Unattended Computer Screen Exposes Resident PHI
Penalty
Summary
Surveyors identified a deficiency related to failure to maintain confidentiality of resident-identifiable information when an unattended computer workstation displayed personal records for Resident #29. On January 29, 2026, at 10:45 a.m., the workstation was observed with resident records actively visible on the monitor and no staff present or monitoring the area. The information on the screen included personal and identifiable dietary information for Resident #29. At 10:46 a.m., a non-employee walked down the hallway and passed directly by the monitor with the resident’s information visible, and no staff intervened to shield or secure the information. At 10:47 a.m., the DON (Staff #85) approached the unattended workstation and immediately logged off the computer. In an interview at that time, the DON confirmed that the computer contained private resident information and acknowledged that leaving resident information visible on an unattended workstation could constitute a HIPAA violation and did not meet facility expectations for confidentiality. Review of facility documentation showed staff training on PHI, closing screens, not leaving information exposed, confidentiality, HIPAA, and resident and family notification, with 31 staff members having signed acknowledgment. A review of the facility’s Resident Rights policy, revised January 1, 2025, stated that residents have the right to secure and confidential personal and medical records and that the facility is responsible for safeguarding resident information from unauthorized access or disclosure.
We Help Long-Term Care Teams Stay Survey-Ready
We process and analyze inspection reports and plan of correction using AI to extract insights and trends so providers can improve care quality and stay ahead of compliance risks.