Staff Social Media Policy Template for Clinics
The clinic's staff talks to the public more than the official profile does. Front desk, assistant, biomedical professional, dentist: everyone has a phone, a story and a wish to show their day. Without a written rule, the risk is not bad intent but carelessness: a photo of the counter with a patient record in the background, a video with a recognizable patient, a comment about "a patient who came in today".
This template organizes what the staff can and cannot post, who approves what and what to do when something goes wrong. It works together with the patient image use consent, the clinic's privacy policy and what your professional council allows you to publicize (see what you may publicize).
When should you use this template?
When each new person joins, at the annual review and whenever the clinic starts producing content (reels, stories, behind the scenes). It is also worth using after any incident, even a small one, such as an identifiable patient in the background of a video.
How do you adapt it?
Adapt the examples to the clinic's real routine. If the staff often films behind the scenes, detail how to avoid faces, forms and screens. If the clinic works with sponsors or partners, include a rule about mentioning brands.
What should the policy cover?
| Topic | Suggested rule |
|---|---|
| Patient image | Only with specific written authorization, approved by the person in charge |
| Data and patient records | Never appear in a photo, video, screen or public conversation |
| Comments about cases | Forbidden, even without naming anyone |
| Advertising | According to your professional council's rules, with no promise of results |
| Personal profiles | Do not associate the patient or the care with personal content |
| Publishing mistake | Tell the person in charge right away for immediate removal |
Staff social media policy template
How do you keep the policy alive?
A policy that stays in a drawer does not work. Hold a 15-minute conversation when each person joins and review it once a year. The legal basis for processing patient data is in the LGPD (Brazil's General Data Protection Law), and the text of the consent for photos shows how to request valid authorization. For internal use of photos, also see the photographic record.
Frequently asked questions
Can the clinic forbid staff from posting about their work on personal profiles?
It can set clear rules about what must not be published, such as patient data and images. How far you can go for each type of employment relationship should be confirmed with a labor lawyer.
Does a story showing the patient from behind, with no face, already solve the confidentiality issue?
Not necessarily. A tattoo, a voice, clothing, the location and the context itself can identify the person. The safest rule is to publish nothing about a patient without specific written authorization.
Does the staff have to sign the policy?
Signing and keeping the copy is how you prove each person read and understood it. Hand over a copy, explain it in a meeting and record the date of acknowledgment.