Ahpra notification · All 15 National Boards
Social Media Professionalism and Boundaries for Health Practitioners facing an Ahpra notification, complaint or allegation
The allegation is about something you posted, shared, liked or sent online — on a personal account or a professional one.
- Identifiable — a patient recognisable in a post that named no one
- Impairment — practising while alcohol, drugs or your health affected you
- Images — a photograph or a screenshot taken in a clinical setting
- Boundaries — a boundaries breach with a patient or a colleague online
- Comments — about a patient, a colleague or work, or a reply to a review
- Testimonials — a review displayed, reshared or quoted in your advertising
- Shared — a misleading claim you posted, liked or passed on
- Any other — concern about something posted, shared, liked or sent online
Facing an allegation about something posted, shared, liked or sent like these — from your National Board, Ahpra, a panel or a tribunal?
Help with an Ahpra notification, complaint or allegation starts here. This CPD course helps you remediate — and demonstrate the remediation, with a dated certificate for your written response, your portfolio or a Board, panel or tribunal direction.
Immediate access · certificate on completion · twelve months' access
- 2 CPD hours
- Self-paced
- Every registered profession
- CPD certificate
- Bulk buy: any 5 for A$850 · any 10 for A$1,400
At a glance
- Who it is for
- Any registered practitioner facing an Ahpra notification, complaint or allegation, a National Board investigation, a panel or a tribunal hearing about something posted, shared, liked or sent online — a patient recognisable, a clinical photograph, a boundary crossed with a patient or a colleague, a comment, a reply to a review or a testimonial
- Also covers
- Section 133 and testimonials, de-identification, likes and shares
- Regulators covered
- Ahpra and all fifteen National Boards, plus the NSW Councils, the HCCC and the OHO
- Length
- 9 sections, 72 lessons, 2 CPD hours
- Format
- Self-paced, online, immediate access, twelve months from purchase
- Certificate
- Issued by Healthcare Ethics Courses on completion, dated, with the course title and 2 CPD hours
- Price
- A$200 · any 5 for A$850 · any 10 for A$1,400
Certificate issued by Healthcare Ethics CoursesRemediation courses for regulatory processes.
Who this course is for
Facing an allegation about something you posted, shared, liked or sent
Ahpra’s letter says a patient was recognisable, a photograph showed a clinical setting, a comment was unprofessional, a boundary was crossed online, a review was used as a testimonial, or a claim misled. The post is fixed, public and dated, and whoever complained has a screenshot; this course is how you account for what the post revealed — and show what has changed about your accounts and your practice since.
Dealing with an Ahpra notification or complaint
A patient, a colleague, your employer or a member of the public has told Ahpra, and you have been asked for a written response. In 2024/25 Ahpra received 13,327 notifications across the 16 professions. The response is built on what the post revealed rather than on its wording — whose information or image, to whom, whether consent existed — and this course gives it the structure every Board reads for.
A testimonial, a review or an advertising matter
A patient’s review on your website, a thank-you message reshared, a rating embedded, a reply to a review that confirmed someone was your patient. Section 133 of the National Law prohibits using testimonials to advertise a regulated health service, and advertising compliance runs through Ahpra’s advertising process — which can run alongside a conduct notification rather than instead of it. The course covers the advertising rules — testimonials, patient reviews on your own pages, conflicts of interest — and the template reply to a negative review.
Your employer has acted, and Ahpra may follow
A workplace investigation, a warning or a dismissal for something posted, a group chat that did not stay closed. A social media matter can reach the Board through an employer as well as a patient, and the statement you give your employer is read beside your response to the Board. The course covers workplace issues online, and demonstrating remediation to an employer as well as to Ahpra.
Under investigation, before a panel or a tribunal, or under immediate action
Ahpra is investigating, your Board has imposed conditions or suspended your registration while it does, or a panel or a tribunal hearing has been listed. The investigator reads the post, the screenshot and the platform’s record beside your account, and a panel reads for how the post read to someone without your context. Remediation completed before the hearing — accounts separated, settings audited, a written policy, each dated — is weighed every time.
Directed to complete CPD on social media or boundaries
Conditions on your registration, an undertaking, a panel or tribunal order, or a supervisor’s advice require education in professionalism online or in professional boundaries. The certificate records two dated CPD hours written to clauses 3.3, 4.9 and 3.2 of the shared code, the professions’ own codes and Ahpra’s social media and advertising guidance.
The concerns this course speaks to
A patient recognisable in a post that named no one
A case told as a story with the name removed, recognised from the detail, the timing, a ward background or the size of the community. Clause 3.3 point g prohibits posting a person’s information or images even where they are not directly named or identified, without written informed consent, so de-identified is not the same as unidentifiable — and in a small town the threshold is far lower than many assume. The course’s first worked case is a “de-identified” clinical story a relative recognised, and it gives five questions to ask before anything is posted.
