Privacy Fears in the EHR: Why Physicians Avoid Seeking Mental Health Care Where They Work

Health systems have invested heavily in physician wellness initiatives—peer support, coaching, free counseling sessions, and resilience workshops. Yet many of these programs remain underused, often chalked up to culture. Physicians are conditioned to push through, and stigma does the rest.

Culture is part of the story—but it is not the whole explanation. A simpler factor is frequently overlooked: physicians understand how their own records work. They know who can open a chart, how easily a look can happen, and how seldom access is audited. When the organization that employs you is also the one that would treat you, getting mental health care means creating a record inside a system your colleagues use every day.

That fear is well documented. In a 2017 study of more than 5,800 physicians published in Mayo Clinic Proceedings, nearly 40% said they would hesitate to seek help for a mental health condition because of concerns about their medical license. A 2016 survey of more than 2,100 women physicians in General Hospital Psychiatry found that almost half believed they had met criteria for a mental illness without seeking treatment, with fear of reporting to a licensing board among the reasons. Licensing questions rightly draw the most attention. The Federation of State Medical Boards has urged boards to ask only about current impairment, and the Dr. Lorna Breen Heroes’ Foundation has pressed hospitals and boards to remove intrusive mental health questions from their applications.

Those reforms matter. But a physician can practice in a state with a well-worded application and still decline care at their own hospital, because the barrier they worry about is the EHR.

The Workforce Patient Problem

When a physician is treated where they work, privacy teams classify them as a workforce patient. Their chart sits in the same system as everyone else’s, and in most organizations the default access model was built for patient care, not for protecting colleagues. A nurse on another unit, a resident who rotated with them, or a department administrator: any of them may technically be able to open the record, even when policy says they should not.

HIPAA does not ignore this. The minimum necessary standard limits access to what a role requires, and the Security Rule requires audit controls that record system activity and a process for reviewing that activity regularly. In practice, many organizations review access logs only after a complaint. Physicians know that, too. A rule that is enforced only when someone notices a problem does not feel like protection to the person whose chart might be opened.

There is also a quieter worry. Occupational health, credentialing, and peer review all run through the same organization. HIPAA treats employment records held by an organization in its role as employer differently from treatment records, and treatment information cannot simply be pulled into employment decisions. But a physician considering therapy at their own system is not reading the regulation. They are asking whether the people who decide their privileges could see it. If the honest answer is “probably not, but we have never checked,” many of them will go elsewhere or not go at all.

Four Fixes IT and Privacy Leaders Control

The most important fixes sit with the CIO, the CISO, and the privacy officer, not with the legislature.

1. Protect Workforce-Patient Charts by Default. Most major EHRs can flag a record so that anyone outside the care team must state a reason before opening it, often called break-the-glass. Many organizations apply that flag only to high-profile patients or on request. Apply it automatically to every employee and credentialed clinician who is also a patient, and tell staff it is on.

2. Make Access-Log Review Proactive. Run routine reports on staff charts, with alerts when a user opens a coworker’s record outside an active treatment relationship. Privacy monitoring tools can automate much of this. Publish the fact that the reviews happen, and act visibly when they find something.

3. Use the Psychotherapy Notes Category HIPAA Already Provides. HIPAA defines psychotherapy notes as a clinician’s separate notes analyzing a session, kept apart from the rest of the record, and most disclosures of them require the patient’s specific authorization. Many behavioral health workflows never set this up, so detailed session content ends up in the general chart. Configure separate storage and restricted access for psychotherapy notes, and train behavioral health clinicians to use it.

4. Wall Off Occupational Health and Credentialing Workflows. Map every interface and report that touches employee health information. Confirm that credentialing, medical staff services, and peer review cannot query treatment data, and document that separation in plain language.

Then Tell Physicians, Plainly

None of this works if physicians do not know about it. Every health system with a wellness program should publish a one-page explanation of who can see a workforce patient’s chart, what is logged, how often logs are reviewed, and what happens when someone looks without a reason. Write it in plain English, have the CMIO and privacy officer sign it, and put it next to the wellness program’s sign-up page.

The goal is not a perfect vault. It is to make getting help feel less like a disclosure. Physicians will believe that when the systems they use every day show them it is true.

Photo: Filograph, Getty Images

Source link