Social Media Notifications to AHPRA: Licence Risks for Australian Physiotherapists in 2026

What AHPRA and the Physiotherapy Board Consider a Social Media Breach

AHPRA's social media guidance for Australian health practitioners is grounded in two frameworks: the Health Practitioner Regulation National Law, specifically section 133, which governs advertising of regulated health services, and the Physiotherapy Board of Australia's Code of Conduct, which sets out the professional standards expected of all registered physiotherapists including in their online conduct.

A social media notification to AHPRA can arise from a single post, a pattern of posts over time, or a complaint made by a patient, colleague, employer, or any member of the public, including someone who encounters the content without following the account. The most common categories of social media conduct that trigger AHPRA notifications for Australian physiotherapists are:

• Patient testimonials and before-and-after photos. Section 133 of the National Law explicitly prohibits the use of testimonials in advertising a regulated health service. This means a physiotherapist cannot publish, share, or solicit patient reviews or testimonials about their services on any platform, including Google, Facebook, Instagram, or their own website. Before-and-after photographs of patients are also regulated and can be treated as testimonials in certain contexts. This rule is Australia-specific and stricter than the approach in many other jurisdictions.
• Unsubstantiated health claims. AHPRA's advertising guidelines require that all claims made in health advertising be accurate, evidence-based, and capable of being substantiated. Posts that make unqualified claims about treatment efficacy, "our dry needling eliminates chronic pain," "patients walk pain-free after one session", breach the advertising guidelines even where the physiotherapist genuinely believes the claim.
• Breaches of patient confidentiality. Sharing images, case details, or any information that could identify a patient without their explicit written consent is a breach of both the National Privacy Principles and the Physiotherapy Board's professional standards. This includes posts that are intended to be anonymised but contain enough detail to identify the patient, clinical photographs without faces, case descriptions with unusual presenting features, or geographical details that narrow identification.
• Health misinformation. AHPRA has been increasingly willing to act on notifications about practitioners who spread health misinformation, content that contradicts established clinical consensus on vaccination, infectious disease management, or other public health matters. The Physiotherapy Board has issued specific guidance on this following the COVID-19 pandemic, and the risk of notification for misinformation-type content is real and ongoing.
• Boundary violations through social media. Engaging with current patients through direct messaging, accepting patient friend or follow requests on personal accounts, or conducting clinical conversations through social media platforms can constitute a professional boundary violation under the Physiotherapy Board's standards. The fact that the interaction is digital does not reduce its regulatory significance.
• Unprofessional conduct online. Posts that are abusive, discriminatory, sexually inappropriate, or that otherwise fall below the standard expected of a registered physiotherapist can trigger a notification regardless of whether they involve advertising or patient information. The Physiotherapy Board expects the same professional conduct online as in person.

Recent Disciplinary Trends for Australian Physiotherapists on Social Media

The volume of AHPRA notifications arising from social media conduct has increased substantially since 2020, driven by three factors: the expansion of practitioners' social media presence during the pandemic, AHPRA's increased monitoring of online health content, and a sharper public awareness that health practitioners are subject to professional standards in their online conduct.

The disciplinary trends that Australian physiotherapists should be aware of as of 2026 include:

• Advertising enforcement has intensified. AHPRA has significantly increased its enforcement activity against advertising that breaches section 133 of the National Law. The focus has been on aesthetic medicine, cosmetic surgery, and other fee-for-service fields where social media marketing is heaviest, but general practitioners and specialists are not exempt. The testimonials prohibition is enforced strictly, and the expectation that practitioners actively manage testimonials on third-party platforms has been reinforced through guidance updates.
• Misinformation remains an active priority. Following the COVID-19 pandemic, the Physiotherapy Board issued specific guidance on the obligations of registered practitioners regarding health misinformation. Practitioners who published content contradicting public health guidance on vaccination, treatment protocols, or disease transmission faced notifications and, in serious cases, conditions on registration. AHPRA has indicated this remains an active area of concern in 2026.
• The personal account defence does not work. A recurring pattern in AHPRA notifications involving social media is the practitioner's belief that content posted on a personal account, not a practice account, is beyond AHPRA's jurisdiction. This is incorrect. Multiple tribunal decisions have confirmed that conduct on personal social media accounts can amount to professional misconduct where it reflects on the practitioner's fitness to practise or breaches professional standards.
• Screenshots are permanent. Deleting a post after it has been noticed does not prevent a notification. Screenshots circulate rapidly and AHPRA does not require the content to remain online to assess it. Practitioners who delete content after a complaint is made may face additional concerns about honesty and transparency in the regulatory process.

Patient-Identifying Content and Confidentiality Breaches Online

The obligation of confidentiality extends fully to a physiotherapist's online conduct. Sharing any information that could be used to identify a patient without their explicit written consent is a breach of both the Privacy Act 1988 (Cth), as it applies to health information under the Australian Privacy Principles, and the Physiotherapy Board's professional standards.