Impairment — fatigue, stress and the post at the end of a shift
Frustration posted at the end of a run of nights, a comment made when judgement was thin, a message sent after a drink. Impairment is one of the four grounds for a mandatory notification under the National Law, and clause 9.1 of the shared code asks you not to rely on your own assessment of the risk where a condition could affect your judgement. Fatigue, stress and impairment reach what is posted early; a condition raised before anyone else raises it, with a plan attached, is read as insight.
Images from clinical settings
A ward background, an emergency bay, a screen in shot, a colleague or another patient in frame. The subject of a photograph is often not the problem; what is visible behind them is. Images generated in a clinical context are clinical information under clause 8.3, held to the same security obligations, and point g of clause 3.3 asks for written consent before any of it is posted. The course’s worked case is an emergency-bay photograph with no patient in frame; the remediation was deleting it, photography training and no clinical photographs again.
A boundaries breach with a patient or a colleague online
A friend request accepted, a profile followed, a private message sent outside approved channels, a comment on a patient’s personal post, a colleague harassed in messages or a group chat. Clause 4.9 does not distinguish an online relationship from any other, clause 5.1 asks for respect for colleagues wherever you are, and contact from a patient’s family is not the patient’s consent. Ahpra recorded 1,991 boundary-violation notifications in 2024/25. The course teaches the words for declining without giving offence, with a clinic policy as the reason given.
Comments about patients, colleagues or work, and replies to reviews
Frustration posted after a shift, sarcasm that read differently to strangers, a heated public thread, a reply to a review that showed the reviewer had been your patient. Clause 3.2 covers a non-professional reference to anyone, wherever it is made, and acknowledging in public that someone is a patient is a disclosure under 3.3 — the point where a manageable complaint becomes a confidentiality breach. The course’s cases on workplace frustrations and a heated debate turn on posting while frustrated or tired; it teaches the pause before posting, and a template reply to reviews.
Testimonials and advertising
A patient’s review displayed on your website, a thank-you message reshared, a star rating embedded. Section 133 of the National Law prohibits advertising a regulated health service using testimonials or purported testimonials, and a review becomes advertising you control the moment you display, quote, reshare or embed it; one left on a platform you do not control need not be removed. The course covers what counts as a testimonial — patient reviews on your own website or social media included — conflicts of interest in endorsing products, and the other prohibitions in section 133.
Misleading claims, and what you liked or shared
Health information the evidence does not support, an unsubstantiated claim about a treatment, individual advice given to a stranger, a like or a share that attached your name to someone else’s claim. What you post may be read as authoritative because of who you are, and Ahpra’s social media guidance holds you accountable for content you endorse as well as content you write; advice to a stranger online is practice outside a therapeutic relationship (1.1). The course covers accuracy, misinformation and public commentary, and what a practitioner’s name adds to a claim.
Probity: the post deleted, the account denied, and any other concern
A post taken down after the complaint and described as never having existed, authorship denied, a screenshot disputed. What was posted is fixed and dated, and a deleted post may already have been kept by someone else. An account that matches the screenshot, given with candour — what was posted, when it was taken down and why, and what has changed since — is the whole of the probity answer. Any online allegation is measured against your own Board’s code; the course names deleting evidence without reflection, and “it was just a joke”, as responses that do not help.
Facing an Ahpra notification, complaint or allegation? This course helps you remediate — and demonstrate it.
Buy this course — A$200.00What the course covers
Nine sections and 72 lessons, with a reflective quiz closing each of the first eight and a post-course assessment at the end.
Overview and relevance to Australian practice
How social media concerns arise for practitioners, why they escalate so quickly, and the professional, regulatory and reputational consequences.
Core concepts and definitions
Ten lessons: personal and professional identity online, confidentiality and privacy risks in digital spaces, boundaries in online interactions, and accuracy in public commentary.
Regulatory expectations in Australia
Ahpra's social media guidance, accountability for content you endorse, advertising and testimonials under the National Law, conflicts of interest, and cultural safety.
Ethical and professional challenges
Ten lessons: boundaries and patient contact online, confidentiality, public commentary and advocacy, criticism and negative reviews, sharing medical information, digital footprints, cultural safety, and the questions to ask before posting.
Case studies in the Australian context
Five worked cases — a recognisable case, a friend request, workplace frustrations posted online, a clinical photograph and a heated online health debate.
Insight, reflection and professional growth
What genuine insight looks like after a post, the emotional and cognitive triggers behind it, using feedback, online tone, cultural safety, and setting your own posting rules.
Remediation and preventing recurrence
Privacy settings, separating accounts, workplace social media policy, and building systems that make the safe choice the default.
