Failure to Maintain Privacy and Confidentiality of Resident Medical Records
Penalty
Summary
The facility failed to ensure the privacy and confidentiality of residents' personal and medical records for four residents. Specifically, LVN C did not close the electronic medical records (EMR) of three residents before entering their rooms to perform blood sugar checks and administer medications. This left the residents' medical information visible and accessible to others. LVN C acknowledged responsibility for closing the EMR and recognized the importance of maintaining confidentiality, stating that leaving the records open was a HIPAA violation. Additionally, a medication aide (MA G) failed to close a resident's EMR before entering the room to administer pain medication. The medication cart, with a laptop displaying the resident's information, was left unattended in a hallway where staff and residents were passing by. MA G admitted to forgetting to lock the screen due to being in a hurry and acknowledged it was her responsibility to ensure the screen was locked when unattended. Interviews with the Director of Nursing (DON) and the Administrator confirmed that leaving resident information visible on unattended screens was a violation of confidentiality policies and HIPAA regulations. Both stated that it was the responsibility of the staff using the medication cart to keep resident information confidential and not visible to unauthorized persons. Facility policies reviewed also emphasized the importance of safeguarding resident privacy and confidentiality.