Observations
Based on observation and discussion with facility staff, the facility failed to secure client records within locked storage containers.
The findings include:
During a demonstration of how to access client records using the facilities electronic medical records (EMR), it was noted that the initial screen contains all clients currently in treatment throughout the entire project. The information that is exposed included the client's full name, birthdate and social security number. There was no way to prevent an unauthorized person from having visual access to these client names if the EMR is open.
This was discussed with clinical and administrative staff and not disputed.
|
Plan of Correction
Malvern Institute will purchase and install privacy screens on computers. Privacy screens will be installed on all computers that belong to Admissions Workers, Counselors, Nurses and Physicians. Privacy screens will be ordered and installed on computers by 10/30/14. The Regulatory Compliance Manager will ensure that screens are installed properly and will also do routine checks to be sure screens remain on computers at all times to ensure patient confidentiality. |