Applying principles to daily practice
Ten habits for real use — what to post, what to check before posting, how to decline contact, and how to respond to criticism.
Conclusion and assessment
Key takeaways, then the post-course assessment. Your certificate is issued on completion and carries the date.
Show every lesson title
- Section 01 · Overview and Relevance to Australian Healthcare Practice
- Why Social Media Professionalism Matters in Healthcare; The Growing Digital Presence of Healthcare Professionals; Regulatory Expectations in Australia; How Social Media Misconduct Occurs; Impact of Social Media Conduct on Patients, Practitioners, and the Profession.
- Section 02 · Core Concepts and Definitions
- What Is Social Media Professionalism?; Understanding Personal vs Professional Identity Online; Confidentiality and Privacy Risks in Digital Spaces; Professional Boundaries in Online Interactions; Accuracy, Misinformation, and Public Commentary; Testimonials, Endorsements, and Advertising Rules; Digital Consent and Use of Images; Handling Online Conflict and Criticism Professionally; Cultural Safety and Respect in Digital Communication; Understanding Permanence, Searchability, and Digital Footprints.
- Section 03 · Regulatory Expectations in Australia
- Ahpra’s Role in Regulating Online Professional Conduct; National Boards’ Codes of Conduct and Social Media Guidance; Social Media Guidelines Under Ahpra’s Advertising Requirements; Confidentiality and Privacy Expectations in digital spaces; Boundaries and Professionalism Requirements Online; Cultural Safety Obligations in Online Communication; Interacting With Colleagues and Workplace Issues Online; Accuracy and Responsibility When Sharing Health Information; Accountability for Online Behaviour: Personal, Professional, and Legal; Responding to Social Media Concerns or Notifications.
- Section 04 · Ethical and Professional Challenges in Social Media Use
- Managing Boundaries in Online Interactions; Protecting Confidentiality in Digital Spaces; Responding to Patient Contact Through Social Media; Navigating Public Commentary, Opinions, and Advocacy; Managing Online Harassment, Criticism, or Negative Reviews; Balancing Authenticity and Professional Image; Ethical Risks of Sharing Medical Information Online; Risks Related to Digital Footprints and Permanence; Challenges in Maintaining Cultural Safety Online; Ethical Decision-Making When Using Social Media.
- Section 05 · Case Studies in the Australian Context
- Case Study 1: Posting a "De-Identified" Clinical Story; Case Study 2: Accepting a Patient’s Friend Request; Case Study 3: Posting Workplace Frustrations Online; Case Study 4: Sharing a Photo Taken in a Clinical Environment; Case Study 5: Engaging in a Heated Online Health Debate.
- Section 06 · Insight, Reflection, and Professional Growth
- Understanding Insight in the Context of Social Media Use; Developing Reflective Capacity Around Digital Conduct; Recognising Emotional and Cognitive Triggers Online; Using Feedback to Improve Social Media Behaviour; Strengthening Emotional Regulation and Online Tone; Building Cultural Safety in Online Spaces; Building a Growth Mindset for Digital Professionalism; Developing Personal Social Media Rules and Boundaries; Using Supervision, Mentoring, and Peer Support; Sustaining Long-Term Growth in Social Media Professionalism.
- Section 07 · Remediation, Improvement, and Preventing Recurrence
- Understanding the Purpose of Remediation in Digital Professionalism; Conducting a Root Cause Analysis of Social Media Incidents; Developing a Structured Remediation Plan; Improving Communication and Online Tone; Strengthening Confidentiality and De-Identification Skills; Improving Digital Boundaries With Patients and the Public; Enhancing Cultural Safety in Online Behaviour; Applying Systems and Personal Safeguards to Prevent Future Incidents; Monitoring Behavioural Change and Demonstrating Improvement; Demonstrating Remediation to Employers, Ahpra, or Investigators.
- Section 08 · Applying Principles to Daily Practice
- Setting Personal Posting Rules and Digital Boundaries; Using Professional Tone, Language, and Conduct in All Online Posts; Maintaining Clear Boundaries With Patients Online; Safeguarding Confidentiality and Privacy in Digital Environments; Avoiding Online Clinical Advice or Informal "Consultations"; Responding Professionally to Criticism, Reviews, or Online Conflict; Creating a Professionally Safe Digital Footprint; Using Social Media Constructively for Education and Advocacy; Strengthening Workplace Systems and Policies for Safe Social Media Use; Conducting Regular Self-Audits and Updating Online Behaviour.
- Section 09 · Conclusion and Key Takeaways
- Conclusion; Key Takeaways.
How to respond to an Ahpra notification, complaint or allegation
Ahpra, your National Board, a panel and a tribunal all read a social media response with the post in front of them: it is fixed, public and dated, and the complainant has a screenshot. Ahpra says it needs to understand how you responded to the event — recognising and assessing the risk, responding promptly in the patient’s interests, accepting accountability, declaring what happened, actively reflecting and updating your knowledge and skills, and being able to say how you would respond in similar circumstances in future. The course teaches each part.
