Your EMR System Crashes Mid-Day - Step-by-Step Emergency Procedure

Eleven in the morning, the waiting room is full, and a treatment is underway in the room next door. Tomasz has just finished a manual therapy session and sits down at the computer to update the patient's chart -- and sees a loading spinner that won't go away. He refreshes the page, logs out, logs back in. Nothing. The EMR system he's used to run his entire medical record for two years simply isn't responding. Five more patients are waiting in the lobby, and he has no idea what to write down, where, or how -- because he's never had to do it any other way than through the app.

The outage lasts forty minutes. During that time Tomasz sees three more patients, jotting down the course of their visits on loose sheets of paper that will somehow need to be matched to the right patient records in the system later. When access comes back, a second problem starts -- how to transfer those notes into the EMR in a way that keeps the record credible and complete, rather than looking like it was reconstructed after the fact? This article covers exactly that: what to do the moment an outage hits, how to keep paper records as a backup, and how to safely return to the electronic system once it's working again.

The law doesn't excuse you from documenting a visit just because "the software wasn't working"

This is the first thing to get straight: a technical outage is not an excuse for missing medical documentation. The obligation to keep it comes from the Act on Patients' Rights and the Patient Ombudsman, as well as the health ministry regulation on medical records, and it applies to every health service provided -- regardless of whether the software, the internet, or the power in the practice happened to be working at that moment. We cover the documentation obligation itself in more detail in the article medical records in physiotherapy.

In practice, this means that if the EMR system isn't working, the therapist has to document the visit some other way -- on paper -- and do it right away, in real time, not "from memory" that evening or the next day. Trying to reconstruct a dozen visits from memory after the fact is a straightforward path to inaccuracies, and in the event of an inspection or a dispute with a patient, to a serious problem with the credibility of the entire record.

Paper backup records -- what to write down as a minimum

During an outage, the goal isn't to recreate the entire EMR form on paper. It's to capture the complete set of data that will later let you reliably and unambiguously complete the patient's chart in the system once it's back. The minimum that must appear in the backup note is:

• Patient identification data -- first and last name, and ideally also the national ID number or patient card number, to avoid mix-ups when transferring the data later.
• Date and exact time of the visit -- not just the day, but the start time (and ideally the end time) of the service.
• Description of the procedure or treatment performed -- exactly what was done, using which technique or method.
• Treatment parameters, if applicable -- e.g. duration, intensity, physical therapy equipment settings.
• Clinical observations -- the patient's reaction to the therapy, reported complaints, changes compared to the previous visit.
• Recommendations given to the patient, if any -- e.g. home exercises, activity restrictions.
• Signature of the person providing the service -- a legible signature from the therapist who conducted the visit.

It's worth preparing a simple paper form with these fields in advance -- ready to print at any moment -- instead of improvising on a scrap of paper mid-appointment. This is one of those things that takes five minutes to prepare in a calm moment and saves a lot of stress in the middle of a busy day.

Element of the backup note	Why it's essential
Patient data (name, national ID/card number)	Unambiguous match to the right chart in the system
Date and time of the visit	Preserves the chronology and credibility of the record
Description of the procedure/treatment	The substantive basis of the entry, required by regulation
Parameters and observations	Allows continuity of therapy by another therapist
Signature of the person providing the service	Confirms who provided the service and on what basis

How to transfer data from paper back into the system once it's restored

The paper note is only half of the procedure. The second, equally important part is correctly transferring the data into the EMR once the system is working again. The key rule is: don't enter data from the note as if it had been recorded in real time during the visit. A retrospective entry must be marked as such.

In practice, this means adding an outage annotation directly next to the entry, or as a separate note in the patient's chart, containing:

• the date and time the outage started,
• the date and time the system was restored,
• the reason for the outage, if known (e.g. "outage on the system provider's side," "power failure at the practice"),
• a note that the visit data was originally recorded on paper and transferred into the system once the outage ended.

This annotation isn't a formality for its own sake -- it's what preserves the credibility of the whole record. Without it, the entry looks as though it was made in real time, which can raise doubts about the overall reliability of the documentation during any inspection or dispute with a patient. With the annotation, the situation is transparent: a technical incident occurred, backup documentation was created immediately, and the transfer into the system happened as soon as access was restored.

It's worth keeping the original paper notes -- ideally stapled together and labeled with the date of the outage -- at least until the data has been correctly transferred and verified in the system, and preferably for longer as evidence in case the patient or an inspection raises questions.

Outage at the EMR provider vs. outage on your own equipment -- two different scenarios

Not every outage looks the same, so the procedure should distinguish between two basic scenarios from the start.

Outage on the EMR provider's side

If the system runs in the cloud and the problem is on the provider's side (e.g. a global service outage, a server-side error), your internet, power, and hardware are working normally -- only the application isn't. In this scenario, the only thing you can do is switch to paper documentation and wait for the provider to announce that service has been restored. It's worth checking the provider's status page (if it has one) or its social media channels in the meantime -- information sometimes shows up there faster than by email.

