Electronic monitoring

Dr. Bryant Medical Practice and MedSpa monitors employee use of its computers, its internet connection and its telephone line. New York Civil Rights Law section 52-c requires the practice to tell you that in writing, and to have you sign that you were told. This is that notice.

As that law is normally worded: monitoring of telephone conversations, electronic mail and internet access may occur at any and all times, and by any lawful means. What follows is the plain description of what actually happens today, so that you are not left guessing what that sentence covers.

1. The time clock on your computer

A small Chrome add-on called Dr. Bryant Time runs on the computer you work on. Once a minute it sends a short message to the practice. Here is everything that message and the practice server between them write down.

• Whether the computer is in use, idle, locked, or in use but outside the practice’s work programs. One of those four words.
• The time of the last key press or click. A time only. Not the key, not the click, not what was on screen.
• Whether the browser tab in front of you is one of the practice’s work programs. A yes or a no. The address itself is not stored.
• How many times you moved between pages or reloaded a page inside those work programs during a stretch of work. A number. Not a list of pages, and nothing at all about any other website.
• The time you check in and the time you check out, which you do yourself.
• The first time your computer was seen each day, even if that is before you check in.
• The internet address (the IP address) that the message came from. It is stored as it arrives, not disguised. See section 4.
• Whether that address is one of the practice’s own networks. A yes or a no, kept with each stretch of work and with your check in.
• When you first set the clock up: a label saying whether you set it up in the Chrome add-on or on the web page, a short description of the computer or browser you used (the platform name Chrome reports, or the first 40 characters of the browser identification line), and the six digit code you were given.
• The date and time you ticked the box that says you have read this notice, and the version number of the notice you were shown. That version is at the end of this document.

2. What the clock reads about your browsing, exactly

• It does not read any page. It has no ability to put code into a page: it ships with no content scripts and without the Chrome permission that would allow one, so nothing it contains can run inside Practice Fusion, Weave, a patient chart, or any other site.
• It has no ability to capture your screen. There is no screenshot, no screen recording, no camera and no microphone, at any hour.
• What it reads is the address of the front tab, and only for the practice’s own three programs: Practice Fusion, Weave and the practice website. It reads that address to answer one question, is this a work program, yes or no. The yes or no is what is stored. The address is thrown away.
• Chrome does not hand it the address or the title of any other website. The permission that would reveal those was deliberately never requested, so this one is enforced by the browser and not by a promise.
• Being allowed to recognise those three programs does mean the add-on could, in principle, contact those three addresses. It is not written to, and it stores nothing from them. That is a statement about how it is built, not a limit the browser imposes, which is why it is written here plainly rather than left out.
• If the practice adds a fourth work program later, the add-on cannot start recognising it on its own. It asks you on screen, once, and Chrome shows its own permission box for that one address. If you say no, nothing happens except that the rule in section 3 about leaving the work programs is switched off for you.

3. How your hours are counted

You check in when you sit down and check out when you leave. Nothing is paid before you check in or after you check out. Pressing check in is what starts the day. Enrolling the add-on does not check you in, and neither does opening Chrome.

Between check in and check out the clock runs by itself. It stops after 15 minutes with no key press or click, and when it stops your time is counted up to your last real minute of work, not to the moment it noticed. It starts again by itself when you start working again. You do not have to press anything.

It also stops after 15 minutes in which you are using the computer but are not in any of the practice’s work programs. You are told on screen the moment that happens, and it starts again by itself as soon as you go back to one of them. This only applies while Chrome is the window in front of you. If you are on the telephone, with a patient, or in another program, nothing is assumed about you.

If time is missing or wrong, tell the practice. A manager corrects the record by hand. Every correction is stored with the name of the person who made it, what the record said before, what it says now, and the reason they gave. There is no form to fill in and no request to wait on, because that process was removed. The way to fix a timesheet is to tell somebody.

4. What is recorded when you are not working

The clock does not stop sending its once a minute message just because your shift ended. It sends whenever Chrome is running on that computer and the add-on is still installed. That includes evenings and weekends.

What is written down at those times:

• The time the practice last heard from that computer.
• The internet address the message came from. Only the most recent one is kept. Each message replaces the address stored before it, so there is no list of the places you have been, but the latest address is on the record. If you open Chrome at home, that is your home address.
• The first time the computer was seen on any given day.

What is not: no pay is counted, and nothing about what you were doing is recorded. The reason the first two are kept at all is section 3. If you work for twenty minutes before remembering to check in, the record that your computer was there is what lets a manager put those twenty minutes back instead of taking your word or refusing it.

If you would rather it did not report outside your hours, close Chrome when you finish, or switch the add-on off on the chrome://extensions page and switch it on again when you next work. Turning it off does not lose your set up and does not delete your hours.

5. Telephone calls

Calls to the practice telephone number are usually answered first by an automated assistant. When a call is then put through to a member of staff, both sides of that call are recorded, from the moment it is answered. That includes you, not only the patient. The caller hears a spoken line saying the call may be recorded before the transfer happens.

The recording is kept with the call record. A written transcript of it may be produced automatically, and a manager can read the transcript and play the recording from the practice call log. Treat any call on the practice line as recorded, because it is.

Your own mobile telephone is not monitored by any of this. Nothing described in this notice runs on a personal phone.

6. Email and internet access

The time clock does not read email. It does not read messages, it does not read attachments, and it does not scan what you send.

Practice email accounts and practice systems are the property of the practice, and as section 52-c requires this notice to state, monitoring of email and internet access may occur at any and all times and by any lawful means. Take that as it reads: a practice email account is not a private one.

7. What is never recorded

• No screenshots and no screen recording, at any time.
• No camera and no microphone by the time clock.
• No keystrokes, nothing you typed, no messages, no email contents.
• No patient information. The clock does not read Practice Fusion, Weave or any other program, and stores nothing out of any of them.
• No addresses, page titles, page contents or browsing history for any website outside the practice’s three work programs.
• Nothing here is sold, shared with anyone outside the practice, or used for advertising.

8. Where it is kept, who can see it, and for how long

• Everything described above is stored on servers run for Dr. Bryant Medical Practice and MedSpa and nowhere else.
• The owner and managers with timesheet access can see it. Reception and other staff cannot see anybody else’s record.
• You can see your own hours at any time, from the add-on or the web page, and they are the same numbers a manager sees.
• Timesheets, day records and corrections are kept for as long as New York requires payroll records to be kept, which is six years, and then deleted.
• The most recent internet address for each computer, and the short description of that computer, are kept for as long as that computer is enrolled. They are deleted when the enrolment is removed.
• Your acknowledgement of this notice is kept for as long as your employment record is kept.
• Call recordings and transcripts are kept with the call record. Ask the practice how long that is for.
• You may ask to see everything held about you at any time.

9. Questions

Ask the practice. Dr. Bryant Medical Practice and MedSpa, 205-15 Hollis Avenue, Saint Albans, New York 11412. Nothing in this notice changes your right to raise a concern about it.

Notice version 2026-08-ny-1. Quote this number if you are ever asked which wording you agreed to.