AHPRA Social Media Policy 2026: What Australian Health Practitioners Must Know to Protect Their Registration
Every registered health practitioner in Australia is accountable for their online conduct — and the regulator is paying closer attention than ever. The AHPRA social media guidance, most recently reviewed in March 2026, sets out binding expectations for how the country's more than 900,000 registered practitioners engage online. This guide explains exactly what the current policy requires, which online behaviours trigger formal investigation, and the practical steps clinicians can take today to keep their registration secure.
What the AHPRA Social Media Policy Actually Is in 2026
The current guidance — titled Social media: How to meet your obligations under the National Law — replaced the older standalone Social Media Policy and now sits under the Advertising resources section of the AHPRA website. It applies to every practitioner across the 15 regulated health professions, from medicine and nursing through to physiotherapy, pharmacy, psychology, and Aboriginal and Torres Strait Islander health practice.
The document does not stop practitioners from using social media. Instead, it clarifies that online conduct is treated in the same way as in-person conduct: your professional obligations travel with you onto LinkedIn, Instagram, TikTok, X, private Facebook groups, WhatsApp groups, and even anonymous forums.
Community trust in registered health practitioners is essential. Inappropriate use of social media can result in harm to patients and the profession, particularly given the changing nature of privacy and the capacity for material to be posted by others.
The guidance is read alongside each National Board's Code of conduct, the Advertising guidelines, and the Privacy Act 1988. For the latest official version, practitioners should refer directly to the AHPRA social media guidance page, which is updated as needed.
The Five Obligations Every Practitioner Must Meet Online
AHPRA's guidance distils into five core online obligations. Each one maps directly to a clause in your Board's Code of conduct, meaning a breach online is a breach of your registration conditions.
Posting about a "funny case from today" — even without a name — can breach confidentiality if the patient is reasonably identifiable. AHPRA explicitly warns that the cumulative effect of posts (date, location, condition, age, employer) can re-identify a patient even when any single post seems harmless.
Practitioners must not present information that is false, misleading, or deceptive. Sharing, "liking", or endorsing content that contradicts best-available scientific evidence — for example on vaccination, cancer treatment, or infectious disease management — can give legitimacy to misinformation and is investigable.
Any post that promotes a regulated health service counts as advertising under the National Law. Testimonials about clinical services, unsupported therapeutic claims, and before-and-after images for cosmetic and non-surgical procedures all fall under specific advertising restrictions.
Accepting friend requests from current patients, using direct messaging for clinical advice, or forming personal relationships with patients online are all boundary concerns. The therapeutic relationship extends to digital spaces and must remain professional.
Content that is discriminatory, bullying, or that incites racial, religious, or cultural hatred is never protected. This includes comments, shares, memes, and reactions. Advocacy for social causes is permitted — but advocacy that discriminates against a population group is not.
What Triggers an AHPRA Investigation in 2026
Following updates made in response to a spike in notifications during 2023–2024, AHPRA has clarified the grounds on which a notification will actually proceed to investigation. A practitioner is not investigated simply for holding or expressing a view online.
A formal investigation is opened when the conduct appears to:
- Present a risk to public safety — for example, advocating unproven treatments for serious illness.
- Provide false or misleading information — particularly health-related misinformation.
- Breach privacy or confidentiality — including re-identifiable case discussion.
- Risk public confidence in the profession — conduct that would materially damage trust.
- Require action to maintain professional standards — for instance, discriminatory content or boundary violations.
In severe cases — particularly those involving unlawful advertising — penalties can reach fines of up to $60,000 for an individual, plus conditions on registration, suspension, or cancellation. Even where a notification is ultimately dismissed, the investigation process itself typically runs for many months and is a significant source of professional stress.
Conduct That Is Unlikely to Trigger Action
The 2024 update added explicit examples of online activity that will generally not warrant investigation, giving practitioners clearer safety in advocacy. Based on real notifications received, these include advocating for a peaceful resolution of a conflict, calling on governments to use formal diplomatic processes, and urging protection of health workers and health facilities caught in conflict zones.
Political opinion, peer-reviewed scientific commentary, genuine educational content, criticism of health policy, and professional debate are all protected — provided they are factual, respectful, and do not discriminate against a group.
Comparing Low-Risk and High-Risk Online Conduct
The difference between a permissible post and an investigable one is often tone, accuracy, and identifiability. The table below summarises common scenarios drawn from published AHPRA case material.
| Scenario | Lower-Risk Version | Higher-Risk Version |
|---|---|---|
| Clinical case discussion | De-identified teaching post in closed CPD group | Public post naming condition, hospital, and date |
| Policy criticism | Factual commentary citing evidence | Personal attacks on identifiable colleagues or patients |
| Health advice to public | General, evidence-based information with caveats | Claims contradicting public health guidance |
| Workplace frustration | Private conversation with mentor | Public rant naming employer, manager, or colleagues |
| Treatment promotion | Listing services offered with required disclosures | Patient testimonials about regulated services |
Common Pitfalls Practitioners Still Make in 2026
AHPRA's own "common pitfalls" resource highlights the recurring mistakes that generate notifications. These are not edge cases — they are the bread-and-butter of the regulator's social media workload.
Livestreaming or scrolling while on shift. A published AHPRA example describes a practitioner livestreaming personal content during a clinical shift; a patient complained about distraction and potential privacy concerns, and the matter proceeded to formal review.
