Many aesthetic surgeons place before and after pictures on their websites.
Obtain patient’s detailed written permission before moving forward. Check.
Place a black strip over identifying features if not highlighting facial features. Check.
That’s it. Right? RIGHT??
Wrong.
One surgeon learned that a de-identified photo had the patient’s name embedded in file name / properties feature of the link. In other words, right click on the picture… voila …the patient’s name appeared within the file name for the picture. This came as a surprise to the patient who followed by calling an attorney.
Make sure your webmasters know that de-identified pictures must address not only the obvious – but data embedded behind the pictures.