Covering the Eyes in a Patient Photo: Does It Protect?

It is a common practice in clinics and on social media: put a black bar over the patient's eyes and consider the image "anonymous." The idea comes from old medical journals and news reports, where the bar indicated that the person did not want to be recognized. In a world of social networks, phones with facial recognition and patients who post their own photos, the bar has much less effect than it seems.

This page explains why covering the eyes is not enough, what the LGPD asks for and how to think about image protection more honestly.

Why does an eye bar not anonymize?

To anonymize is to make it impossible, by reasonable means, to associate the data with a person. A face with a bar over the eyes still shows a lot of information:

• Hair, color, cut, texture and hairline;
• Mouth, nose, chin and face shape;
• Eyebrows, ears and neck;
• Tattoos, scars, moles, piercings and marks (see face photo with a tattoo or identifiable mark);
• Clothing, jewelry, setting and office;
• The context of the post, such as date, caption and location.

Someone who knows the patient recognizes them even without the eyes. A relative, a coworker or a follower of the clinic can identify the person from these details and, worse, learn that they had an aesthetic procedure without having authorized it.

What about recognition technology?

Facial recognition and image search tools work with many features of the face, not only the eyes. Even without eyes, an image can be cross-referenced with other photos of the person. So treating the bar as strong protection is a false sense of security.

What does the LGPD say about this?

The LGPD (Brazil's General Data Protection Law) considers personal data any information that identifies or can identify a natural person. An image of a face, even partly covered, may qualify. In a health context, it may be treated as sensitive data. To use the image, a legal basis is required, and for publication specific consent is usually the safest basis.

This means the bar:

• does not replace the image-use authorization form;
• does not eliminate purpose, necessity and transparency;
• does not excuse care about who receives the image.

For a specific case, consult a lawyer, and check what your professional council says about publishing images in what you may publish: CFO and CONAR (in Brazil, the CFO is the Federal Council of Dentistry and CONAR is the advertising self-regulation council).

When does the bar still make sense?

It has a limited use, and it is worth knowing:

In the patient record, the photo must be faithful. Covering the eyes there invalidates the clinical record. The bar appears only in derived copies, made for a specific purpose.

More honest alternatives

Instead of betting on the bar, it is worth thinking about three paths.

1. Ask for specific authorization, clear and revocable, when the image is going to be published.
2. Crop only the treated area (for example, lips or under-eye area), without identifying traits, still with care.
3. Do not publish the patient's image and use material without a real face, such as illustrations or fictional people.

On this last point: Harmy shows the illustrative simulation on a fictional person for examples and content, precisely to avoid using a real patient's face in communication.

How to guide the team

Agree on short, written rules:

• No face photo leaves the clinic without a purpose and authorization.
• The bar is not an argument to skip the form.
• Whoever receives the photo (colleague, manufacturer, class) receives only what is necessary.
• Any doubt about publication goes to the person in charge before posting.

See also patient photo on social media: risk and sending a patient photo to the manufacturer.

Summary for the routine

The eye bar is a cosmetic resource, not a protective one. Use specific authorization for any publication, keep the patient record intact and send third parties only what is necessary. The safest way to protect the patient is not to expose the image without consent, with or without a bar.

And when the patient asks to cover the eyes?

Sometimes it is the patient who prefers the bar, for privacy. Welcome the request, but explain that in the patient record the image must be intact, and that the version with the bar would only serve a derived use, and even then with authorization. If their concern is exposure, the best response is to listen to what worries them, clarify who sees the photos and where they are stored, and record the conversation. Often the doubt is resolved with transparency alone.