Unsecured Electronic Medical Records Left Accessible to Public View
Penalty
No penalty information released
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Summary
The facility failed to protect and safeguard residents' electronic medical records in accordance with its own HIPAA policy. During an observation, a medication cart was found unattended in the south hall with a computer logged into the electronic medical record system, making residents' personal health information visible and accessible to the public. A charge nurse confirmed that a registered nurse had left the cart and computer unattended while going to lunch, leaving the electronic records unsecured and available for public view. The facility's policy requires all personal health information, including electronic records, to be protected and kept confidential, but this was not followed in this instance.