diff --git a/program/serializers.py b/program/serializers.py
index ec81192c694943deb30a6b94bd94a3ad3c42a391..08ecfcb8ab5c565b76daf7710b41ba8c78d0bb57 100644
--- a/program/serializers.py
+++ b/program/serializers.py
@@ -652,6 +652,8 @@ class ShowSerializer(serializers.HyperlinkedModelSerializer):
 
         if not self.context.get("request").user.is_authenticated:
             del representation["email"]
+        elif not self.context.get("request").user.has_perm("display__show__internal_note"):
+            del representation["internal_note"]
 
         return representation