Minnesota Employer Injury Video Privacy: What On‑Site Occupational Clinics Need to Know

On‑site occupational clinics sit at the crossroads of safety, security, and employee medical privacy. If you use cameras to investigate injuries or improve safety, you must balance operational needs with Minnesota criminal statutes, the Minnesota Government Data Practices Act (for public entities), the Health Insurance Portability and Accountability Act, and workers’ compensation rules. This guide explains how to build an Occupational Clinic Surveillance Policy and confidential employee data handling practices that align with state and federal requirements.

Video Surveillance Regulations in Minnesota

Where cameras are off‑limits

Minnesota’s “interference with privacy” law makes it a crime to record images in bathrooms, locker rooms, changing rooms, indoor showers, and any place where a reasonable person expects privacy—conditions that typically include medical exam rooms and treatment areas within an on‑site clinic. Plan your camera map to exclude these spaces entirely. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/609.746?utm_source=openai))

Clinic‑adjacent, public‑facing areas

Video in public, nonprivate clinic corridors or waiting areas may be permissible, but angle cameras to avoid capturing charts, monitors, and written PHI. Avoid audio capture in care settings (see consent rules below) and document the safety purpose, retention period, and access controls in your Occupational Clinic Surveillance Policy.

Public‑sector clinics and footage as government data

If your clinic is part of a government entity (state agency, city, county, school), surveillance footage is “government data” under the Minnesota Government Data Practices Act (MGDPA). Access, classification, and release rules—including potential “security information” classifications—are governed by Chapter 13 and related guidance from the Data Practices Office. Build those requirements into retention and disclosure procedures. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/13/full?utm_source=openai))

Consent Rules for Audio and Video Recording

Audio: one‑party consent with limits

Minnesota is a one‑party consent state for audio: a recording is lawful if at least one party to the conversation consents, provided the interception is not for a criminal or tortious purpose. Even when lawful, employers should avoid routine audio recording in clinical settings because of the high risk of capturing PHI. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/626a.02?utm_source=openai))

Video that captures sound

Many cameras record audio by default. If devices are near treatment spaces or triage desks, disable microphones unless you have a clear, lawful HIPAA basis and a documented business need. HIPAA regulates covered health care providers’ disclosures, while employment records maintained by an employer are not PHI—so keep clinical recordings strictly segregated from HR systems. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html?utm_source=openai))

Access to Employee Medical Records

Minnesota Health Records Act (MHRA) basics

Clinic records are generally “health records” under MHRA. Disclosures typically require a valid, signed patient consent unless a Minnesota law specifically authorizes release; any nonconsented release must be documented in the patient’s record. Patients also have a right to copies and cannot be charged when requesting records to review current care. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/144.293?utm_source=openai))

HIPAA: workers’ compensation and minimum necessary

For work injuries, HIPAA permits covered providers to disclose only the information necessary to comply with workers’ compensation laws and to secure payment—without the worker’s authorization—while limiting the disclosure to what the law requires. Create narrow, role‑based protocols for WC disclosures and log what is shared. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/disclosures-workers-compensation/index.html?utm_source=openai))

Employment records are not PHI

HIPAA does not apply to employment records held by an employer in its role as employer (for example, incident reports kept by HR). Keep clinical PHI in the clinic’s designated record set; provide HR only what is legally permitted and operationally necessary. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html?utm_source=openai))

Privacy in Employment Agreements

Embed clear terms that protect Employee Medical Privacy

• Describe where cameras are prohibited (e.g., exam rooms, restrooms) and where they may be used for safety or security.
• Ban audio recording in clinical and other privacy‑sensitive areas unless a specific, lawful basis applies.
• Define confidential employee data handling: strict role‑based access; encryption at rest and in transit; time‑bound retention; written approval workflow for any disclosures.
• State that clinic PHI will be handled under HIPAA and MHRA; employment records will be kept separate from patient health records.
• Explain when footage or documents used for discipline become part of the personnel record and how employees can access that record under Minnesota law.

Under Minnesota’s personnel records statute, employees have the right to review defined “personnel records” (such as discipline notices) within specified timelines; if surveillance footage is used to make a disciplinary decision, expect that related materials may be accessible to the employee. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/181.960?utm_source=openai))

Safety Committee Confidentiality Obligations

Who must have a committee

Employers with more than 25 employees must establish a joint labor‑management safety committee; those with 25 or fewer must have a committee if they are subject to the A Workplace Accident and Injury Reduction Program (AWAIR). Ensure your committee charter addresses confidentiality and data handling. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/182.676))

