Professional Confidentiality on Social Media in HOF

Professional confidentiality does not end at the office door. It still applies on the feed, in stories, in a reply to a comment and in a behind-the-scenes video. In orofacial harmonization (HOF), images are the main promotional material, and that is exactly where breaches happen most often, almost always without bad intent.

This guide describes concrete cases where a post breaks confidentiality, shows how to avoid them and proposes a review routine. It does not replace your professional council's rules or legal advice. The references are those of Brazil. For the limits on advertising images and results, also see what you can advertise (CFO and CONAR) (the CFO is Brazil's federal dental council and CONAR is its advertising self-regulation body) and the page on advertising in HOF.

What is confidentiality in the practice of social media?

It is the duty not to reveal what you learned because of your professional relationship with the patient: that they are a patient, what they were treated for, what you discussed, what they showed in the photos. The mere information "Jane was at the clinic today" can already be confidential.

Two layers add up. The first is professional ethics, which requires confidentiality and demands care with advertising. The second is data protection: facial images and health information are personal data, and health data is sensitive. See LGPD in clinic marketing for the data side (the LGPD is Brazil's data protection law).

Cases where a post breaks confidentiality

Photo and video with indirect identification

• Recognizable tattoo, scar, distinctive mole, ring, earrings or hair.
• Office background with a patient file, computer screen, appointment book or a label with a name.
• Voice in a narrated video, even with the face blurred.
• Location and time of a "live" post, which reveal who was in the room.

Caption and conversation

• Telling the reason for the procedure ("she wanted to hide the asymmetry after surgery").
• Mentioning the patient's profession, small town or event ("Saturday's bride").
• Replying to a public question with details of someone's case.

Reuse without control

• Reposting the story where the patient tagged the clinic, with the image of the procedure.
• Sharing a screenshot of a compliment that shows the name, profile picture or part of the treatment.
• Using the image in another format (ad, website) beyond what the patient authorized.

Consent that really protects

A good image-use form is specific and lets the patient decide without pressure. The minimum points:

1. Which images (photos, videos, testimonial) and from what moment.
2. Where they will be published (social media, website, printed material, ad).
3. For how long and how to request removal.
4. That refusing does not affect care.
5. Signature and date, preferably with a copy given to the patient.

The patient image use consent template serves as a starting point, to be reviewed with your legal support. For signing in digital format, see digital signature of consent forms in HOF.

Stories, behind the scenes and comments: where carelessness lives

The ephemeral format is deceiving. A story disappears in 24 hours for the follower, but anyone can record it, screenshot it and archive it. And the relaxed tone leads you to reveal more than you would in a planned post.

For content ideas that expose no one, see behind the scenes of the clinic without exposing patients and answering clinical questions in comments and direct messages.

What about images the clinic produces itself?

There is an alternative that does not involve a real patient: illustrations, diagrams and simulations with a fictional person. In Harmy, the projections generated by the app from a frontal photo are illustrative simulations. They are meant for the conversation in the consultation, and should not be advertised as if they were the result of a real patient.

Review routine before posting

Review by a second person is the adjustment that prevents the most mistakes. The eye of someone who does not know the case notices the detail that the author, familiar with the scene, does not see. To make this clear to the team, use the team social media policy template.

What if it has already happened?

If you noticed that a post exposed a patient, act quickly and calmly:

1. Remove the content from the platform and from any copy the clinic controls.
2. Speak to the patient directly, explaining what happened and what was done.
3. Record the episode with date, content and actions taken, in the patient record or an internal log.
4. Review the process that allowed the error (missing form, missing review, an unmonitored profile).
5. Seek legal advice and, where applicable, follow the procedures the LGPD provides for incidents involving personal data.

The sooner the clinic acts, the smaller the damage. An incident communicated transparently is usually treated very differently from one that was hidden. Data security in the clinic helps structure the response.

Quiz: does this break confidentiality?

Practical conclusion

Confidentiality on social media is built on three habits: specific consent, review by a second person and content that does not depend on the patient. When advertising relies on education, behind-the-scenes content without people and diagrams, risk falls and public trust grows.

To build a calendar in this format, use the content pillars and the monthly editorial calendar. When in doubt about what can or cannot be posted, the safest decision is not to post and to consult your council.