Medical liability is the legal responsibility for harm caused by healthcare decisions, errors, or omissions. It can apply to clinicians, hospitals, and sometimes the organizations that design or operate clinical technology. In modern care, the question is not only whether a person made the wrong call, but whether software, records systems, or decision-support tools affected that call and whether the human reviewer kept meaningful control.
This matters in cyber security because attacks on healthcare systems can change the facts on which treatment depends. Ransomware can delay care, compromised accounts can alter patient data, and tampered decision-support outputs can mislead staff. In a dispute, investigators look for logs, access controls, validation steps, and documentation showing who reviewed the recommendation and when. Defenses that reduce liability include strong authentication, audit trails, backup and recovery plans, change management, and clear governance for clinical AI and connected medical devices.