Unsecured Storage of Discharged Residents’ Medical Records in Unlocked Garage
Penalty
Summary
Surveyors identified a failure to safeguard and properly store resident medical records, particularly for discharged residents. During an interview, the DON stated that current residents' records were kept in a locked business office area for confidentiality but was unsure where discharged residents' records were stored. An observation of a detached storage garage on the facility grounds, conducted with the DOM, revealed that the garage was unlocked and used for general maintenance storage as well as storage of a large number of banker boxes filled with files. Near the entrance, approximately ten opened and unsealed boxes were piled on top of each other and contained confidential medical and personal information of discharged residents. Additional unsealed banker boxes containing numerous resident medical and personal records, including shower sheets and assessment sheets, were found on multiple wooden shelves at the back of the garage, with the total number of unsecured boxes exceeding 30. The garage was easily accessible to unauthorized individuals and lacked climate control to protect the records from mold, pests, or environmental damage; some boxes near the entrance had damaged corners and were not completely closed. The DOM reported he had been told to move the boxes to the garage, was unaware of their contents, and did not realize the need to lock the garage or secure and protect the files. The DON later acknowledged awareness that some resident records were kept in the garage but not the extent of the volume, and the facility was unable to provide a list of residents whose records were stored there, despite having a written policy stating that access to resident personal and medical records was limited to authorized staff and business associates.
