Standard 2.09: Client information on social media and websites
RBTs don't share identifying information about clients, such as photos, videos or written details, on social media or websites. This applies to personal and professional accounts, public and private groups, and posts where the client's face is hidden but other details could identify them.
What it means in practice
Identifying information is anything that could let someone recognize the client: a face, a name or initials, the school, the town, a distinctive story, a photo of their home or artwork with their name on it. A post with the face blurred can still identify a client through the setting, the story or the people who know your caseload.
The standard has no exception for caregiver permission or for private groups and accounts. A caregiver saying "go ahead, post it" doesn't change the RBT's obligation, so take any such request to your supervisor and follow your employer's policy.
The rule applies to online professional communities too. Asking for advice about a client in an online forum with enough detail to identify them breaks this standard; clinical questions go to your supervisor. Before posting anything from work, check backgrounds, location tags and captions for client details.
Scenarios
| Situation | What to do |
|---|---|
| Your client said their first full sentence today, and you want to post a celebration photo with their face hidden but the school's sign in the background. | Don't post it. The photo and the story together could identify the client. Celebrate with the team and family privately. |
| A parent records a session video and tells you to share it on your social media because they're proud of the progress. | Thank them but don't post it. Explain that RBTs don't share client information online, and tell your supervisor about the request. |
| You want advice from an online RBT group about a client with difficult behavior and plan to include their first name and the town. | Don't post client details in the group. Take your question to your supervisor, who is responsible for the client's plan. |
| You take a selfie in the clinic, and a client's artwork with their name on it is visible behind you. | Don't post it. Check every photo for client names, faces or details before sharing, and retake it without client information. |
Practice questions
-
Question 1After scoring a client's worksheets, an RBT is left with papers that show the client's name and work. What should the RBT do with them?
Show answer
C: Store or dispose of them per confidentiality rules. Permanent products with client information are confidential records. The RBT Ethics Code requires RBTs to protect client confidentiality and follow employer and legal requirements for records.
- A: Leaving identifiable client work in a shared space risks a breach of confidentiality.
- B: RBTs must not share identifying client information, including photos, on social media or websites.
- D: Client information is shared only as needed and as directed by the supervisor.
Task A.3 · 40-hour curriculum section C · RBT Ethics Code 2.08 · RBT Ethics Code 2.09
-
Question 2An RBT has finished a home session and needs to enter data into the clinic's electronic data system. Which practice protects the client's confidentiality?
Show answer
A: Using an approved device where no one else can see the screen. Client data are confidential records. RBTs follow employer and legal requirements, which includes using approved systems and keeping others from viewing client information.
- B: Personal accounts are outside the organization's protected systems and put client records at risk.
- C: Data entry is the RBT's job duty, and the record should stay within the organization's procedures.
- D: Sharing client information on social media is prohibited, even with staff.
Task A.4 · 40-hour curriculum section C · RBT Ethics Code 2.08 · RBT Ethics Code 2.09
-
Question 3An RBT wants to post a photo of a painting a client made, with the client's first name written in the corner, to celebrate their progress online. What is appropriate?
Show answer
A: Not posting it, because it contains identifying information. Standard 2.09 says RBTs do not share identifying information about clients, such as photos, videos or written information, on social media or websites. A client's name on artwork identifies them.
- B: A name is identifying information even without a face.
- C: Private accounts are still social media; identifying details may not be shared.
- D: When it is posted does not matter; the content identifies the client.
Task F.5 · RBT Ethics Code 2.09
-
Question 4An RBT posts online: "So proud of the 6-year-old I work with at Maple Street Elementary in our small town, who used the toilet for the first time today!" No name is given. Does this follow the RBT Ethics Code?
Show answer
D: No, because details like the school and town can identify the client. Standard 2.09 prohibits sharing identifying information about clients on social media. A client can be identified by age, school, town and personal details even without a name.
- A: Leaving out the name is not enough when other details identify the client.
- B: Privacy settings do not make it acceptable to share identifying details.
- C: Positive news is still confidential client information.
Task F.5 · RBT Ethics Code 2.09
Answer every question to see your score.
Where it sits in the code
Standard 2.09 is in section 2, Responsibilities in Providing Behavior-Technician Services, of the RBT Ethics Code (2.0). On the exam it relates to task F.5 Confidentiality, task F.6 Public statements and social media. Read the official text for the exact wording.
Related standards: 2.08 Confidentiality and privacy, 2.10 Discussing and sharing client information, 1.05 Accurate claims about qualifications and services.