Fundamentals of Nursing · Legal and Ethical Considerations
Legal Dimensions of Care
On this page 9 sections
In 30 seconds
Nursing practice is regulated by law — the body of rules a society makes and enforces. Ethics (Topic 2) asks what ought to be done; the law sets what must be done and what is forbidden, with consequences (professional discipline, civil lawsuits, criminal charges) for violations. Values (Topic 1) and principles help a nurse decide well; the law defines the boundaries within which those decisions are made.
The legal dimensions of care cover: how nursing is licensed and what "scope of practice" means; the civil wrongs (torts) a nurse can commit, especially negligence and Malpractice Negligence by a professional within their role Full entry →; consent for treatment; confidentiality and privacy; documentation as a legal record; mandatory reporting duties; advance directives; and incident reports. Two themes run through it: law varies by jurisdiction (state/provincial and national law differ; facility policy adds another layer), and the nurse is personally accountable for practicing within their own license and standards.
Why this matters
Your license is your legal right to practice, and it can be disciplined for practice failures — not just criminal acts. Patients' rights (privacy, consent, refusal of treatment) are legally enforceable; violating them harms patients and exposes the nurse and institution to liability. Documentation is the legal record of care: if it isn't written accurately, completely, and factually, in a dispute it may as well not have happened. Nurses are also mandated reporters for certain situations (e.g., suspected abuse), and failing to report is itself a violation. Exams test this heavily — expect questions on the elements of malpractice, intentional vs. unintentional torts, consent, advance directives, and incident reports. The law taught in fundamentals is a framework; always check your own jurisdiction's specifics.
The college version
Core Concepts
Sources and types of law
Constitutions frame government and fundamental rights; statutory law is enacted by legislatures (e.g., nurse practice acts); administrative (regulatory) law comes from agencies such as the board of nursing; common (case) law develops through court decisions. Criminal law deals with offenses against society (e.g., theft of controlled substances); civil law deals with disputes between people or organizations, including malpractice lawsuits.
Torts: intentional and unintentional
A tort is a civil wrong — harm done to a person that the law gives them a remedy for (usually money damages). Intentional torts are deliberate acts (intent to commit the act, not necessarily intent to harm):
- Assault Threatening harmful or offensive contact Full entry →: threatening harmful or offensive contact (e.g., "I'll restrain you if you don't settle down" — the threat itself is the wrong).
- Battery Harmful or offensive contact without consent Full entry →: actual harmful or offensive physical contact without consent (e.g., giving an injection the patient refused).
- False imprisonment Unlawfully restraining a person's freedom of movement Full entry →: unlawful restraint of a person's freedom of movement (e.g., improper restraint use or blocking a patient from leaving).
- Invasion of privacy: unreasonable intrusion into private matters (e.g., sharing patient information or photos inappropriately).
- Defamation: false statements that harm reputation — slander (spoken), libel (written).
Unintentional torts are accidents — harm through failure to act as a reasonable person would. Negligence is that failure; malpractice (professional negligence) is negligence by a professional within their role — the form that applies to nurses.
The four elements of malpractice
For a malpractice claim to succeed, all four must be shown: (1) duty — the nurse owed the patient a duty of care (established by the nurse–patient relationship); (2) breach of duty — the nurse fell below the standard of care (what a reasonably competent nurse with similar preparation would do); (3) causation — the breach directly caused the injury; (4) damages — actual harm (physical, financial, or emotional) resulted. If any element is missing, there is no malpractice — a common exam trap.
Standards of care and scope of practice
The standard of care is what a reasonably prudent nurse with similar preparation and circumstances would do — drawn from nurse practice acts, professional standards, institutional policies, and peer practice. Scope of practice is the set of actions a nurse is legally permitted to perform, defined by the Nurse practice act The law defining nursing practice and scope in a jurisdiction Full entry → of the state/province (or national law) and refined by board rules and employer policy. Practicing beyond your scope — or accepting a task you are not competent to perform — is a legal and safety violation even if ordered or requested.
