Doctors avoid their own EHR over colleague access to mental health records

Health systems have built physician wellness programs with peer support, coaching and free counseling, and many go underused. In a MedCity News commentary published October 25, 2026, Elijah Fernandez, co-founder and CTO of CEREVITY, argues that leaders underestimate a simple reason: physicians know how their own EHR works. When the employer is also the treating organization, a physician who seeks mental health care becomes a workforce patient, and default access models built for patient care may let a nurse on another unit, a former co-rotating resident or a department administrator open the chart, even when policy forbids it.

The underlying fear is documented. Fernandez cites a 2017 Mayo Clinic Proceedings study of more than 5,800 physicians in which nearly 40% said they would hesitate to seek mental health help over licensing concerns, and a 2016 General Hospital Psychiatry survey of more than 2,100 women physicians in which almost half believed they had met criteria for a mental illness without seeking treatment (MedCity News). Those studies address licensing fears, not EHR access. The link between access defaults and avoidance is the author's argument, and no data on how many clinicians go elsewhere because of chart access is offered. Readers should also note the author built a confidential care platform for professionals.

The compliance angle is concrete. HIPAA's minimum necessary standard limits access to what a role requires, and the Security Rule requires audit controls and regular review of system activity. The author observes that many organizations review logs only after a complaint, which does not feel like protection to the clinician whose chart might be opened.

The fixes sit with the CIO, CISO and privacy officer. Apply break-the-glass flags automatically to every employee and credentialed clinician who is also a patient. Run proactive access-log reports with alerts when a user opens a coworker's record outside an active treatment relationship. Configure HIPAA's separate psychotherapy notes category so session detail stays out of the general chart. Map every interface touching employee health information and confirm credentialing, medical staff services and peer review cannot query treatment data.

The move: audit who can open employee-patient records today, restrict and monitor access to staff mental health records, and publish a plain one-page explanation, signed by the CMIO and privacy officer, beside the wellness program sign-up. For CHROs, the return is a wellness benefit clinicians may actually trust and use; for compliance, it is audit controls that run before a complaint rather than after.

You are a privacy and compliance advisor to the executive team of [your organization], a health system that also treats its own employees and credentialed clinicians as patients.

Context: In a MedCity News commentary published October 25, 2026, Elijah Fernandez, co-founder and CTO of CEREVITY, argues that default EHR access models were built for patient care, not for protecting colleagues. A nurse on another unit, a former co-rotating resident or a department administrator may technically be able to open a clinician's chart, which he says leads physicians to seek mental health care outside their own system. He cites a 2017 Mayo Clinic Proceedings study of more than 5,800 physicians, in which nearly 40% said they would hesitate to seek help over licensing concerns. Those studies address licensing fears, not EHR access. The link to access defaults is his argument, with no data on avoidance rates, and he built a confidential care platform for professionals. HIPAA's minimum necessary standard and the Security Rule's audit controls apply. Suggested fixes include automatic break-the-glass flags on employee-patients, proactive access-log alerts, separate psychotherapy notes, and an interface map confirming credentialing, medical staff services and peer review cannot query treatment data.

Task: Draft an audit workflow to find who can open employee-patient records in [your EHR] and to decide whether to restrict and monitor access to staff mental health records.

Output: a draft workflow with numbered steps, an owner for each step (CIO, CISO, privacy officer, CMIO), a check that confirms each step is done, and a closing list of decisions for the executive team.

Fill in: [your EHR], [how often you currently review access logs], [whether break-the-glass is configured today], [the name of your privacy officer].

Guardrails: use only the facts above and the slots I fill. Cite MedCity News by name. Flag anything uncertain or that must be verified with legal counsel or the EHR vendor. Use no patient data. This is a draft for the team to check, and nothing here is medical or legal advice.