Failure to Secure Resident Health Information on Unattended Computer Screen
Penalty
Summary
A deficiency occurred when a nurse left a computer screen displaying a resident's personal health information open and unattended on a locked nursing cart in a hallway. The computer was left visible for several minutes, during which time anyone passing by, including visitors or other residents, could have seen the confidential information. The nurse acknowledged receiving HIPAA training and stated she was responsible for closing the computer screen when stepping away. The Director of Nursing confirmed that facility policy requires screens to be minimized when not in use and that monitoring is conducted through observation rounds. The resident whose information was exposed was a 55-year-old male with multiple medical conditions, including intestinal obstruction, colon cancer, ileostomy status, essential hypertension, and mild intellectual disabilities, with a BIMS score indicating moderate cognitive impairment. Facility records confirmed that staff receive HIPAA training at hire and annually, and that policies require locking or logging off devices when unattended. However, documentation showed that in-service training on cart protocol was only recently provided, with no earlier records available for review.