Here's a situation that has cost social workers their licenses. A clinician, careful and well-meaning, writes a blog about practice. She changes every name. She moves the city, alters the ages, swaps the details. Then she describes a case — a child, a disclosure, a hard moment in the work — because she's processing something real and the writing helps. Months later, a client recognizes themselves anyway. Or a colleague does. Or opposing counsel in a custody case does, and the blog becomes an exhibit.
The instinct behind that blog is not malice. It's the same instinct that makes the work meaningful — the need to think out loud about people we're trying to help. Which is exactly why this area is so treacherous: the ethical failures here rarely come from bad actors. They come from good clinicians who reason their way into trouble one reasonable-seeming step at a time. Understanding how that reasoning goes wrong is more useful than memorizing a list of don'ts.
Start with the most common mistake, because almost everyone makes some version of it: believing that removing identifying details makes client information safe to share.
It doesn't, and the reason is worth understanding rather than just accepting. Confidentiality doesn't attach to the client's name — it attaches to the information and the relationship. The protected thing isn't "Jane Doe sought treatment." It's that someone trusted you with their private life under a professional promise. Disguising the name leaves the breach intact: you've still taken what a client gave you in confidence and put it where they never agreed it could go.
There's also a practical failure baked in. In a small community — a rural county, a tight-knit cultural group, a specialized clinic — it takes startlingly little to re-identify someone. Occupation, rough age, the shape of the presenting problem, and the fact that they see you can be enough. The people most able to recognize a "disguised" client are precisely the people closest to them.
The cleaner test, and one most clinicians already carry: if you'd need written consent to discuss this client in closed-door clinical supervision, you need at least that before anything reaches a screen. Supervision is private, professional, and protected, and it still requires consent. A public feed is none of those things. If the disguise is doing the ethical work, the disclosure was already over the line.
The other reasoning trap runs the opposite direction — not putting information out, but pulling it in.
A client misses three sessions and you're worried. A parent on your caseload seems to be hiding something. A teenager mentions a person you can't place. The pull to type a name into a search bar is strong, and it almost always wears the costume of good practice: I assess clients for a living. More information helps me help them. And it's public anyway — they posted it.
Each of those is true and none of them settles it. Assessment gathers information clients agree to share, from clients and, with consent, from collateral sources. A client's social media is neither. "It's public" describes what's technically possible, not what's appropriate — the standard for a professional isn't the same as the standard for a curious stranger. The useful comparison: you wouldn't park outside a client's home to watch who comes and goes, even though the street is public and you'd surely learn something relevant. Searching their accounts is the same act with a search bar instead of a car.
So when is it justified? The standard is narrow on purpose: a compelling professional reason, and where possible, the client's informed consent. "Compelling" means something closer to imminent safety — a client who's disappeared and may be in danger, a credible risk of harm — not "it would help me understand them better." Curiosity, even caring curiosity, doesn't clear the bar. And there's a clean way to handle the worry honestly: tell the client. "I've been concerned and was tempted to look you up — can we talk about what's going on?" keeps the information coming from the relationship, which is where it belongs.
One real exception, because the rule isn't absolute: in macro practice, the calculus changes. Reviewing a legislator's public statements before testimony, or reading the room on a community issue, is legitimate work. It's the clinical relationship — the trust, the vulnerability, the power difference — that raises the bar, not the act of searching itself.
Most guidance on client friend requests stops at "decline," which is correct, but incomplete. Accepting one collapses the boundary between clinician and friend, hands the client far more of your personal life than you'd ever disclose in session, and can create a dual relationship. So yes — decline.
The part that gets missed is when. A friend request declined in the middle of treatment lands very differently than a boundary set at the start. By session ten, a client has lowered their defenses and made themselves vulnerable to you; a sudden "I can't accept this" can read as personal rejection from someone they've come to trust, and that rupture is itself a clinical harm. The fix is to move the conversation earlier. Raising your social media boundaries at the outset — better yet, in a short written policy you walk through during the contracting phase — turns a potential wound into a non-event. The client knows the rule before there's any feeling attached to it.
And the boundary runs both ways. You have no control over what a client finds when they search you — and many will, out of the same ordinary curiosity anyone has about the person they're confiding in. The danger isn't that they find you human. It's discovering a contradiction: a clinician who radiates acceptance in the room but whose public posts judge the very thing the client came in struggling with. A teenager working through an unplanned pregnancy who stumbles on their worker's strident posts about it doesn't experience that as a difference of opinion. They experience it as betrayal, and they often just stop coming. Looking at your own profiles the way a client would isn't vanity. It's part of protecting the work.
Telehealth turned a niche question into a daily one, and it carries obligations that in-person work doesn't.
Before you deliver clinical service over video, the consent conversation has to widen. You're not just getting agreement to treatment — you're assessing whether this client is suited to remote care and capable of using it, verifying who they are and where they're physically located, and, if they'd rather not work this way, helping them find another route to care. That last piece matters more than it sounds: the tools we reach for to widen access can quietly shut out the people least comfortable with technology, and "we offer telehealth" is not the same as "this client can actually use telehealth."
Location isn't a formality either. When you and your client are in different states, the service may be considered to happen in both jurisdictions, and you're responsible for the rules where the client sits — not just where you're licensed. A client who moves away and asks to keep meeting by video is the classic setup for an unintentional violation. The move is to check the client's jurisdiction before the next session, not after.
Sometimes what surfaces digitally isn't an ethics nicety but a hard obligation — a client posts an intent to harm someone, or you see signs of abuse. When that happens, the temptation is to get tangled in the technology. Don't. The platform is almost always a distraction from the duty underneath.
Keep the categories distinct, because they genuinely are. A duty to protect a foreseeable victim is one thing. Statutory mandatory reporting is another, with its own triggers and its own rules. General confidentiality is a third. A disclosure arriving by Instagram DM rather than across your office doesn't change which duty applies — the content determines that, the channel doesn't. If you find yourself reasoning about the medium, you've probably lost the thread; reason about what was disclosed.
Search yourself the way a client would. Open your public profiles in a private browser window and read them as someone who's about to trust you with the worst week of their life. Not to scrub yourself into a blank — many social workers use these platforms well, for advocacy, peer support, and community building, and disappearing from the digital world has its own costs. The point is narrower: find the one post, the one "like," the one affiliation that would make a client in your chair wonder whether they can be honest with you. Then decide, on purpose, what to do about it. That's the whole discipline here — not avoiding social media, but making deliberate choices in a space that rewards reflexive ones.
Right now, get SWTP's online practice exams at a reduced price. Just $39. Get additional savings when buying more than one exam at a time-- less than $30 per exam!
Keep going till you pass. Extensions are free.
To receive our free study guide and get started!