Doctors post things in private groups they would never say publicly, on the assumption that "private" means safe. It does not, and the gap between the two is where careers and confidentiality come unstuck. A private WhatsApp, Facebook or Telegram group is not a secure space, it is a group of people with phones, screenshots and changing membership, and the professional standards that apply in public apply there too. Here is why "private" is misleading, what the GMC actually says, how easily content escapes, and what it means for anything patient-related.
Key takeaways
- A private group is not a secure space, and the GMC says so explicitly.
- You do not control screenshots, forwarding, membership changes, or phone backups.
- The sum of small details can identify a patient even without a name, in any group.
- Professional accountability does not end at the group's edge, and posts are effectively permanent.
- Treat every group as potentially public: no identifiers, no unprofessional tone, governed routes for patient-specific questions.
Why "private" is misleading
Start with what "private" actually gives you, which is less than it sounds. In a private group, you do not control who takes a screenshot and where it goes next, you do not control forwarding, you often do not control membership, which changes as people join and leave, and you do not control the backups sitting on every member's phone and cloud account. A group set up by a third party is administered by someone else entirely. So the content of a "private" group can reach the patient, a colleague, an employer, or a regulator through any of these routes, none of which require the platform itself to be breached. Private describes the settings, not the safety.
What the GMC actually says
The regulator is unambiguous. Its guidance is that you must not disclose identifiable information about patients without explicit consent, and, critically, that although individual pieces of information may not breach confidentiality on their own, the sum of information shared can be enough for a patient or someone close to them to be identified. In its wider guidance the GMC makes the specific point that a private group is not automatically a secure place for confidential information, particularly where you do not control membership, and that anonymisation is rarely as complete as people assume. The standards do not relax because the audience feels small and familiar.
Content is permanent, and so is accountability
Two things outlast the moment you post. The first is the content itself: messages persist in backups, screenshots and forwards long after you have forgotten them, and a post from years ago can resurface at exactly the wrong time. The second is your accountability: identifying yourself as a doctor carries professional responsibility wherever you post, and an ill-judged comment about a patient or colleague, shared "just between friends", can still damage trust in you and the profession if it travels. The combination means a throwaway message has a long tail, and you cannot delete it from everyone's phone.
The scenarios that catch people out
A few patterns recur. Venting about a difficult patient or a colleague, harmless-feeling in the moment, becomes a problem if it is screenshotted or seen by the subject. Sharing an "anonymised" interesting case underestimates how the sum of details identifies the patient, especially in unusual cases. Posting a screenshot of a record, a photo of a patient or a clinical area, or an unusual case with a date and location, can identify someone even with the name removed. And the more distinctive the case, the fewer details it takes, which is precisely the opposite of the instinct that unusual cases are the safe ones to share.
What this means in practice
The practical rule is simple: treat every group as if it could become public, because it can. Keep patients out of your posts entirely, with no identifiers, no photos and no distinctive combinations of detail. Keep your tone professional, because screenshots do not capture context. And route anything that genuinely depends on a specific patient through a governed, documented channel rather than a chat. Groups are excellent for generalised questions, lived experience, logistics and support; they are the wrong place for patient-specific clinical detail.
Safer alternatives, and where iatroX fits
For the two things groups handle badly, there are better routes. For patient-specific clinical questions, use governed Advice and Guidance, covered in how to ask for Advice and Guidance as a GP, and for why messaging apps are not the place for this, see can UK doctors use WhatsApp for clinical advice. For the generalisable clinical questions people often bring to groups, a source-grounded tool is safer and faster: Ask iatroX gives a guideline-grounded answer with the source attached, with no confidentiality risk at all, and you can try it with free sample questions at iatroX. Use groups for what they are good at, and keep patient detail out of them.
Frequently asked questions
Is a private WhatsApp or Facebook group confidential? No, not in the way people assume. You do not control screenshots, forwarding, membership changes or backups, and the GMC states that a private group is not automatically a secure space for confidential information.
Can I share an anonymised case in a private group? With great caution, and often not safely. The GMC notes that anonymisation is rarely complete, because the sum of details can identify a patient, especially in unusual cases. Strip all identifiers and avoid distinctive combinations, or use a governed route.
Can old posts in a group cause problems later? Yes. Messages persist in backups, screenshots and forwards, and professional accountability does not expire. A post from years ago can resurface, so treat everything you write as effectively permanent.
What should I never post in a doctor group? Patient identifiers, photos of patients or clinical areas, screenshots of records, distinctive case details in combination, and unprofessional comments about patients or colleagues. Assume anything you post could become public.
Where should patient-specific clinical questions go instead? Into governed, documented routes such as Advice and Guidance or specialist advice services, which are designed for patient information. Groups are for generalised questions, support and logistics, not patient-specific detail.