The Instagram Post, the Blank Notes, and the Credential Loan

Posted images of a patient's mouth and face are protected health information when they can identify the patient, and a star tattoo in a small community is enough to do that even without a name. Disclosure for a purpose unrelated to treatment, payment, or operations requires a written authorization, and the mocking caption defeats any argument that this was educational. State law and the board's unprofessional conduct rules separately prohibit revealing patient confidences and exploiting the patient relationship. The remedy is not just deletion: Alex should tell the dentist-owner immediately, follow the practice's breach assessment and notification policy, apologize to the patient without excuses, and document what happened. Deleting the post does not recall screenshots. If the patient files a board complaint, the post will be an exhibit, and the caption will matter more than the clinical skill behind it. Consent to treatment is not consent to marketing.

Both are falsification. Signing a blank note means attesting to treatment that has not happened and cannot be verified; signing Dr. Nguyen's name is forgery on top of it. A chart note is a contemporaneous record created when the service is rendered, not a stack of forms to be completed in advance. Changing a prophylaxis code to scaling and root planing is upcoding: the code must describe the service actually provided and be justified by periodontal charting and documentation, and billing for a service not rendered is insurance fraud as well as unprofessional conduct. Alex's answer to both requests should be a clear no, followed by a written note to the office manager and the owner explaining why, and a request that the blank notes be voided. If the pressure continues, she should keep her own copy of the requests and may report the conduct to the board. She should not sign, and she must not later write notes for care she did not observe.

This is the most serious of the three. Lending credentials to someone whose license has lapsed is aiding unlicensed practice, and writing notes for patients she did not treat is making false entries - each is an independent ground for discipline and potentially criminal. Logging into the portal under her own name also creates a record that she provided the care, so every note becomes her representation about treatment she never rendered. Payment per note makes the arrangement look deliberate rather than careless. The right response is to refuse and to tell the friend plainly why, and she should not access the portal for any purpose connected to the friend. Because she now knows a former licensee intends to practice without a license, she should consider her reporting obligation to the board. If she is unsure whether the license is truly lapsed, she can check the public license lookup before deciding - but she should not facilitate anything while she checks.