Staff Social Media Post Breaches Resident Privacy and Confidentiality
Penalty
Summary
A staff member at the facility posted a photo to their personal social media account that included the visible face of one resident and private medical information of another resident. The photo, which was posted by an LPN, showed a resident sitting in the background and a neurological assessment document with another resident's full name, room number, and vital signs. Multiple staff members observed the post, which was accessible on the LPN's social media page, and recognized that it contained both identifiable resident imagery and confidential health information. The facility's policies explicitly prohibit the unauthorized disclosure of resident information, including names, photos, and medical records, on social media or any public platform. Staff interviews confirmed that it is against policy to post resident photos or medical information online, and that any such incidents should be reported to the Administrator. Despite this, the staff who initially saw the post did not immediately report it, and the incident only came to the Administrator's attention after being shown the post by another staff member. The residents involved had significant medical histories, including diagnoses such as cerebrovascular disease, Alzheimer's disease, heart failure, and dementia with anxiety. The posted documentation included sensitive health information, and the photo was taken and shared without the required consent for personal or public use. The facility's leadership, including the DON and ADON, confirmed that such actions were inappropriate and not in line with facility policy.