Resident Care Information Left Unsecured on Medication Carts
Penalty
Summary
Staff failed to secure residents' personal and medical information on two of four facility units, resulting in care sheets with sensitive data being left visible and unattended on mobile medication carts in hallway corridors. On the transitional care unit, a medication cart was left unattended with a census sheet displaying resident names, room numbers, diagnoses, bath days, diet orders, nursing care notes, skin impairment, and lab information for nine residents. Multiple staff members and a resident in a wheelchair passed by the exposed information, and a housekeeper acknowledged that the information should not have been visible. A licensed practical nurse later confirmed the care sheet should not have been left out, citing HIPAA concerns. On the long-term care unit, a registered nurse left a medication cart unattended with a care sheet containing personal information for three residents. The nurse walked away to administer medication in another room, during which time additional staff passed by the exposed information. Upon return, the nurse stated the information should have been covered and recognized the privacy breach. Interviews with other staff confirmed the expectation that care sheets be covered and carts locked to maintain confidentiality, in accordance with the facility's policy on HIPAA compliance.