Resident Information Left Visible on Unattended Medication Cart Tablet
Penalty
Summary
The facility failed to ensure the privacy and confidentiality of a resident's personal and medical records by leaving a tablet on the medication cart open and displaying resident information during a medication pass. Observation revealed that the LVN left the tablet unattended and visible for approximately three minutes while in a resident's room, during which time anyone passing by could have viewed the confidential information. The LVN acknowledged that leaving the laptop open with resident information visible was a violation of HIPAA and facility policy. Interviews with other nursing staff, including RNs and the ADON, confirmed that staff were aware of the requirement to lock or minimize screens when leaving computers unattended and recognized that failing to do so constituted a breach of privacy and HIPAA regulations. Review of the facility's Electronic Medical Records policy indicated that only authorized personnel with appropriate credentials should access electronic records, and access should be limited to necessary data. The policy also stated that user codes are confidential and secured by the Administrator and DON. Despite staff training on HIPAA and resident rights, the incident demonstrated a lapse in following established procedures to protect resident information, resulting in a deficiency related to the security and confidentiality of medical records.