Failure to Protect Resident PHI Due to Unattended EMR Cart
Penalty
Summary
The facility failed to maintain the privacy and confidentiality of medical records for one resident. During an observation on Hall B, an unattended medical cart was found with the electronic medical record (EMR) screen left open, displaying a resident's protected health information (PHI). The cart remained unattended until a staff member, identified as an LPN, returned. Upon interview, the LPN acknowledged leaving the cart unattended with the resident's PHI visible and admitted not ensuring the privacy and confidentiality of the information. The Director of Nursing confirmed that staff are expected to lock computer screens when leaving them unattended to protect resident PHI. This deficiency was identified through observation, interview, and record review, and was found to be in violation of the facility's policy requiring all workforce members to adhere to HIPAA Privacy Standards and prevent unauthorized disclosure of PHI.