Protecting privacy when reviewing incidents

• When discussing cases, omit names and unnecessary medical details. Follow OSHA recordkeeping “privacy concern case” rules on 300/301 forms and keep the confidential privacy list separately.
• Provide access to OSHA logs as required, but never include names for privacy cases; share only what the regulations require with representatives. ([osha.gov](https://www.osha.gov/laws-regs/regulations/standardnumber/1904/1904.29?utm_source=openai))

Minnesota follows federal OSHA recordkeeping guidance, so these privacy protections apply to MNOSHA‑covered employers. ([dli.mn.gov](https://www.dli.mn.gov/business/workplace-safety-and-health/mnosha-compliance-recordkeeping-standard?utm_source=openai))

Public entities

For public‑sector committees, meeting materials that identify individuals may be “government data” subject to Chapter 13; incorporate MGDPA classifications and response timelines into the committee’s procedures. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/13/full?utm_source=openai))

Workers' Compensation Medical Benefits

What injured employees are entitled to—and what clinics should provide

Minnesota workers are entitled to reasonable and necessary medical treatment to cure or relieve the effects of a work injury, guided by state treatment parameters. Clinics should document medical necessity, coordinate with the insurer, and furnish timely reports consistent with the rules. ([dli.mn.gov](https://dli.mn.gov/business/workers-compensation/work-comp-medical-benefits-all?utm_source=openai))

Workers' Compensation Managed Care

Where an employer/insurer contracts with a certified managed care plan, employees typically must treat within the network after notice and initial care. Employers must post plan notices, notify employees of enrollment, and advise injured workers about managed‑care coverage when they report an injury. Align clinic referral workflows and signage with these requirements. ([dli.mn.gov](https://dli.mn.gov/business/workers-compensation/faqs-certified-managed-care?utm_source=openai))

Sharing records for claims administration

Providers may disclose PHI for workers’ compensation to the extent allowed or required by law; build “minimum necessary” templates and limit routine disclosures to what statutes and payers need. Cross‑train front office and clinical staff on permissible disclosures and documentation. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/disclosures-workers-compensation/index.html?utm_source=openai))

AWAIR Program Compliance

Who is covered

AWAIR applies to employers in specific NAICS codes identified by rule; Minnesota updated the AWAIR list in 2025 and provides a current guide. On‑site clinics embedded in covered employers should be included in the written program and its annual review. ([dli.mn.gov](https://www.dli.mn.gov/about-department/rulemaking/minnesota-osha-rulemaking?utm_source=openai))

What your program must include

• Clear safety goals and accountability for managers, supervisors, and employees.
• Methods to identify, analyze, and control hazards.
• Effective communication so employees understand hazards and controls.
• Incident investigation with corrective actions.
• Enforcement of safe work practices, plus an annual documented review.

These elements are mandated by statute; incorporate clinic workflows (triage, sharps handling, medication storage) into the hazard analysis. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/2025/cite/182.653))

Using video to support AWAIR—without violating privacy

Video can help analyze near‑misses and injuries, but restrict cameras to nonprivate areas, disable audio near clinical conversations unless a lawful basis exists, and tie access/retention to explicit AWAIR purposes. Revisit your Occupational Clinic Surveillance Policy during the program’s annual review. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/609.746?utm_source=openai))

Bottom line: Treat cameras as a safety tool, not a medical recorder; keep PHI in clinical systems under HIPAA/MHRA; and ensure safety committees and managed‑care processes use only the information the law allows.

FAQs

What are the legal limits for video recording in Minnesota workplaces?

You may not record in bathrooms, locker rooms, changing rooms, indoor showers, or any area where a reasonable person expects privacy—this typically includes medical exam rooms. In nonprivate areas, use video only for legitimate safety/security purposes and avoid capturing PHI. Public employers must also apply MGDPA rules to footage. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/609.746?utm_source=openai))

How does one-party consent affect audio recording at work?

Minnesota allows audio recording if at least one party to the conversation consents and the purpose is not criminal or tortious. That said, routine audio in clinics risks recording PHI; record only if a HIPAA‑compliant basis exists and segregate clinical audio from HR systems. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/626a.02?utm_source=openai))

Can employers share injured employees' medical information with safety committees?

Covered providers may disclose PHI for workers’ compensation as required or authorized by law and must limit disclosures to the minimum necessary. For committee reviews, use de‑identified summaries and follow OSHA recordkeeping privacy rules (e.g., “privacy concern cases”). ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.512?utm_source=openai))

What are AWAIR program requirements for occupational clinics?

If your employer’s NAICS code is on Minnesota’s AWAIR list, your program must include the five statutory elements (roles/accountability, hazard control methods, communication, incident investigation, and enforcement) with an annual review. Ensure clinic processes are covered and align any camera use with privacy rules. ([revisor.mn.gov](https://www.revisor.mn.gov/statutes/2025/cite/182.653))