HIPAA and Patient Privacy in Marketing

Most HIPAA trouble in dental practices doesn’t start in the operatory. It starts with a well-meant marketing task: a friendly reply to a review, a before-and-after photo on Instagram, a newsletter sent from a free email tool, a tracking pixel an agency added to the booking page. Each of these can use or reveal protected health information, and the practice is responsible for it, whoever clicked the button.

This guide explains, in plain language, where privacy rules apply to everyday practice marketing: what counts as protected information, how to handle reviews and social media, when you need a patient’s written authorization, how to use patient lists for email and texts, what website tracking can leak, and which marketing vendors need a business associate agreement. It is written to help you ask the right questions, not to replace your privacy officer or a healthcare attorney.

Advertising claims, testimonials and state dental board rules are covered in the companion guide, Dental Advertising Rules.

Chapters

1. 01HIPAA basics for practice marketingWhat counts as protected health information in marketing, who HIPAA covers, and when patient authorization is needed for marketing communications.
2. 02Review replies and social mediaHow HIPAA applies to review replies, practice social media, staff posts and patients who tag the practice, with simple rules your team can follow.
3. 03Patient photos, stories and testimonialsWhen a dental practice needs written HIPAA authorization to use a patient’s photo, name or story, what the form should cover, and how revocation works.
4. 04Email and text marketing to patientsUsing patient lists for dental newsletters and promotions: reminders versus marketing, texting and email consent, vendor agreements and safe message content.
5. 05Website tracking and ad pixelsHow analytics tags and ad pixels can leak patient information from a dental website, what HHS guidance says, and practical steps to audit what fires.
6. 06Vendors and business associate agreementsWhich dental marketing vendors are HIPAA business associates, what a BAA does and doesn’t do, and what to do when something goes wrong.