When can hospitals legally film? Who can consent, and what HIPAA steps must production teams follow to avoid multi million penalties.
Avoid Multi Million Fines: Hospital Filming for Patients and Crews
Hospitals and media may not film patients in treatment areas without prior, written HIPAA authorization from every patient whose protected health information would be exposed. Public areas like lobbies follow different rules, and blurring faces afterward does not fix a filming session that started without consent. If you were filmed without permission, you can file a complaint with the HHS Office for Civil Rights.
TL;DR:
Filming inside treatment areas requires written HIPAA authorization from every patient whose protected health information could be exposed, regardless of face-blurring efforts.
Background details like vital signs, whiteboards, or monitor screens can reveal PHI, making prior consent essential even if visual or audio obfuscation is used afterward.
Proper authorization must include specific details such as patient identity, purpose of filming, production entity, expiration, and revocation rights; a third-party must collect these consents.
Filming without proper consent can lead to significant legal penalties, as enforcement actions like multi-million dollar settlements demonstrate.
Hospital staff or media liaisons should supervise all filming processes, ensuring only authorized footage is captured and that revocations are promptly documented and acted upon.
Simchon Productionssimchonproductions.comTell Patient Stories With CareSimchon Productions creates cinematic healthcare films with authentic storytelling, focused messaging, and intentional post-production for lasting audience connection.Visit Simchon Productions
Table of Contents
What do HIPAA and HHS rules say about media access to patients?
When can hospitals lawfully allow filming to happen?
Who is allowed to give consent for filming?
What can patients and visitors record on their own?
What happens if filming happens without proper consent?
How should production teams and hospitals run a compliant shoot?
Does filming affect patient care while it’s happening?
What does a hospital media liaison actually do?
Does commercial filming follow the same rules as research or education?
A note from a healthcare production lead
How we help hospitals film patient stories the right way
FAQ
Sources
What do HIPAA and HHS rules say about media access to patients?
Federal guidance is direct on this point. Covered health care providers cannot invite or allow media crews into treatment areas where a patient’s protected health information, or PHI, will be visible or audible, unless every affected patient has signed a written authorization first, according to HHS guidance on film and media access.
PHI shows up in more places than people expect during a hospital shoot. A camera pointed at a hallway can catch:
A patient’s ID bracelet with their name and date of birth
A monitor screen displaying vital signs or a diagnosis
A whiteboard listing a patient’s name next to their room number
Background conversation that reveals a condition or treatment plan
Masking does not count as consent. HHS guidance states plainly that blurring faces, pixelating screens, or altering voices after filming does not replace the need for prior written authorization when PHI was captured in a treatment area, according to HHS.gov.
Public spaces work differently. A lobby, a cafeteria, or a hospital’s exterior generally does not raise the same concerns, because no PHI is usually exposed there. The line is whether PHI is accessible, not whether a space is technically open to visitors. A hospital hallway outside patient rooms can still count as a treatment area if monitors, charts, or patient conversations are within range of the camera.
When can hospitals lawfully allow filming to happen?
A hospital can allow filming once it has a signed, specific authorization from each patient involved. HHS and health-research compliance guidance point to the same core elements that make an authorization valid, as outlined by Loma Linda University’s research affairs office:
The patient’s name and a description of the information to be filmed or recorded
The name of the production company or media outlet receiving the footage
A clear statement of the purpose, whether it’s a news segment, a documentary, or a brand film
An expiration date or event after which the authorization no longer applies
A statement explaining the patient’s right to revoke the authorization in writing at any time
When an outside production company handles the footage, the hospital typically needs a business associate agreement or BAA, in place. That agreement spells out how the vendor stores, transmits, and eventually deletes any footage containing PHI.
Reasonable safeguards matter just as much as the paperwork. Privacy screens, opaque curtains between filmed and unfilmed patients, and a secure, encrypted storage plan all reduce the chance that an authorized shoot still exposes someone who never agreed to be filmed.
Pro Tip: Build the revocation process into your shoot plan before day one, so you’re never scrambling to find and delete footage after a patient changes their mind.
Who is allowed to give consent for filming?
Consent should come from the patient, but only if that patient has the capacity to understand what they’re agreeing to and what it means. Capacity means the patient can process the request, weigh the risks, and make a clear decision on their own.
