Start a Project

Digital Provider Blog

Where healthcare and senior care meet digital and social technology

Social Media And HIPAA: What You Need To Know

By on October 19, 2009 • 41 Comments

Open Door One question I’m always asked about when it comes to health care or senior care and social media is, “What about HIPAA?” Online privacy and security are important issues, especially on the new social Web. But I have good news for the those folks in health care, senior care, home care, hospice, and dementia care who want to start using social media but fear HIPAA: It’s not as complicated as you think. In fact, it’s all about common sense. Below I provide a brief overview of the main issues, three examples of health care/senior living organizations effectively using social media without violating HIPAA, and some resources for developing your own social media and online communications policies.

HIPAA & Social Media

The Health Insurance Portability and Accountability Act (HIPAA) requires that a patient’s identity and personal health information be protected (also called Protected Health Information, or PHI). Health care providers who violate HIPAA can face stiff penalties, including fines up to $250,000 and/or imprisonment for up to 10 years for knowingly misusing individually identifiable health information. As a result, many care-related organizations shy away from deploying social media, blogs, and online communities due to fear of HIPAA violations. This is unfortunate as these organizations are missing out on the many opportunities and benefits that social technologies offer.

Senior living companies, homecare agencies, skilled nursing facilities, hospitals and the like, should feel free to engage in social media – as long as mechanisms to secure PHI are employed. Information posted to blogs, Twitter accounts, Facebook pages, or online communities by health care companies should be prepared for public consumption and each organization engaging in social media should have policies and guidelines related to social media and online communications in place prior to deploying these technologies. Here are three examples of health care and senior care organizations using social media, as well as some social media policies and online communications guidelines for your reference:

Innovis Health

Innovis Health is a non-profit hospital and health care organization based out of Fargo North Dakota. Innovis has a blog (shown below) plus Twitter, Facebook (show below), YouTube, and Flikr accounts. On the blog, Innovis publishes hospital news and general health news. This content is then syndicated out to their Twitter and Facebook accounts. The blog also features a Twitter feed – showing Innovis Twitter activity in real-time. The Innovis YouTube channel features hospital commercials and local news coverage. Their Flikr account displays photos of their various facilities, their staff, and marketing images from different marketing campaigns. This complement of social media tools allows Innovis to broadcast their message, engage a following, and drive traffic back to their website.

There’s very little patient-specific information on any of their social media properties, however, the blog does feature two stories about babies that were born at the hospital during a March 2009 flood, including parent names and, in one case, a photo of the new parents with their infant. The assumption here is that the parents gave Innovis specific written permission to publish these stories (a must if you plan to publish PHI or patient identity).

Innovis Health Blog


Innovis Health Facebook Page


Children’s Hospital L.A.

Children’s Hospital L.A. actually encourages patients and families to tell their stories on the hospital website. The way they work within HIPPA rules is by employing a 3-step process where the person submitting the story must:

  1. Review a “Use and Access” Statement
  2. Review the hospital HIPAA policy
  3. Fill out a secure online form where the story, images, and any links are uploaded to and reviewed by hospital staff for approval prior to being posted to the site for public viewing
Children’s Hosptial L.A. “Share Your Story” Page


Children’s hospital L.A. “Use & Access” Statement

This is a shrewd business move on the hospital’s part because it allows them to publish vetted positive stories from actual patients – which clearly has marketing benefits – without violating HIPAA.

Terrace Communities

Terrace Communities is a group of seven assisted living residences located in Maine, Vermont, New Hampshire, and Florida. Terrace uses a member-only, public facing branded online community to connect residents, staff, and family members from all seven facilities. Members have unique profile pages and can participate in discussions, post to the group blog, add to the calendar, and upload photos to the galleries. Below you can see the community homepage with a photo of a Terrace resident and her son prominently displayed.

