SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-social-media-phi

Is posting patient photos or stories on social media allowed?

No, not without the patient's written authorization.

Start playing free

  1. Yes, if the patient's face is blurred
  2. No, not without the patient's written authorization ✔
  3. Yes, if the account is private

Why: Posting a patient's photo or story is a disclosure of PHI. Without a valid signed authorization, it is not allowed. Blurring a face does not remove other details that can identify someone.

Huh, didn't know that: Workers who break privacy rules must face sanctions, which employers must document.

The dad joke
Why did the nurse delete her post? Her phone had better privacy settings than her judgment.
Like this card?
Play the game

References

Answer: No, not without the patient's written authorization. Posting a patient's photo or story is a disclosure of PHI. Without a valid signed authorization, it is not allowed. Blurring a face does not remove other details that can identify someone.

  1. 45 CFR 164.508(a)(1) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.508
    a covered entity may not use or disclose protected health information without an authorization that is valid under this section
    Checked 2026-10-10.
  2. 45 CFR 164.530(e) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530
    must have and apply appropriate sanctions against members of its workforce
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsNurse Kim looks up her neighbor's chart out of curiosity. Is that allowed?Work SkillsTwo nurses need to discuss a patient in a hospital elevator. What should they do?Work SkillsAre sign in sheets allowed in a doctors waiting room?

That's stuff everyone should know.