The Board reads the post, not your account of it.
- The postWhat was posted, shared, liked or sent, and when — quoted or described exactly, without softening the wording, because the reader has the screenshot; and, if it has been taken down, when and why.The course asks for reflection specific to the exact post, comment or photo, and names deleting evidence without reflection as a response that does not help.
- What it revealed, and to whomWhose information or image, who could see it and who did — the patient who recognised themselves, the colleague who was mocked, the public who read it — described in their terms, impact rather than intention.The course’s insight section asks how the content may have been perceived, and how others read your conduct online.
- The clause, and section 133 where it appliesThe clause named by number from your own code — in the shared code 3.3 point g for an identifiable patient, 4.9 for a boundary, 3.2 for a comment — and section 133 where a testimonial or a claim was used in advertising.The course reads the professions’ codes and Ahpra’s social media and advertising guidance side by side.
- What has changed, with datesThe post removed and the removal dated; personal and professional accounts separated; privacy settings audited; a written policy on clinical content and on reviews; testimonials removed from anything you control.This course is the dated item you attach — and it names the other evidence.
Impact, not intention, is what a social media response is read for.
Take advice from your indemnity insurer or defence organisation, your union or professional association, or a lawyer before you respond to anyone.
Facing an Ahpra notification, complaint or allegation? This course helps you remediate — and demonstrate it.
Buy this course — A$200.00How this course helps with an Ahpra notification
The Board reads what the post revealed before it reads what you meant
Many notifications turn on what was said in a room and recorded imperfectly; this one does not. The post exists, it is timestamped, and whoever complained has a screenshot, so a response is about what the post revealed, what you understood at the time, and what has changed since. Two things the course states plainly. Accountability extends to content you endorsed: Ahpra’s guidance treats a like or a share as attaching your professional identity to someone else’s claim. And the personal-account distinction carries less weight than it feels it should, because what you post may be read as authoritative because of who you are. Practitioners who show insight, take responsibility and engage in remediation are treated differently from those who deflect blame or repeat the behaviour.
Reflection has a structure, and the Board can tell when it is absent
The course sets out four qualities of high-quality reflection: specific, analytical, impact-focused and forward-oriented. On a social media matter specific means the exact post, comment or photo, and impact-focused is the part a response can leave out: how the content may have been perceived by someone without your context — harder than it sounds, because you had the context. The analysis is where the end of a run of nights, frustration, the wish for support or a closed group that did not stay closed belongs — conditions a plan can change, never a defence. The course names the weak versions too: “it was just a joke”, “everyone does this”, blaming the platform, deleting the post without reflection. It asks for specific actions, not vague promises: separated accounts, audited settings and written posting rules, each dated, will satisfy a Board where “I will think before I post” will not.
Remediation that stands up
Social media remediation is unusually practical, and it produces its own evidence: audit and tighten privacy settings, separate personal and professional accounts, adopt a written practice policy on who may post clinical content, and set a rule about responding to reviews — each a system change with a date on it rather than an assurance about future judgement, and the Board, a panel and a tribunal all weigh it the same way. Counts: a reflective statement that cites 3.3 point g, 4.9 or 3.2, or your own code, by number; CPD targeted to the lapse, this course’s dated certificate among it; an audit of your accounts, settings and posts, repeated after an interval; supervision or mentoring with written reports; feedback from patients and colleagues gathered on purpose. Counts for little: an apology followed by “but”, a character reference in place of an account, CPD hours on another subject, a reflection written by someone else, a promise where evidence should be. For the stages from the first letter to a tribunal, see the Ahpra investigation process, explained.
Read the primary sources
Who wrote it
Dr Shehzad Iqbal
Course author and facilitator, Healthcare Ethics Australia
Dr Iqbal has designed and delivered ethics, probity and professionalism training for healthcare professionals since 2020, working with registrants across regulated health professions, online and face to face. He combines clinical practice with formal postgraduate training in healthcare law and ethics.
MBBS · MRCS · MRCGP · Postgraduate Certificate in Healthcare Law and Ethics, University of Dundee
Written and reviewed by Dr Shehzad Iqbal. Last reviewed .
In short
Social Media Professionalism and Boundaries is a self-paced remediation course of 2 hours for practitioners registered with any of Australia's fifteen National Boards facing an Ahpra notification, complaint or allegation. It is written for allegations about something you posted, shared, liked or replied to: a case that was recognisable despite being de-identified, a photograph taken in a clinical setting, contact with a patient through a personal account, a comment about work or colleagues, a public reply to a review, or a testimonial used in advertising contrary to section 133 of the National Law. It is not accredited by Ahpra or any National Board, and no course determines the outcome of a notification.
