A hospital, a clinic, or a medical group keeps four photographs: one a colleague can match on the employee or clinician badge, one on the contractor or agency card, one on the student, resident, or volunteer badge, and one on the visitor pass. Name the file before anyone uploads, use the camera that file allows, and store an end date on every card. Delete the site's copy when that date passes. A state license, a passport or visa, and Form I-9 stay on the path that owns them. A photograph taken for care stays in the chart.
A single hospital campus follows the hospital guide. Employed staff follow the HR badge guide. Agency and traveling nurses follow the staffing guide. A campus ID follows the university guide. A nursing home's resident picture, when the system also runs a care community, follows the senior living guide. Contract security follows the security guide. A visa or passport file follows the immigration guide. Starting from $0.20 per photo.
What does one shared photograph cost a health system?
The cost shows up on the unit and at the clinic door. A traveling nurse is already working from an agency selfie. A resident's school portrait does not fit the badge window. The owned practice printed the hospital card, and the name line is wrong for that office. A visitor sticker has a name and no face. A card that still opens a door after the assignment does the same thing at the next site.
The U.S. Bureau of Labor Statistics counted 5,797.8 thousand seasonally adjusted employees in hospitals (NAICS 622) in September 2026, a preliminary payroll figure for hospitals only. It leaves out offices of physicians and many clinics. Those sites still print a badge.
| File | Who holds the camera | What goes wrong if you substitute |
|---|---|---|
| Employee or clinician badge | A link before day one, or the badge office at that site. | A filtered portrait, or a school photo reused as the card a colleague must match. |
| Contractor, agency, or traveling-nurse card | That assignment's template. Share a crop only when the windows, the name line, and the access match. | Employee stock, or a door that still opens after the assignment. |
| Student, resident, or volunteer badge | That rotation, term, or volunteer period's template. | A permanent clinician badge, or a campus ID used as the hospital card. |
| Visitor pass | A distinct template that ends with the appointment. | A workforce badge, or no photograph to match. |
| Form I-9, for people the organization employs in the United States | The employee chooses the documents. A hospital or clinic badge is not on the Lists of Acceptable Documents. | Filing the badge as a List A or List B document, or specifying which document to bring. |
| License, passport, or visa | The board or that document's own capture. A U.S. visa follows the Department of State and stays unedited. A UK passport photograph meets GOV.UK photo rules. | Sending the badge crop. The board, the embassy, or HM Passport Office decides. |
The Form I-9 instructions put Section 2 within three business days after the first day of employment, or on the first day when the job is shorter. Where the employer creates an E-Verify case, compare the photo E-Verify displays with the photo on the document presented. Agency nurses, traveling nurses, and contractors complete the form with their own employer.
Which badge rule applies at this site?
The Joint Commission requires the organization to identify people entering its facilities and to control access to areas it marks as security sensitive. The organization writes the badge policy, and surveyors assess that policy. There is no Joint Commission requirement for a photograph, and no required set of words on the badge. The same answer covers hospitals and hospital clinics, ambulatory care, and office-based surgery. Some states set the content. If your policy requires a photo, a blank file is a miss against your own rule. A medical group follows Joint Commission only when it holds that accreditation.
CMS does not set the photograph or the words on a hospital badge. Under 42 CFR 482.11 a hospital must comply with applicable federal laws related to the health and safety of patients, be licensed or approved as meeting the state's licensing standards, and assure that personnel are licensed or meet other standards required by state or local laws. Under 42 CFR 482.13(c)(2) a patient has the right to care in a safe setting. The line on the badge still comes from the state statute and from the policy you wrote.
