Client Photos Posted Without Consent Three Weeks Before Graduation
Jorge is three weeks from graduation, ranks second in the cohort on practical work, has 1,480 of 1,500 hours, and is interviewing at a salon whose owner is a former student of yours. On Saturday he posts a TikTok: a client's before-and-after balayage with her face visible, captioned "fixed this grown-out disaster for a client going through chemo." The client's daughter calls the school Monday; the client did not consent to being photographed or to having health information shared, and the post has 40,000 views. Jorge says the client "said it was fine" and that he "didn't use her name." Your handbook has a one-paragraph social media policy that says "be professional." The clinic intake form the client signed covers service consent and a liability waiver, but it says nothing about photography or marketing use. The salon owner calls you Tuesday asking, "Is he as good as his pictures?"
1. What is your response to the client and to the post, in the first 24 hours?
Read the worked answer
Call the client back the same day, and lead with the specific, not the apology boilerplate. "We saw the post. You did not consent to that, and it should not have happened."
Act with dates. Have Jorge delete the post immediately - but screenshot it first for the file, because evidence disappears when a student is frightened. Confirm removal to the client in writing and tell her if the platform is slow. Do not promise what you cannot deliver: yes to removal of the original post, no to guarantees about screenshots or shares already taken.
Do not discuss Jorge's discipline with her. You can say the school is addressing it with him; you cannot describe what that means. Do not argue with her recollection of the conversation and do not imply she consented. If the consent conversation never happened - and the caption suggests it did not - say so plainly.
Ask what she wants. An apology, a refund, a written acknowledgment, or a formal complaint. Give her the director's contact and the complaint process in writing.
Notify the director before end of business, and check whether your state rule or the school's consumer policy requires a written incident report. Document the call, the times, and the removal confirmation. The health detail in that caption - a client's diagnosis - is a different category of harm than an unflattering haircut photo, and the record should say so.
2. How do you handle Jorge - both the conduct response and the teaching - given that he graduates in three weeks?
Read the worked answer
Same day: delete in your presence, then check for copies. Saved drafts, duets, reposts, other platforms, a second account. A student who deletes one post and leaves three is not complying.
Then a documented meeting, calm and specific. The teachable content has three parts. Consent to a service is not consent to photography - those are separate permissions. "No name" is not de-identification: a face plus a health detail plus a recognizable location identifies a person to anyone who knows her. And a caption about chemotherapy discloses health information, which is a different kind of harm than a bad haircut, because it cannot be un-shared even if the photo comes down.
Own the program gap out loud. The intake form he used has no photography clause, so he was never told the rule. Say that - then still hold the professional standard, because a competent professional asks before photographing a client regardless of what a form says.
Consequences proportionate and educational: written warning, a short consent-and-privacy module he prepares and presents to the cohort, a supervised consultation check-off where he practices the photo-consent script, and a note in the record.
Graduation in three weeks is a reason to be precise, not a reason to skip it. If he minimizes, reposts, or blames the client, escalate under the conduct policy - a repeated privacy breach is a fitness question, not a coaching question.
3. The salon owner calls. What may you say, and what policy do you write afterward?
Read the worked answer
The reference call: verify identity, then share only what is verifiable and job-relevant - dates of attendance, program completion status, practical competencies you personally observed, and attendance as documented. Do not share grades, the incident, or any discipline, and do not editorialize. If your school uses a "dates and completion only" policy, apply it here rather than improvising because you know the owner.
"Is he as good as his pictures?" gets an answer you can defend: "His technical work is strong and consistent - he's second in the cohort on practical assessments." If the owner probes about professionalism, you can say you don't discuss individual student conduct, or state only what you directly observed. Consistency matters more than candor here: a selectively negative reference for one graduate is both unfair and a liability, and a selectively glowing one is worse.
Then fix the policy that made this inevitable. Replace "be professional" with specifics: a written photo/marketing consent on the intake form, a no-posting-during-clinic rule, worked examples of identifying details (face, name, diagnosis, address, distinctive tattoo), a stated consequence ladder, and a named person who answers questions.
Bring the draft to the director this week, with the incident as the rationale. Policies written in the middle of a complaint are the ones that get approved - and the next student will be told the rule before, not after.