Inspection·November 19, 2024

F 0583 Keep residents' personal and medical records private and confidential. Level of Harm - Potential for minimal harm Based on observation, interview and record review, the facility failed to ensure the residents' rights to privacy for 7 (#1, #2, #3, #4, #5, #6, #7) of 10 residents reviewed for personal privacy. Residents Affected - Many The facility failed to ensure CMA A locked the computer screen, displaying the names of 7 residents, while CMA A was in a resident's room administering medication. This failure could allow residents' protected HIPAA information to be shared with individuals who did not have a need or right to know. The findings included: An observation 11/19/24 at 10:10 a.m. revealed an open laptop on the nurse's cart on Unit C. The screen displayed the full name and room number of 7 residents on the C unit. CMA A was in a resident's room providing administering medication. The cart was outside the door of the room CMA A was in. A housekeeping staff was next to the cart and in direct sight access of the laptop and screen. During an interview 11/19/24 at 10:12 a.m., CMA A stated she was supposed to lock the screen when away from the computer. She stated it was a HIPAA violation to leave the screen open, unattended, with resident information displayed. She said she had been trained to lock the laptop screen, but she forgot before she administered medication to a resident. She said resident information could be viewed by others who did not have authorization. During an interview with the RN A 11/19/24 at 1:12 p.m., said CMA A should lock the computer when not using it, because resident information could be seen, and it was a HIPAA violation. She said this was a privacy issue for residents. She said during orientation all staff are trained on resident rights and how to keep medical information confidential. Record review of the facility policy, revised April 2024, titled Resident Rights revealed the following in part: .The facility staff will safeguard the privacy of the resident's protected health information from improper use and disclosure . Record review of the facility policy, revised 6/1/2019, titled Minimum Necessary Standard - HIPAA Manual revealed the following in part: .The facility staff should be mindful not to divulge clinical information such as diagnoses or other personal information in .halls .facility staff will keep medical records secure and confidential . Any deficiency statement ending with an asterisk (*) denotes a deficiency which the institution may be excused from correcting providing it is determined that other safeguards provide sufficient protection to the patients. (See instructions.) Except for nursing homes, the findings stated above are disclosable 90 days following the date of survey whether or not a plan of correction is provided. For nursing homes, the above findings and plans of correction are disclosable 14 days following the date these documents are made available to the facility. If deficiencies are cited, an approved plan of correction is requisite to continued program participation. LABORATORY DIRECTOR'S OR PROVIDER/SUPPLIER REPRESENTATIVE'S SIGNATURE TITLE (X6) DATE FORM CMS-2567 (02/99) Previous Versions Obsolete Facility ID: If continuation sheet Page 1 of 2 Event ID: 455812 Printed: 05/15/2026 Form Approved OMB No. 0938-0391 Department of Health & Human Services Centers for Medicare & Medicaid Services STATEMENT OF DEFICIENCIES AND PLAN OF CORRECTION (X1) PROVIDER/SUPPLIER/CLIA IDENTIFICATION NUMBER: (X2) MULTIPLE CONSTRUCTION 455812 B. Wing A. Building (X3) DATE SURVEY COMPLETED 11/19/2024 NAME OF PROVIDER OR SUPPLIER STREET ADDRESS, CITY, STATE, ZIP CODE Paradigm at First Colony 4710 Lexington Blvd Missouri City, TX 77459 For information on the nursing home's plan to correct this deficiency, please contact the nursing home or the state survey agency. (X4) ID PREFIX TAG SUMMARY STATEMENT OF DEFICIENCIES (Each deficiency must be preceded by full regulatory or LSC identifying information)