HIPAA and Patient Photos on Social Media: A Dentist's Guide

What HIPAA actually asks for

HIPAA's rule for marketing uses of patient images is straightforward: get a written authorization that says what will be shared and where. It should identify the patient, describe the images, name social media as the purpose, give an expiration or event, and note the right to revoke. That's a single page — most practices fold it into new-patient paperwork so it's signed before the first photo is ever taken.

A simple compliant workflow

1. 1

   Authorize first

   Include the photo authorization in your intake packet. Patients who prefer not to appear simply skip the form — no awkwardness, and your team knows the status from day one.

2. 2

   Photograph on a clinic device

   Keep case photos on a practice-owned phone or camera rather than personal devices, organized by case. This keeps your records tidy and your posting workflow fast.

3. 3

   Check before posting

   A ten-second glance at the case file confirms authorization before anything goes online. Many practices add a simple tag — cleared for social — in their practice software.

4. 4

   Post and archive

   Publish, then note where and when the case was shared. If a patient ever revokes, you know exactly which posts to remove.

Small habits that keep everything smooth

• ✓Crop out anything identifying beyond what the patient agreed to — appointment screens, charts, other patients in the background.
• ✓Keep captions clinical and positive: the treatment, the outcome, the craft.
• ✓Train the whole team once a year — a 20-minute refresher keeps everyone confident about what's shareable.
• ✓When a patient revokes, remove the content promptly and log it. Quick, gracious responses build the kind of trust that earns more consents.

Frequently asked questions

Is a general consent form enough for social media?

For US practices, marketing use calls for a HIPAA authorization — a consent that specifically mentions social media sharing. The good news: it's one page, patients sign it once, and it can cover photos and videos across all your channels. Most patients happy with their results are glad to sign.

Can we post anonymized smile close-ups without authorization?

If an image is truly de-identified — no face, no name, no identifying features — HIPAA treats it differently. In practice, most dental teams still collect a simple authorization for every shared case: it takes a minute, removes all judgment calls, and lets you use the full photo later if the patient is comfortable.

Does HIPAA apply to videos made from patient photos?

Yes, the same way it applies to the photos themselves — the authorization covers the media, not the format. A before-and-after video created in DentalReels from authorized photos is covered by the same signed form, as long as the form mentions video and social media use.

Keep reading

• Patient Photo Consent Form for Social Media: Free Template for Dentists

  What a patient photo consent form for social media should include, how to use it in daily practice, and a free field-by-field template for dental clinics.

  5 min read

• Can Dentists Post Before-and-After Photos? Rules in the US, UK, Brazil, and Turkey

  Yes — with patient consent and a few local rules. A clear country-by-country overview of posting before-and-after dental photos in the US, UK, Brazil and Turkey.

  6 min read

• Dental Before/After Photos: The Protocol That Makes Videos Work

  How to take dental before and after photos: consent, the standard shot series, the consistency protocol and how to turn photo pairs into social media videos.

  6 min read

• How to Make a Dental Video: Step-by-Step Guide for Clinics (2026)

  How to make a dental video in 5 steps: consent, before/after photos, template, music and export. A practical guide for dentists — no editing skills required.

  6 min read