In practice, the risk of inadvertent identification is higher than many physiotherapists appreciate. Content that does not appear to identify a patient when considered in isolation may identify that patient to anyone who knows them, family members, friends, colleagues, or the patient themselves. Courts and tribunals have consistently held that the standard for confidentiality is not whether the patient is identifiable to a general audience, but whether they are identifiable to anyone.

The categories of online content most likely to breach patient confidentiality include clinical photographs of any kind (even where faces are obscured), case descriptions with unusual or rare presenting features, posts about specific procedures that narrow the identifiable patient cohort, and references to events or locations that could allow identification. Written consent, specific, informed, and documented, is required before any patient-related content is posted, regardless of how well-anonymised it appears.

Misinformation, Scope of Practice, and Advertising Under Section 133

Section 133 of the Health Practitioner Regulation National Law is the primary legislative framework governing how Australian physiotherapists can advertise their services online. Its requirements apply to all advertising of a regulated health service, a term that AHPRA interprets broadly to include any content that promotes a health service, whether or not it is formally labelled as advertising.

The advertising rules under section 133 that most commonly give rise to social media notifications for Australian physiotherapists are:

• The testimonials prohibition. No testimonial about a regulated health service may be used in advertising. This includes published patient reviews, quotes from patients about outcomes, video testimonials, and star ratings or review scores where the context is advertising the service. It is irrelevant whether the testimonial is positive or that the patient consented to its publication, the prohibition is absolute under the National Law.
• The requirement that claims be accurate and capable of substantiation. Any claim about a treatment, its efficacy, its safety profile, or the outcomes associated with it must be accurate and capable of being substantiated by evidence. Claims such as "guaranteed results," "proven to cure," or "90% of our patients see improvement" require documentary evidence and, if that evidence does not exist, must not be made.
• The prohibition on comparative advertising that could mislead. Claims that compare one practitioner's services or results favourably with those of other practitioners, or that use comparative language without a proper evidential basis, can breach the advertising guidelines.
• Scope of practice claims. Advertising a service that is outside a practitioner's registered scope of practice, or using a protected title or specialty designation to which they are not entitled, breaches both the advertising guidelines and the National Law's registration requirements.

Boundary Violations on Instagram, TikTok, and X

The platforms where AHPRA notification risk from social media is highest for Australian physiotherapists in 2026 are Instagram, TikTok, and X (formerly Twitter), in that order. Each platform creates specific risk vectors that practitioners should understand.

Instagram's visual format creates the highest risk of patient-identifying content through clinical photographs and before-and-after images, and the platform's commercial incentive structure encourages testimonial-type content that breaches the National Law. For physiotherapists, Instagram creates specific risk through before-and-after images of rehabilitation outcomes, exercise demonstration videos that make implicit efficacy claims, and patient recovery story posts that can identify the patient even without using their name.

TikTok creates risk primarily through health information content. Short-form video is highly shareable and can spread misinformation rapidly. Practitioners who create medical content for TikTok audiences must ensure every health claim is accurate, evidence-based, and does not contradict established clinical consensus. The platform's algorithm also creates risk by placing a physiotherapist's content in front of audiences who may take it as clinical advice, a context issue that AHPRA has regard to in assessing whether conduct amounts to unprofessional practice.

X (formerly Twitter) creates risk primarily through interpersonal conduct, public disputes, comments about patients or colleagues, and statements about clinical or public health matters that may be read as professional positions even where they are expressed casually. The Physiotherapy Board does not make a distinction between a physiotherapist's conversational posts and their formal public statements when assessing whether conduct meets the expected professional standard.

Practical Safeguards for Your Professional Online Presence

The most effective approach to social media risk for Australian physiotherapists is not to avoid social media entirely, it is to use it with a clear understanding of the applicable rules and a set of consistent practices that reduce the likelihood of a breach. The following safeguards directly address the most common sources of AHPRA social media notifications:

• Apply a professional standard review before posting. Before posting any content on any platform, ask: would I be comfortable if this appeared in evidence before the Physiotherapy Board? If not, do not post it. This single discipline eliminates the vast majority of social media notification risk.
• Do not publish patient testimonials under any circumstances. Even where a patient has specifically asked you to share their review or testimonial, the National Law prohibits its publication. Explain this to patients who make the request, they will generally understand when the legal position is explained.
• Document consent for any patient-related content before posting. If you intend to publish clinical photographs or case information, obtain specific, informed written consent from the patient before the content is prepared, not after. Consent must be specific to the type of content, the platform, and the potential audience.
• Regularly audit your profiles for testimonials and compliance. Review all platforms you manage or contribute to at least quarterly. Look for testimonials posted by patients or third parties, claims that may no longer be accurate, and content that could be read as identifying a patient. Flag any testimonials on third-party platforms through the platform's reporting process.
• Maintain a clear boundary between personal and patient relationships online. Do not accept follow or friend requests from current patients on personal accounts. Do not respond to clinical questions through direct messages on social media. If a patient contacts you through social media about a clinical matter, direct them to call the practice and do not engage with the clinical question online.
• Be especially careful with health information content. If you create general health information for social media, ensure every claim is accurate, evidence-based, and consistent with established clinical consensus. Include a clear statement that the content is general health information and not a substitute for professional medical advice for individual circumstances.

