Resident information was left visible during medication administration for three residents. An RN prepared and administered medications while the computer screen remained open and displayed each resident’s name, DOB, and medication information, including while stepping away from the cart and while one resident refused meds. The residents had severe cognitive impairment, and the DON and LPN stated that screens should be locked or covered to protect confidential information.
Unattended Unlocked Laptop Displayed Resident Information: An LPN completed med pass and left a laptop powered on and unlocked on a medication cart in a walkway outside a resident's room. The screen displayed the resident's name, DOB, and meds while surveyors and staff passed by. The LPN acknowledged the resident's information was visible, and the DON stated staff are expected to lock or fully close laptops and protect resident confidentiality.
Confidential resident information was left visible on a medication cart laptop when an RN left the screen open facing the main hallway, exposing names, pictures, and room numbers for multiple residents. The RN said she was distracted and forgot to close the screen, while a CNA and the DON confirmed that resident records on hallway screens should not be left open and could be viewed by others.
An unattended computer workstation was observed with a resident’s personal dietary information actively displayed on the monitor while no staff were present. A non-employee walked past the exposed screen without any staff attempt to shield or secure the information. The DON later returned to the workstation, logged off, and acknowledged that leaving PHI visible on an unattended workstation could violate HIPAA and did not meet facility expectations, despite existing policies and staff training on confidentiality and protection of resident records.
A nurse left an EHR open and visible on a medication cart computer while administering medications to a resident, resulting in the resident’s medical information being exposed on the unattended screen. Upon return, the RN confirmed the EHR was still visible. Other staff, including a CNA, an LPN, and the DON, acknowledged that unsecured computer screens can allow unauthorized viewing of HIPAA-protected information and that screens can and should be locked. Facility policy prohibits unauthorized access or disclosure of resident information and requires compliance with privacy laws.
A resident with multiple medical conditions and cognitive impairment had their confidentiality compromised when an unattended medication cart computer was left unlocked and visible, displaying the resident’s full name, date of birth, photo, room location, code status, and medication information. An LPN reported believing the computer had been locked but acknowledged that leaving it open could allow access to patient information. The DON and administrator both stated that leaving a med cart computer open would be a HIPAA violation and confirmed that facility policy requires computers containing resident information to be locked to safeguard confidential records.
Staff left medication carts unattended with laptops displaying resident records on two separate units. Both LPNs involved acknowledged that this was not in line with facility policy and could result in unauthorized exposure of resident information. The DON and LPN Manager confirmed that such actions violate HIPAA and residents' rights to privacy, as outlined in facility policy.
Unattended unlocked medication cart exposed resident medical information. An LPN left a med cart with an unlocked computer displaying multiple residents’ records, including medical history, DOB, and medications. Staff and the DON stated computers should be locked or logged out, and the facility policy states residents have a right to secure and confidential personal and medical records.
Failure to Maintain Privacy During Telemedicine Consultation: A resident with heart failure, hyperlipidemia, and a hip fracture, and who was cognitively intact, participated in a telemedicine psych consult in her room while a behavior health technician conducted the visit loudly enough for the roommate and surveyor to hear the discussion and answers. Staff were also observed entering the room without knocking or asking permission, despite staff training and facility policy requiring privacy, knocking, and introduction before entering or providing care.
Two residents' privacy was not respected when a CNA entered their rooms without knocking or seeking permission, including during a private interview, despite having received training on residents' rights and facility policies requiring staff to knock and wait for a response before entering.
Self-audit
Pick a level of detail and, optionally, what to focus on — then generate a survey-ready checklist distilled from the most recent citations.
Beta · AI-generated — for reference only, not professional advice. Verify against current CMS guidance before relying on it. Assisto accepts no responsibility for how this checklist is used.
Citations used to create this checklist
Trusted data from CMS and state health departments
Every citation, penalty and Plan of Correction is sourced from public CMS records (latest release October 8, 2026) and official state health department websites — never guesswork.
In your survey window? See what surveyors are citing.
The Survey-Prep Report maps your facility's risk from 12 months of CMS and state citation data — what's being cited around you and what to check first. $129 one-time.