Dermatology consent and clinical photos: a privacy workflow

Dermatology consent and clinical photos need more than a signature beside an upload button. A defensible workflow tells the patient why an image is being made, which body area it covers, who may see it, how long it may be kept, and whether it could ever be used beyond direct care. This guide gives dermatology and aesthetics clinics an operational checklist for consent, access, retention, withdrawal, minors, before-and-after publication, audit trails and privacy. It is educational information, not medical or legal advice; confirm the rules that apply to your clinic in Jordan with qualified clinical, legal and data-protection advisers.

Start with purpose, not the camera

Write down the purpose before anyone takes a photo. “Clinical photos” is too broad. A useful purpose might be documenting a lesion over time, recording the treatment area before a procedure, comparing progress at a follow-up, supporting a referral, or preparing a separately approved educational or promotional image. The purpose determines the minimum image, the people who need access, the retention rule and whether a separate permission is required.

Care documentation and public promotion should not share a hidden blanket choice. A patient may agree to an image being part of their confidential record and decline every public use. The consent screen or form should present those decisions separately, in plain language, without making marketing permission a condition of treatment. Record the form version and the explanation given so the clinic can show what the patient actually chose.

Define the scope of consent precisely

Before capture, confirm the patient, the intended body area, image type, purpose, likely viewers and any proposed secondary use. State whether the face, tattoos, jewellery or other identifying features will appear. If the purpose later changes from private follow-up to teaching, a website gallery or social media, return for a new decision instead of stretching the original wording.

A practical consent record includes the decision for each purpose, the date and time, the staff member who explained it, the patient or authorised representative, the policy or form version, any limits requested by the patient, and the channel for withdrawal. Avoid pre-ticked boxes. Give the patient time to ask questions and make refusal operationally safe: the care team should still know how to document treatment without pressuring the patient into optional photography.

Capture only what the stated purpose needs

Use a clinic-controlled process. Check the patient identity and consent state before capture, frame only the relevant area, and avoid unnecessary room details or other people. Where a comparison is needed, use a documented photography setup for distance, lighting and angle so the images are useful without deceptive editing. Do not use filters, reshaping or selective retouching that changes the apparent result.

Personal camera rolls, staff chat groups and unmanaged cloud backups create uncontrolled copies. Prefer direct upload to the patient’s Clinic Tek electronic health record or an approved clinic device that transfers the image promptly and clears temporary copies under a written procedure. Name files through the patient record rather than putting diagnoses or full names in exported filenames.

Restrict access and record every important action

Access should follow role and purpose. A treating clinician may need the full image; reception usually does not. Marketing staff should not browse clinical records to find attractive results. If a patient has separately approved public use, provide the approved copy through a controlled export instead of opening the medical chart to a wider team.

Use individual accounts, strong authentication and least-privilege roles. Review access when someone changes jobs or leaves. The audit trail should identify who captured, viewed, exported, replaced or deleted an image; when the action occurred; which consent version applied; and why an exception was used. Clinic Tek’s security and tenant-isolation overview explains the product controls, while the clinic remains responsible for configuring roles and daily procedures correctly.

Set retention by purpose and review it

“Keep forever” is not a retention policy. Define a period or review trigger for each purpose: the clinical record may follow a professional or statutory schedule, while a rejected marketing draft or a temporary transfer copy may have a much shorter life. Record the reason for the period, the responsible owner, the deletion method, and how backups or downstream systems are handled.

Run periodic reviews rather than relying on memory. Confirm that the image is still needed, that the original purpose still applies, and that the consent evidence remains linked. Deleting a database row while leaving an export in a shared drive does not close the task. A retention workflow needs an inventory of controlled copies and an exception path for a legal hold or another valid requirement confirmed by an adviser.

Make withdrawal a real workflow

Tell patients how to change their mind and give staff one route for recording the request. Capture the date, identity check, scope and requested outcome. Then stop future uses covered by the withdrawal, remove scheduled posts, identify controlled copies and record the work completed. Do not delete material that the clinic is legally required to retain without advice, and do not promise that a public image already copied by third parties can always be recovered.

The response should distinguish private clinical retention from optional publication. A withdrawal from social media does not automatically answer whether the clinical record must be kept, and a request about one campaign may not cover a separately agreed teaching use. Escalate ambiguity instead of guessing, communicate the result to the patient, and preserve the request and decision in the audit trail.

Use extra safeguards for minors and capacity

Photos of children and patients who may not be able to make the decision require heightened care. Verify who has authority to decide, document that authority, explain the image in a way the patient can understand, and involve the child or patient in the decision where appropriate. A guardian’s signature is not a shortcut around the patient’s dignity, objection or safeguarding needs.

Default away from promotional use for minors. If the clinic is considering any education or publication purpose, obtain specialist advice on capacity, parental responsibility, the child’s best interests, local safeguarding duties and whether fresh permission should be sought as the child matures. Keep identity and marketing choices separate from necessary care documentation.

Before-and-after publication needs its own approval

Before-and-after images can reveal identity even when the face is cropped. Skin pattern, tattoos, jewellery, treatment details, dates and captions may identify a person when combined. For publication, state the exact channels, audience, duration, whether paid advertising is included, whether the image may be cropped, and whether the clinic will name or anonymise the patient. Let the patient approve the exact pair and caption rather than an unknown future selection.

Keep the comparison honest: consistent framing and lighting, no result-changing edits, no unsupported outcome claim, and no suggestion that another patient will obtain the same result. Keep publication permission independent from treatment and compensation. Record where each approved image was published so withdrawal and review do not become a search across personal accounts.

A ten-point clinic checklist

1. Name the purpose before capture.
2. Separate care, teaching and marketing choices.
3. Record body area, viewers, channels and limits.
4. Verify patient identity and authority to consent.
5. Capture the minimum image on a clinic-controlled device.
6. Store it in the patient record with role-based access.
7. Log capture, view, export, publication and deletion events.
8. Apply a purpose-specific retention and review schedule.
9. Provide and test a withdrawal process.
10. Escalate minors, capacity, legal holds and public-use questions to qualified advisers.

For implementation context, review Clinic Tek for dermatology and aesthetics, the security controls overview, and the public Clinic Tek privacy notice. Product controls support a process; they do not replace the clinic’s policy, training or professional judgement.

Sources and scope

Use primary guidance as a starting point and verify applicability. Jordan’s Ministry of Digital Economy and Entrepreneurship publishes the Personal Data Protection Law No. 24 of 2023 and related instructions. The UK General Medical Council’s principles for patient recordings describe purpose, consent, dignity, secondary use and secure storage. The UK Information Commissioner’s storage-limitation guidance explains documented retention and review. The non-Jordan sources are comparative professional references, not statements of Jordanian law.