Terrace Communities

Notice that, like Children’s Hospital L.A., Terrace Communities encourages their members to interact and post content to the community website. Also, as you can see from the screenshot below, Terrace regularly posts photos of and stories about residents, family members, and staff to their community site. One difference here is that residents of Terrace communities are NOT considered or referred to as “patients.” Therefore, while privacy and information security are issues for Terrace, HIPAA is not a major concern. Terrace does have each resident and family sign a generic photo release form allowing them to publish photos on their website and in marketing materials.

Terrace Communities (Cont.)


Blogs, social media, and online communities can be powerful tools for organizations to broadcast news and information, as well as engage prospects and customers. The vast majority of what health care and senior care organizations publish using social technologies has nothing to do with PHI. As long as organizations take proper measures to ensure that Protected Health Information is kept private and secure there’s nothing to fear. If you are going to publish patient photos or stories, get a written release. Of course, it’s always possible that a rogue employee who doesn’t follow the rules can violate HIPAA, but that can happen offline even more easily than online – and should not be a reason to avoid getting into social media. Additionally, proper social media management allows companies to monitor posted content and quickly remove anything inappropriate. The following resources can help you get started developing your own social media policies.


Related Posts


Brian Geyser, APRN-BC, MSN is a clinician, consultant, educator, blogger, online community manager and the founder of Carenetworks, LLC. He blogs regularly here at and would love to connect with you on Twitter, Linkedin, and/or Facebook.

Posted In


  1. […] your organization deals with HIPAA laws, click here and here for two good articles on creating a HIPAA-compliant social media […]

  2. Nicky says:

    What about if a current patients posts on the Doctors FB Fan page? Can you interact with them without violating HIPAA?

  3. Shantell says:

    thank you for this wonderful post, I am glad
    I discovered this website on yahoo.

  4. Chassidy says:

    I see you don’t monetize your blog, i’v got idea how to earn some additional cash using
    one simple method, just search in google for: money making ideas
    by Loocijano

  5. Hey There,
    thanks for taking the time to read my email
    i just want to share with you this quick video showing you how i am ranking video after video on the first page of google!
    Look i know you get message after message from people telling you how they can get you first page rankings, well in this video i show you that i WALK THE WALk!
    All i ask is you give me 2 mins of your time so i can show you how i rank Videos on the front page of Google and how i can do the same for you bringing in clients\sales in days! (this will take you to my private blog)
    enjoy the video and get ready to have your socks blown off!
    enjoy! Dean.

  6. acne diet says:

    Awesome article.

  7. Rebecca says:

    Hello my name is Rebecca and I just wanted to send you a quick note here instead of calling you. I discovered your Social Media And HIPAA: What You Need To Know page and noticed you could have a lot more visitors. I have found that the key to running a popular website is making sure the visitors you are getting are interested in your website topic. There is a company that you can get keyword targeted visitors from and they let you try the service for free for 7 days. I managed to get over 300 targeted visitors to day to my website.

  8. Tamara says:

    I see you don’t monetize your blog, i know how to earn some additional money and get more visitors using one simple method, just search in google for;
    How to monetize a blog Twardziel advices

  9. Rachel says:

    I see you don’t monetize your site, i’v got idea how to earn some extra cash using one simple method, just search in google for
    – money making ideas by Loocijano

  10. Maxie says:

    I see you don’t monetize your blog, i know how to earn some additional cash and get more visitors using one simple method, just search in google
    for: How to monetize a blog Twardziel advices

  11. The comp plans make use of a a few different matrixes, matching and fast start bonuses, royalties, trips,
    cars and global pools as incentives to perform. Also, your neighborhood
    newspaper normally have an area for private sellers to market online and for simply a minimal
    fee. The new his empire collapsed, he used his business contacts and knowledge, and created The
    Apprentice show.

  12. Cat toys do not need to be costly, just fun on your cat. You will
    need to learn your cat’s nonverbal communication so you are aware of in the event it has already established enough
    playing which is time for you to stop. Normally, cats have five toes on each paw, but there are many cats which have greater than five toes
    on their own front and hind paws, these are called polydactyl cats.

