GMC guidance on social media, what online behaviour triggers investigation, patient privacy risks, and how to prevent complaints
Social media is now a significant source of GMC fitness to practise complaints. The GMC's guidance applies online as well as in clinical practice — and the boundaries are broader than many doctors assume. This guide explains what constitutes a social media breach, how the GMC investigates, and the practical steps that prevent complaints arising.
GMC Good Medical Practice applies online as well as in clinical practice.
The same standards of conduct, probity, and respect that govern professional behaviour in person apply to everything a doctor posts, shares, or comments on — including personal social media accounts.
The GMC's dedicated guidance on doctors' use of social media makes clear that doctors must maintain professional standards online and protect patient confidentiality in all online communications.
Content posted in a personal capacity can still give rise to fitness to practise concerns if it undermines public confidence in the profession.
The guidance does not prohibit social media use — it requires responsible use. Doctors can maintain personal and professional presences, contribute to public health debates, and engage with online communities.
What they cannot do is allow those activities to compromise patient confidentiality, bring the profession into disrepute, or breach Good Medical Practice standards.
CPD Certified — Online — Immediate Access
GMC complaints arising from social media conduct fall into several categories:
The risk of anonymisation failure is a recurring theme. Many doctors believe removing a patient's name is sufficient — it is not.
The GMC's confidentiality guidance makes clear that information is not anonymised unless there is no realistic possibility of identification.
Patient privacy is the most common source of social media GMC complaints. The core risk is sharing clinical information — on any platform — in a way that allows patients to be identified, directly or indirectly.
A patient who reads a post about "a patient who came in with X, Y and Z" and recognises themselves has been subjected to a confidentiality breach — regardless of whether anyone else could identify them. The patient's own ability to identify themselves is sufficient.
Educational "interesting case" posts carry particular risk. Sharing a challenging case for educational purposes is legitimate only where the patient has given explicit consent or where the information has been genuinely anonymised. Changing a few details is not sufficient where the combination of remaining details is still identifying.
Doctors retain the right to hold and express political views. The GMC does not prohibit political activity or comment on public health policy.
However, the manner of expression matters. Posts that are discriminatory, that involve personal abuse of identifiable individuals, or that make demonstrably false clinical claims can all give rise to GMC concerns —
regardless of their political character. The question is not whether the doctor holds a particular view, but whether the way it was expressed is consistent with Good Medical Practice standards.
The guide to social media for healthcare professionals sets out the practical framework that applies across all clinical roles.
Social media complaints are investigated through the standard fitness to practise pathway. The GMC obtains copies of relevant posts — including screenshots and archived content — and assesses whether the conduct raises fitness to practise concerns.
The doctor receives a Rule 7 letter setting out the specific posts alleged. The investigation assesses both the content and the doctor's response — including whether they have deleted content, apologised, or taken steps to prevent recurrence. Genuine insight and prompt remediation are relevant to the case examiner's assessment.
Prevention is far better than remediation in social media cases. The practical steps that significantly reduce risk are straightforward:
UK-registered doctors can access professional ethics training through Healthcare Ethics Courses.
Doctors with connections to Australia can consult ethics training for Australian doctors.
Those with connections to New Zealand can review professional development for New Zealand doctors.
10 CPD-certified courses for £500. Professional ethics, probity, and online conduct — completed early as part of a genuine remediation response.
Bulk Buy 10 Courses →Yes. The GMC's guidance makes clear that professional standards apply online as well as in clinical practice. Posts on personal or professional social media accounts can give rise to fitness to practise concerns — including patient confidentiality breaches, discriminatory content, misleading health information, and conduct that undermines public confidence in the profession.
The GMC does not proactively monitor social media. Complaints arise from patients, colleagues, employers, or members of the public who report content. Once a complaint is received, the GMC can obtain copies of relevant posts including archived content.
Anonymisation failure occurs when a doctor removes a patient's name but the combination of remaining details — clinical presentation, location, timing, unusual features — still allows the patient to identify themselves or be identified by others. Removing a name alone is rarely sufficient anonymisation.
Only with explicit patient consent or genuinely thorough anonymisation. A patient who recognises themselves from a post — even if no one else can — has been subjected to a confidentiality breach.
The GMC does not require real names. However, anonymous accounts can still give rise to GMC concerns where the content is sufficiently identifiable — and are not a reliable protection where the GMC investigates.
Political views are not prohibited. However, the manner of expression matters. Posts that are discriminatory, involve personal abuse, or make demonstrably false clinical claims can give rise to GMC concerns — regardless of their political character.
Delete the content promptly. Consider whether any patient or colleague has been affected. If a complaint has already been made or you believe one is likely, contact your medical defence organisation immediately before taking further action.
Yes. The GMC's guidance applies to all forms of online communication — including private messages, group chats, and closed online communities. Patient information shared in a WhatsApp group with colleagues is still subject to confidentiality obligations.
Not on personal social media platforms. Connecting with patients on Facebook, Instagram, or other personal platforms blurs the professional boundary and creates risks of boundary violations.
Courses in professional ethics, patient confidentiality, online conduct, and social media use in clinical practice. Completing these early — not as a last-minute addition — demonstrates genuine engagement with the professional standards that were breached.
Potentially. The GMC requires doctors to be honest and not mislead the public. Posting health claims that are not evidence-based and that could undermine public health may constitute a fitness to practise concern — particularly where the doctor uses medical credentials to lend authority to the content.
As both a confidentiality concern and a conduct concern. A post that identifies a patient is simultaneously a confidentiality breach and a conduct concern. The GMC's assessment addresses all dimensions together.
The GMC has published specific guidance titled 'Doctors' Use of Social Media'. It supplements Good Medical Practice and applies the same professional standards to online conduct. It is available on the GMC's website.
This guide is for educational purposes only and does not constitute legal advice. If you are facing a GMC investigation, seek independent legal advice from a solicitor experienced in GMC regulatory proceedings.
