Resident Privacy Breach Due to Unsecured Personal Information
Penalty
Summary
The facility failed to ensure the privacy of personal resident information for 20 out of 37 residents reviewed. Surveyors observed an untitled and undated document containing sensitive information, including residents' last names, room numbers, incontinence brief sizes, types of incontinence products used, and hospice status, left visible on a table in a resident's room over multiple days. This document was accessible to residents, visitors, and unauthorized persons, as confirmed by both direct observation and interviews with residents and staff. One resident and a visiting family member both saw the document and recognized it as containing personal information. Staff interviews revealed that the document was used for incontinence brief inventory rounds and was not properly secured or removed after use, contrary to facility policy. Residents expressed discomfort with their personal information being accessible to others, and staff acknowledged that such exposure would be a dignity issue. The facility's own policy, revised in March 2025, requires that resident identifiable information not be left in open areas and that paper notes with personal or medical information be disposed of securely. Despite this, the document remained unattended and visible for at least two days, and staff admitted to lapses in following proper procedures for handling such information.