How hospitals, clinics, and health systems collect photos for clinician badges, agency cards, trainee badges, and visitor passes

Five clinicians stand in a hospital corridor with pale blue walls and a gray lower band. From the left: a bearded man in a white coat and a stethoscope, a woman in blue scrubs, a man in a white coat behind them, a woman in blue scrubs, and a man in glasses, a white coat, and a patterned tie. A first-aid cabinet is on the left wall and a red EMERGENCY arrow is on the right.
A unit matches a person to a badge. The building and the people are not IDPhoto.ai customers. Photo: RDNE Stock project / Pexels.

A hospital, a clinic, or a medical group keeps four photographs: one a colleague can match on the employee or clinician badge, one on the contractor or agency card, one on the student, resident, or volunteer badge, and one on the visitor pass. Name the file before anyone uploads, use the camera that file allows, and store an end date on every card. Delete the site's copy when that date passes. A state license, a passport or visa, and Form I-9 stay on the path that owns them. A photograph taken for care stays in the chart.

A single hospital campus follows the hospital guide. Employed staff follow the HR badge guide. Agency and traveling nurses follow the staffing guide. A campus ID follows the university guide. A nursing home's resident picture, when the system also runs a care community, follows the senior living guide. Contract security follows the security guide. A visa or passport file follows the immigration guide. Starting from $0.20 per photo.

What does one shared photograph cost a health system?

The cost shows up on the unit and at the clinic door. A traveling nurse is already working from an agency selfie. A resident's school portrait does not fit the badge window. The owned practice printed the hospital card, and the name line is wrong for that office. A visitor sticker has a name and no face. A card that still opens a door after the assignment does the same thing at the next site.

The U.S. Bureau of Labor Statistics counted 5,797.8 thousand seasonally adjusted employees in hospitals (NAICS 622) in September 2026, a preliminary payroll figure for hospitals only. It leaves out offices of physicians and many clinics. Those sites still print a badge.

FileWho holds the cameraWhat goes wrong if you substitute
Employee or clinician badgeA link before day one, or the badge office at that site.A filtered portrait, or a school photo reused as the card a colleague must match.
Contractor, agency, or traveling-nurse cardThat assignment's template. Share a crop only when the windows, the name line, and the access match.Employee stock, or a door that still opens after the assignment.
Student, resident, or volunteer badgeThat rotation, term, or volunteer period's template.A permanent clinician badge, or a campus ID used as the hospital card.
Visitor passA distinct template that ends with the appointment.A workforce badge, or no photograph to match.
Form I-9, for people the organization employs in the United StatesThe employee chooses the documents. A hospital or clinic badge is not on the Lists of Acceptable Documents.Filing the badge as a List A or List B document, or specifying which document to bring.
License, passport, or visaThe board or that document's own capture. A U.S. visa follows the Department of State and stays unedited. A UK passport photograph meets GOV.UK photo rules.Sending the badge crop. The board, the embassy, or HM Passport Office decides.

The Form I-9 instructions put Section 2 within three business days after the first day of employment, or on the first day when the job is shorter. Where the employer creates an E-Verify case, compare the photo E-Verify displays with the photo on the document presented. Agency nurses, traveling nurses, and contractors complete the form with their own employer.

Which badge rule applies at this site?

The Joint Commission requires the organization to identify people entering its facilities and to control access to areas it marks as security sensitive. The organization writes the badge policy, and surveyors assess that policy. There is no Joint Commission requirement for a photograph, and no required set of words on the badge. The same answer covers hospitals and hospital clinics, ambulatory care, and office-based surgery. Some states set the content. If your policy requires a photo, a blank file is a miss against your own rule. A medical group follows Joint Commission only when it holds that accreditation.

CMS does not set the photograph or the words on a hospital badge. Under 42 CFR 482.11 a hospital must comply with applicable federal laws related to the health and safety of patients, be licensed or approved as meeting the state's licensing standards, and assure that personnel are licensed or meet other standards required by state or local laws. Under 42 CFR 482.13(c)(2) a patient has the right to care in a safe setting. The line on the badge still comes from the state statute and from the policy you wrote.

Read the statute for the site before you copy a template from another building. These are examples. Other states publish their own.

