Somerset Healthcare: Repeated Privacy Failures - PA
Federal inspectors who visited Somerset Healthcare & Rehabilitation Center on March 13, 2025 found that the facility had failed, again, to bring itself into compliance with regulations governing the personal privacy and confidentiality of residents' records. This was not a first finding. It was not even a second. It was the third time inspectors had cited the facility for failures connected to the same underlying problem, across three separate surveys spanning nearly a year.
The first citation came during a survey ending April 25, 2024. Inspectors found that Somerset Healthcare had failed to properly implement its abuse and neglect policies. The facility responded the way facilities are required to respond: it developed a plan of correction. That plan centered on audits. Staff would conduct them. The results would go to the facility's Quality Assurance and Performance Improvement committee, known as QAPI, for review. The QAPI committee would make sure the problems didn't recur.
The problems recurred.
A second survey, ending January 22, 2025, cited the same deficiency. Abuse and neglect policy implementation. Same facility. Same problem. Less than nine months after the first citation. The facility again developed a plan of correction. The plan again called for audits. The results would again go to QAPI.
By March 2025, inspectors were back. This time, they cited the facility under F583, the federal tag covering personal privacy and confidentiality of records. What they documented was not just another isolated lapse. It was a finding that the QAPI committee itself, the very mechanism the facility had promised would catch and correct these problems, had failed to successfully implement its own plan.
The committee had the audit results. It had the data it was supposed to act on. The cycle the facility designed to protect residents had turned without producing the outcome it was built to produce.
That finding, that a quality assurance system failed to deliver quality assurance, is a particular kind of institutional failure. It is not a single employee making a mistake. It is not a policy that was never written down. It is a system that was assembled, documented, presented to federal regulators as a solution, and then did not function as described.
Somerset Healthcare is a rehabilitation and long-term care facility in Somerset County in southwestern Pennsylvania, a rural region where residents may have limited options for care closer to family. The facility serves people who are, by definition, in a period of vulnerability, recovering from illness or injury, or living with conditions that require around-the-clock support.
For those residents, privacy is not an abstraction. Confidentiality of records means that details about their diagnoses, their medications, their histories, their bodies are not shared without their consent and are not handled carelessly. Abuse and neglect policies exist because the people living in nursing homes are often unable to protect themselves, and the systems around them are supposed to do that work.
When those systems fail once, regulators take note. When they fail twice, the pattern becomes harder to explain as coincidence. When they fail a third time, and when the failure is located specifically in the oversight mechanism the facility itself designed and promised, the question is no longer whether something went wrong. The question is whether the facility has the capacity to make it right.
The inspection report does not identify individual residents by name. It does not describe specific incidents of privacy violations or detail what particular failures in abuse and neglect policy implementation looked like on the ground. What it documents is structural: a quality assurance committee that could not do what it said it would do, across a period when it was on notice that regulators were watching.
QAPI committees are not optional features of nursing home operations. They are required, and their purpose is precisely to prevent the kind of recurrence that inspectors documented here. The committee is supposed to gather data, identify problems, implement improvements, and verify that those improvements hold. At Somerset Healthcare, inspectors found that the committee gathered the data and the improvements did not hold.
The gap between what a plan of correction promises and what a facility actually delivers is one of the most persistent problems in nursing home oversight. Facilities submit plans. Regulators review them. Surveys end. Time passes. The next survey arrives and finds the same deficiency, or a variation of it, still present. The plan existed on paper. The correction did not take hold in practice.
Three surveys. Three citations. One facility. The audits ran. The committee met. The residents remained in a facility that had not solved the problem it had twice promised to solve.
What that means for the people living at Somerset Healthcare, the ones whose records were at issue, the ones whose privacy the policies were written to protect, is not something the inspection report resolves. It notes the failure. It does not describe what any individual resident experienced as a result of it, or whether anyone was harmed in ways they may never have been told about.
That uncertainty is its own kind of consequence. A resident whose confidential records were not handled properly may not know. A resident who was affected by failures in abuse and neglect policy implementation may not have been told that the facility was already on notice about that problem when it happened to them. The plan of correction that was supposed to prevent it had already been written. The audits that were supposed to catch it had already been promised.
The committee had the results. The problem remained.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for Somerset Healthcare & Rehabilitation Center from 2025-03-13 including all violations, facility responses, and corrective action plans.
Additional Resources
Data source: This article is based on inspection data downloaded directly from the Centers for Medicare & Medicaid Services (CMS) via Medicare.gov. CMS releases inspection reports in bulk; we publish the findings as documented by state surveyors in the official Form CMS-2567 Statement of Deficiencies.
Plan of correction: The CMS report we receive does not include the facility's plan of correction. Facilities submit plans of correction separately to state survey agencies and those responses may not be reflected in CMS data at the time of publication. The absence of a plan of correction in our data does not mean one was not filed. Readers who want information about corrective steps taken are encouraged to contact the facility directly or their state survey agency.
Corrections may have occurred: Inspection reports reflect conditions observed on the date of the survey. Facilities may have implemented corrections, staffing changes, additional training, or other remediation since the report was issued. We report what CMS provides and encourage readers to seek current information from the facility.
Editorial process: Inspection findings are extracted from CMS source documents and synthesized using AI, reviewed for factual accuracy against the original report by our editorial team.
Professional review: All content reviewed by Christopher F. Nesbitt, Sr., NH EMT & BU-trained Paralegal.
Last verified: August 10, 2026 · Our methodology
SOMERSET HEALTHCARE & REHABILITATION CENTER in SOMERSET, PA was cited for violations during a health inspection on March 13, 2025.
The first citation came during a survey ending April 25, 2024.
Health inspections identify deficiencies that facilities must correct. Violations range from minor documentation issues to serious safety concerns. Review the full report below for specific details and facility response.