Social Media Video of a Foreign Body Removal
An optometrist removes a metallic corneal foreign body from a 34-year-old patient and records a 12-second video on a personal phone. The video shows only the eye and a distinctive tattoo on the patient's temple. The optometrist posts it to a professional Instagram account with the caption 'Another successful foreign body removal!' No written authorization is obtained. The patient sees the post, recognizes the tattoo, and complains to the practice and the Board. The optometrist argues that the eye alone is not identifiable and that the post does not include a name or chart number. The practice has no social media policy, and staff sometimes post operating-room-style photos of eyes.
1. Was the post permissible under privacy and consent rules?
Read the worked answer
The post is difficult to defend. Even without a name, the combination of the eye, the distinctive temple tattoo, the timing, and the caption can make the patient identifiable to herself, family, coworkers, and anyone who knows the tattoo. Privacy rules protect identifiable health information in any form, including images and videos, not just names and chart numbers. A professional social media post that shows a patient's body part for marketing is generally a use or disclosure for purposes other than treatment, payment, or health care operations, so written authorization is normally required. The optometrist's belief that the eye alone is not identifiable is not the test; reasonable identifiability and the context matter. The Board may treat unauthorized disclosure or exploitation of a patient's image as unprofessional conduct, even if the optometrist intended to educate or market. The absence of a social media policy does not excuse the conduct; it may aggravate it by showing a practice-wide failure.
2. What should the optometrist do immediately after the complaint?
Read the worked answer
The optometrist should remove the post promptly, preserve a copy of the post and the complaint for the practice's records, and avoid deleting other potentially relevant evidence such as messages or scheduling records. The optometrist should apologize to the patient without arguing about identifiability, explain what was removed, and ask whether the patient wants further action. The practice should notify its privacy officer, malpractice insurer, or legal counsel as appropriate and conduct a breach assessment under applicable privacy rules. Staff should be instructed not to retaliate against the patient or discuss the complaint on social media. The optometrist should document the corrective actions, including the date and time the post was removed and who was notified. If the Board opens an investigation, the optometrist should cooperate fully and provide the requested records. The response should focus on containment and honesty, not on convincing the patient that the image was de-identified.
3. What disciplinary and practice changes are likely, and how should the practice respond?
Read the worked answer
The Board may investigate whether the optometrist engaged in unprofessional conduct, exploited the patient relationship, or failed to safeguard patient information. Possible outcomes include a reprimand, fine, required ethics or privacy training, monitoring, or other discipline depending on the facts and the optometrist's history. The practice should adopt a written social media and photography policy that prohibits patient images without written authorization, defines who may post, requires removal of identifying details, and requires pre-approval for clinical content. Staff should be trained, and the training should be documented. The practice should use a specific authorization form that explains how the image will be used and that the patient may revoke consent. The optometrist should also review whether any other posts contain patient information and remove or remediate them. A prompt, documented corrective response can mitigate discipline, but it does not erase the original violation.