Social Media Privacy, Paid Reviews, and a Records Refusal
Dr. Victor Boone practices in Columbus and markets heavily on Instagram. He posts side-by-side lumbar X-rays and a testimonial from 'J.D., a 29-year-old with Ehlers-Danlos syndrome,' including her initials, age, rare diagnosis, and a photo of her tattooed lower back. He offers a $25 coffee gift card to any patient who leaves a five-star Google review. When a former patient requests her complete file, the office manager says, 'The records belong to the clinic; we only release them to another doctor,' and refuses. A former employee files a Board complaint alleging privacy violations, misleading advertising, and recordkeeping failures. Dr. Boone says the patient 'verbally agreed' to the post and that the gift card is 'just a thank-you.' The Board opens an investigation and requests all social media materials and records policies.
1. Identify the grounds for discipline arising from the social media posts and review incentive.
Read the worked answer
The Instagram post likely discloses identifiable patient health information. Even without a full name, the combination of initials, age, a rare diagnosis, and a distinctive tattoo can identify the patient. A verbal 'OK' is generally not sufficient authorization for public marketing; the patient should sign a specific HIPAA-compliant authorization that describes the information to be used, the purpose, the recipient, and the right to revoke. The Board can treat unauthorized disclosure as unprofessional conduct and a violation of patient privacy. The gift-card incentive for five-star reviews is also problematic: it may generate misleading testimonials and suppress honest negative feedback, which undermines the reliability of advertising. Board rules prohibit false, deceptive, or misleading advertising. The Board may consider whether Dr. Boone solicited only positive reviews, whether patients understood the incentive, and whether the posts implied outcomes that were not typical. These facts support discipline independent of whether the patient subjectively consented.
2. Did the clinic violate the patient's records rights? Explain.
Read the worked answer
Yes. A patient's right of access to her chiropractic records is not limited to transfers to another doctor. The clinic's statement that records 'belong to the clinic' is legally incomplete: the clinic may own the paper or electronic medium, but the patient has a right to a copy of the information. The clinic may require proper identification and a written request, and it may charge a reasonable, cost-based fee, but it cannot refuse access outright or condition release on payment of an unpaid bill. Refusing a patient's request can violate Board recordkeeping and patient-rights rules and may also violate federal privacy law. The clinic should have a written records policy, respond within the required time, provide the complete record, and document the request and response. The former employee's complaint gives the Board a basis to audit the clinic's policies and practice.
3. What due process and sanction considerations apply if the Board proceeds to a hearing?
Read the worked answer
Dr. Boone is entitled to notice of the specific charges, a hearing before an impartial panel, the right to counsel, the right to present and cross-examine witnesses, and a written decision based on the record. The Board should separate the privacy, advertising, and recordkeeping allegations and make findings on each. Sanctions should be proportionate and consider aggravating factors such as the number of posts, the vulnerability of the patient, and any prior warnings, as well as mitigating factors such as remediation, corrective advertising, and staff training. Possible sanctions include a reprimand, fine, probation, suspension, or required ethics and records-management education. The Board may also order the clinic to remove the posts, obtain proper authorizations, and revise its records policy. Dr. Boone may appeal a final adverse decision to the superior court under the Administrative Procedure Act.