Where the person worksWhat the rule requires the badge to show
Connecticut hospital or outpatient surgical facility, for direct patient careSection 19a-905: a photographic badge issued by the facility, worn in plain view, with the facility name, the person's name, and the license, certificate, or job title. It covers a person employed by or acting on behalf of the facility. The facility sets size, format, and safety exemptions with the Department of Public Health. A private office is not on this list.
Rhode Island health care facilitySection 23-17-47: a photo badge for every person, including a student, who examines, observes, or treats. It states the first name, licensure or registration status if any, fluency in sign language other than English if any, and staff position. A practitioner's office is outside this duty, including an office a hospital owns. See the definition in section 23-17-2.
Massachusetts hospital or clinic on the facility listChapter 111, section 70E: a badge, including for a student, with the first name, licensure status if any, and staff position. The statute does not require a photograph. The facility list includes a hospital and a clinic licensed or subject to licensing by the department.
Maryland physician office, urgent care, or freestanding ambulatory care facilityHealth Occupations section 1-221: the name commonly used, and the type of license, in readily visible type. Not a photograph. A solo office with the license posted, and a sterile setting, can be exempt. This section does not list a hospital.
California practice, including a facility licensed by the State Department of Public HealthBusiness and Professions Code section 680: name and California license status in at least 18-point type. Not a photograph. An office that posts the license may skip the tag. A psychiatric setting, or a setting the state does not license, may exempt a person for safety or therapeutic reasons. A licensed facility keeps a policy so practitioners comply.

Maine Title 24, section 2988 requires a face-to-face practitioner to wear a name badge or other identification with the name and the type of license. A physician's badge shows the first and last name. It does not require a photograph. Share a crop across two sites only when both windows accept it, the name line is legal at both, and the access is the same.

How do healthcare teams collect these photos today?

A system that has not split the files still runs on one camera at the main campus, a shared inbox, and one person at the printer. An agency JPEG is cropped for the hospital, the clinic, and the visitor sticker. Reprints use the newest selfie. The folder is still full when the person is at another site.

What does a split workflow look like?

Name the file before the first link goes out. Each file has a door end date and, when it differs, a date for deleting the site's copy. Use the same split at the hospital, the clinic, and the medical office.

Four-step diagram. Name the file as clinician, agency nurse, trainee, or visitor. Use a link before day one or the badge office at that site. Retake a rejected capture before the person leaves the queue. Store an end date on the copy the site keeps, then delete after that date. The footer says a clean check is not permission to enter.
Each file names its own camera and its own end date.

1. Write down who holds the camera. Collect the photograph before the first shift when you can. Keep a camera at the site for a rejected capture and a walk-up. A directory portrait, including an AI headshot, stays on the directory page.

2. Sort people by the record that already owns them.

WhoWhere the record livesWhat to do with the photo
Direct employee or employed clinicianHR, including Workday or SAP SuccessFactors when that roster already lists themEmployee badge ending at separation. See the HR guide.
Privileged practitioner who is not an employeeCredentialingThe clinician template, with the privilege end date. The license stays with the board. The badge is not a copy of the license.
Contractor, agency nurse, or traveling nurseThe card you issue, plus the agency or vendor fileAssignment end date on your card. Their file follows the staffing guide.
Student, resident, or volunteerEducation, the program, or the volunteer officeA separate template ending with the rotation, the term, or the volunteer period. A campus ID stays a campus card. See the university guide.
VisitorThe pass for that appointmentA distinct template that ends with the appointment. Leave the visitor out of the hiring batch.
Second site, or a visaA second card, or the document fileA new end date when the access differs. A visa stays off the badge and stays unedited.

3. Collect the file on one link, or at the badge office. The badge photo service can email a unique link with no extra account, expired after use, available per request from support@idphoto.ai. Direct-hire company IDs use the employee badge page. The link does not replace Form I-9 or a board application. A person who will work at two sites gets the template for each site, not one crop labeled for both.

4. Reject a bad capture in the same visit. One person, in colour, in focus, eyes visible, no face mask. The template decides clothing, glasses, and background. A religious head covering worn daily can stay when your rule allows it and the face is visible. Background removal and photo enhancement apply only when the template allows them. A visa or UK passport photograph stays unedited. A face-mask check is available per request. See when a corrected portrait fits.

