How to say no to a request to see other patients' photos

"Doctor, do you have photos of other patients who had this done?" The question is common and almost always comes with no ill intent. The patient wants to feel safe, see a real case, imagine their own result. But showing another person's face in the consultation, without specific authorization, is a breach of confidentiality, and exposure of facial images is a central topic of the LGPD (Brazil's data protection law).

The answer does not have to be curt. It can be a chance to show that your practice handles data seriously, which also protects the patient who is asking. This page gives the structure for declining and the alternatives you can offer. The topic is covered in depth in consent and LGPD for photos.

Why not show them without authorization?

A patient's facial photo is personal data and, when tied to health, the law treats it as sensitive data. It belongs to the patient record and has a clinical purpose. Using it for another purpose, such as persuading a new patient, requires a legal basis and, generally, specific, free and informed authorization. A generic "image use" authorization signed along with the procedure consent form, without explanation, is fragile.

How do I say no without seeming to hide something?

The key is to turn confidentiality into a value the patient benefits from too.

The sentence has three parts: the reason (confidentiality), the link to the patient (the same care with their images) and the alternative (what you can show).

What alternatives can you offer?

Beware of the "anonymized photo": covering the eyes does not always prevent recognition, and describing the case history can identify the person. The concept is in anonymization, and on the page security of patient images in the simulation.

What if the patient insists or is suspicious?

Some say "if the results are good, why not show them?". Stay calm and repeat the logic without getting defensive: confidentiality applies to everyone, including them. If the distrust is about your experience, answer another way, without exposing anyone. The question patient asks how many cases you have done offers ways to handle that, and the page who will do the treatment helps when the doubt is about qualifications.

When can I show a case?

If the person authorized, specifically and in writing, the use of the image for that purpose, and if your council's and advertising rules allow it, you may. The authorization must be revocable, and you need a way to honor that revocation. See patient wants to revoke image authorization. Even with authorization, show only what is necessary, and never as a promise that the result will be the same.

How does the simulation help resolve the request?

The patient's own projection usually answers the need behind the question, which is to imagine the result. It is an illustration and not an actual result, and that must be said. But the patient sees their own face, without exposing anyone, and the conversation moves from someone else's case to theirs.

And the team and the clinic's social media?

Reception and whoever runs social media need to follow the same rule. Agree that nobody shows patient photos on a phone or computer to third parties, that no image is sent to anyone who asks for "an example" by message, and that publishing any image goes through a check of authorization and rules. A small slip by someone who works with you can expose the patient and the clinic, and team training is part of caring for privacy.

How do I document it?

Record that the patient asked to see other people's cases, that you explained confidentiality and that you offered an alternative. It is short, but useful if the question returns. Avoid describing previous patients in the new patient's record.

Protecting other people's faces is, for the patient, a good preview of how their own face will be treated. It is an answer that closes one door and opens another.