Consent for treatment
Informed consent Voluntary, informed agreement by a person with capacity Full entry → requires that a person with decision-making capacity voluntarily agree to treatment after receiving understandable information about its benefits, risks, and alternatives. The person performing the procedure typically obtains it; the nurse confirms the patient understands, witnesses signatures per policy, and notifies the provider if the patient has questions or withdraws consent. Expressed consent is stated directly; implied consent is inferred from the situation (e.g., holding out an arm for a blood draw); an emergency exception may apply when a person cannot consent and delay would cause serious harm, as permitted by law and policy. Consent can be withdrawn at any time — a signed form does not override a current refusal.
Confidentiality, privacy, and HIPAA
Health information is shared only with those the patient authorizes and those who need it for care. In the U.S., HIPAA U.S. federal law protecting health information privacy/security Full entry → (Health Insurance Portability and Accountability Act) sets federal rules for privacy and security of protected health information; other countries have equivalents. Everyday applications: no patient discussions in hallways or elevators, log out of computer systems, share records only with a need to know. Unauthorized disclosure is both an ethical violation (Topic 2) and a legal one.
Advance directives
These documents (names and rules vary by jurisdiction) let a person state wishes for care in advance, for times when they cannot speak for themselves: a living will (written instructions about treatment wanted or not wanted, e.g., life-sustaining measures); a durable power of attorney for health care (names someone to make health decisions when the patient cannot); and DNR / do-not-attempt-resuscitation orders (provider orders directing that resuscitation not be attempted). Nurses must know the documents recognized in their jurisdiction, honor them (or escalate questions promptly), and never let personal values override a patient's lawful documented wishes.
Mandatory reporting and risk management
Nurses are mandated reporters of certain situations — most commonly suspected abuse or neglect (of children, older adults, or vulnerable adults) and certain reportable conditions — as defined by law. These duties override ordinary confidentiality in the situations the law names; failing to report is a violation. Incident reports document unusual or untoward events (a fall, a medication error) for the institution's internal quality and risk-management review; they are not part of the patient's medical record (per law/policy in most jurisdictions) and typically must not be mentioned in the chart — clinical facts go in the chart, event analysis goes in the report (follow facility policy). Documentation must be factual, complete, prompt, and free of erasures or blame opinions — "if it isn't documented, it wasn't done." Good Samaritan laws protect people who give good-faith emergency care at the scene of an emergency, within defined limits — they are not blanket immunity, and protections vary by jurisdiction.
Common Confusions
| Do Not Confuse | With | Difference |
|---|---|---|
| Negligence | Malpractice | Malpractice is negligence by a professional within their professional role; all malpractice is negligence, not all negligence is malpractice |
| Assault | Battery | Assault is the threat of contact; battery is the actual unwanted contact — you can have one without the other |
| Incident report | Part of the medical record | The report is an internal risk-management document kept separate (per policy/law); clinical facts go in the chart |
| A signed consent form | Valid informed consent | Consent is valid only if the person understood, had capacity, and was not coerced — and it can be withdrawn anytime |
| Good Samaritan law | Blanket immunity | Protection applies to good-faith emergency aid within limits — not a shield for any situation |
| DNR order | "Do not treat at all" | DNR/DNAR addresses resuscitation only — all other appropriate care continues unless separately directed |

Eli explains
The same idea, in plain words
Explain it like I’m 10
Taking care of people has rules of the road, just like driving. You need a license to drive, and you can only do what your license allows; if you hurt someone by driving carelessly, you can be held responsible, and if you hurt someone on purpose, that's even worse. There are also rules that protect the people you care for — keeping their private information secret, asking before you touch them, and reporting if someone is being hurt at home.
Worked example
A nurse gives a patient a medication that was ordered for a different patient on the unit. The patient who received it has a serious reaction and requires extra hospital days. The institution investigates, and the nurse's actions are analyzed against the four elements: (1) Duty? Yes — the nurse–patient relationship existed. (2) Breach of duty? Likely — the standard of care requires verifying the right patient, right medication, right dose, right route, and right time before administration; giving another patient's medication falls below that. (3) Causation? The reaction followed the wrong medication — a causal link is alleged. (4) Damages? The reaction and the extra hospital days are actual harm.
