Failure to Protect Resident PHI on Medication Carts
Penalty
Summary
The facility failed to safeguard residents’ protected health information (PHI) and maintain confidentiality of medical records in accordance with accepted professional standards. On 01/05/26 at 2:11 pm, surveyors observed a white piece of paper on a medication cart outside a resident room that listed multiple residents’ full names, room numbers, and code status, left unattended and visible in a hallway accessible to the public. During an interview at 2:15 pm, an LPN acknowledged that the paper contained resident identifiers and confirmed it should have been kept out of public view but was not. On 01/07/26 at 8:46 am, surveyors again observed a breach when the computer on a medication cart outside another resident room was left unlocked and unattended, displaying residents’ electronic medical records and exposed to public view. At 9:02 am, an RN confirmed that the electronic health record had been left exposed and unattended.
