Hospital Access Control: How to Manage Staff, Patient Companions and Visitors Zone by Zone

A hospital access control system keeps public areas open while letting only authorised staff into sensitive zones such as operating theatres, intensive care, the pharmacy store and medical records, and logs every entry. Staff get cards permitted by zone and role, companions and visitors get temporary credentials limited to a ward and period, and one card read produces on-call timesheets.

Key takeaways

• A hospital access control system admits only authorised staff to restricted areas such as theatres, intensive care, drug stores and medical records.
• When permissions are tied to role and department rather than individuals, a transferred member of staff loses old door access automatically.
• Companions and visitors get time-limited credentials valid only for the relevant ward and date range; access stops when the period ends.
• One card read opens the door and creates the attendance record, so on-call timesheets come from door records, not handwritten lists.
• Under Türkiye's KVKK, health data is special-category personal data; who entered the records room and server room must be on record.

The hospital then runs both security and attendance for a 24/7 workforce in one system. This guide covers zoning, a six-step framework, a sample permission structure by zone and how an on-call shift runs in the system. Other sectors and scenarios are in our access control and attendance hub.

Why is access control difficult in hospitals?

A hospital is a building whose doors never close. According to the Turkish Ministry of Health's Health Statistics Yearbook 2024 news bulletin, Türkiye had 1,562 hospitals and 268,359 hospital beds in 2024. Patients, companions, visitors, couriers and suppliers come and go at every hour. Outpatient corridors where thousands of people move freely sit right next to theatres, intensive care and pharmacy stores that only a few teams should enter. Patient flow itself is handled by hospital queue and appointment management; this guide focuses on staff and zone access.

The staff side is complex too. Doctors, nurses, technicians, cleaning and security teams, students, rotating residents and contractor staff all work different shift and on-call patterns. Twenty-four-hour duties, night shifts, on-call rotas and transfers between departments make timekeeping hard.

In many hospitals, door permissions and attendance live in separate systems — one with security, the other with HR. Lists copied by hand between the two create errors and delays: a new starter's card is not set up for days, while a leaver's card stays active for weeks.

Hotels see round-the-clock staffing and guest traffic; we cover the differences in hotel staff access control.

In hospitals where door permissions and timekeeping are kept apart, the same situations keep coming up:

• A nurse moves to another ward, but her card still opens the old ward's door.
• Companion passes change hands, and nobody knows how many companions are in the building.
• When asked who entered the pharmacy store or medical records at night, there is no answer.
• On-call timesheets are compiled from handwritten lists, and overtime calculation becomes a dispute.

What does uncontrolled entry cost a hospital?

Healthcare workers are among the groups most exposed to workplace violence. Data from the US Bureau of Labor Statistics makes this clear:

In 2018, healthcare workers accounted for 73% of all non-fatal workplace injuries and illnesses due to violence, and workers in the healthcare and social service industries were five times as likely to suffer a workplace violence injury as workers overall. (US Bureau of Labor Statistics, Workplace Violence in Healthcare, 2018)

The same source puts the rate of such intentional injuries in US private-sector hospitals at 12.8 per 10,000 full-time workers, against 2.1 across all private industry. Access control does not prevent violence on its own, but keeping staff areas and sensitive departments closed to unidentified people is where the risk is reduced first.

The second cost of uncontrolled entry is data. In Türkiye, the KVKK (Law No. 6698 on the Protection of Personal Data, the country's GDPR-style framework) classifies health data as a special category of personal data requiring stricter protection. Medical records stores and server rooms are places where physical access must be on record too.

According to the Personal Data Protection Authority's 2025 annual report, the authority received 328 data breach notifications in 2025, and under a Board decision a data controller must notify the Board of a breach within 72 hours at the latest of becoming aware of it. To trace the source quickly within the 72-hour breach notification window, the answer to "who entered the records room?" must already be available.

How do you set up hospital access control? A 6-step framework

Setting up a hospital access control system starts with the building's risk map and runs through to timesheets and incident planning. The six steps below follow that order:

1. Zone the hospital by risk. Public areas (entrance, outpatients, cafeteria), semi-restricted areas (wards, staff corridors) and restricted areas (theatres, intensive care, neonatal unit, the back of A&E, pharmacy and drug store, medical records, server room). Think in a hierarchy: "Main building → Level 3 → Intensive care".
2. Tie permissions to role and department. Instead of granting access person by person, grant it by role and department. Rules such as "ICU nurses may enter intensive care and the Level 3 staff corridor" mean that when someone changes department, their access changes with them. For the basic components, see our card access control system guide.
3. Manage companions and visitors with time-limited credentials. Give a companion a temporary card valid only for the relevant ward and a set date range; give visitors a temporary credential limited to visiting hours. We compare paperless visitor options in our guide to QR code visitor management.
4. Keep contractors and suppliers separate. Cleaning, catering and technical service staff should be linked to their own firms and permitted only in the zones and hours their work requires. When a contract ends, all of that firm's staff should lose access in one action. We explain this structure in our article on contractor access and HSE compliance.
5. Generate timesheets from the door record. Once on-call and shift plans are defined, entry and exit records are calculated against them. Our time and attendance guide explains how a time and attendance system (PDKS) works.
6. Plan for incidents. In an incident, locking all doors in one action and a zone-by-zone "who is inside right now" list are the first things the security team needs.