The analysis is not about blame. The nurse's professional response matters too: stop and assess the patient, notify the provider immediately, follow facility policy (which may include an incident report and a disclosure conversation), and document the clinical facts objectively in the chart — without mentioning the incident report, an internal risk document per policy. A nurse who reports promptly and practices within policy demonstrates accountability.
Key takeaways
- Torts are civil wrongs: intentional (assault, battery, false imprisonment, invasion of privacy, defamation) vs. unintentional (negligence, malpractice).
- Malpractice requires all four elements: duty, breach, causation, damages — if any is missing, no malpractice.
- Assault is the threat; battery is the unwanted contact — giving care after a refusal is battery.
- Scope of practice comes from law (nurse practice acts) and policy — practicing beyond it is a violation even if someone orders it.
- Informed consent = capacity + information + voluntariness; it can be withdrawn at any time.
- Confidentiality is a legal duty (HIPAA in the U.S.) — no hallway talk, no casual record access; nurses are mandated reporters for the categories their law names.
- Advance directives (living will, health care power of attorney, DNR orders) honor patients' wishes when they can't speak — per jurisdiction.
- Incident reports are internal risk documents, not part of the medical record; document clinical facts in the chart, event analysis in the report. Law varies by jurisdiction — check your own.
Check yourself
6 review questions from the chapter. Try each one, then open the answer.
List the four elements of malpractice and explain why a claim fails if any one is missing.
Show answer
Duty (a nurse–patient relationship existed), breach of duty (conduct fell below the standard of care), causation (the breach caused the injury), and damages (actual harm resulted). All four must be present; without causation or damages the claim fails even if the nurse erred — malpractice is about proven harm, not mere mistake.
A patient says "no" to an injection and the nurse gives it anyway. What tort(s) occurred, and why?
Show answer
Battery — actual unwanted physical contact without consent. Depending on what was said beforehand, there may also be assault (the threat). Administering care after an explicit refusal is a classic battery scenario.
What is the difference between assault and battery? Give an example of assault without battery.
Show answer
Assault is threatening harmful or offensive contact; battery is the contact itself. Example of assault without battery: telling a patient "I'll restrain you if you don't calm down" — the threat alone is the wrong, even if no physical contact follows.
What is a nurse's legal role in informed consent — and what should the nurse do if the patient withdraws consent after signing?
Show answer
The person performing the procedure obtains informed consent; the nurse confirms the patient received understandable information, witnesses signatures per policy, and relays questions to the provider. If the patient withdraws consent — even after signing — the nurse stops, notifies the provider, and documents the refusal; a signed form does not override a current withdrawal.
Where do incident reports belong, and what should (and shouldn't) go in the patient's chart after a medication error?
Show answer
Incident reports are internal risk-management documents kept separate from the medical record (per law/policy) and are not mentioned in the chart. The chart gets the clinical facts — what was given, the patient's response, the provider notification, the assessment — objectively, without blame.
Why does scope of practice matter legally, even when a provider or supervisor directs a task?
Show answer
Because scope of practice is defined by law and policy, not by individual orders or supervisors. Performing an act outside your scope — or one you are not competent to perform — is a legal and safety violation attributable to the nurse regardless of who directed it; decline, explain the limit, and escalate appropriately.
Study tools & related lessonsKey vocabulary · Related
Key vocabulary
- Nurse practice act
- The law defining nursing practice and scope in a jurisdiction
- Assault
- Threatening harmful or offensive contact
- Battery
- Harmful or offensive contact without consent
- False imprisonment
- Unlawfully restraining a person's freedom of movement
- Malpractice
- Negligence by a professional within their role
- Informed consent
- Voluntary, informed agreement by a person with capacity
- HIPAA
- U.S. federal law protecting health information privacy/security
- Advance directive
- Documents stating care wishes for when a person can't decide
- Incident report
- Internal document of an untoward event for risk review
Sources & references
This lesson was adapted from the open educational references above; their licenses and attributions are preserved. See Copyright & Licensing.
Educational content only. It is not medical, legal or professional advice. Found an error? Tell us.

