Palms Care Center: Medical Records Privacy Breach - FL
The incident, documented in a complaint inspection conducted April 30, 2026, revealed that the facility's unit secretary had assembled the wrong medical records inside a correctly labeled envelope and handed it to the resident's family before a physician visit. The envelope contained progress notes, a face sheet, physician orders, a medication list, and a consult report. None of it was the resident's.
The resident, identified in inspection records as Resident 36, had been admitted to the facility with metabolic encephalopathy, hemiplegia and hemiparesis following a cerebral infarction affecting the left dominant side, and schizoaffective disorder, bipolar type. Her score of 6 on the Brief Interview for Mental Status indicated she was severely cognitively impaired, meaning she could not have flagged the error herself.
The family member caught it.
She returned from the appointment, reported what had happened, and filed a formal grievance with the facility on April 28, 2026. She had already spoken with the administrator. The grievance record noted that the resident had come back from her appointment and reported that the incorrect envelope had been given to her. The action documented in response: the new ward clerk was in-serviced on HIPAA.
The unit secretary, identified in the report as Staff D, was interviewed by inspectors the following morning. It was her fourth day on the job.
She explained how the envelope system worked. Staff prepare envelopes a week in advance. The patient's name and the doctor's address go on the outside. Inside goes the clinical packet: progress notes, face sheet, physician orders, medication list, and the consult report the physician will complete during the visit. Residents and their representatives come to her to pick up the envelopes before appointments.
On the day of the incident, she said, Resident 36 was the only patient with a scheduled appointment. The other resident whose records ended up inside the envelope had his appointment cancelled. She gave the daughter an envelope with her mother's name on the front and a stranger's medical history inside.
Staff D told inspectors she had since changed how she handles the process. She now opens the envelope in front of the resident or family member before they leave, so they can confirm the contents match the name on the outside.
That fix, announced four days after the breach, is the facility's answer to a process that failed on its first documented test.
The inspection was classified as potential for minimal harm, the lowest tier in the federal harm scale. The records that left the building belonged to a real patient whose cancelled appointment meant he wasn't there to know his information had gone somewhere else.
The facility's written response to the grievance misspelled the name of the federal privacy law it cited as the basis for the corrective action. The documentation reads "HIPPA," not HIPAA.
Palms Care Center has not disclosed what became of the other resident's records after the appointment, whether that patient or his family was notified that his private medical information had been handed to another family, or how long the advance-preparation system had been in place before this breach occurred. The inspection report does not say.
What it does say is that a woman with severe cognitive impairment was handed someone else's medical file on the way to see her doctor, that the only person who caught it was her daughter, and that the facility's corrective action was to train the employee who caused it and change a step in the process she had been doing for four days.
The other patient, the one whose records traveled to a doctor's office he never visited, is not named in the report. Whether he knows what happened to his information is not recorded.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for Palms Care Center and Rehab from 2026-04-30 including all violations, facility responses, and corrective action plans.
Download the official CMS inspection PDF from Medicare.gov
Additional Resources
Data source: This article is based on inspection data downloaded directly from the Centers for Medicare & Medicaid Services (CMS) via Medicare.gov. CMS releases inspection reports in bulk; we publish the findings as documented by state surveyors in the official Form CMS-2567 Statement of Deficiencies.
Plan of correction: The CMS report we receive does not include the facility's plan of correction. Facilities submit plans of correction separately to state survey agencies and those responses may not be reflected in CMS data at the time of publication. The absence of a plan of correction in our data does not mean one was not filed. Readers who want information about corrective steps taken are encouraged to contact the facility directly or their state survey agency.
Corrections may have occurred: Inspection reports reflect conditions observed on the date of the survey. Facilities may have implemented corrections, staffing changes, additional training, or other remediation since the report was issued. We report what CMS provides and encourage readers to seek current information from the facility.
Editorial process: Inspection findings are extracted from CMS source documents and synthesized using AI, reviewed for factual accuracy against the original report by our editorial team.
Professional review: All content reviewed by Christopher F. Nesbitt, Sr., NH EMT & BU-trained Paralegal.
Last verified: September 19, 2026 · Our methodology
PALMS CARE CENTER AND REHAB in LAUDERDALE LAKES, FL was cited for violations during a health inspection on April 30, 2026.
The envelope contained progress notes, a face sheet, physician orders, a medication list, and a consult report.
Health inspections identify deficiencies that facilities must correct. Violations range from minor documentation issues to serious safety concerns. Review the full report below for specific details and facility response.