The rule of thumb is that any time a patient makes a complaint, a medication error occurs, a medical device malfunctions, or anyone—patient, staff member, or visitor—is injured or involved in a situation with the potential for injury, an incident report is required.