Failure to Secure Resident Health Information
Penalty
Summary
Staff failed to properly safeguard resident-identifiable information, resulting in unauthorized access to protected health information. On one occasion, an unsecured document containing resident-specific health information was observed face-up on a medication cart, accessible in a hallway where several residents were independently mobile. A staff LPN acknowledged that the document should have been placed face down but was left exposed when she was called away by a resident. In a separate incident, an unattended, open laptop displaying multiple residents' electronic health records was left visible in an area with several mobile residents present. The RN responsible admitted to leaving the laptop open by mistake. The Director of Nursing confirmed that protected health information is required to be secured at all times. Facility policy states that access to resident personal and medical records is limited to authorized staff and business associates.