Social-Media Patient Images and Withholding Records for an Unpaid Balance
Dr. Anh Nguyen practices in a busy Newark office. She posts a reel on Instagram showing a close-up of a patient’s eye before and after treatment for a chalazion. The caption says “Another happy patient!” and includes the patient’s first name and the city. The patient’s distinctive eyebrow tattoo is visible. The patient, who did not sign a marketing authorization, sees the post and calls the office angrily. Separately, the office receives a records request from an attorney for a different former patient. The patient signed a valid authorization, but the office manager says the patient still owes $185 and wants to withhold the records until payment. Dr. Nguyen asks whether the Instagram post was permissible, whether she must take it down, and whether the unpaid balance changes the records obligation.
1. Analyze the Instagram post under Delaware professional-conduct and patient-confidentiality principles. Is calling the image “de-identified” enough?
Read the worked answer
Issue: Did Dr. Nguyen obtain sufficient authorization to use the patient’s image and information for marketing?
Reasoning: Patient confidentiality is not limited to the written clinical record. Images, captions, names, locations, and recognizable features can all identify a patient. “De-identification” is a substantive test, not a label. Here, the post includes the patient’s first name, the city, a close-up of the eye, and a distinctive eyebrow tattoo. Even if the full name is omitted, the combination is reasonably identifiable to the patient and to people who know her. The patient did not sign a marketing authorization.
Application: Using a recognizable patient image for promotional purposes without valid authorization is a professional-conduct and confidentiality problem. The “happy patient” caption also implies a testimonial that the patient did not agree to give. The fact that the post is on a personal or practice Instagram account does not remove it from the Board’s reach, because it advertises the practice and uses patient information.
Conclusion: The post was not permissible. Dr. Nguyen should remove it promptly, preserve a copy for the file, apologize to the patient, and document the corrective action. She should not argue that the image was “de-identified” when the tattoo and caption make the patient recognizable.
2. Must the office release the former patient’s records despite the $185 balance? Explain the rule and any exceptions.
Read the worked answer
Issue: Can a licensee withhold patient records solely because the patient owes a fee?
Reasoning: Under the Board’s patient-record and professional-conduct rules, a patient’s authorized request for records should be honored. A fee dispute is a business matter, not a clinical-records exception. Withholding records can interfere with the patient’s care and can itself become a disciplinary issue. The office may charge a reasonable copying fee if the Board’s rule permits, but it should not condition the release on payment of the outstanding balance.
Application: The former patient signed a valid authorization. The attorney’s request should be processed in the same way as any other authorized request: confirm the authorization is valid, release the records, and keep a copy of what was sent. The office may separately pursue the $185 through its ordinary billing process. If the office believes a specific legal exception applies-such as a valid lien or a court order-it should seek legal advice rather than unilaterally withholding the records.
Conclusion: The unpaid balance does not justify withholding the authorized records. Release them promptly and pursue collection separately.
3. What should Dr. Nguyen do if the patient files a Board complaint about the Instagram post?
Read the worked answer
Response steps: Take the complaint seriously and respond within the Board’s deadline. Do not delete the post and then claim it never existed; preserve a screenshot, the posting date, and any messages with the patient. Removing the post is appropriate remediation, but preservation for the investigation is also necessary. Review whether any other posts use patient images without authorization and correct them.
Written response: State the facts accurately: what was posted, when, what information was visible, whether authorization existed, when it was removed, and what corrective action was taken. Avoid blaming staff or characterizing the patient as unreasonable. If the patient’s identity was exposed, acknowledge that and explain the practice’s new consent and marketing-review process.
Broader compliance: Adopt a written policy requiring signed authorization before any patient image or testimonial is used, even if the image appears de-identified. Train staff on social-media posting. If the Board imposes conditions, complete them and document completion. A prompt, honest, corrective response is more persuasive than a defensive denial.