It is negligent, been doing this for almost 15 years. Trust me the ED directors turn them in but they always say little to no action is taken but the CYA is in place.
My first time working IT in a hospital I learned that doctors need their porn. We had to take them off the hospital network and run a separate network so they could surf it the CIO was livid that either the admin or board allowed it.