Social Media Notifications to AHPRA: Licence Risks for Australian Doctors in 2026

What AHPRA and the Medical Board Consider a Social Media Breach

AHPRA's social media guidance for Australian health practitioners is grounded in two frameworks: the Health Practitioner Regulation National Law, specifically section 133, which governs advertising of regulated health services, and the Medical Board of Australia's Good Medical Practice: A Code of Conduct for Doctors in Australia, which sets out the professional standards expected of all registered medical practitioners including in their online conduct.

A social media notification to AHPRA can arise from a single post, a pattern of posts over time, or a complaint made by a patient, colleague, employer, or any member of the public, including someone who encounters the content without following the account. The most common categories of social media conduct that trigger AHPRA notifications for Australian doctors are:

• Patient testimonials and before-and-after photos. Section 133 of the National Law explicitly prohibits the use of testimonials in advertising a regulated health service. This means a doctor cannot publish, share, or solicit patient reviews or testimonials about their services on any platform, including Google, Facebook, Instagram, or their own website. Before-and-after photographs of patients are also regulated and can be treated as testimonials in certain contexts. This rule is Australia-specific and stricter than the approach in many other jurisdictions.
• Unsubstantiated health claims. AHPRA's advertising guidelines require that all claims made in health advertising be accurate, evidence-based, and capable of being substantiated. Posts that make unqualified claims about treatment efficacy, "this procedure cures back pain," "our patients see results in one session", breach the advertising guidelines even where the doctor genuinely believes the claim.
• Breaches of patient confidentiality. Sharing images, case details, or any information that could identify a patient without their explicit written consent is a breach of both the National Privacy Principles and the Medical Board's professional standards. This includes posts that are intended to be anonymised but contain enough detail to identify the patient, clinical photographs without faces, case descriptions with unusual presenting features, or geographical details that narrow identification.
• Health misinformation. AHPRA has been increasingly willing to act on notifications about practitioners who spread health misinformation, content that contradicts established clinical consensus on vaccination, infectious disease management, or other public health matters. The Medical Board has issued specific guidance on this following the COVID-19 pandemic, and the risk of notification for misinformation-type content is real and ongoing.
• Boundary violations through social media. Engaging with current patients through direct messaging, accepting patient friend or follow requests on personal accounts, or conducting clinical conversations through social media platforms can constitute a professional boundary violation under the Medical Board's standards. The fact that the interaction is digital does not reduce its regulatory significance.
• Unprofessional conduct online. Posts that are abusive, discriminatory, sexually inappropriate, or that otherwise fall below the standard expected of a registered medical practitioner can trigger a notification regardless of whether they involve advertising or patient information. The Medical Board expects the same professional conduct online as in person.

Recent Disciplinary Trends for Australian Doctors on Social Media

The volume of AHPRA notifications arising from social media conduct has increased substantially since 2020, driven by three factors: the expansion of practitioners' social media presence during the pandemic, AHPRA's increased monitoring of online health content, and a sharper public awareness that health practitioners are subject to professional standards in their online conduct.

The disciplinary trends that Australian doctors should be aware of as of 2026 include:

• Advertising enforcement has intensified. AHPRA has significantly increased its enforcement activity against advertising that breaches section 133 of the National Law. The focus has been on aesthetic medicine, cosmetic surgery, and other fee-for-service fields where social media marketing is heaviest, but general practitioners and specialists are not exempt. The testimonials prohibition is enforced strictly, and the expectation that practitioners actively manage testimonials on third-party platforms has been reinforced through guidance updates.
• Misinformation remains an active priority. Following the COVID-19 pandemic, the Medical Board issued specific guidance on the obligations of registered practitioners regarding health misinformation. Practitioners who published content contradicting public health guidance on vaccination, treatment protocols, or disease transmission faced notifications and, in serious cases, conditions on registration. AHPRA has indicated this remains an active area of concern in 2026.
• The personal account defence does not work. A recurring pattern in AHPRA notifications involving social media is the practitioner's belief that content posted on a personal account, not a practice account, is beyond AHPRA's jurisdiction. This is incorrect. Multiple tribunal decisions have confirmed that conduct on personal social media accounts can amount to professional misconduct where it reflects on the practitioner's fitness to practise or breaches professional standards.
• Screenshots are permanent. Deleting a post after it has been noticed does not prevent a notification. Screenshots circulate rapidly and AHPRA does not require the content to remain online to assess it. Practitioners who delete content after a complaint is made may face additional concerns about honesty and transparency in the regulatory process.

Patient-Identifying Content and Confidentiality Breaches Online

The obligation of confidentiality extends fully to a doctor's online conduct. Sharing any information that could be used to identify a patient without their explicit written consent is a breach of both the Privacy Act 1988 (Cth), as it applies to health information under the Australian Privacy Principles, and the Medical Board's professional standards.