Testimonials: the rule, and where the threshold is
Section 133 of the National Law is written for advertising rather than conduct, and it applies to every registered profession. A person must not advertise a regulated health service in a way that uses testimonials or purported testimonials, and Ahpra treats a testimonial as a statement about the clinical aspects of care, the outcome of treatment or the quality of a practitioner’s skills. The threshold is the boundary of advertising: a review a patient posts on a platform you do not control is not your advertising and need not be removed, but the moment you display, quote, reshare or embed it, it becomes advertising you control and the prohibition applies — and where you control the reviews function on a page, Ahpra’s guidance points to disabling it. Section 133 also prohibits advertising that is false, misleading or deceptive, or that creates an unreasonable expectation of beneficial treatment.
Everything else on a social media matter is conduct, read against the code you already work to. Ahpra’s social media guidance applies the same standards online as off, and holds you accountable for content you endorse as well as content you write: clause 3.3 point g of the shared Code of conduct prohibits posting a person’s information or images, even unnamed, without written consent; clause 4.9 does not distinguish an online relationship from any other; and clause 3.2 covers a non-professional reference to anyone, wherever it is made. Two processes can run at once — advertising compliance goes through Ahpra’s advertising process rather than the notification process — and a conduct concern travels the National Law’s route like any other, with the HCCC and your profession’s Council of NSW, or the Office of the Health Ombudsman, holding the file first in New South Wales and Queensland. The post is fixed, public and dated; a response says what it revealed, and what has changed since.
What these words mean
The four terms that matter most here, and the other words on this page.
- Notification
- Ahpra’s word for a complaint or a concern about a registered practitioner, from a patient, a colleague, an employer or a mandatory notifier. Every notification is assessed for risk to the public; you are told of it and asked for a written response, and that response is read at every later stage. In 2024/25 Ahpra received 13,327 notifications across the 16 registered professions.
- Immediate action
- The step a National Board may take at any stage under section 156 of the National Law where it believes a practitioner poses a serious risk: suspending registration or imposing conditions while the matter continues. A protective step, not a finding, and reviewable.
- Testimonial
- Under section 133(1)(c) of the National Law, a person must not advertise a regulated health service in a way that uses testimonials or purported testimonials. Ahpra treats a testimonial as a statement assessing the clinical aspects of care, the effectiveness or outcome of treatment, or the quality of a practitioner's skills.
- The four National Law grounds
- Fitness to practise is the phrase practitioners use for the whole process. The National Law names four grounds on which a Board acts: impairment (a health matter, not a conduct finding), unsatisfactory professional performance (knowledge, skill, judgement or care below the standard of a peer), unprofessional conduct (conduct below what peers and the public reasonably expect) and professional misconduct (substantially below that standard, found only by a tribunal). Which one your letter uses tells you how the matter is being treated.
Advertising you control, de-identified, endorsement by association, boundary drift online, public commentary and the other terms on this page
- Advertising you control
- The distinction the testimonial rule turns on. A review a patient posts on a platform you do not control is not your advertising and you are not required to remove it. The moment you display, quote, reshare or embed it, it becomes advertising you control — and the prohibition applies.
- De-identified
- Information with names and obvious identifiers removed. The course is direct that this is not the same as unidentifiable: a “de-identified” case can still be recognisable from the detail, the timing, the ward background or the size of the community.
- Endorsement by association
- Ahpra's social media guidance holds practitioners accountable for content they endorse, not only content they write. A like, a share or a supportive reply attaches your professional identity to someone else's claim.
- Boundary drift online
- The gradual erosion of professional distance with a patient or a colleague through friend requests, private messages, comments on personal posts and out-of-hours contact. Each step is small; the course's friend-request case shows how one leads to the next.
- Public commentary
- Anything you post may be read as authoritative because of who you are, even when shared casually from a personal account. The audience does not separate your professional identity from your opinions the way you do.
- Insight
- Understanding what happened and its effect. In a social media matter this means understanding how the post read to someone outside the context you wrote it in — which is harder than it sounds, because you had the context.
- Remediation
- Concrete change, evidenced. Here it is practical: auditing and tightening privacy settings, separating personal and professional accounts, adopting a workplace social media policy, and a documented rule about who may post clinical content.
The clauses a social media allegation engages
Read off the shared Code of conduct, which twelve National Boards use; if you are a doctor, a nurse, a midwife or a psychologist, your own code covers the same ground under different numbers, and section 133 of the National Law applies to every profession whichever code covers you. The clause a social media notification starts on, then the three it reaches once the matter is examined; the rest are below.
