Sending patient photos on WhatsApp and LGPD
Quick facts
- Core risk
- A photo of a face or a procedure is personal data, often sensitive, and travels across devices and backups outside the clinic's control.
- Most effective measure
- Separate the clinic's device from the personal one and set written rules of use.
- When sending to the patient
- Only to the patient themselves, in a one-to-one conversation, with identity confirmed.
- Most common mistake
- A patient photo in a team group, with automatic backup to a personal cloud.
WhatsApp is, in practice, the main relationship channel for orofacial harmonization (HOF) clinics. It is where patients ask questions, send photos, confirm appointments and receive instructions. At the same time, it is one of the biggest sources of risk under LGPD (Brazil's data protection law), because photos of faces and procedures end up in the phone gallery, in automatic backups and in conversations nobody reviews.
This guide brings together best practices for receiving and sending patient photos on WhatsApp: what to do about a personal phone, when to send to the patient, how to handle groups, what alternatives exist and how to react to a mistake. It does not replace legal advice. Your professional council's rules and the legislation in force have the final word. Commercial use of the app is covered in WhatsApp Business for the HOF clinic.
Why is a patient photo delicate data?
A photo of a face is personal data and, in certain uses, may be considered facial biometric data. Photos of procedures, before and after images or progress photos relate to health, which brings them close to sensitive data. That raises the duty of care: restricted access, a clear purpose, appropriate storage and deletion when no longer needed.
On WhatsApp, the risk multiplies because:
- the photo leaves the clinic's control when it is downloaded, forwarded or saved;
- the device can be lost, replaced or shared with family members;
- backups in a personal cloud keep copies indefinitely;
- groups mix people with different levels of access;
- messages and media stay in notifications and on visible screens.
When is it reasonable to send a photo through the app?
| Situation | Guidance |
|---|---|
| Sending the patient the image of their own case | In a one-to-one conversation, after confirming that the contact is really theirs, and for a purpose tied to their care |
| Receiving a photo from the patient for follow-up | Tell the patient what to send and record the essentials in the patient record; avoid keeping it in the gallery |
| Sending the photo to another professional for an opinion | Only with a clinical need and, as a rule, with the patient's knowledge; reduce identification |
| Sending the photo to a relative or companion | Only with the patient's express authorization |
| Posting in a team group | Avoid; use a system with role-based access |
| Publishing on a broadcast list or status | No, without specific consent and without following advertising rules |
How to use a personal phone with less risk?
The ideal is for the clinic to have its own device. When that is not possible, a few measures reduce risk:
- Separate the clinic's conversations by using the business app with a dedicated number, not a personal number.
- Turn off automatic saving of media to the gallery.
- Control the backup: check whether photos and conversations go to a personal cloud and decide whether that is acceptable.
- Lock the device with a password or biometrics and enable remote lock.
- Do not share the device with family members while it holds patient data.
- Hide notification content on the lock screen.
- Review the gallery and conversations periodically, deleting what does not need to stay. See disposal of patient photos and data.
- When changing devices, restore with secure erasure.
What about team and colleague groups?
Groups are the most fragile point. Precautions:
- Avoid identifiable photos in groups. If you must discuss a case, reduce identification (no name, no full face when possible) and restrict the group.
- Inform the patient that the case may be discussed with other professionals, if that applies.
- Respect professional confidentiality, which still applies in digital settings. See professional confidentiality on HOF social media.
- Review who is in the group and remove anyone who left the team.
- Prohibit forwarding and screenshots through an internal rule.
How to obtain consent for each use?
Sending a patient a photo of themselves is one thing; using the image for other purposes is another. The most common uses and their requirements:
| Use | Basis and caution |
|---|---|
| Patient record and clinical follow-up | Part of the care; record with a purpose and restricted access |
| Case discussion with a colleague | Clinical need, patient's knowledge, reduced identification |
| Publication on social media and website | Specific written consent, and compliance with advertising rules. See LGPD consent for patient photos |
| Teaching material | Consent and anonymization where possible |
| AI or third-party training | Avoid without a clear basis and consent. See AI with patient photos: consent |
The patient image use consent template is a starting point, and must be reviewed by legal counsel.
What are the safer alternatives?
Some clinics move the image flow to tools with access control:
- Electronic patient record with attachments, which centralizes photos per patient. See electronic patient records for HOF.
- A projection app used in the consultation itself, without sending photos through a messenger. In Harmy, for example, the projection is viewed in the slider on the device itself and the history stays in the professional's account.
- An individual link for the patient to view the image, instead of sending the photo in a message.
- Digital signing of forms, which avoids photographing documents. See digital signing of forms in HOF.
What to do when something goes wrong?
A photo sent to the wrong contact, a stolen phone, a leaked group: all are incidents. The basic outline:
See the concept in security incident and the role of the person in charge in data protection officer at the clinic.
The conversation in the app is part of the relationship with the patient. If the clinic treats their image with the same care it treats their face in the consultation, the channel stops being a risk and becomes part of the trust it builds.
Frequently asked questions
Can I send the patient's photo on WhatsApp?
To the patient themselves, in a one-to-one conversation and for a purpose tied to their care, it is a common practice, with care for identity and security. Sending it to third parties or to groups requires a legal basis and clear consent.
Can I use my personal phone to photograph patients?
It is a point of risk, because the device has backups, shared galleries and access by other people. The ideal is to use a clinic device, with access and deletion rules, or keep exposure to a minimum.
Can I post a patient's photo in a group to discuss the case with colleagues?
Discussing a clinical case requires care with professional confidentiality. The photo must be necessary, the group restricted, the patient informed and, whenever possible, the information anonymized. Check your professional council's rules.
What should I do if I sent the photo to the wrong person?
Treat it as an incident: ask for it to be deleted, record what happened, assess the risk with the person in charge of privacy and decide on notifying the patient involved, according to the applicable rules.