Health inspection·October 2, 2024

F 0583 Keep residents' personal and medical records private and confidential. Level of Harm - Minimal harm or potential for actual harm Based on review of policies and clinical records, as well as staff interviews, it was determined that the facility failed to maintain the confidentiality of residents' medical information for two of seven residents reviewed (Residents 6, 7). The deficiency is being cited as past non-compliance. Residents Affected - Few Findings include: The facility's policy regarding privacy, dated January 22, 2024, indicated that the facility could only use and disclose protected health information as permitted or required under HIPAA (Health Insurance Portability and Accountability Act) rules. A facility investigation, dated September 15, 2024, revealed that Resident 6's health information was provided to Resident 1's family member, who then presented the information to Resident 1's outside physician. Upon return to the facility, the family member again asked for Resident 1's health information and was provided a copy of Resident 7's health information instead. Interview with the Nursing Home Administrator on October 2, 2024, at 2:58 p.m. confirmed that Resident 6 and 7's health information was provided to Resident 1's family member and should not have been. Following the identification that the wrong health information was provided, the facility's corrective actions included: Resident 6 and 7 were notified that their health information was accidentally released. Audits were completed to ensure that the correct health information was provided for appointments. Staff were provided a verbal warning for providing the wrong health information and educated on verifying documents prior to handing them to family members/sending information on appointments. All nursing staff were educated on the facility's HIPAA privacy policy. The Director of Nursing/designee will conduct HIPAA audits three days per week for four weeks, then monthly for two months, to ensure residents who were going to appointments were sent with the appropriate paperwork. The findings would be reviewed with the quality assurance performance improvement committee. A review of the facility's corrective actions revealed that they were in compliance with F583 on September 16, 2024. Page 1 of 2 395726 395726 10/02/2024 Harmon House Health & Rehab Center 601 South Church Street Mount Pleasant, PA 15666

F 0583 28 Pa. Code 201.29(a) Resident Rights. Level of Harm - Minimal harm or potential for actual harm 28 Pa. Code 211.5(b) Clinical Records. Residents Affected - Few 395726 Page 2 of 2