The incident occurred during a September 5 complaint inspection at The Villa at Mountain View on Duncanville Road. Federal inspectors found LVN A had walked away from her medication cart, leaving both the cart unlocked and her computer screen showing detailed resident information.
When questioned about why the computer displayed resident information, LVN A initially said she had a key and claimed the computer only showed the resident's name. After inspectors showed her a picture of the resident's electronic medication administration record visible on her screen, she acknowledged the violation.
"Nobody should have access to the computer and there were no issues with the residents' information being disclosed to others," she told inspectors. She called it "a HIPAA violation for the resident's information to be displayed on the computer."
The nurse said her plan to prevent recurrence was "to ensure she locked the computer before she walked away from it."
The facility's administrator, reached by phone at 4:55 PM on inspection day, said she was unaware of nurses leaving computer tablets unattended and unlocked. When asked how unlocked computers displaying resident information could affect residents, she said she "could not say."
She confirmed it was against company policy to leave computer tablets unlocked and said LVN A would be counseled and written up for HIPAA non-compliance.
The Director of Nursing told inspectors she was aware of LVN A leaving the computer screen unlocked. She said the nurse received one-on-one training and was written up for the violation.
"What LVN A did was a HIPAA violation and all of the resident's private information could have been disclosed for family or anybody to see," the DON said.
LVN A received a written warning the same day. Her employee coaching record, signed by the nurse, Assistant Director of Nursing, and an HR representative, documented a "Major Infraction" occurring between 6 AM and 2 PM in the 500 hall.
The warning stated: "It has come to the attention of management that the high standards that [This Company] espouses are not being met. Specifically 1. HIPPA compliance: b leaving resident information visible while unattended 2. Resident medication integrity/resident safety: Leaving medication cart unlocked."
The disciplinary action continued: "Our residents deserve great care. We want to give you an opportunity to correct this behavior, failure to do so can, and will lead to further disciplinary actions up to and including termination."
Federal regulations require nursing homes to protect residents' right to privacy and confidentiality. The facility's own resident rights policy, revised in February 2021, states that employees must treat all residents with "kindness, respect, and dignity" and specifically guarantees residents' rights to "privacy and confidentiality."
The Villa at Mountain View maintains a HIPAA training program requiring all facility personnel to attend compliance training. The program, with policy language dating to April 2007, aims "to ensure the confidentiality of our resident's protected health information and facility information."
The facility's HIPAA compliance policy describes the federal law as "a government effort to help protect the privacy and security of resident's medical information" with requirements "intended to ensure strong privacy protections without interfering with access to quality of care."
The DON told inspectors she started HIPAA training with all nurses the morning of the inspection.
The violation occurred in an area where family members, visitors, or other unauthorized individuals could have easily viewed the exposed medical information. Electronic medication administration records contain detailed information about residents' medications, dosages, administration times, and medical conditions.
Federal inspectors classified the violation as causing minimal harm or potential for actual harm, affecting few residents. However, the incident highlighted systemic concerns about staff adherence to basic privacy protections required under federal law.
The nurse's initial response suggesting the computer "only showed the resident's name" demonstrated a lack of understanding about what constitutes protected health information under HIPAA regulations. Even basic identifying information combined with location in a healthcare facility can constitute a privacy violation.
LVN A's acknowledgment that she needed to lock her computer before walking away indicated the violation was preventable through basic compliance with established protocols.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for The Villa At Mountain View from 2025-09-05 including all violations, facility responses, and corrective action plans.