Backing Up Clinical Photos: A Simple Routine
Quick facts
- 3-2-1 rule
- 3 copies, on 2 types of media, with 1 copy off-site.
- Mandatory
- Encrypt the backup, because it contains the same sensitive data.
- Test
- Restore a sample photo from time to time.
- Trap
- A backup that was never tested and that is deleted along with the original when you delete it.
Backup is one of those tasks that everyone agrees is important and almost no one does properly. In a facial harmonization clinic, what is at stake is concrete: before and after photos are the only visual proof of the patient's initial state. Without the before photo, there is no comparison, no defense in case of a dispute and no way to show the patient what changed.
The good news is that a simple routine covers almost every scenario. This page shows how to set one up, without depending on any specific tool.
What can go wrong with clinical photos?
The most common accidents are mundane:
- a phone lost, stolen or broken with the photos only on it;
- a computer disk that fails without warning;
- a virus that encrypts the files and demands ransom;
- accidental deletion of an entire folder;
- a cloud account that is locked or hacked;
- a device change with an incomplete migration.
In all of these cases, only someone with another copy, somewhere else, recovers what was lost.
What is the 3-2-1 rule?
It is a simple rule widely used in data security:
| Number | What it means | Example in the clinic |
|---|---|---|
| 3 | Three copies of the files (the original plus two) | Computer, external drive and cloud |
| 2 | On two different types of media | Internal disk and external drive, or disk and cloud |
| 1 | One copy away from the clinic site | Corporate cloud or a drive kept at another address |
The goal is that no single event (a theft, a flood, a power failure) wipes out all three copies at once. It does not need to be sophisticated: a computer, an external drive and a cloud with a contract already meet the rule.
Is syncing the same as backing up?
No, and that confusion is the most dangerous one. Sync services keep the folder identical on both sides: if you delete a photo on the computer, it disappears from the cloud; if a virus encrypts the files, the cloud receives the encrypted files.
A real backup keeps earlier versions and lets you recover what was deleted or changed. When choosing the service, check whether there is version history and for how long it is kept.
How do I set up a lean routine?
- Define the main location for the photos, as described in storing patient photos.
- Choose the second copy on another medium (an external drive dedicated to the clinic).
- Choose the third copy off-site (corporate cloud, per cloud for patient photos).
- Automate what you can: scheduled backup instead of remembering to do it.
- Encrypt all three copies.
- Test the restore.
- Record what was decided: where each copy is, who takes care of it and how often it runs.
Why test the restore?
Many people discover that the backup was not working at the worst moment. The routine may never have run, the disk may be full, the encryption password may have been forgotten or the generated file may be corrupted. Pick a random folder, restore it somewhere else and open the photos. Do this at least every six months.
The backup is also personal data
Everything that applies to the original applies to the copy. The backup holds the same face photos and is subject to the LGPD (Brazil's General Data Protection Law). This has three practical consequences:
- Encryption: lost or stolen media must not open without a password.
- Restricted access: the external drive does not sit at the front desk or in anyone's bag.
- Deletion: when a photo is deleted because its retention period expired or at the patient's request (see deleting a patient's photo on request), it must also leave the backups, in the next cycle.
What if the patient has the right to delete?
The right to erasure coexists with the obligation to keep the patient record for the required period. The solution is not to keep the backup "forever" but to define rules and follow them. The supporting read is retaining photos in the patient record. For the specific case, it is worth consulting a lawyer.
Common mistakes
- Having only one copy and calling the phone gallery a "backup."
- Keeping the external drive plugged into the computer all the time, where a virus reaches it too.
- Not encrypting the external drive.
- Never testing the restore.
- Forgetting the photos that are only on a team member's phone.
- Forgetting to remove access for someone who left the clinic.
And Harmy in all this?
The Harmy history keeps sessions by patient in the app, but it is not the clinic's official archive and does not replace your backup. Keep the original photo in the clinic's main location and treat the app as a projection tool, which generates an illustrative simulation, not a promise of results.
With three copies, one off-site, encryption and one restore test per semester, most of the risks are covered. It is little work to protect the hardest asset to recreate in an aesthetic practice: the before photo.
Frequently asked questions
What is the 3-2-1 backup rule?
It means having 3 copies of the files, on at least 2 different types of media, with 1 of them kept away from the main location. That way a failure, a theft or a fire does not take everything.
Does syncing to the cloud count as a backup?
Not always. Syncing also replicates what you delete or corrupt. A real backup keeps earlier versions and lets you recover what was removed.
Does the photo backup need to be encrypted?
Yes. The backup contains the same sensitive images as the original and, if lost or stolen, exposes the patient in the same way. Encrypt the media and the transfer.
How often should I back up clinical photos?
Ideally automatically and continuously, or daily. If manual, do it at the end of each day of appointments, so the maximum loss is one day of photos.
Harmy images are illustrative simulations generated by AI from the patient's photo to support the conversation between practitioner and patient. They are not a promise of results. Indication, technique, product and volume are solely the decision of the licensed practitioner. This content is for information only and does not replace a clinical assessment.