Session recording leaked by a patient
When the patient records the session without notice and the content ends up on social media.
Audience: Professionals and Personal Brands · Risk level: CRITICAL
Blindfy Intelligence Unit · Technical review by Blindfy
Scenario
A psychologist finds edited excerpts of one of her sessions circulating on TikTok, mocking an out-of-context remark. The patient had recorded a telehealth session without authorization.
How the scam works
Patients record on their own devices during online sessions, edit the content and publish it for revenge, exposure or viral content, without any consent from the professional.
Common mistake
Not establishing an explicit therapeutic contract covering recording and its legal consequences before treatment begins.
Impact
Breach of professional confidentiality, ethics proceedings at the CRP board, damage to other patients who lose trust and media exposure.
What works
A clear therapeutic contract, immediate takedown on the platforms and civil action based on LGPD and image rights.
Protection checklist
- Include a recording clause in the contract
- Give a verbal notice at the start of each session
- Monitor your name on TikTok and Instagram
- Initiate urgent takedown on the platforms
- Formally notify the patient through a lawyer
- Inform the CRP board preventively
- Consider civil action for moral damages
Editorial sources
- ANPD — Comunicação de incidente de segurança
- CERT.br / NIC.br — Cartilha de Segurança para Internet
- ENCCLA / Ministério da Justiça — Enfrentamento a golpes digitais
The online clinical setting expanded both reach and vulnerability. Update the therapeutic contract.
