Doctors avoid their own EHR over colleague access to mental health records

Health systems have built physician wellness programs with peer support, coaching and free counseling, and many go underused. In a MedCity News commentary published October 25, 2026, Elijah Fernandez, co-founder and CTO of CEREVITY, argues that leaders underestimate a simple reason: physicians know how their own EHR works. When the employer is also the treating organization, a physician who seeks mental health care becomes a workforce patient, and default access models built for patient care may let a nurse on another unit, a former co-rotating resident or a department administrator open the chart, even when policy forbids it.

The underlying fear is documented. Fernandez cites a 2017 Mayo Clinic Proceedings study of more than 5,800 physicians in which nearly 40% said they would hesitate to seek mental health help over licensing concerns, and a 2016 General Hospital Psychiatry survey of more than 2,100 women physicians in which almost half believed they had met criteria for a mental illness without seeking treatment (MedCity News). Those studies address licensing fears, not EHR access. The link between access defaults and avoidance is the author's argument, and no data on how many clinicians go elsewhere because of chart access is offered. Readers should also note the author built a confidential care platform for professionals.

The compliance angle is concrete. HIPAA's minimum necessary standard limits access to what a role requires, and the Security Rule requires audit controls and regular review of system activity. The author observes that many organizations review logs only after a complaint, which does not feel like protection to the clinician whose chart might be opened.

The fixes sit with the CIO, CISO and privacy officer. Apply break-the-glass flags automatically to every employee and credentialed clinician who is also a patient. Run proactive access-log reports with alerts when a user opens a coworker's record outside an active treatment relationship. Configure HIPAA's separate psychotherapy notes category so session detail stays out of the general chart. Map every interface touching employee health information and confirm credentialing, medical staff services and peer review cannot query treatment data.

The move: audit who can open employee-patient records today, restrict and monitor access to staff mental health records, and publish a plain one-page explanation, signed by the CMIO and privacy officer, beside the wellness program sign-up. For CHROs, the return is a wellness benefit clinicians may actually trust and use; for compliance, it is audit controls that run before a complaint rather than after.