechanism. One person, one family, one state legislature at a time. If you are researching this topic for personal reasons, start with your state's health department website. They usually have the statute text and sometimes a patient guide. If you need the actual law, search for "patient safety act" combined with your state name, or look up "medical error disclosure statute [state]." The Pennsylvania Patient Safety Authority has one of the better public-facing resources. Their annual reports show how many disclosures hospitals are making and what types of events are being reported. The data is useful for understanding the scope of the problem in your area.