5. Write the file back with the stop date. Store the door end date and the deletion date when they differ. The organization still decides who is admitted. On a replacement, face comparison checks the capture against the stored file. Liveness detection is available per request. Take the copy back, or use a temporary link of 2 hours to 14 days. Keep any copy E-Verify requires with Form I-9.

6. Batch one class on one template. Batch preparation returns a retake list before the print deadline. Direct hires, the agency order, and the resident class stay in separate batches. A visitor who arrives during the class gets a visitor pass at the desk and stays out of that batch.

Four cards side by side: an employee or clinician badge that ends when employment or privileges end, a contractor or agency card with the assignment end date, a student, resident, or volunteer badge that ends with the rotation or term, and a visitor pass that ends with the appointment. A note says a license, a passport, and Form I-9 stay off these cards.
The clinician badge, the contractor or agency card, the trainee badge, and the visitor pass are four files.

Many printers take ID-1 stock, nominally 85.60 mm by 53.98 mm under ISO/IEC 7810. A clinic window or a paper visitor pass is a different size. Measure the window you print before the first link. Put the license line the statute names, and leave the license number off unless that statute asks for it. Keep a passport number off the face of the badge.

What does the first week at two sites contain?

1. Hospital direct hires, on the clinician template, with links sent the week before. Retake a failed link before the shift.

2. One clinic day, on that office's template when the name line differs from the hospital card.

3. One traveling nurse, on the assignment template, ending on the last day of the order.

4. One resident or student, on the trainee template, ending on the last day of the rotation.

5. One visitor pass at the desk, ending the same day, and left out of the hiring batch.

Where do healthcare badge photos usually fail?

What failsWhat to change
One selfie is cropped for the hospital, the clinic, and a visitor stickerSplit the files. Share a crop only when the windows, the name line, and the access match.
The badge is filed as the Form I-9 document, or as a copy of the licenseThe employee chooses the documents. The board keeps the license. Store the badge on the labor or access record.
An agency JPEG is printed as the system's cardPrepare a new file on the assignment template. The firm may still have collected the original capture.
A resident or student is on employee stock, or a visitor is in the hiring batchUse the rotation template, or a visitor pass that ends with the appointment.
A card still opens a door after the assignment, including at the next siteDeactivate it the same day. Delete the photograph on its own date.
A lost card is reprinted from a new selfieReprint from the stored file. Retake only when face comparison against that file fails.

What should a health system require from a vendor?

What you needWhat good looks like
A specification per card you printSize, crop, background, and the name line for each site. See the published specifications. A license and a visa sit outside this list.
A block on forbidden editsA U.S. visa photograph, and a U.S. or UK passport photograph, stay unedited. See when a corrected portrait fits.
Rejection before a manual cropFace, light, blur, framing, glasses, and, when you ask for it, a face mask, while the person is still in the queue or at the desk.
A path for people not yet on siteOne link per person, no extra account, expired after use. The camera stays for a retake, a walk-up, and a same-day visitor.
The record that owns the personThe file returns with the door end date and the deletion date. Workday or SAP SuccessFactors sync is available per request for direct employees.
A check a security lead can explainFace comparison and liveness detection are available per request. Security still decides who is admitted. Collect the visitor pass when its end date passes.

Who may see a workforce photograph?

The employee, the people office, credentialing for the privilege record, and a security lead who matches the badge may see the site file. Under 45 CFR 160.103, protected health information excludes employment records a covered entity holds in its role as employer. A staff badge photo on the personnel record is that kind of record. A photograph taken for care stays in the medical record. Ask the privacy officer before a contractor, student, or visitor portrait is stored beside patient information. GDPR Article 5(1)(e) and the CCPA apply where those laws apply. The data privacy policy covers encrypted transmission, a temporary link of 2 hours to 14 days, or taking the image back. US and EU processing are available. Other regions are available per request.

How do you roll this out across sites?

Write the file rule for one hospital and one clinic before the first link. Name the templates, the door end date, the deletion date, and each photo window. Put the state name line beside the template. Keep the Form I-9 clock beside the print step for people you employ.

Run one hiring class and one clinic day on those templates only. Name one owner who can decide, the same day, whether a person stays on the new path. Include one agency card, one trainee badge, and one visitor pass. Print one badge on that printer, or confirm print and mailing with support before you promise a card in the post. Print and mailing is available per request.

