An overlaid record is a medical record that contains information from more than one patient because staff entered data into the wrong chart. It is more serious than a duplicate because the error contaminates an existing record. Correction is difficult, expensive, and can affect both care delivery and claims processing.
What Overlaid Record Means in Medical Record Management
An overlaid record is a patient-safety and data-integrity failure, not just a clerical error. It occurs when information from one patient is entered into another patient's chart, creating a blended record that can mislead clinicians, billing teams, and downstream systems.
How Overlaid Records Differ from Duplicate Charts
An overlaid record is more damaging than a duplicate because the error contaminates an existing chart rather than creating a second one. Duplicates fragment history across two records; overlays can make the chart itself unreliable by mixing medications, diagnoses, allergies, orders, or encounter details from different people.
That distinction matters operationally because a duplicate may be detected during reconciliation, while an overlay can look normal until someone notices conflicting information or a treatment decision does not match the patient in front of them. In practice, overlays are often harder to unwind because the wrong data has already propagated into the source record.
Why Overlaid Records Create Clinical and Administrative Harm
When a chart is overlaid, clinicians may rely on inaccurate history or miss important facts that belong to another patient. That can lead to unsafe decisions, delayed treatment, failed reconciliation, or incorrect assumptions about identity, allergies, and prior care.
Administrative harm is also common. Claims processing, coding, record release, and audit trails can all be affected when the source chart contains mixed patient data. The result is not only extra cleanup work, but also potential privacy exposure if one patient's information is attached to another patient's file.
Common Causes and Why Correction Is So Difficult
Overlays usually start with workflow failures such as selecting the wrong chart, searching by similar demographic details, inadequate patient matching, or poor display design that makes the wrong record look plausible. Once the wrong entry is saved, it may be replicated into reports, interfaces, and exports before anyone notices.
Correction is expensive because staff must identify which data belongs to which patient, restore the correct record state, and verify that copied data did not spread to dependent systems. If the error has existed for long enough, the cleanup can involve chart review, claims review, and coordination across clinical, HIM, and IT teams.
Risk and Threat Considerations
Overlaid records create a high-trust failure mode because the chart can appear legitimate while containing data from the wrong person. The main risk is not only administrative rework, but also clinical decision-making based on corrupted source information and unintended disclosure of protected health information.
Failure mechanism: A user associates data with the wrong patient, and the incorrect entry contaminates the existing record, then spreads through downstream clinical and billing workflows.
Impact: The organization may face patient-safety events, privacy exposure, claims errors, prolonged remediation, and loss of confidence in the integrity of the medical record.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST SP 800-53 Rev 5 sets the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST SP 800-53 Rev 5 | IA-8 — Identification and Authentication (Non-Organizational Users) | Patient matching depends on reliable user and patient identity handling. |
| AU-2 — Event Logging | Overlay incidents require traceable audit evidence to reconstruct data contamination. | |
| AC-3 — Access Enforcement | Access controls help limit who can edit or merge patient records. | |
| Recommendation — Apply IA-8 to strengthen patient identity proofing and reduce wrong-chart entry. Log chart access and record edits to support overlay detection and investigation. Enforce edit permissions tightly to reduce accidental cross-chart contamination. | ||
| ISO/IEC 27001:2022 | A.5.34 — Privacy and protection of PII | Overlayed charts can expose one patient's information in another patient's record. |
| A.8.15 — Logging | Record repair needs auditable evidence of who changed what and when. | |
| Recommendation — Protect patient data handling so mixed-record errors do not create privacy breaches. Maintain logs that support reconstruction and correction of contaminated records. | ||
Practitioner Guidance
What practitioners should watch for: Any workflow that depends on demographic similarity, manual search-and-select behavior, or weak chart validation deserves special attention. Overlays are often discovered only after a mismatch in medications, allergies, problem lists, or encounter history is spotted during care or reconciliation.
Governance implication: Ownership should sit with health information management, registration, clinical operations, and EHR support together, because prevention and correction span intake, documentation, audit, and data repair. The practical goal is to catch cross-patient contamination early, before it becomes embedded in the canonical record.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Reviewed and updated by the NHIMG editorial team on September 28, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org