In practice, the risk of inadvertent identification is higher than many doctors appreciate. Content that does not appear to identify a patient when considered in isolation may identify that patient to anyone who knows them, family members, friends, colleagues, or the patient themselves. Courts and tribunals have consistently held that the standard for confidentiality is not whether the patient is identifiable to a general audience, but whether they are identifiable to anyone.

The categories of online content most likely to breach patient confidentiality include clinical photographs of any kind (even where faces are obscured), case descriptions with unusual or rare presenting features, posts about specific procedures that narrow the identifiable patient cohort, and references to events or locations that could allow identification. Written consent, specific, informed, and documented, is required before any patient-related content is posted, regardless of how well-anonymised it appears.

Misinformation, Scope of Practice, and Advertising Under Section 133

Section 133 of the Health Practitioner Regulation National Law is the primary legislative framework governing how Australian doctors can advertise their services online. Its requirements apply to all advertising of a regulated health service, a term that AHPRA interprets broadly to include any content that promotes a health service, whether or not it is formally labelled as advertising.

The advertising rules under section 133 that most commonly give rise to social media notifications for Australian doctors are:

• The testimonials prohibition. No testimonial about a regulated health service may be used in advertising. This includes published patient reviews, quotes from patients about outcomes, video testimonials, and star ratings or review scores where the context is advertising the service. It is irrelevant whether the testimonial is positive or that the patient consented to its publication, the prohibition is absolute under the National Law.
• The requirement that claims be accurate and capable of substantiation. Any claim about a treatment, its efficacy, its safety profile, or the outcomes associated with it must be accurate and capable of being substantiated by evidence. Claims such as "guaranteed results," "proven to cure," or "90% of our patients see improvement" require documentary evidence and, if that evidence does not exist, must not be made.
• The prohibition on comparative advertising that could mislead. Claims that compare one practitioner's services or results favourably with those of other practitioners, or that use comparative language without a proper evidential basis, can breach the advertising guidelines.
• Scope of practice claims. Advertising a service that is outside a practitioner's registered scope of practice, or using a protected title or specialty designation to which they are not entitled, breaches both the advertising guidelines and the National Law's registration requirements.

Boundary Violations on Instagram, TikTok, and X

The platforms where AHPRA notification risk from social media is highest for Australian doctors in 2026 are Instagram, TikTok, and X (formerly Twitter), in that order. Each platform creates specific risk vectors that practitioners should understand.

Instagram's visual format creates the highest risk of patient-identifying content through clinical photographs and before-and-after images, and the platform's commercial incentive structure encourages testimonial-type content that breaches the National Law. For Australian doctors, Instagram carries the highest notification risk in aesthetic medicine and cosmetic surgery, where before-and-after images and treatment outcome posts are standard marketing practice but constitute prohibited testimonials under section 133. GPs who create health content and specialists who post clinical imagery face the same risk as cosmetic practitioners.

TikTok creates risk primarily through health information content. Short-form video is highly shareable and can spread misinformation rapidly. Practitioners who create medical content for TikTok audiences must ensure every health claim is accurate, evidence-based, and does not contradict established clinical consensus. The platform's algorithm also creates risk by placing a doctor's content in front of audiences who may take it as clinical advice, a context issue that AHPRA has regard to in assessing whether conduct amounts to unprofessional practice.

X (formerly Twitter) creates risk primarily through interpersonal conduct, public disputes, comments about patients or colleagues, and statements about clinical or public health matters that may be read as professional positions even where they are expressed casually. The Medical Board does not make a distinction between a doctor's conversational posts and their formal public statements when assessing whether conduct meets the expected professional standard.

Practical Safeguards for Your Professional Online Presence

The most effective approach to social media risk for Australian doctors is not to avoid social media entirely, it is to use it with a clear understanding of the applicable rules and a set of consistent practices that reduce the likelihood of a breach. The following safeguards directly address the most common sources of AHPRA social media notifications:

• Apply a professional standard review before posting. Before posting any content on any platform, ask: would I be comfortable if this appeared in evidence before the Medical Board? If not, do not post it. This single discipline eliminates the vast majority of social media notification risk.
• Do not publish patient testimonials under any circumstances. Even where a patient has specifically asked you to share their review or testimonial, the National Law prohibits its publication. Explain this to patients who make the request, they will generally understand when the legal position is explained.
• Document consent for any patient-related content before posting. If you intend to publish clinical photographs or case information, obtain specific, informed written consent from the patient before the content is prepared, not after. Consent must be specific to the type of content, the platform, and the potential audience.
• Regularly audit your profiles for testimonials and compliance. Review all platforms you manage or contribute to at least quarterly. Look for testimonials posted by patients or third parties, claims that may no longer be accurate, and content that could be read as identifying a patient. Flag any testimonials on third-party platforms through the platform's reporting process.
• Maintain a clear boundary between personal and patient relationships online. Do not accept follow or friend requests from current patients on personal accounts. Do not respond to clinical questions through direct messages on social media. If a patient contacts you through social media about a clinical matter, direct them to call the practice and do not engage with the clinical question online.
• Be especially careful with health information content. If you create general health information for social media, ensure every claim is accurate, evidence-based, and consistent with established clinical consensus. Include a clear statement that the content is general health information and not a substitute for professional medical advice for individual circumstances.