Add the next site after a write has held. Prove a clean upload, a retake, a walk-up, and a write that fails once and is retried. Open Workday or SAP SuccessFactors only for direct employees, after support confirms the connection. A visa is a second file. An owned medical office gets the rule for that office, not a copy of the hospital card.

What do HR and security leads ask?

Does The Joint Commission require a photograph on the badge?

No. The Joint Commission says the organization identifies people entering its facilities and controls access to security-sensitive areas. Surveyors assess the policy you wrote. There is no requirement for a photograph, and no required set of words on the badge. The same answer covers hospitals and hospital clinics, ambulatory care, and office-based surgery. Some states set the content.

Does CMS set the photograph or the name line on a hospital badge?

No. CMS does not set the photograph or the words. 42 CFR 482.11 requires compliance with applicable federal laws on the health and safety of patients, a state license, and personnel who meet standards state or local law requires. 42 CFR 482.13(c)(2) gives a patient the right to care in a safe setting. The line on the badge comes from the state statute and from the policy you wrote.

Does every state require a photo, a name, and a license line?

No. Connecticut and Rhode Island require a photo badge in the settings those statutes name. Massachusetts, Maryland, California, and Maine require a name and a license or position line and do not require a photograph. A hospital and a medical office on the same system can sit under different rules. Read the statute for that site. The table above names the statutes linked in this guide.

Can one portrait go on the clinician badge, the agency card, and a visitor pass?

Share a crop only when both windows accept it, the name line is legal at both sites, and the access is the same. A license stays with the board. A visa stays unedited under Department of State photo rules. A UK passport photograph must meet GOV.UK photo rules and can be retrieved with a UK passport photo code. HM Passport Office still decides.

Can a clinician send a badge photo before the first shift at another site?

Yes. One link, no extra account, expired after use, available per request from support@idphoto.ai. Keep a camera at the site for a retake and a walk-up. Form I-9 keeps its own clock.

What if the person is an agency nurse, a resident, a student, or a volunteer?

Print your card with the assignment, rotation, term, or volunteer end date. The agency, the school, or the sponsoring office keeps its own file and, where it employs the person, Form I-9. The employee template stays on your direct hires.

When should the photograph be deleted?

Delete the site's copy on the date stored with the file. A named reprint window is a purpose. Deactivate the card the day the assignment, the rotation, or the visit ends, including at the next site. GDPR Article 5(1)(e) keeps personal data in the UK and the EU no longer than necessary. Form I-9 retention follows its own clock.

What does preparing the photograph cost?

It starts at $0.20 per photo. That is separate from a state license fee, a printer lease, and a government fee. The catalog covers 300+ specifications across 200+ countries.

How does idphoto.ai fit this workflow?

The idphoto.ai API is the photo step for the cards the organization prints. It prepares a portrait to the template you name, checks the capture, and returns a file for the labor record, the access record, or the printer. The organization decides who receives a badge. Form I-9, a state license, and a visa stay on their own path. A UK passport photograph must meet GOV.UK photo rules. A UK passport photo code retrieves a photograph that meets those rules, and HM Passport Office still decides. The catalog covers 300+ specifications across 200+ countries, starting from $0.20 per photo.

Templates, the self-service link, Workday or SAP SuccessFactors sync, print and mailing, liveness detection, a face-mask check, another processing region, and the Shopify store template with one-click setup are each available per request. The store stays off the labor record and the access record. Email support@idphoto.ai with the card designs, which states the sites sit in, the door end date, the deletion date, and how the file returns.

Sources

RuleOfficial page
Joint Commission ID badgesStandards FAQ on ID badges
CMS, hospital compliance with law42 CFR 482.11
CMS, care in a safe setting42 CFR 482.13
Connecticut photographic badgeGeneral Statutes section 19a-905
Rhode Island photo badge and facility definitionSection 23-17-47 and section 23-17-2
Massachusetts identification badgeChapter 111, section 70E
Maryland name and license typeHealth Occupations section 1-221
California name and license statusBusiness and Professions Code section 680
Maine name and license typeTitle 24, section 2988
Hospital employment, September 2026BLS, hospitals (NAICS 622)
Employment records and protected health information45 CFR 160.103