Read the statute for the site before you copy a template from another building. These are examples. Other states publish their own.
| Where the person works | What the rule requires the badge to show |
|---|---|
| Connecticut hospital or outpatient surgical facility, for direct patient care | Section 19a-905: a photographic badge issued by the facility, worn in plain view, with the facility name, the person's name, and the license, certificate, or job title. It covers a person employed by or acting on behalf of the facility. The facility sets size, format, and safety exemptions with the Department of Public Health. A private office is not on this list. |
| Rhode Island health care facility | Section 23-17-47: a photo badge for every person, including a student, who examines, observes, or treats. It states the first name, licensure or registration status if any, fluency in sign language other than English if any, and staff position. A practitioner's office is outside this duty, including an office a hospital owns. See the definition in section 23-17-2. |
| Massachusetts hospital or clinic on the facility list | Chapter 111, section 70E: a badge, including for a student, with the first name, licensure status if any, and staff position. The statute does not require a photograph. The facility list includes a hospital and a clinic licensed or subject to licensing by the department. |
| Maryland physician office, urgent care, or freestanding ambulatory care facility | Health Occupations section 1-221: the name commonly used, and the type of license, in readily visible type. Not a photograph. A solo office with the license posted, and a sterile setting, can be exempt. This section does not list a hospital. |
| California practice, including a facility licensed by the State Department of Public Health | Business and Professions Code section 680: name and California license status in at least 18-point type. Not a photograph. An office that posts the license may skip the tag. A psychiatric setting, or a setting the state does not license, may exempt a person for safety or therapeutic reasons. A licensed facility keeps a policy so practitioners comply. |
Maine Title 24, section 2988 requires a face-to-face practitioner to wear a name badge or other identification with the name and the type of license. A physician's badge shows the first and last name. It does not require a photograph. Share a crop across two sites only when both windows accept it, the name line is legal at both, and the access is the same.
How do healthcare teams collect these photos today?
A system that has not split the files still runs on one camera at the main campus, a shared inbox, and one person at the printer. An agency JPEG is cropped for the hospital, the clinic, and the visitor sticker. Reprints use the newest selfie. The folder is still full when the person is at another site.
What does a split workflow look like?
Name the file before the first link goes out. Each file has a door end date and, when it differs, a date for deleting the site's copy. Use the same split at the hospital, the clinic, and the medical office.
1. Write down who holds the camera. Collect the photograph before the first shift when you can. Keep a camera at the site for a rejected capture and a walk-up. A directory portrait, including an AI headshot, stays on the directory page.
2. Sort people by the record that already owns them.
| Who | Where the record lives | What to do with the photo |
|---|---|---|
| Direct employee or employed clinician | HR, including Workday or SAP SuccessFactors when that roster already lists them | Employee badge ending at separation. See the HR guide. |
| Privileged practitioner who is not an employee | Credentialing | The clinician template, with the privilege end date. The license stays with the board. The badge is not a copy of the license. |
| Contractor, agency nurse, or traveling nurse | The card you issue, plus the agency or vendor file | Assignment end date on your card. Their file follows the staffing guide. |
| Student, resident, or volunteer | Education, the program, or the volunteer office | A separate template ending with the rotation, the term, or the volunteer period. A campus ID stays a campus card. See the university guide. |
| Visitor | The pass for that appointment | A distinct template that ends with the appointment. Leave the visitor out of the hiring batch. |
| Second site, or a visa | A second card, or the document file | A new end date when the access differs. A visa stays off the badge and stays unedited. |
3. Collect the file on one link, or at the badge office. The badge photo service can email a unique link with no extra account, expired after use, available per request from support@idphoto.ai. Direct-hire company IDs use the employee badge page. The link does not replace Form I-9 or a board application. A person who will work at two sites gets the template for each site, not one crop labeled for both.
4. Reject a bad capture in the same visit. One person, in colour, in focus, eyes visible, no face mask. The template decides clothing, glasses, and background. A religious head covering worn daily can stay when your rule allows it and the face is visible. Background removal and photo enhancement apply only when the template allows them. A visa or UK passport photograph stays unedited. A face-mask check is available per request. See when a corrected portrait fits.
5. Write the file back with the stop date. Store the door end date and the deletion date when they differ. The organization still decides who is admitted. On a replacement, face comparison checks the capture against the stored file. Liveness detection is available per request. Take the copy back, or use a temporary link of 2 hours to 14 days. Keep any copy E-Verify requires with Form I-9.
