Failure to Protect Resident Privacy in Use of Electronic Social Media
Penalty
Summary
The facility failed to ensure a resident’s right to privacy in the use of electronic communications when staff became involved with a resident’s personal social media post. The resident, admitted with diagnoses including diabetes, cerebral infarction, major depressive disorder, hemiplegia and hemiparesis, and anxiety, had an intact cognition as evidenced by a BIMS score of 15/15. The resident posted a social media image of her own face after a fall, which did not show other residents or identify the facility by name. The facility’s Resident Rights packet, provided by the Kentucky State Long-Term Care Ombudsman Program, stated that residents have a right to privacy and confidentiality, including privacy in using electronic communications. According to a late-entry Social Service note, the Social Services Director (SSD), at the request of administration, encouraged the resident to consider removing the post and then assisted in deleting it while the resident had the post pulled up on her phone. In interview, the SSD stated she had been asked by the Administrator and Regional Nurse to speak to the resident about the post, which contained concerns about a fall, and acknowledged discussing the facility’s concerns about the post’s appearance because people knew where the resident lived. The resident reported that the SSD and other staff asked her to remove the post, that she did not know how to delete it, and that the SSD deleted it for her; she also stated she felt pressured by several staff members entering her room and asking her to remove it. The DON confirmed being present during the discussion but did not recall details and deferred to the Administrator, who stated she had asked the SSD to address the concerns about care in the post but denied instructing removal of the post and could not recall how she became aware of it or its exact content.