3.3 — Confidentiality and privacy
The clause this course sits on. Point g: do not transmit, share, reproduce or post any person’s information or images, even if the person is not directly named or identified, without first getting written and informed consent. The qualifier is the whole issue on social media: a case recognisable from the detail, the timing, a ward background or the size of the community is a breach whatever was removed from it, and acknowledging in public that someone is a patient is a disclosure.
For this course: its first worked case is a “de-identified” clinical story a relative recognised, and its lesson is that de-identified is not unidentifiable; it gives five questions to ask before anything is posted.
4.9 — Professional boundaries
Maintain boundaries, and never use your professional position to pursue an inappropriate relationship with anyone under your care. The code does not distinguish an online relationship from any other: accepting a patient’s friend request, following their profile, private messaging outside approved channels or commenting on their personal posts each engages it, and a boundary with a colleague online — harassment in a group chat, messages that went too far — is read against the same standard of respect (5.1).
For this course: the course’s scripts for declining a friend request, a follow or a message without giving offence are its boundary lesson, and a clinic policy is the reason it teaches giving.
3.2 — Effective communication
Point 8 asks you not to refer to people in a non-professional manner, verbally or in correspondence and records — and a post is correspondence with the world. Sarcasm about a patient, a colleague or a shift is a conduct matter whatever the platform, and humour reads differently without the context you wrote it in; a draft read as a patient would read it is the check before anything goes up.
For this course: a late-night post about a chaotic shift and a sarcastic reply in a heated online debate are two of its worked cases, and the pause before posting is the habit it teaches.
4.6 — Complaints
A prompt, open and constructive response to a complaint, and care that is not affected by it. Online, a complaint can arrive as a review, and responding to it in public is where a manageable complaint becomes a confidentiality breach: acknowledging that a person is a patient at all is a disclosure. A neutral reply that invites the person to contact the practice directly, written as a policy in advance, protects both the patient and you.
For this course: a generic reply that discloses nothing and invites the person to contact the clinic, kept as a template, is the course’s lesson for a public review.
Also engaged: 4.1 — partnership: courtesy, respect and compassion do not switch off online, and content that reads as contempt for patients as a group is read here · 8.3 — health records: a clinical photograph or message on a personal phone is clinical information, held to the same security obligations · 1.1 — scope of practice: individual advice to a stranger online is practice outside a therapeutic relationship · 4.4 — relatives, carers and partners: a request from a patient’s family online is not the patient’s consent · 7.1 — risk management: a written social media policy that staff have read, with a rule for reviews and for clinical images · 8.1 — reporting obligations: conduct observed online engages the same reporting duties as conduct observed in a clinic · 4.10 — working with multiple patients: an online group run for patients, and whether confidentiality can be provided in it.
What happens after a social media notification reaches Ahpra
The same stages as any notification, set by the National Law, whichever Board registers you — and a social media matter can move fast, because the evidence arrives with the complaint. At every stage the reader has the post in front of them, and asks what it revealed and what has changed since.
Assessment: what did the post reveal, and what has changed?
Ahpra and the Board assess every notification for risk to the public, tell you about it and ask for your written response. The first reading is of the post against clause 3.3 point g and section 133; a post taken down, the accounts separated, a written policy in place and dated remediation attached can end a social media matter here, with no further action or advice.
Immediate action, where the risk is current
At any stage, where the Board believes a practitioner poses a serious risk, it may suspend registration or impose conditions while the matter continues (section 156). A protective step, not a finding, and reviewable — and the response to it is read like any other. On a social media matter immediate action is rare on its own; it follows where content is still up and still causing harm, or where contact with a patient is continuing, and a response that shows the content removed and the contact ended is read as the risk controlled.
Investigation: does the account match the screenshot?
Where more is needed, Ahpra investigates (section 160): some information is gathered through a case discussion at which you may be represented, some under compulsory powers. The investigator reads the post, the screenshot and the platform’s record beside your account; a post described as never made, or authorship denied, becomes a probity question of its own.
Health or performance assessment: was there something beneath it?
Where the concern is about health or about performance rather than conduct, the Board may require a health assessment or a performance assessment (sections 169 and 170) instead of an investigation. Impairment is a health matter under the National Law, dealt with under its own route with support, and a condition declared early, with a plan behind it, is read as insight. A post made at the end of a run of nights, or after a drink, can point to fatigue, stress or a condition beneath it, and the course names stress, burnout and fatigue among the triggers behind a post.
A panel: does the practitioner understand how the post was read?
The Board may refer a matter to a performance and professional standards panel or a health panel (sections 181 and 182), which meets you and can caution, impose conditions or refer the matter on — it cannot cancel registration. On a social media matter it asks whether you understand how the post read to someone without your context — and it can impose conditions, supervision or education itself.
The tribunal: what should follow?
