Breach of Resident Confidentiality on Geriatric Rehabilitation Unit
Penalty
Summary
The facility failed to maintain the confidentiality of residents' medical information on the Geriatric Rehabilitation Unit. During an observation, it was noted that the medication cart beside the nurse's station was left unattended with the computer screen open, displaying identifiable resident information. This lapse in security allowed any passerby to view personal and confidential information, violating the residents' right to privacy. The incident was confirmed by a Licensed Practical Nurse and the Director of Nursing, who acknowledged the failure to protect residents' medical information as required by HIPAA and HITECH regulations. The facility's policy, dated 6/3/24, mandates the protection of residents' privacy rights and individually identifiable health information, which was not adhered to in this instance.
Plan Of Correction
F 583 - Employee 1 was educated by the Director of Nursing on the importance of closing the computer screen when walking away from the computer. Education will be provided by the Director of Nursing, or designee, to nursing staff on the importance of maintaining resident privacy and confidentiality while passing medications. A random audit will be completed by the Director of Nursing, or designee, to observe at least three medication carts three times a week for one month, then weekly for one month to ensure confidentiality and privacy is maintained during medication pass. Results of the audits will be reviewed at the monthly QAPI meeting for tracking and trending purposes. The Director of Nursing shall ensure compliance.