Outage on the practice's side -- internet, power, hardware

The second scenario is an outage unrelated to the EMR provider: the internet goes down, the power goes out, or the computer or router breaks. The procedure here is similar -- paper documentation -- but there's an extra step: checking whether data from any unfinished entries in the system (e.g. a visit chart that was started but not saved) was lost due to a sudden power failure. This is a good moment to revisit the practice's IT security procedures, including backup power and internet failover, which we cover in the article IT security at a physiotherapy practice.

In both scenarios the rule is the same: documentation has to be created in real time, on paper, regardless of what caused the outage.

Emergency contact for the EMR provider -- keep it within reach, not buried in a year-old email

One of the most common causes of panic during an outage is not having quick access to the system provider's contact information. In theory every provider has a support phone number or a ticketing address -- in practice, that contact often sits somewhere in a welcome email from a year ago, or in a PDF contract nobody's going to open in the middle of a busy day.

It's worth keeping that contact somewhere visible -- e.g. printed and pinned up at the reception desk, or saved in the phone of the therapist running the practice, along with the customer number or login for the support portal, if the provider requires it to file a ticket. The same goes for the contact for the IT company servicing the practice's equipment, if the problem turns out to be on the local infrastructure side.

Testing backup restoration -- "we do backups" isn't enough

Many practices feel secure simply because the EMR system runs automatic data backups. That's only half of the protection, though. A backup that's never actually been restored is an unknown quantity -- it might work flawlessly, or it might be corrupted, incomplete, or outdated, and you'll only find out when you really need it.

That's why a data security procedure should cover not just running regular backups, but also periodically testing that they can actually be restored -- e.g. checking once a quarter that the backup genuinely restores and that the data in it is complete. If you use a cloud-based system, it's worth asking the provider directly how often it tests restoring its own backups, and whether that's documented in the service terms or an SLA.

[SP] Example -- Solo practice: After the outage described at the start of this article, Tomasz prepares a printed backup-note form and keeps it in a binder in his desk drawer -- along with a card listing the EMR provider's support number and the login for the ticketing portal. At the next outage, six months later, the whole procedure takes him two minutes instead of forty.

[GR] Example -- Group practice: At a practice employing four therapists, the owner introduces one shared emergency procedure, available in paper form at every workstation and in electronic form in the company's cloud storage (independent of the EMR system). Once a quarter, she arranges a short backup-restoration test with the system provider to make sure that, in the event of a real outage, the data can actually be recovered.

Why the procedure has to exist in writing before an outage happens

The most important takeaway from all of this is simple: in the middle of a busy day, with a full waiting room and a spinning loading icon on screen, nobody is going to come up with a good procedure on the spot. Decisions made in a panic -- what to write down, how, on what, who to notify -- lead to incomplete notes, missed elements, and chaos when the data is transferred into the system later.

An emergency procedure written out in advance, in a calm moment, solves this problem once and for all. The therapist doesn't have to make any decisions in the moment -- they reach for a ready-made form, fill it in following the checklist, and the rest (the outage annotation, the data transfer, contacting the provider) is already spelled out step by step. This is one of those pieces of documentation that costs very little time to prepare and saves a great deal when it's actually needed -- which is, in fact, a natural continuation of the topic covered when implementing an EMR system at a practice: electronic records themselves aren't the end of the work on protecting patient data, just the beginning.

Frequently asked questions

Does an EMR system outage excuse a practice from keeping medical records?

No. The obligation to document every health service provided comes from medical records regulations and applies regardless of whether the electronic system happens to be working at that moment. During an outage, records have to be kept in a backup form, in real time, rather than reconstructed from memory afterward.

Is a note on a plain sheet of paper sufficient as backup documentation?

Yes, provided it contains all the necessary elements -- patient data, the date and time of the visit, a description of the procedure performed, parameters and observations, and the signature of the person providing the service. It's also important that such a note later makes it into the system with a proper outage annotation, rather than simply being copied in without any indication of what happened.

How long should paper backup notes be kept after the data is transferred into the system?

Regulations don't set a separate retention period for backup notes specifically, so a safe practice is to keep them at least until the accuracy of the system entry has been fully verified, and ideally for longer as supporting evidence in case a patient, an inspection, or a dispute over the course of treatment raises questions.

What should you do if the EMR outage lasts several days instead of a few dozen minutes?

The rule doesn't change -- backup documentation on paper is kept for the entire duration of the outage, for every visit individually. For a longer outage, it's also worth contacting the system provider to establish an expected restoration time and considering whether you'll need extra organizational support for the one-time transfer of a larger number of entries into the system afterward.

CTA: Want your emergency procedure and the rest of your practice's documentation organized before a real outage happens? Check out FizjoReady packages with complete HACCP and GDPR documentation and security procedures for physiotherapy practices. See FizjoReady packages →

Related articles:
- Electronic medical records in physiotherapy
- Medical records in physiotherapy -- a complete guide
- IT security at a physiotherapy practice