01Principles and purposeThe professional or clinical skill and the decisions it supports.
Social media includes public platforms, websites, blogs, messaging applications and private groups that allow users to create or share content. The practical risks arise from scale, speed, persistence, collapsed audiences and the ease with which fragments can be combined. A post need not name a patient to be identifiable, and a private message can be copied or disclosed.
The GMC’s social media guidance came into effect on 30 January 2024 and was updated on 13 December 2024. It describes professional expectations rather than a new criminal code; relevant law includes confidentiality, data protection, copyright, defamation, discrimination and harassment, while employer and platform policies also apply. The clinician must identify which obligation is engaged rather than calling every poor judgment “illegal”.
Key points
- GMC professional standards apply online as they do elsewhere. Personal accounts, private groups, disappearing messages, pseudonyms and closed audiences do not remove duties of confidentiality, respect, honesty or boundaries.
- Never post identifiable patient information without explicit consent and the required safeguards. Combining apparently harmless details can identify a patient, especially in rare cases, small communities or recent events.
- When discussing health or healthcare as a medical professional, provide context that lets readers assess claims and usually identify who you are. Take reasonable steps to avoid false or misleading information and do not overstate qualifications.
- Declare financial, commercial, professional or other interests that may influence or appear to influence recommendations. Advertising and endorsements also engage regulatory codes and consumer law.
- If a patient contacts a private profile about care, direct them to an appropriate healthcare route, respond to immediate safety risk proportionately and avoid creating an undocumented private consultation.
- Pause before posting about work, colleagues or contentious events. Check confidentiality, respect, evidence, audience, permanence, employer policy and whether the same words would be defensible in a public professional setting.
02Situations and prioritiesThe context, relevant information and actions that matter most.
An unusual diagnosis, age, location, photograph, timing, clinician role or narrative detail can identify a case when combined. De-identification requires considering motivated readers who know the context, not merely deleting name and hospital number.
A post recommending tests, treatment, prevention or services may influence behaviour because readers trust medical status. Check evidence, state limits and relevant context, avoid sensational certainty and correct material errors visibly.
Friend requests, flirtation, personal messaging, repeated direct contact or clinical advice through a private account can blur roles. Move care to an appropriate channel and apply the same boundary standards as face-to-face practice.
Posts about colleagues, groups or organisations can become bullying, harassment, discrimination or an unsafe public dispute. Raise clinical safety concerns through appropriate routes and communicate disagreements with evidence and respect.
03Assessment and interpretationHow to gather information, assess the situation and recognise uncertainty.
Consider the information, its meaning and its limitations before deciding what follows.
- 01
Identifiability assessment - Why
- Decide whether a patient or close contact could recognise the case from all available details.
- Interpretation and limitations
- Consider the mosaic effect, images, dates, location, rare features and cross-platform content. If identification is plausible, do not post without explicit informed consent and the relevant recording or education safeguards.
- 02
Claim and context check - Why
- Ensure health information is accurate, proportionate and verifiable.
- Interpretation and limitations
- Review the primary evidence, date, uncertainty, target population and whether omission makes the message misleading. State qualifications accurately and usually identify yourself when commenting professionally on health matters.
- 03
Interest and promotion check - Why
- Identify influences on a recommendation or endorsement.
- Interpretation and limitations
- Declare payment, gifts, affiliate links, ownership, sponsorship and other relevant interests prominently. A profile disclaimer does not cure a misleading claim or hidden interest.
- 04
Channel and boundary check - Why
- Determine whether the platform is suitable for patient-specific communication.
- Interpretation and limitations
- Private profiles and consumer messaging may lack identity assurance, record integration and emergency monitoring. Redirect to approved routes and document clinically relevant contact according to local policy.
04Worked approachesCases with ordered reasoning, an action and a check of the outcome.
01Worked casePosting a memorable clinical encounterA trainee wants to share a learning point from a rare emergency seen that day, omitting the patient’s name but including age, town, unusual occupation and a distinctive radiograph.+
- 1Assess the combined details and recognise that rarity, timing, location, occupation and image make identification plausible even without a name.
- 2Clarify the educational purpose and whether it can be achieved with a generic principle, approved teaching process or substantially altered non-patient example.
- 3If identifiable material remains necessary, obtain explicit informed consent and follow organisational, confidentiality and visual-recording requirements; consent does not remove duties of dignity or accuracy.
- 4Final action: do not publish the proposed post; use a non-identifiable generic learning point or formal approved teaching route.
- 5Verification: ask a supervisor or information-governance lead to review residual identification risk and check that no draft, cloud image or message has been shared.
02Communication approachPatient direct message about acute symptomsA current patient messages the doctor’s private account describing chest pain and asks whether to wait until morning.+
- 1Recognise a potential urgent safety issue and avoid conducting a full assessment through an unmonitored personal channel.
- 2Give concise direction to the appropriate emergency or urgent-care route based on the limited information and organisational policy.
- 3Set a boundary by explaining that the private profile is not a clinical contact route and avoid accepting or encouraging ongoing private messages.
- 4Document and hand over the clinically relevant contact through the approved record and safety process, then review privacy settings without deleting evidence.
03Correction approachPublic health post contains a material errorA doctor learns that a widely shared professional post overstates the benefit of a screening test and may alter readers’ decisions.+
- 1Recheck the primary evidence and define the exact error, affected population and potential consequence instead of quietly editing uncertain content.
- 2Correct or withdraw the claim promptly in a way likely to reach the original audience, linking to reliable evidence and explaining the material limitation.
- 3Disclose any relevant interest, avoid blaming others and notify an employer or regulator if required by the seriousness and context.
- 4Monitor responses and preserve a record of the original, correction and evidence used for professional accountability.
05Feedback, follow-up and evidenceReview outcomes, seek feedback and identify what to improve.
- Periodically review public profiles, biographies, qualifications, interests, links and older health claims; correct outdated information that could continue to influence patients.
- Treat accidental posting, lost devices, misdirected messages or suspected identification as information incidents: preserve evidence, contain exposure and report through approved governance routes.
- Seek feedback from supervisors or communications teams on clarity, tone, accessibility and evidence when using a professional account for health education.
- For professional development, retain de-identified examples of evidence appraisal, correction and boundary management rather than screenshots containing patient or colleague information.
06Special situationsVariants, exceptions and circumstances that change the usual approach.
Privacy settings are fragile
Audience controls reduce exposure but do not make content confidential. Members can copy, forward or capture messages, and anonymous content may be traced to its source.
Consent does not end judgment
Explicit consent may permit identifiable educational disclosure, but the doctor should still consider dignity, future impact, withdrawal arrangements, platform permanence and whether a less intrusive route serves the purpose.
Identity adds accountability
When commenting professionally on health or healthcare, clinicians should usually say who they are and provide enough context for readers to verify claims and expertise. Pseudonymity is not a licence to mislead.
Digital professionalism is ordinary professionalism
Respectful conduct, boundaries, confidentiality, accurate representation and openness about interests apply across personal and professional accounts whenever the medical role or patient trust is engaged.
07Common pitfallsFrequent interpretation and management errors.
- 01
Assuming removal of name and date of birth anonymises a rare or recent case when contextual details and images allow recognition.
- 02
Giving patient-specific advice through a private inbox without identity checks, clinical records, supervision, continuity or emergency monitoring.
- 03
Using “views my own” to excuse misleading health claims, undisclosed promotion, harassment, discrimination or confidentiality breaches.
- 04
Quietly deleting a material error after it spreads, leaving the original audience without a correction or evidence-based clarification.