F0583

D

Unsecured Medication Cart Computer Screen Exposes Resident PHI

Marble Falls, Texas Survey Completed on 01-16-2026

Penalty

No penalty information released

Summary

The deficiency involves the facility’s failure to maintain secure and confidential clinical records for one resident when a CMA left a charting computer screen unlocked and unattended on the medication cart, displaying that resident’s medication administration information. During observation, the surveyor noted that the computer on the 400 Hall medication cart was open and unlocked with the resident’s medication information visible, and the cart was unattended, making the information viewable to unauthorized individuals. The resident’s specific medical history or condition at the time was not described, but the information displayed related to medication administration.

In interviews, the CMA acknowledged having received HIPAA in‑service training a few months earlier, which included instructions not to discuss private clinical information with unauthorized individuals and to lock the computer screen when stepping away, and admitted fault for not locking the computer. RN, LVN, the DON, and the Administrator each stated that staff who use charting computers and handle residents’ private information are responsible for closing or locking the screen when leaving it unattended, and that leaving a screen open could expose residents’ private medical information and violate privacy. The DON and Administrator reported that HIPAA in‑services are provided at hire and annually through computer modules and that staff are instructed to lock or minimize screens when stepping away; however, record review of HIPAA in‑services for the prior six months did not show documented HIPAA training for the CMA before this incident. The facility’s Resident/Patient Confidentiality policy stated that all resident health information is confidential and protected by HIPAA law and must not be disclosed by staff, volunteers, or vendors.