Aesthetic Medicine, Cosmetic Surgery, and the Highest-Risk Doctor Content

Australian doctors practising in aesthetic medicine, cosmetic surgery, anti-ageing, and weight management face a social media notification risk profile that is among the highest of any medical specialty. The commercial pressure to share treatment results, patient transformations, and before-and-after images on Instagram and TikTok is intense, and it sits in direct conflict with the absolute prohibition on testimonials in section 133 of the National Law.

Every before-and-after treatment photograph, regardless of whether the patient consented, is a testimonial. Every patient transformation video is a testimonial. Every post where a patient's outcome is used to promote the practice's services is a testimonial. The Medical Board and AHPRA have been unambiguous about this. The volume of notifications arising from cosmetic medicine social media content in 2025 and 2026 reflects a profession that has been slow to internalise this reality.

The practical approach is the same as for dentists and optometrists operating in aesthetic fields: post about what you do, not what you achieve for individual patients. Educational content about procedures, clinical mechanisms, and eligibility criteria is compliant. Individual patient results are not, regardless of how enthusiastically the patient wants to be featured.

Key Regulatory Resources for Australian Doctors on Social Media

• AHPRA Advertising Hub, AHPRA's central resource on advertising guidelines under the National Law, including specific guidance on social media, testimonials, and online content.
• Medical Board of Australia, The National Board responsible for regulating Australian doctors. The Medical Board's Code of Conduct includes specific expectations for professional online behaviour.
• Avant Mutual, Australia's leading medical defence organisation. Avant provides specific guidance on social media risks for Australian doctors and medico-legal support for practitioners who receive social media notifications.

Frequently Asked Questions

Can a social media post trigger an AHPRA notification against an Australian doctor?

Yes. AHPRA can receive notifications about social media conduct from patients, colleagues, or any member of the public. Posts that breach patient confidentiality, contain prohibited testimonials, make unsubstantiated health claims, spread health misinformation, or constitute unprofessional conduct can all trigger a notification to the Medical Board.

Are testimonials and patient reviews prohibited for Australian doctors on social media?

Yes. Section 133 of the Health Practitioner Regulation National Law prohibits the use of testimonials in advertising a regulated health service. This applies to all online platforms. Doctors cannot solicit, publish, or share patient testimonials, and are expected to take reasonable steps to remove testimonials that appear on platforms they manage.

What counts as advertising under the National Law for social media?

AHPRA takes a broad view. Any content that promotes a regulated health service, including posts about your practice, approach, fees, or availability, is considered advertising subject to the National Law's advertising requirements. This includes personal accounts if they promote your health services.

Can Australian doctors post health information on social media?

Yes, but all health claims must be accurate, evidence-based, and consistent with established clinical consensus. Clearly distinguish general health information from specific clinical advice, and avoid making claims you cannot substantiate. Content that contradicts established public health guidance, on vaccination, for example, carries real notification risk.

What does AHPRA expect about patient reviews on Google?

AHPRA expects practitioners to take reasonable steps to remove or report testimonials on platforms they control. For third-party platforms like Google, doctors cannot remove reviews themselves, but should not actively solicit or encourage them, and should flag testimonials that breach the National Law through the platform's reporting processes.

Can I be reported to AHPRA for posts on my personal social media account?

Yes. AHPRA's jurisdiction is not limited to professional or practice accounts. A notification can arise from posts on a personal account if the content reflects on fitness to practise, breaches patient confidentiality, constitutes advertising of a health service, or amounts to unprofessional conduct. The personal account framing is not a defence.

What should I do if I receive an AHPRA notification about social media conduct?

Contact your indemnity insurer, Avant Mutual, MDA National, or MIGA, immediately. Do not delete the posts subject to the notification without legal advice. Preserve screenshots of the content as it appeared at the time. Prepare your written response within the stated deadline, typically 30 days, with your insurer's guidance.

What are the most common AHPRA social media notification triggers for Australian doctors?

The most common triggers are: patient testimonials or before-and-after photos on practice social media; unsubstantiated claims about treatment efficacy; posts that disclose identifiable patient information without consent; health misinformation; boundary violations involving patient interactions online; and advertising that does not comply with section 133 of the National Law.