The most serious matters go to the tribunal in your state or territory (section 193), which can reprimand, impose conditions, fine up to A$30,000, suspend, cancel registration and disqualify (section 196). In 2024/25, 94.3% of the matters closed after a tribunal referral ended in disciplinary action. The tribunals weigh insight, remediation and conduct since the events in every decision, and their orders — education, mentoring, audits, supervision — are made of the same instruments a remediation portfolio holds. Online contact is read as contact: a tribunal cancelled a doctor’s registration and disqualified him for six years after sexualised examinations and a dating-app conversation with a patient.
Who investigates in New South Wales and Queensland
Two states run their own conduct process for all sixteen professions, while section 133 runs nationally. In New South Wales a conduct matter does not go to Ahpra: your profession’s Council of NSW manages standards and conditions and the Health Care Complaints Commission (HCCC) investigates and prosecutes. In Queensland every complaint goes first to the Office of the Health Ombudsman (OHO), which keeps what it keeps and refers the rest to Ahpra and your Board. Ahpra sets both out at reporting concerns in New South Wales or Queensland. An advertising matter under section 133 goes through Ahpra’s advertising compliance process in every state, so a post can be in two processes at once, and the letterhead tells you which one each letter belongs to.
Facing an Ahpra notification, complaint or allegation? This course helps you remediate — and demonstrate it.
Buy this course — A$200.00Whatever your profession: Ahpra and the National Boards regulate 16 professions under the National Law, and the process is the same for all — courses for every registered profession →
Frequently asked questions
What does my Board want in a response to a social media notification?
The post, read as the Board reads it, and what has changed. What was posted, shared, liked or sent, and when, quoted exactly; what it revealed and to whom — whose information or image, whether consent existed, who could see it; what you understood at the time; the clause named from your own code — in the shared code 3.3 point g, 4.9 or 3.2 — and section 133 where a testimonial was used; and the change, each part dated: the post removed, accounts separated, settings audited, a written policy on clinical content and reviews. The course’s four qualities of reflection — specific, analytical, impact-focused, forward-oriented — are the structure.
Should I take advice before I respond to Ahpra?
Yes — and before anything is deleted, edited or replied to, because how that is done is part of the answer. Your indemnity insurer or defence organisation is the first call, and a lawyer should read the response before it goes to Ahpra, your National Board, your profession’s Council of NSW or the HCCC, the OHO, Ahpra’s advertising compliance team, your employer, or a panel or tribunal. Nothing on this page is legal advice, and no course determines the outcome of a notification.
Can a social media concern be remediated — and will Ahpra or my Board accept this course as part of it?
Yes, and it produces its own evidence: the post removed, accounts separated, settings audited and a written policy adopted, each dated. No provider is accredited by Ahpra or any National Board, and no course decides a matter. What the Board, a panel and a tribunal weigh is dated, targeted remediation with reflection that engages the standard — and this course is written to clauses 3.3, 4.9 and 3.2 and Ahpra’s social media guidance, so the connection is plain on the certificate and in your reflective account. Check the wording of any condition, undertaking or direction with your indemnity insurer or defence organisation, your union or professional association or a lawyer before you rely on it.
What can my Board do about a social media concern?
After an assessment or an investigation your Board may take no further action, caution you, accept an undertaking or impose conditions — education, supervision, mentoring (section 178) — refer you to a panel, or refer the most serious matters to a tribunal (section 193), which can reprimand, impose conditions, fine, suspend, cancel registration and disqualify (section 196). A section 133 advertising matter runs through Ahpra’s advertising process beside it. In 2024/25, 94.3% of the matters closed after a tribunal referral ended in disciplinary action; the post removed and the policy since are weighed every time.
Who investigates a social media complaint in New South Wales or Queensland?
Not Ahpra, in either case. In New South Wales your profession’s Council of NSW and the Health Care Complaints Commission manage conduct, health and performance matters between them, and Ahpra does not investigate registered practitioners there. In Queensland every complaint goes first to the Office of the Health Ombudsman, which decides what it keeps and what it refers on to Ahpra and the Board. The letterhead tells you which body has your file, and the same response — the reasoning, the standard, the remediation — is what each of them reads for. An advertising matter under section 133 goes through Ahpra’s advertising compliance process in every state, alongside a conduct notification rather than instead of it.
Can I share a patient’s positive review, or leave one up?
No. Section 133(1)(c) of the National Law prohibits advertising a regulated health service in a way that uses testimonials or purported testimonials, and Ahpra treats a testimonial as a statement assessing the clinical aspects of care, the outcome of treatment or the quality of your skills. That covers patient quotes, success stories, star ratings you republish and screenshots of messages, on anything you control. A review a patient posts on a platform you do not control is different: it is not your advertising and need not be removed. The moment you display, quote, reshare or embed it, the prohibition applies.
