Digital contact, social media and confidentiality boundaries

Personal and professional contact can blur quickly online. A message to a private account, a patient image on a personal phone, a comment in a social-media thread or a quick reply after hours can create privacy, safety and reputational risk.

Support staff should use approved practice channels for patient communication. Approved channels keep an audit trail, protect confidentiality, route urgent concerns to the right person and prevent a single staff member becoming personally responsible for clinical decisions.

Personal accounts and patient contact

If a patient contacts a staff member via a personal profile, the staff member must not give clinical advice or collect further health information there. Redirect the patient to the practice contact route and escalate any urgent material already received.

Staff should avoid accepting friend requests or contacts that would blur a professional relationship, and must not use personal messaging apps to discuss identifiable patient matters. Adjusting privacy settings helps, but cannot substitute for professional judgement.

Records, images and public comments

Patient information includes written, spoken, digital, visual and recalled details. Only access records for a legitimate work reason, avoid discussing identifiable cases in public forums and never post identifiable patient details or images online without appropriate process and authority.

Do not respond to online reviews by arguing, revealing patient information or identifying someone. Use local review, complaint or management routes for responses.

Data protection and social media detail

Digital boundaries are patient-safety boundaries. Keep care on official channels, protect confidentiality and escalate urgent content even when it arrives through the wrong route.