How A Social Media Policy Can Protect Your Practice

Patients also use social media to express their views on positive and negative experiences with a physician. Some of my physician clients have expressed concern that patient blogging and user-review websites are among the first listings on search engine result pages. If the posts are about positive experiences with the physician, then the physician just obtained free publicity. However, if the posts are negative, this can be very disheartening for the physician and could keep a potential patient from becoming an actual patient. There is little, if anything, a physician can do to curtail or stop negative blogging other than to provide the best patient experience possible. While some physicians may think responding to the negative post on the blog is the solution, it is not recommended because the physician could unintentionally disclose information that he or she is not permitted to disclose.

Social Media Policy

In light of the risks associated with social media, it is important that practices establish a social media policy for the physicians and staff members. There are two general types of social media policies: a policy that addresses what is acceptable use (if any) of personal social media during office hours and a policy that addresses how social media can be used on behalf of the practice. (Editor’s Note: This article will focus on the use of social media on behalf of the practice; the use of personal social media will be addressed in a future “Legal Matters” article.)

For social media use on behalf of the practice, it is imperative that the following three W’s are outlined in the social media policy:

1. Who is permitted to post or tweet material on the social media websites? Is there a designated poster or “tweeter” for the practice? Remember that, while staff can be trained to monitor and post content, it is the physician who is ultimately responsible for the practice’s online material, and it is his or her licensure that is put at risk if inappropriate material is posted.
2. What material can and should be posted by the party or parties authorized to do so? The social media policy should address appropriate responses to postings on the practice’s social media site. For example, the policy needs to identify how to respond when someone, whether a patient or otherwise, posts a medical question on the practice’s Facebook page. From a liability perspective, providing medical advice via social media outlets should be avoided. Even posting general information about diseases could be misconstrued as creating a patient–physician relationship and should be avoided.
3. Where will the practice be posting? The policy should explicitly state which social media avenues the practice can use and maintain. For example, if the practice decides to have a Facebook page but not a Twitter account, this needs to be conveyed in the policy.

Additionally, the policy should inform employees of the risks associated with disclosing patient and other practice-related information on social media networks (whether being used personally or on behalf of the practice) and ways to avoid unlawful disclosures. One way to do so is to require a committee approve material posted on behalf of the practice, rather than at the discretion of a single person. This will help avoid HIPAA violations and inappropriate disclosures. The committee could also preapprove language for common responses, such as office hours, types of insurance accepted, or how to contact the practice to make an appointment, and train staff on when to use these responses. Further, the policy should explain the consequences of noncompliance by your employees and emphasize personal responsibility and good judgment.