Plan hospital access control with car parks and building systems

In a hospital, the first gate is often the car park barrier rather than the building entrance. We explain how staff, patient and ambulance vehicles can use separate lanes under the same permission rules as staff cards in our parking management system guide. Door behaviour during a fire or power cut should be planned together with HVAC and lighting in a smart building management system (BMS); in pressure-controlled areas such as theatres, it is useful for the BMS to see door events as well.

Sample hospital permission structure by zone

A hospital access control system is one part of the hospital's digital infrastructure. We explain how to track the location and servicing of portable devices with the same zone logic in our guide to hospital medical equipment tracking, and cover the energy side, including technical areas such as generator rooms and air handling plant, in hospital building energy management.

How does Digital Bridge deliver hospital access control projects?

In our healthcare and hospital solutions, we approach access control as a project where security, HR and data protection meet:

1. Site survey. We walk the building floor by floor and department by department, looking at door types, fire exits, turnstile needs and the network on site. The technical feasibility study for hardware is free of charge.
2. Zone and role design. We work out zones and roles together with hospital management, nursing services, HR and security.
3. Hardware and installation. Our card access control range for door readers, turnstiles and locks, and barrier and parking systems for car parks and ambulance entrances. Software and hardware come from the same team.
4. Timesheets and payroll. We plan how on-call timesheets flow into payroll with our HR, payroll and personnel management team.
5. Data protection. With our data protection compliance consultancy, we define the purpose, retention period and access rights for staff, companion and visitor records.
6. Video and support. ONVIF-compatible cameras can be monitored centrally through our IP camera monitoring service. We work remotely and on site across all of Türkiye's provinces, with 24/7 technical support.

How does an on-call shift work with SmartPass?

SmartPass, developed by Digital Bridge, is software that combines card access control, time and attendance, visitor reception and canteen management in one panel. Consider an intensive care nurse's shift:

07:50 — Start of shift. The nurse taps her 13.56 MHz MIFARE card at the staff entrance. One read opens the door and creates the attendance record. No separate time clock is needed; working time is calculated against the on-call and shift plan.

08:00 — Zone permissions. She belongs to the "ICU nurses" access group, which is linked to the intensive care zone with no time restriction. The same card does not open the theatre doors, and the refused attempt is logged with the reason "no zone permission". When she moves to the medical ward next month, her access group membership is changed; the change applies on the server at once and the permission lists at the doors update within seconds.

12:30 — Lunch. She taps the same card in the staff canteen; if she is entitled to a meal, it is deducted. We cover this in our article on canteen meal counting.

15:00 — A companion. A patient moves from intensive care to a ward, and their companion is pre-registered as a visitor and given a temporary card. The card's permissions are limited to the visit's access group and duration: it works only in that ward floor's zone, stops working everywhere once the visit ends, and the panel raises a warning. No national ID number is collected from the companion.

Time-bound access. The chief pharmacist manages the drug store with two access groups: "Pharmacy team" is linked to it with a weekly time profile covering daytime hours, and "On-call pharmacist" with a 22:00–07:00 profile. Because a person's permissions are the union of their groups, only the on-call pharmacist gets in at night; other attempts are refused as "outside permitted hours" and logged. A rule changed in the panel applies at every door at once.

An incident. The security team watches the live pass feed and the dashboard count of staff, contractors and visitors inside right now. An entry point can be locked from the panel; in emergency mode exits are freed, entries are closed and the organisation's notification recipients receive an email.

Month end. Days with a missing read are not guessed but wait for a justified correction. Once the month is closed and locked, a per-person monthly summary goes to the ERP as CSV or JSON.

On data protection, card numbers are not stored: they are turned into a one-way hash on the device, and only the hash and last four digits are kept. Once the retention period ends, fields that identify the person are deleted automatically; every change is logged with its previous and new value; and 43 separate panel permissions decide who sees which report.

Healthcare groups with several hospitals can open each one as a separate SmartPass organisation with its own database, and authorised users switch between them from the "My organisations" list without re-entering a password. SmartPass is part of the Smart360 product family: you sign in with your Smart360 identity (SmartID), and when a person is deleted in Smart360 their personal details in SmartPass are erased and their card is cancelled.

Next step: preparing for hospital access control

List your hospital's restricted areas and, for each, note who can enter today and where that is recorded. Add how companion and visitor entry is handled and which document the on-call timesheet relies on. That list is the basis for a site survey.

Our article on access control system cost explains what shapes the budget. Explore the product on our SmartPass page or get in touch to arrange a survey. To buy SmartPass, fill in the Smart360 sales form.