6. Batch one class on one template. Batch preparation returns a retake list before the print deadline. Direct hires, the agency order, and the resident class stay in separate batches. A visitor who arrives during the class gets a visitor pass at the desk and stays out of that batch.
Many printers take ID-1 stock, nominally 85.60 mm by 53.98 mm under ISO/IEC 7810. A clinic window or a paper visitor pass is a different size. Measure the window you print before the first link. Put the license line the statute names, and leave the license number off unless that statute asks for it. Keep a passport number off the face of the badge.
What does the first week at two sites contain?
1. Hospital direct hires, on the clinician template, with links sent the week before. Retake a failed link before the shift.
2. One clinic day, on that office's template when the name line differs from the hospital card.
3. One traveling nurse, on the assignment template, ending on the last day of the order.
4. One resident or student, on the trainee template, ending on the last day of the rotation.
5. One visitor pass at the desk, ending the same day, and left out of the hiring batch.
Where do healthcare badge photos usually fail?
| What fails | What to change |
|---|---|
| One selfie is cropped for the hospital, the clinic, and a visitor sticker | Split the files. Share a crop only when the windows, the name line, and the access match. |
| The badge is filed as the Form I-9 document, or as a copy of the license | The employee chooses the documents. The board keeps the license. Store the badge on the labor or access record. |
| An agency JPEG is printed as the system's card | Prepare a new file on the assignment template. The firm may still have collected the original capture. |
| A resident or student is on employee stock, or a visitor is in the hiring batch | Use the rotation template, or a visitor pass that ends with the appointment. |
| A card still opens a door after the assignment, including at the next site | Deactivate it the same day. Delete the photograph on its own date. |
| A lost card is reprinted from a new selfie | Reprint from the stored file. Retake only when face comparison against that file fails. |
What should a health system require from a vendor?
| What you need | What good looks like |
|---|---|
| A specification per card you print | Size, crop, background, and the name line for each site. See the published specifications. A license and a visa sit outside this list. |
| A block on forbidden edits | A U.S. visa photograph, and a U.S. or UK passport photograph, stay unedited. See when a corrected portrait fits. |
| Rejection before a manual crop | Face, light, blur, framing, glasses, and, when you ask for it, a face mask, while the person is still in the queue or at the desk. |
| A path for people not yet on site | One link per person, no extra account, expired after use. The camera stays for a retake, a walk-up, and a same-day visitor. |
| The record that owns the person | The file returns with the door end date and the deletion date. Workday or SAP SuccessFactors sync is available per request for direct employees. |
| A check a security lead can explain | Face comparison and liveness detection are available per request. Security still decides who is admitted. Collect the visitor pass when its end date passes. |
Who may see a workforce photograph?
The employee, the people office, credentialing for the privilege record, and a security lead who matches the badge may see the site file. Under 45 CFR 160.103, protected health information excludes employment records a covered entity holds in its role as employer. A staff badge photo on the personnel record is that kind of record. A photograph taken for care stays in the medical record. Ask the privacy officer before a contractor, student, or visitor portrait is stored beside patient information. GDPR Article 5(1)(e) and the CCPA apply where those laws apply. The data privacy policy covers encrypted transmission, a temporary link of 2 hours to 14 days, or taking the image back. US and EU processing are available. Other regions are available per request.
How do you roll this out across sites?
Write the file rule for one hospital and one clinic before the first link. Name the templates, the door end date, the deletion date, and each photo window. Put the state name line beside the template. Keep the Form I-9 clock beside the print step for people you employ.
Run one hiring class and one clinic day on those templates only. Name one owner who can decide, the same day, whether a person stays on the new path. Include one agency card, one trainee badge, and one visitor pass. Print one badge on that printer, or confirm print and mailing with support before you promise a card in the post. Print and mailing is available per request.
Add the next site after a write has held. Prove a clean upload, a retake, a walk-up, and a write that fails once and is retried. Open Workday or SAP SuccessFactors only for direct employees, after support confirms the connection. A visa is a second file. An owned medical office gets the rule for that office, not a copy of the hospital card.
