Federal inspectors discovered the exposed documents on January 27 at 12:35 PM during a complaint investigation. The report sheet displayed health information for both residents in plain view.
A certified nurse aide working nearby confirmed the form contained resident information when inspectors pointed it out. The aide said the nurse on duty had left for lunch and admitted uncertainty about whether the report should be placed visibly on the cart.
"She is not sure if the report should be placed on top of cart visible to others," inspectors noted in their findings.
The exposed records contained extensive medical details. One resident's diagnoses included type 2 diabetes, acute and chronic respiratory failure with hypoxia, bipolar disorder, depression, and atrial fibrillation. The second resident's information revealed heart failure, pneumonia, type 2 diabetes, hemiplegia following a stroke, chronic obstructive pulmonary disease, and swallowing difficulties.
Fifteen minutes after the discovery, the Director of Nursing confirmed the violation. She verified that the report form on the nurse's cart contained resident information and should not be visible for privacy reasons.
Two days later, the Assistant Administrator acknowledged the breach during an interview with inspectors. Resident records containing medical information should not be visible to other residents or visitors, she said. All records should be covered to maintain privacy.
The administrator revealed a significant gap in the facility's privacy protections. The only policy addressing federal health privacy laws exists in the employee handbook, she told inspectors.
That handbook policy states the facility treats resident medical information as confidential under federal health privacy laws. It requires maintaining confidentiality of medical records and other health information, defining when and how protected health information may be used or disclosed.
"Employees must not use or disclose PHI, either directly or through others, in any manner that would violate the Privacy Rule," the policy reads.
The policy warns that any employee violating federal privacy laws faces disciplinary action up to immediate termination.
Despite these written requirements, the reality on January 27 was different. Sensitive medical information sat exposed in a public hallway where visitors, other residents, or anyone passing through could read personal health details.
The violation affects fundamental patient privacy rights. Federal regulations require nursing homes to keep residents' personal and medical records private and confidential. This protection extends beyond just securing filing cabinets or computer systems.
Daily operational practices must also safeguard privacy. Report sheets, medication records, and care documentation cannot be left where unauthorized people might see them.
The exposed information included particularly sensitive diagnoses. Mental health conditions like bipolar disorder and depression carry social stigma that privacy laws specifically aim to protect. Chronic conditions like diabetes and heart failure reveal personal health struggles residents may not want others to know about.
The timing of the discovery suggests this was not an isolated incident. The nurse had left for lunch, indicating this might be routine practice when staff take breaks. The aide's uncertainty about proper procedures points to inadequate training on privacy requirements.
Nursing homes handle extensive personal health information daily. Medication administration records, care notes, treatment plans, and status reports all contain protected details about residents' conditions and care needs.
Staff routinely transport this information throughout facilities on carts, clipboards, and electronic devices. Each movement creates opportunities for privacy breaches if proper safeguards are not followed consistently.
The Assistant Administrator's comment about having only one policy in the employee handbook suggests limited focus on privacy training and procedures. Comprehensive privacy protection typically requires detailed policies covering various scenarios staff encounter.
Federal privacy laws apply to all healthcare providers, including nursing homes. These regulations give patients control over their health information and limit who can access it without permission.
Violations can result in significant penalties. The Department of Health and Human Services can impose fines ranging from hundreds to millions of dollars depending on the severity and scope of breaches.
Beyond financial consequences, privacy violations damage trust between residents and caregivers. When personal health information becomes public without consent, it can cause embarrassment, discrimination, and emotional distress.
The two residents affected by this incident entrusted Nexus at Berwyn with their most personal health details. That trust was violated when their medical conditions became visible to anyone walking down the first-floor north hallway.
The facility's own policy acknowledges the importance of protecting this information. It specifically prohibits employees from using or disclosing protected health information in ways that violate federal privacy rules.
Yet on January 27, that policy failed in practice. A report sheet containing two residents' sensitive diagnoses sat uncovered on a medication cart, accessible to unauthorized viewers.
The certified nurse aide's uncertainty about proper procedures indicates a training problem. Staff who handle protected health information daily should understand basic privacy requirements without hesitation.
The Director of Nursing's confirmation that records should not be visible suggests awareness of the rules at management level. However, this knowledge did not prevent the violation from occurring.
Federal inspectors classified this as causing minimal harm or potential for actual harm. While no evidence suggests anyone actually viewed the exposed records, the potential for privacy breach existed for an unknown period.
The violation demonstrates how easily privacy protections can fail during routine operations. A nurse leaving for lunch, an aide unsure of procedures, and management policies that exist only in an employee handbook created conditions where residents' most personal information became public.
For the two residents whose diagnoses were exposed, the damage to their privacy cannot be undone. Their medical conditions, including mental health struggles and chronic diseases, were left visible to anyone passing through the hallway that January afternoon.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for Nexus At Berwyn from 2026-01-30 including all violations, facility responses, and corrective action plans.