Resident Health Information Posted in Public Area
Penalty
Summary
A deficiency occurred when personally identifiable health information for one resident was posted in a public area accessible to visitors. Specifically, a note containing the resident's full name, details about a recent skin graft, the presence of a drainage port, and bathing restrictions was taped to the staff schedule, which faced the dining room. This information was visible to anyone in the facility, including visitors, until it was removed after the lunch dining service. The care plan for the resident did not specify bathing instructions, but the posted note included sensitive care details. Multiple staff members acknowledged awareness of the posted information, with some expressing concern that it should not have been displayed publicly. Staff interviews confirmed that resident-identifiable information is only to be stored in resident charts or the electronic health record, not in plain view. The facility's privacy policy, last reviewed in January 2025, requires limiting the use and disclosure of personal health information in accordance with HIPAA regulations, and all staff are responsible for adhering to this policy.