What do HR and security leads ask?
Does The Joint Commission require a photograph on the badge?
No. The Joint Commission says the organization identifies people entering its facilities and controls access to security-sensitive areas. Surveyors assess the policy you wrote. There is no requirement for a photograph, and no required set of words on the badge. The same answer covers hospitals and hospital clinics, ambulatory care, and office-based surgery. Some states set the content.
Does CMS set the photograph or the name line on a hospital badge?
No. CMS does not set the photograph or the words. 42 CFR 482.11 requires compliance with applicable federal laws on the health and safety of patients, a state license, and personnel who meet standards state or local law requires. 42 CFR 482.13(c)(2) gives a patient the right to care in a safe setting. The line on the badge comes from the state statute and from the policy you wrote.
Does every state require a photo, a name, and a license line?
No. Connecticut and Rhode Island require a photo badge in the settings those statutes name. Massachusetts, Maryland, California, and Maine require a name and a license or position line and do not require a photograph. A hospital and a medical office on the same system can sit under different rules. Read the statute for that site. The table above names the statutes linked in this guide.
Can one portrait go on the clinician badge, the agency card, and a visitor pass?
Share a crop only when both windows accept it, the name line is legal at both sites, and the access is the same. A license stays with the board. A visa stays unedited under Department of State photo rules. A UK passport photograph must meet GOV.UK photo rules and can be retrieved with a UK passport photo code. HM Passport Office still decides.
Can a clinician send a badge photo before the first shift at another site?
Yes. One link, no extra account, expired after use, available per request from support@idphoto.ai. Keep a camera at the site for a retake and a walk-up. Form I-9 keeps its own clock.
What if the person is an agency nurse, a resident, a student, or a volunteer?
Print your card with the assignment, rotation, term, or volunteer end date. The agency, the school, or the sponsoring office keeps its own file and, where it employs the person, Form I-9. The employee template stays on your direct hires.
When should the photograph be deleted?
Delete the site's copy on the date stored with the file. A named reprint window is a purpose. Deactivate the card the day the assignment, the rotation, or the visit ends, including at the next site. GDPR Article 5(1)(e) keeps personal data in the UK and the EU no longer than necessary. Form I-9 retention follows its own clock.
What does preparing the photograph cost?
It starts at $0.20 per photo. That is separate from a state license fee, a printer lease, and a government fee. The catalog covers 300+ specifications across 200+ countries.
How does idphoto.ai fit this workflow?
The idphoto.ai API is the photo step for the cards the organization prints. It prepares a portrait to the template you name, checks the capture, and returns a file for the labor record, the access record, or the printer. The organization decides who receives a badge. Form I-9, a state license, and a visa stay on their own path. A UK passport photograph must meet GOV.UK photo rules. A UK passport photo code retrieves a photograph that meets those rules, and HM Passport Office still decides. The catalog covers 300+ specifications across 200+ countries, starting from $0.20 per photo.
Templates, the self-service link, Workday or SAP SuccessFactors sync, print and mailing, liveness detection, a face-mask check, another processing region, and the Shopify store template with one-click setup are each available per request. The store stays off the labor record and the access record. Email support@idphoto.ai with the card designs, which states the sites sit in, the door end date, the deletion date, and how the file returns.
Sources
| Rule | Official page |
|---|---|
| Joint Commission ID badges | Standards FAQ on ID badges |
| CMS, hospital compliance with law | 42 CFR 482.11 |
| CMS, care in a safe setting | 42 CFR 482.13 |
| Connecticut photographic badge | General Statutes section 19a-905 |
| Rhode Island photo badge and facility definition | Section 23-17-47 and section 23-17-2 |
| Massachusetts identification badge | Chapter 111, section 70E |
| Maryland name and license type | Health Occupations section 1-221 |
| California name and license status | Business and Professions Code section 680 |
| Maine name and license type | Title 24, section 2988 |
| Hospital employment, September 2026 | BLS, hospitals (NAICS 622) |
| Employment records and protected health information | 45 CFR 160.103 |