Communicating Through Social Media

Service: Risk Management
Subject: External Relations
Setting: Privacy
Type: Risk Notes

Overview of Issue

Social media refers to various electronic communication channels that enable the creation, sharing, and interactive participation of messages, content, and information with friends, family, colleagues and the public. Social media also provides a forum for healthcare providers to share updates about the organization, including services, alerts, events, and news, fundraising events and patient educational events. Key mitigation strategies to reduce misuse of social media include having a policy and an education plan that addresses privacy, reputation and human resources risks.

Key Points

  • Ensure adequate security and privacy controls are in place for applications which allow healthcare providers to communicate directly with patients.
  • Once something is online, assume it will never be completely deleted.

 

Things to Consider

 

Concerns related to Social Media

  • Organizational and professional concerns related to misuse of social media include ethics, professionalism, privacy and confidentiality, cyber bullying and information quality. Usage of social media and related policies must be in compliance with the organization’s devices security, privacy and code of conduct policy. Keep in mind that all content may be discoverable (and subject to Freedom of Information requests).

Policy & Procedures

  • Consider implementing a social media plan/policy and ensure that a staff education plan is developed and implemented. The plan/policy should include but not limited to:
  • Management:
    • Identify who has the authority to set up a social media account that represents the organization.
    • Identify who will officially speak on behalf of the organization.
    • Code of Conduct or Respectful Workplace (i.e. disparaging comments) expectations.
    • Process to respond to breaches in patient and staff privacy.
    • Process for managing risks related to reputation management, inappropriate or unprofessional use or postings.
    • Use of social media related to candidate screening.
  • Content Development and Monitoring:
    • Identify who will be responsible for content development.
    • Provide direction on posting i.e. photos, videos, names or identifiable information of patients and staff (obtain consent).
    • Identify who will be responsible for monitoring and responding to activities or negative comments made about the organization according to a response/escalation process.
  • Staff using Social Media:
    • Direction for staff regarding account security related to using professional devices or personal devices for work (e.g. bring your own device arrangements).

Staff and Physicians:

  • If using the healthcare organization’s social media platform, professional, student or personal platform remember to:
    • Maintain professionalism at all times and accurately state credentials.
    • Maintain appropriate boundaries of the patient caregiver relationship in accordance with Regulatory College and organizational guidelines and do not extend or accept ‘friend’ requests to/from patients, substitute decision-makers, patient’s family or management to whom you report.
    • Protect patients, staff’s personal confidentiality and privacy.
    • Be honest in all professional interactions.
    • Do not speak on behalf of the organization unless authorized to do so and identify whether the submission is representative of the organization or a personal comment.
    • Maintain separate personal and professional channels/accounts on social media platforms.
    • Be aware of social engineering scams. Do not respond to requests for confidential information (e.g. banking information) received through social media.

Using Social Media for Patient Care

  • Security and Privacy settings
    • All practices should be in compliance with organizational policy and procedures
  • Use secure closed systems with the highest privacy and security settings. (E.g. ensure no one other than the account administrator can post on your organization’s Facebook timeline/wall. Turn on approval features so that individuals have to request to be your follower.)
  • Consult your technical expert to ensure the highest level of security and privacy settings have been chosen for the accounts.
  • Communicating with patients
    • Advise patients of organization approved and secure methods
    • Patients should be made aware of the benefits and limitations of the communications tool including the privacy protections and must provide consent to participate given these provisions.
    • Establish expectations of message response time, how emergencies should be handled, and issues that should be handled online vs. in person.

References

Date last reviewed:
This is a resource for quality assurance and risk management purposes only, and is not intended to provide or replace legal or medical advice or reflect standards of care and/or standards of practice of a regulatory body. The information contained in this resource was deemed accurate at the time of publication, however, practices may change without notice.