Filming Patient Testimonials Without HIPAA Headaches

Nothing persuades a skeptical prospect like another patient saying "I couldn't stand up straight in March, and I coached third base in June." And nothing else in chiropractic marketing carries more legal risk per second of footage. In 25 years I've watched practices do video testimonials brilliantly—and I've watched one thoughtless Instagram reply turn a five-star moment into a compliance incident.

Start with the fact most chiropractors get wrong: the mere fact that someone is your patient is protected health information. Not just their diagnosis. Not just their x-rays. The bare confirmation that they receive care from you. Every rule below follows from that one sentence.

Authorization comes before the camera, not after

HIPAA requires a written, signed authorization before you use a patient's identity in marketing—and "before" is the operative word. Film first and collect the signature later, and you've already made an unauthorized use; paperwork can't reach back in time to fix it. My rule: a signature collected after filming is a favor. A signature collected before filming is compliance.

Two more absolutes. You can't condition treatment on signing—a patient who declines gets the same care with the same smile. And a patient can revoke in writing later, at which point you take the video down everywhere you control, going forward.

What patients can say vs. what you can confirm

Here's the asymmetry that trips up almost everyone. On camera, a patient can volunteer anything they want about their own health—their sciatica, their surgery, their migraines. It's their information and their right to share it.

You cannot confirm, correct, or add to any of it without authorization that covers it. The classic failure isn't in the video at all—it's in the comments. A patient posts a glowing video review, and the practice replies: "So glad we finally beat that sciatica, Karen!" In one sentence you've confirmed Karen is a patient and disclosed her condition. HIPAA doesn't care that the patient said it first.

Practical interview technique: ask questions that let the patient carry every fact. "What was life like before you came in?" and "What can you do now that you couldn't do then?" work beautifully. "Tell us about your herniated disc" is you disclosing a diagnosis on tape.

Release-form basics

A valid marketing authorization is more than a signature line. Yours should include, at minimum:

• A specific description of what's being recorded and how it will be used—"a video testimonial about your experience at our practice."
• Every platform by name: your website, YouTube, Instagram, Facebook, Google Business Profile, and paid ads if you'll ever run them. "Marketing purposes" alone is asking for trouble.
• An expiration date—or an explicit statement that there isn't one.
• The right to revoke, in plain language, with who to contact.
• Signature and date, stored alongside the video file for as long as the video exists anywhere.

One caution flag in bold marker: the generic "media release" template floating around the internet is not a HIPAA authorization—it usually misses the required elements above. Pay a healthcare attorney to review your form once. I'm a marketer, not a lawyer, and this article isn't legal advice; it's a map of where the mines are buried.

Reposting video reviews patients publish themselves

A patient posts a video review to Google, or tags your clinic in an Instagram story. They disclosed their own information—legally fine, for them. But the moment you repost, share, or embed that video, you are the one making the disclosure, and you need the same written authorization you'd need if you had filmed it yourself.

Until you have it, reply with a generic thank-you that confirms nothing. "Thank you for the kind words—this made our week" works. "We loved treating your lower back" does not. And a patient who tagged you once is usually delighted to sign—ask.

The takeaway

Done right, a testimonial is the strongest video in your whole library—more persuasive than anything on my list of five patient-question videos, because a patient is doing the persuading. The compliance overhead is real but small: one attorney-reviewed form, signed before the camera rolls, filed forever. That's the entire tax on the most powerful format in the video pillar of my marketing guide.

Being careful shouldn't mean being invisible. If you want to know whether the practices around you are publishing while you deliberate, the free Local Competitor Benchmark shows exactly how your visibility compares to three local competitors—so you can be both compliant and seen.