A parent or legal guardian may sign for a minor patient.
A legally authorized representative may sign for an adult who lacks capacity, such as someone sedated or in cognitive decline.
Emergency care creates real limits: a patient arriving unconscious cannot consent, and filming them before anyone has that conversation is not appropriate.
The AMA Code of Medical Ethics advises that surrogate consent should be used sparingly for recordings that aren’t medically necessary, since a family member under stress is in a poor position to weigh a media request.
The AMA also recommends an institutional review process for filming requests, so the decision doesn’t rest on one clinician’s judgment in the moment.
What can patients and visitors record on their own?
A patient generally has the right to record their own care, their own conversations with their doctor, or their own hospital room. That right changes the moment the recording captures another patient’s information without that patient’s agreement.
Recording your own treatment is different from recording a roommate, a nurse’s station computer screen, or another patient’s chart.
State laws on audio recording vary. Some states allow one-party consent, meaning you can record a conversation you’re part of without telling the other person. Others require all-party consent, meaning everyone being recorded has to agree.
Hospitals can still set reasonable limits, like asking visitors not to film in shared rooms, hallways near nursing stations, or anywhere a stretcher might come through unexpectedly.
These limits exist to protect other patients, not to block you from documenting your own experience.
What happens if filming happens without proper consent?
Enforcement in this area is real and the penalties are significant. The HHS Office for Civil Rights reached a multi-million dollar settlement with New York-Presbyterian Hospital after a film crew recorded patients for a documentary series without obtaining the required authorizations, a case that also came with a corrective action plan and ongoing monitoring.
That a multi-million dollar settlement remains one of the clearest signals that unauthorized filming carries real financial consequences, not just a policy violation.
If you believe you were filmed without consent, you have several paths:
File a complaint with the HHS Office for Civil Rights
Contact your state’s health department or attorney general’s office
Reach out to the hospital’s patient advocate or risk management office directly
Consult an attorney about a potential civil claim
Act quickly if this happens to you. Ask the crew to stop filming, request the name of the production company and the hospital department that approved the shoot, and ask in writing for a copy of any authorization that supposedly covers you.
How should production teams and hospitals run a compliant shoot?
A written authorization should never come from the production crew itself. The AMA’s guidance and common hospital practice both point to using a disinterested third party, like a patient advocate or a hospital liaison uninvolved in the filming, to present and collect signed authorizations. That separation protects patients from feeling pressured to agree.
Before the shoot:
Give the hospital and patients advance notice of the filming schedule and purpose
Collect written HIPAA authorizations for every patient who might appear, using the full set of required elements
Sign a business associate agreement with the hospital if your crew will handle any PHI
Confirm the identity of each person signing, especially when a surrogate is involved
Document expiration and revocation terms clearly, in writing, before cameras roll
On set, the rules get more concrete. Camera operators need clear instructions on where PHI might appear, like monitor screens or whiteboards, so those areas stay out of frame or get physically screened. Everyone on set should know the stop-work signal if a non-consenting patient enters the shot. Footage needs a documented chain of custody, and raw files should move to secure storage quickly, with local device copies deleted once the transfer is confirmed.
Pro Tip: Assign one person on your crew, not the director, to track consent paperwork and revocations for the entire shoot. It’s the single most common thing that falls through the cracks.
For a deeper look at how this plays out across a full production schedule, our guide to the hospital video production process walks through the planning stages in more detail.
Does filming affect patient care while it’s happening?
A camera crew in a clinical space changes the rhythm of the floor, even when everyone involved has agreed to be there. Nurses and physicians have to divide attention between patient care and the logistics of a shoot, which can slow down routine tasks like medication rounds or chart updates.
Patients who are not part of the filming can still feel its effects. A hallway blocked by equipment, a quieter conversation because a boom mic is nearby, or a longer wait because staff are coordinating with a crew all add friction to a day that’s already stressful for people receiving care.
Well-run shoots plan around these pressures instead of ignoring them. That means scheduling around shift changes, keeping crew size small in active clinical areas, and giving staff a clear point of contact if a shoot needs to pause. A hospital that treats filming as a guest in its workflow, rather than the center of it, keeps patient care as the priority it needs to be.
