Unattended Medication Cart Exposes Resident PHI
Penalty
Summary
The facility failed to safeguard residents' medical records and protect confidential health information as required by its own policies and procedures. Specifically, Medication Cart A was observed in a hallway with its computer monitor turned on and unattended, displaying resident information. During this time, a staff member and a resident were sitting nearby, and six other staff members walked past the cart, making the information visible to unauthorized individuals. The computer screen showed a resident's photo and medication information, and the cart was left without clear responsibility assigned for its supervision. Interviews with staff revealed that the expectation was for the computer monitor to be locked or logged off when the medication cart was left unattended to ensure privacy. The DON confirmed that all PHI should be covered and that licensed nurses are responsible for logging off the computer when leaving the cart. The facility's policies require all personnel to manage and protect resident information to prevent unauthorized disclosure, but these procedures were not followed in this instance.