The post was de-identified. How is that a breach?
Because de-identified is not the same as unidentifiable. Clause 3.3 point g prohibits transmitting, sharing, reproducing or posting a person’s information or images even if they are not directly named or identified, without written informed consent. A case can be recognisable from the detail, the timing, a ward background in a photograph, or simply the size of the community, and in a small town the threshold is far lower than many assume. The course lists “de-identified” cases that are still recognisable among the situations that escalate, and gives five questions to ask before anything is posted.
I only liked it, I did not write it. Am I responsible?
Potentially, yes. Ahpra’s social media guidance holds practitioners accountable for content they endorse as well as content they write: a like, a share or a supportive reply attaches your professional identity to someone else’s claim. In the advertising context it is sharper still, because liking or resharing a patient’s review can amount to using a testimonial. A response says what you endorsed, why it mattered that it was you, and what you now check before you endorse anything again.
It was my personal account, out of hours.
That distinction carries less weight than it feels it should, and the course says why. What you post may be read as authoritative because of who you are, whatever account it came from, and the code applies to conduct rather than to platforms; courtesy, respect and the boundary do not switch off when the consulting-room door closes. The question a Board asks is not whether the account was personal, but whether the content undermines confidence in you or the profession — and separating accounts and auditing settings is the remediation that answers it.
A patient sent me a friend request. What should I do?
Decline it politely, with a reason that is not personal — a clinic policy is easiest. Clause 4.9 does not distinguish an online relationship from any other, and the course sets out the safe practices: direct patients to the practice’s clinical channels, avoid private online communication unless you are using an approved telehealth system, and keep clinical discussion inside clinical settings or secure platforms. A written practice policy makes declining a matter of policy rather than of the moment, and the course gives the words.
Someone has left a false or unfair review. Can I respond?
Take advice before you do. Responding in public is where a manageable complaint becomes a confidentiality breach, because acknowledging that a person is a patient at all is a disclosure under clause 3.3, whatever the review says about you. A neutral, non-specific reply inviting the person to contact the practice directly is all you can safely say, and the course gives a reply of that kind and teaches using template responses, so that nothing is written in the moment.
How is this different from the Confidentiality course?
They meet at clause 3.3, and they are often taken together. This course is about what is posted, shared, liked or sent: identifiability, images from clinical settings, boundaries online, section 133 and testimonials, public replies to reviews, and the accounts and policy that answer them. The Confidentiality course is about information in every form: disclosed, accessed, overheard or sent to the wrong person, with one case on a post. If the letter is about a post or a message, start here; if it is about a record or a conversation, start there.
Does this count towards my CPD?
Each National Board sets its own continuing professional development registration standard, and targeted CPD on the subject of a notification is among the remediation the Board and the tribunals recognise. The certificate records the course, the 2 CPD hours and the date, which is what a CPD portfolio needs; how the hours count towards your requirement depends on the standard’s categories, so check them.
How long does it take, and how long do I have access?
The course is 2 CPD hours, self-paced, with twelve months’ access from purchase. The certificate is issued on completion, dated, with the course title and the CPD hours, for a response, a portfolio or your CPD record.
Courses that work alongside this one
A notification can raise more than one issue. These are the courses that pair with this one.
Confidentiality in Healthcare Practice
Confidentiality online and in practice, with a worked case on a post that identified a patient without naming them.
2 CPD hours · A$200
Professional Boundaries Course
Friend requests and private messages are boundary drift online, with patients and with colleagues. The wider spectrum sits here.
2 CPD hours · A$200
Effective Communication for Healthcare Professionals
Tone is read without the context you wrote it in. Sarcasm online is the same conduct issue as sarcasm in a note.
2 CPD hours · A$200
Dealing with a Complaint or Investigation Professionally
How to conduct yourself once a complaint is made, including why you discuss it in confidence with a mentor and do not post about it.
2 CPD hours · A$200
Documentation for Healthcare Professionals
Clinical information sent or stored on a personal device, which the course names as a high-risk privacy breach.
2 CPD hours · A$200
Insight for Fitness to Practise
Insight here means understanding how the post read to someone who did not have your context.
2 CPD hours · A$200
Remediation for Fitness to Practise
CPD chosen for the concern, a dated log of what you changed, and a mentor’s letter. Remediation that produces its own evidence.
2 CPD hours · A$200
Social Media Professionalism and Boundaries
This course. Identifiability, images, boundaries with patients and colleagues online, comments and replies to reviews, section 133 and testimonials, and the evidenced remediation that answers a notification.
2 CPD hours · You are here
See all CPD courses for healthcare professionals in Australia →
Start today, finish at your own pace
Immediate access on purchase. Twelve months' access, a dated certificate on completion, and 2 CPD hours issued by Healthcare Ethics Courses.