  13. Every one of your promotions will need a specific campaign objective in mind if your wanting
    to arrange it. Having a splash page dedicated to that
    goal is a large section of maximizing the return you’ll see from
    your advertisement investment.

  14. Rosalina says:

    I suppose the things they see could be the power of duplication.
    If you do have a plan that is certainly relaxing in your head asking you to do
    simply WORK IT. No matter how great the merchandise or how great the leadership, should the
    individuals recruited, which use the Trump Network
    Opportunity, usually are not taking in a position to access the ‘entrepreneur’ approach, they’re
    doomed to fail.

  15. If you need to understand the full number of information Facebook tracks, examine their page called ‘Accessing Your Facebook Data’.
    With doing this information analyzed, you may return in and earn improvements where required to further enhance the effectiveness on the ad.
    To assist you with this, you’ll be able to check
    Facebook Insights to determine which posts develop the
    wider reach or tend to be popular; track your progress.

  16. Someone essentially help to make seriously posts I might state.
    That is the first time I frequented your website page and so far?
    I amazed with the research you made to make this actual put up extraordinary.
    Wonderful job!

  17. For under $ 100 you could make a marketing campaign that specifically
    targets multiple countries, city, sex and day of your target
    market. There can also be players inside the field too, but the
    giants continue to be leading the pack. Be bound to begin a personality
    on your business some personality.

  18. The comp plans work with a various matrixes, matching and fast start bonuses,
    royalties, trips, cars and global pools as incentives to perform.
    As soon as word hit the highway the conventional MLM skeptics got around the
    attack, with all the typical mlm negatives.
    No matter how great this product or how great the leadership, should the individuals
    recruited, who would like to use the Trump Network Opportunity,
    aren’t taking capable of access the ‘entrepreneur’ attitude,
    these are doomed to fail.

  19. Plenty of folks aim their adverts on broadest
    feasible terms, such as for instance dresses,
    ” or bike components,” or seo.” Since the wider terms get far more queries, it’s a solid urge – with a huge disadvantage.
    Since everybody bids regarding the broad terms, the price
    per simply click is normally quite high.

  20. Katrice says:

    I see you don’t monetize your website, i know how to earn some extra
    money and get more visitors using one simple method, just search
    in google for: How to monetize a blog Twardziel advices

  21. It has a marketing system and marketing knowledge to reach any organization opportunity.

    “The Donald” fully endorses not just mlm, but ACN as well.
    You may lose your focus (as happened with Trump when things went
    south) or drive.

  22. надежно посредники сша в казахстане сайт

  23. нашел брендовых вещей подруге

  24. Media says:

    Hi there, I found your website by the use
    of Google even as searching for a similar topic,
    your website came up, it appears good. I have bookmarked it in my google bookmarks.

    Hi there, simply became alert to your weblog via Google,
    and located that it’s really informative. I’m going
    to be careful for brussels. I’ll appreciate if you happen to proceed this in future.
    A lot of people shall be benefited out of your writing.


  25. procedure botox treatment prices read

  26. lasertest says:

    Greetings! Very helpful advice within this article! It’s the little changes that make the most important changes.
    Thanks for sharing!

  27. here says:

    Your family’s basic hygiene, water security, power effectiveness as well as more depend
    on a reliable pipes system.

  28. United Association 1 in New york city deals with Nontraditional Employment
    for Women, or NEW, which intends to bring women right into the building
    and construction professions, to hire women as apprentices, claimed Mr.

  29. Plumbing work could be inside or outdoors in existing and also freshly built buildings, in all weather conditions.

  30. If you opt to sign up in a training program beyond an instruction, then you could expect it to take around 2 years to earn a
    certificate or diploma, or up to four years to graduate with a
    plumbing degree.

  31. Building Codes recognize this link between adequately designed and installed sanitary plumbing
    system systems as well as the public wellness.

  32. Where chrome plating exists, clean restroom tile with cozy oxalic
    acid never with sulfuric or muriatic acids.

Leave a Reply