Rook Consulting
Dermatology and cosmetic dermatology

HIPAA compliant marketing for dermatologists and cosmetic dermatology

By Christiana Clancy, founder of Rook Consulting
Updated October 16, 2026
The short version

Dermatology marketing mixes medical and cosmetic care: insurance-billed visits, cash-pay treatments, before-and-after photos and online booking. Practices that bill insurance electronically are HIPAA covered entities, and the FTC's rules on reviews and health data apply either way.

Where the risk shows up

  • Before-and-after photos of skin conditions and treatments posted without written authorization
  • Pixels on condition pages like acne, psoriasis or skin cancer screening
  • Promotional texts and emails to medical patients who only agreed to appointment messages
  • Review replies that confirm a patient’s condition or treatment
  • Email lists segmented by diagnosis or procedure inside marketing tools

What the record shows

HIPAA applies to covered entities, which include health care providers that conduct certain transactions electronically, such as billing health plans (HHS).

Adult & Pediatric Dermatology in Massachusetts paid $150,000 to the Department of Health and Human Services after an unencrypted flash drive holding data on about 2,200 patients was stolen and never recovered (Hunton Andrews Kurth).

The Federal Trade Commission has acted against health businesses over sharing health data for advertising, including BetterHelp and GoodRx (Arnold & Porter).

The Federal Trade Commission’s consumer reviews and testimonials rule, effective October 21, 2024, allows penalties of up to $51,744 per violation for fake testimonials, paid positive reviews and undisclosed insider reviews (Morgan Lewis).

How Rook helps

Rook reviews your practice’s marketing from the outside, then installs the safeguards and systems your team runs. Start with a free Marketing Risk Report, or see programs and pricing.

Patient financing

Make cash-pay care easier to say yes to.

Lasers, peels, injectables and other cosmetic treatments are paid out of pocket, and price is often what stops a patient after the consultation.

In one survey, skin rejuvenation like lasers and peels was the most commonly financed cosmetic category at 41%, and 76% of prospective patients didn’t know financing was available (Practical Dermatology).

RepeatMD + Affirm gives your patients flexible financing with a soft credit check, plus memberships and rewards in your own branded app. RepeatMD reports approval rates above 80%.

Explore RepeatMD

Opens RepeatMD’s site in a new tab. Rook Consulting is a RepeatMD referral partner and may be compensated when practices sign up through this link.

This page is general information about published regulations, enforcement actions and studies. It is not legal advice. Approval rates as reported by RepeatMD.

Keep reading
HIPAA compliant marketing for med spasHIPAA compliant marketing for plastic and cosmetic surgeonsCan you respond to patient reviews without violating HIPAA?Is the Meta Pixel HIPAA compliant on a medical practice website?

Find out where your practice stands.

Our free Marketing Risk Report reviews your public website, listings and reviews and shows you the top risks in about a minute.

Get your free Marketing Risk Report Book a 20-minute call