Dry Needling, Manipulation, and Scope of Practice Claims: A Physiotherapist-Specific Risk

Physiotherapists who perform dry needling, spinal manipulation, or other advanced techniques face a specific social media risk that does not apply to most other professions: outcome claims about these procedures are routinely made on social media in ways that breach both AHPRA's advertising guidelines and the Physiotherapy Board's scope of practice standards.

A post claiming that dry needling "cures" or "eliminates" chronic pain, or that spinal manipulation produces guaranteed mobility improvements, is an unsubstantiated efficacy claim under section 133. It does not matter that the practitioner is qualified to perform the procedure. What matters is whether the claim can be substantiated by evidence. In most cases, it cannot be substantiated in the absolute terms that social media posts typically use.

The practical rule: describe what you do, not guaranteed outcomes. "We offer dry needling as part of a personalised treatment plan" is compliant. "Dry needling will eliminate your back pain" is not. Apply this distinction to every post about a specific technique or service.

Key Regulatory Resources for Australian Physiotherapists on Social Media

• AHPRA Advertising Hub, AHPRA's central resource on advertising guidelines under the National Law, including specific guidance on social media, testimonials, and online content.
• Physiotherapy Board of Australia, The National Board responsible for regulating Australian physiotherapists. The Physiotherapy Board's Code of Conduct includes specific expectations for professional online behaviour.
• Avant Mutual, Australia's leading medical defence organisation. Avant provides medico-legal support for practitioners who receive social media notifications and can advise on the appropriate response process.

Frequently Asked Questions

Can a social media post trigger an AHPRA notification against an Australian physiotherapist?

Yes. AHPRA can receive notifications about social media conduct from patients, colleagues, or any member of the public. Posts that breach patient confidentiality, contain prohibited testimonials, make unsubstantiated health claims, spread health misinformation, or constitute unprofessional conduct can all trigger a notification to the Physiotherapy Board.

Are testimonials and patient reviews prohibited for Australian physiotherapists on social media?

Yes. Section 133 of the Health Practitioner Regulation National Law prohibits the use of testimonials in advertising a regulated health service. This applies to all online platforms. Physiotherapists cannot solicit, publish, or share patient testimonials, and are expected to take reasonable steps to remove testimonials that appear on platforms they manage.

What counts as advertising under the National Law for social media?

AHPRA takes a broad view. Any content that promotes a regulated health service, including posts about your practice, approach, fees, or availability, is considered advertising subject to the National Law's advertising requirements. This includes personal accounts if they promote your health services.

Can Australian physiotherapists post health information on social media?

Yes, but all health claims must be accurate, evidence-based, and consistent with established clinical consensus. Clearly distinguish general health information from specific clinical advice, and avoid making claims you cannot substantiate. Content that contradicts established public health guidance, on vaccination, for example, carries real notification risk.

What does AHPRA expect about patient reviews on Google?

AHPRA expects practitioners to take reasonable steps to remove or report testimonials on platforms they control. For third-party platforms like Google, physiotherapists cannot remove reviews themselves, but should not actively solicit or encourage them, and should flag testimonials that breach the National Law through the platform's reporting processes.

Can I be reported to AHPRA for posts on my personal social media account?

Yes. AHPRA's jurisdiction is not limited to professional or practice accounts. A notification can arise from posts on a personal account if the content reflects on fitness to practise, breaches patient confidentiality, constitutes advertising of a health service, or amounts to unprofessional conduct. The personal account framing is not a defence.

What should I do if I receive an AHPRA notification about social media conduct?

Contact your indemnity insurer, your professional indemnity insurer, immediately. Do not delete the posts subject to the notification without legal advice. Preserve screenshots of the content as it appeared at the time. Prepare your written response within the stated deadline, typically 30 days, with your insurer's guidance.

What are the most common AHPRA social media notification triggers for Australian physiotherapists?

The most common triggers are: patient testimonials or before-and-after photos on practice social media; unsubstantiated claims about treatment efficacy; posts that disclose identifiable patient information without consent; health misinformation; boundary violations involving patient interactions online; and advertising that does not comply with section 133 of the National Law.