The goal is a shoot that staff barely notice after the first few minutes, because the logistics were worked out ahead of time instead of improvised on the day.
What does a hospital media liaison actually do?
A media liaison or communications staffer is the person who turns a filming request into something a hospital can actually say yes to. That role sits between the production team, the clinical staff, and the patients involved, and it carries more responsibility than simply handing out a visitor badge.
Before a shoot, the liaison reviews the request against hospital policy, checks whether the planned filming areas will expose PHI, and coordinates which patients need to sign authorizations. During the shoot, that same person is usually the one who can call a stop if a non-consenting patient walks into frame or if the crew drifts into a restricted area.
The liaison also keeps the paperwork trail organized: signed authorizations, the business associate agreement if one applies, and a record of who approved what and when. Hospitals that have faced OCR corrective action plans are now expected to actively monitor third-party recording on their premises and document the approval process for every filming request. A liaison who takes that responsibility seriously is often the difference between a shoot that goes smoothly and one that ends up in a compliance review.
Does commercial filming follow the same rules as research or education?
The purpose behind a recording changes some of the practical steps, even though the core HIPAA authorization requirement stays the same either way. A commercial shoot, like a brand film or a promotional piece, almost always needs a fully executed written authorization naming the production company, the intended use, and an expiration date, because the footage will likely be used for marketing outside the hospital’s own research or teaching functions.
Educational and research recordings can involve additional layers, including review by an institutional body that evaluates the scientific or teaching value of the footage alongside the privacy risk. The AMA’s ethics guidance specifically recommends institutional review for recordings used in public education, which adds a layer of oversight beyond what a standard commercial authorization might require.
The practical difference for patients is mostly about how long the footage lives and where it travels. A commercial film often has a defined campaign life and a clear end date, while educational material can remain in circulation for years as part of a teaching archive. Either way, the authorization should spell out that timeline and the patient’s right to revoke consent before the footage is used or re-used.
A note from a healthcare production lead
I’ve spent years filming inside hospitals, and the pattern that works is always the same. A hospital liaison, not our crew, collects every signed authorization before we touch a camera. We document revocations in writing and build our shoot schedule around what that paperwork allows. Compliance and a film that actually moves people are not opposites. Getting consent right is what lets us tell the story honestly.
— Tzvi Simchon
How we help hospitals film patient stories the right way
Hospitals, health systems, and senior living facilities come to us because we integrate compliance into the production schedule from the first planning call. Our healthcare video projects follow a workflow where a hospital liaison manages consent.
Here’s what that looks like in practice:
We coordinate with hospital compliance or risk management teams before scheduling shoot days
We work within business associate agreements when handling protected health information
We plan secure storage and deletion timelines as part of the production budget.
We’ve shared more examples of how this plays out in our patient testimonial video work
If you’re weighing a brand film, a donor film, or a documentary-style project for your institution, visit Simchon Productions to start a conversation about your project.
This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.
FAQ
Are you legally allowed to film in a hospital?
Filming is allowed in public areas like lobbies, but treatment areas require prior written authorization from every patient whose protected health information would be visible, according to HHS guidance. Without that authorization, a hospital should not permit a crew into clinical spaces.
Can you violate HIPAA by recording in a hospital?
Yes, recording in a treatment area without the required written authorization is a HIPAA violation, and HHS has enforced this rule with a a multi-million dollar settlement against New York-Presbyterian Hospital. The violation applies to the hospital that allowed the filming, not just the crew holding the camera.
Can a patient film a nurse without consent?
A patient generally has the right to record their own care, which can include a nurse present in the room during that care. The rule gets more complicated if the recording captures another patient’s information or violates a hospital’s specific filming policy for staff interactions.
Why would a hospital put a camera in a patient’s room?
Hospitals sometimes use cameras for safety monitoring, such as fall prevention or observation of patients at risk of self-harm, under policies that differ from media filming rules. These monitoring cameras typically fall under hospital security or clinical protocols rather than the media authorization process described here, and patients should be informed when such monitoring is in place.
Sources
Audio or Visual Recording of Patients for Public Education | AMA Code of Medical Ethics
HIPAA list of authorization elements | Loma Linda University Research Affairs