F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
D

Failure to Protect EMR Confidentiality and Provide Requested Medical Records

Woodway Nursing & RehabHouston, Texas Survey Completed on 01-16-2026

Summary

The deficiency involves the facility’s failure to safeguard confidential electronic medical records and to provide a resident’s medical records upon repeated written requests. On Hall C, a computer mounted to the wall was observed logged into the medical record system under a CNA’s user account and left unattended. The CNA’s name was visible on the screen, and the OT who observed the computer stated that the CNA should not have logged into the system and left it unattended because it contained private resident records and orders. The ADON and DON both stated that the computer should not have been left logged in, as unauthorized individuals could access resident information, including social security numbers, home addresses, and diagnoses. When a different CNA later logged into the same computer, the DON confirmed that from the home screen staff did not need an additional password to access resident records. The deficiency also includes the facility’s failure to respond to multiple written requests for a deceased resident’s medical records submitted by the resident’s representative through an outside entity. Five letters, each containing a certified and first-class mailing, were sent to the facility’s President/CEO or the facility’s parent company, requesting the resident’s complete medical record for a specified time period and including an authorization form for release of protected health information signed by the resident’s representative. The letters also included a copy of the resident’s death certificate and the representative’s state ID. Postal tracking showed that some letters had not reached their destination, one was returned to sender, and one was received and signed for at a postal facility. The facility had undergone a name change, but the parent company remained the same. Record review showed that the resident was an older male with multiple serious medical diagnoses, including anemia, Parkinsonism, pressure ulcers, Alzheimer’s disease, quadriplegia, dysphagia, acute respiratory failure with hypoxia, and pneumonia. He was coded on the MDS as rarely or never understood, with short- and long-term memory problems and total dependence on staff for all ADLs. Staff interviews revealed that the social worker, medical records staff, and business office managers (both current and former) denied receiving or being aware of any medical records requests for this resident. The Administrator, who had been in his position for about a month, described a process in which the DON would send medical records requests to the business office manager and stated that if mail was addressed to the previous company, he would not sign for it and the letters would be sent back. He reported that the facility did not receive any mail or letters related to this resident, despite the documented mailings and statutory requirements under Texas Civil Practice and Remedies Code Sections 74.051 and 74.052 for providing medical records within a specified timeframe after receipt of a written request accompanied by a proper authorization.

Penalty

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.

Resources

Below are regulatory guidelines relevant to this citation:

See other F0842 citations
Incomplete and Inconsistent AD and POLST Documentation
E
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Incomplete and inconsistent AD and POLST documentation was found for multiple residents. One resident’s AD and POLST conflicted on artificial nutrition and hydration, another resident’s AD called for comfort care only while the POLST selected CPR and full treatments, and other residents’ POLSTs documented “no decision made” or that an AD was not available despite ADs being present. Staff interviews showed an LN had marked the AD-review section without confirming the AD, the RA was not comparing ADs with POLSTs, and the DON said review responsibilities were shared among staff.

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Incomplete and Inconsistent Documentation of ADL Care and Skin Treatments
D
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Incomplete and inconsistent documentation was found for a resident’s bathing care and for multiple residents’ skin-related treatments. Shower/bath records did not match the EMR and lacked entries for several days, with no documentation of physician or resident representative notification for refusals. Wound care, dressing changes, and lidocaine patch documentation were also missing or inconsistent with observations, and one resident was observed without ordered compression stockings.

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Incomplete and inaccurate resident clinical documentation
D
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Incomplete and inaccurate resident clinical documentation: A resident with hemiplegia, DM, and dementia had inconsistent behavior monitoring and a new order for a Wanderguard, but no progress note was entered on the day of the order. The chart also included a physician note stating the resident had been found wandering outside on the curb, which the NHA later said was inaccurate; the facility’s review found the statement was entered based on word of mouth staff information and that no elopement occurred.

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Incomplete and inaccurate resident record documentation
E
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Incomplete and inaccurate resident record documentation: Surveyors found that several resident records did not match the documented care or resident directives. One resident’s POLST left the Health Care Agent section blank despite an advance directive naming an agent, another resident’s opioid overdose monitoring entries used Y/YES in a way that did not align with the order’s required documentation, an IV antibiotic dose was not documented as given, and a physician progress note was dated after a resident had already been transferred to the hospital.

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Falsified vital signs documented in resident record
D
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Falsified vital signs documented in a resident record. An agency RN charted pulse, BP, and respirations for a resident with multiple serious diagnoses, but security footage and DON review showed no vitals were taken during the shift because the RN did not have the vital sign machine. The RN later confirmed she did not take any vital signs despite documenting them.

Inspection fine: $122,570
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Incomplete Resident Medical Records
D
F0842 F842: Safeguard resident-identifiable information and/or maintain medical records on each resident that are in accordance with accepted professional standards.
Short Summary

Incomplete resident medical records were identified for two residents. One resident had diagnoses including DM, interstitial pulmonary disease, HF, and CKD, but physician notes for urinary concerns and follow-up visits were missing from the facility EHR. Another resident with HF and DM had SOB and a nearly 10-pound weight gain, and an outside NP note with new orders for a chest X-ray and labs was not included in the resident's chart. Staff stated the facility relied on outside EHR access or faxed records rather than routinely incorporating those notes into the facility record.

No penalty information released
tooltip icon
The penalty, as released by CMS, applies to the entire inspection this citation is part of, covering all citations and f-tags issued, not just this specific f-tag. For the complete original report, please refer to the 'Details' section.
Citation search

Search every citation & Plan of Correction

Go to search
Citation watch

Track new serious citations across Texas

Get a heads-up on the newest immediate-jeopardy (J–L) citations in Texas — where surveyors are focused right now.

Free · about one email a month

Trusted data from CMS and state health departments

Every citation, penalty and Plan of Correction is sourced from public CMS records (latest release October 8, 2026) and official state health department websites — never guesswork.

In your survey window? See what surveyors are citing.

The Survey-Prep Report maps your facility's risk from 12 months of CMS and state citation data — what's being cited around you and what to check first. $129 one-time.

Get the Survey-Prep Report
An unhandled error has occurred. Reload 🗙

Connection lost — reconnecting… We couldn't reconnect automatically. Please reload the page to continue.