Short answer: yes, US dental practices can post patient photos and stories on social media, but only with the patient's written permission. Without it, you risk a HIPAA problem and you risk losing the patient's trust.
Tip: This guide is general information, not legal advice. For your exact situation, check with your compliance advisor or attorney.
Why this matters
HIPAA protects patient health information. A smile photo, an X-ray, a name, or even a story that makes a patient recognizable can count as protected information. Posting it without permission is where practices get into trouble.
The safe way to post patient content
- Get written consent first. Use a clear form that says exactly what you will post (photos, video, first name) and where (Instagram, Facebook, website).
- Keep the signed form on file. If a question ever comes up, you can show it.
- Share only what the patient agreed to. If they agreed to a smile photo, do not add their name or treatment details.
- Remove extra details. Check backgrounds, charts, screens and X-rays for names, dates or other information.
- Let patients change their mind. If someone asks you to take a post down, remove it quickly.
What about replying to reviews?
Be careful here. Even confirming that someone is your patient can be a problem. Keep replies general and friendly, and move details to a private conversation.
- Safer: "Thank you for the kind words! We love seeing happy smiles."
- Riskier: "Glad your root canal on Tuesday went well, John!"
- For negative reviews: "We take every concern seriously. Please call our office so we can help."
Posts that need no patient consent
You can fill most of your feed without any patient content at all:
- Education posts that answer common questions.
- Team introductions and behind the scenes moments (with your team's okay).
- Office tours, new equipment, and sterilization routines.
- Local community posts and holiday greetings.
- Tips, myths and facts, and fun polls.
Want ideas? Read: 40 Instagram Post Ideas for Dentists (That Patients Actually Engage With)
A quick checklist before you post
- Is there a patient in this post? If yes, do we have signed consent?
- Does the consent cover this platform and this type of content?
- Is there any name, date, chart or screen visible that should not be?
- Would the patient be happy to see this post?
How Kovex handles this
Kovex creates education, team, local and seasonal posts for dental practices, so most of your feed never needs patient content. When you do want to share a before and after, you add the photo yourself, after you have consent.
Kovex is a team of 7 AI agents that design and publish your Instagram and Facebook posts. $47 a month, no contract.