The family member of Resident #10 received an after-visit summary intended for Resident #23 during their visit to St Sophia Health & Rehabilitation Center. The document contained the other resident's full name, date of birth, medical record number, and detailed medical information including referrals for an MRI of the spine and pain clinic, plus results from an x-ray completed during the visit.
When the family member immediately told the nurse about the error, the staff person's response was dismissive and concerning. The nurse said they "did not care and did not want the paperwork back" and told the family member they "could do whatever" they wanted with the confidential documents.
Two weeks later, during the December 31st inspection, the family member still possessed Resident #23's protected health information. They offered to provide a copy to state inspectors, demonstrating the ongoing breach of medical privacy.
The facility's own posted policies contradict what happened. A "Know Your Rights" statement at the front entrance explicitly states that residents have rights to confidentiality, and that "medical, personal, social or financial affairs should be considered privileged information."
Federal inspectors found no matching after-visit summary in Resident #23's medical record, suggesting the document may have been the only copy of important medical information that was supposed to remain in the patient's file.
During interviews on inspection day, both the Administrator and Director of Nursing acknowledged the severity of the violation. They confirmed that only residents, their guardians, and power of attorney holders should have access to medical records.
The Administrator said if staff discover they accidentally gave medical records to the wrong family member, "she would expect them to take the paperwork back." The facility's management must then notify their legal team and inform the affected family about the breach.
But none of that happened here.
The nurse's indifferent response when confronted with the mistake represents a fundamental failure to understand patient privacy requirements. Rather than immediately retrieving the confidential information and following proper breach protocols, the staff member essentially told the family to dispose of another person's medical records however they saw fit.
This casual attitude toward protected health information creates ongoing risks for residents. The family member who received the wrong documents had no obligation to protect another resident's medical privacy, yet they were essentially given permission to handle the sensitive information without any restrictions.
The incident occurred at a 159-bed facility where residents should expect their most personal medical details to remain confidential. After-visit summaries typically contain comprehensive information about a patient's condition, test results, treatment plans, and follow-up care requirements.
Medical privacy violations can have lasting consequences for residents and their families. Once confidential information leaves proper channels, facilities lose control over how it might be used or shared. The resident whose information was compromised may never know their medical details were in the possession of strangers for weeks.
The facility's response during the inspection suggested they understood proper procedures existed. The Administrator's description of expected protocols - retrieving documents, notifying legal counsel, informing affected families - indicates St Sophia had policies in place to handle such breaches appropriately.
Yet when the actual breach occurred, none of those safeguards functioned. The nurse who made the initial mistake compounded it by refusing to correct the error and showing complete disregard for patient confidentiality requirements.
Federal inspectors classified this as a violation with "minimal harm or potential for actual harm," but the resident whose private medical information remained in unauthorized hands for weeks might disagree. The family member still possessed detailed medical records that were never meant for their eyes, creating an ongoing privacy violation that extended well beyond the original mistake.
The incident highlights how quickly medical privacy can be compromised when staff fail to follow basic protocols for handling confidential information.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for St Sophia Health & Rehabilitation Center from 2025-12-31 including all violations, facility responses, and corrective action plans.