Post-resignation venting. Practitioners celebrating a resignation by posting about former colleagues, managers, or workplace culture frequently trigger notifications — particularly where identifiable comments could damage professional reputation or breach confidentiality.
Liking and sharing. The "I was only sharing it" defence does not hold up. Endorsement of misinformation through likes, shares, and reposts can itself be grounds for investigation, because endorsement amplifies reach.
Closed groups are not private. Content posted into a private Facebook group, WhatsApp chat, or Discord server has repeatedly reached AHPRA through screenshots. If it is written down digitally, assume it is discoverable.
There is no such thing as an "off-duty" post for a registered practitioner. Anonymous accounts that identify the profession — even without a name — are treated the same as accounts in your legal name.
Practical Steps to Protect Your Registration Today
A short, disciplined review process dramatically reduces your exposure. The following is a practical pre-post checklist drawn from AHPRA's own guidance and major MDO risk frameworks.
- Check identifiability: Could any patient, colleague, or employer be reasonably identified from this post, my post history, or my profile metadata combined?
- Check accuracy: Is every health claim supported by best-available evidence? Can I cite a source if asked?
- Check tone: Is this respectful? Would a reasonable colleague describe it as discriminatory, bullying, or inflammatory?
- Check advertising rules: Does this post promote a regulated service? If so, does it comply with the Advertising guidelines and testimonial restrictions?
- Check boundaries: Am I interacting with a current or recent patient? Have I maintained a professional distance?
- Check your settings: Is your profile clearly separated between personal and professional — and do you accept that "personal" is still public in regulatory terms?
Healthcare Ethics Courses Australia's Ethics & CPD Courses for Healthcare Professionals in Australia cover social media compliance, advertising, and professional boundaries in line with the current AHPRA guidance and each Board's Code of conduct.
Ethics & CPD Courses for Australian Health Practitioners
- ✓ Ethics & CPD Courses for Healthcare Professionals in Australia
- ✓ Aligned with AHPRA standards and National Board guidance
- ✓ 100% online — complete at your own pace
- ✓ Suitable for CPD, remediation, or fitness-to-practise support
What to Do If a Notification Has Been Made About You
If a notification is lodged against you about social media use, AHPRA will conduct an investigation based on your obligations under the National Law — the same process as any other notification. Most investigations include a non-compulsory case discussion with the practitioner, alongside review by clinical advisors from the relevant profession.
The immediate practical steps are to (1) stop posting on the material in question, (2) preserve records rather than delete them, (3) contact your medical defence organisation or professional indemnity insurer before responding, and (4) never make a public statement about the investigation itself. Complaints about how a notification has been handled can be directed to the National Health Practitioner Ombudsman.
Key Takeaways
- The current AHPRA social media guidance applies to every registered practitioner across all 15 regulated professions
- Five core online obligations: confidentiality, accuracy, advertising compliance, boundaries, and respectful conduct
- Investigations are triggered by risk to public safety, misinformation, privacy breach, damage to public confidence, or need to maintain standards
- Holding or expressing an opinion is not investigable on its own — tone, accuracy, and identifiability determine risk
- Penalties for severe breaches can include fines up to $60,000 and suspension or cancellation of registration
- "Off-duty", anonymous, and closed-group posting all carry the same regulatory risk as public posts
- A simple pre-post checklist and current CPD dramatically reduce your exposure
Frequently Asked Questions
Does AHPRA monitor practitioner social media accounts directly?
AHPRA does not proactively monitor individual accounts. Investigations are triggered when a notification is lodged — by a patient, colleague, employer, or member of the public — and the content meets the statutory grounds for investigation.
Can I post under an anonymous or pseudonymous account?
Yes, but if your content identifies your profession — or if you are later identified — your registration obligations apply in full. Anonymous accounts that comment on clinical or professional matters are regularly traced back to registrants.
Are closed Facebook groups and WhatsApp chats considered private?
No. AHPRA regularly receives notifications based on screenshots from closed groups. Assume anything written digitally can reach the regulator.
What about sharing peer-reviewed research that challenges official guidance?
Genuine scientific debate and citation of peer-reviewed research is protected. Problems arise when the accompanying commentary is misleading, removed from context, or presented to undermine public health messaging without a valid evidence base.
Do patient testimonials on my practice Google reviews count as advertising?
Testimonials about clinical aspects of regulated services are restricted. You should not solicit them, and there is an obligation to take reasonable steps to address testimonials you are aware of on platforms you control.
Can a notification be made anonymously?
Yes. Anonymous notifications are accepted and assessed in the same way as identified ones, provided there is sufficient information to act on.
What if my employer has a separate social media policy?
Both apply concurrently. AHPRA guidance sets the minimum professional standard; employer policy may be more restrictive. Breach of either can carry consequences.
Can I delete posts once a notification is made?
Speak to your indemnity insurer first. Deletion can be seen as evidence-tampering and is generally not recommended once a notification is in train.
Keep Your Registration Safe with AHPRA-Aligned CPD
Complete accredited ethics and professional development training that addresses the current AHPRA social media guidance, advertising rules, and National Board Codes of conduct — all online, and at your own pace.
View Ethics & CPD Courses →This article is published by Healthcare Ethics Courses Australia for educational purposes only. It does not constitute legal, medical, or professional advice. Always consult qualified professionals and refer to the current guidance on the AHPRA website and your National Board for direction specific to your situation.