To manage social media messaging photos testimonials and online contact in ABA, classify Vik's communication by purpose, platform, audience, data, account owner, record status, privacy route, accessibility, security, employment policy, marketing claim, endorsement, and review rule. Separate approved clinical communication from personal contact and public content. A release, consent to services, photo permission, testimonial, review, and HIPAA authorization answer different questions. Give the person a nonretaliatory way to decline, correct, withdraw where allowed, or use another channel.

Define Vik's page-specific boundary decision

For this decision, define the people, roles, authority, benefit, payment, setting, information, client impact, power, governing source, decision owner, immediate safety route, alternative, safeguard, and endpoint. Distinguish scheduling, clinical messaging, team coordination, personal contact, public posting, directory content, photos, recordings, reviews, testimonials, endorsements, recruitment, and paid promotion.

Protect Vik's access, communication, and nonretaliation

Vik's plan keeps immediate safety, essential care, AAC, disability access, privacy, complaint routes, informed choice, assent when applicable, dissent, and lawful withdrawal protected. A boundary review cannot create clinical, legal, employment, payer, financial, privacy, marketing, or emergency authority.

Build Vik's digital-contact and marketing boundary register

Create one versioned record for portal, text, email, social platform, review site, website, directory, video, and public-post contexts. Include Vik's account, roles, power, benefit, financial and personal interests, information access, source, policy, contract, privacy, communication, alternatives, consultation, recusal, continuity, incidents, missingness, and review. Track purpose, platform, account, sender, recipient, audience, PHI, clinical-record duty, permission, authorization, access need, security, claim, material connection, review incentive, owner, status, withdrawal, deletion, and retention.

Apply Vik's decision logic to one scenario

Map each content item from capture to final deletion or retention. A session photo may be part of the clinical record, a training artifact, a family copy, a testimonial, or an advertisement; those purposes are not interchangeable. Record device, account, audience, editing, caption, accessibility, PHI, authorization, material connection, claim basis, withdrawal path, and archival copies. Removing a public post may not erase screenshots or platform backups, so never promise complete deletion without evidence.

Validate Vik's counts and denominators

Reproduce 36 units, 11 held, 25 current, 21 dispositions, 14 messages, 13 timely responses, and one response miss.

Connect Vik's evidence to a bounded action

The practice removes PHI from unapproved routes, separates clinical records from marketing, validates each permission and claim, discloses material connections, and never conditions care on a review or testimonial.

Work through Vik's example

Vik's team reviews 36 digital or publication units. Eleven stay held for PHI in a personal account, an unclear photo purpose, missing record capture, an inaccessible message, an employee endorsement without disclosure, a sentiment-conditioned review request, unresolved testimonial claims, a minor's authority question, public location data, expired permission, or an unapproved platform. Of 25 current units, 21 reach a controlled disposition. Vik sends 14 privacy, correction, access, or stop messages; owners respond on time to 13. Preserve every planned, held, current, reviewed, decided, accepted, declined, rerouted, messaged, and verified unit with source version, roles, interest, client account, owner, action, safeguard, continuity, incident, and endpoint. This fictional example supplies no universal ethics answer, legal conclusion, valid authorization, harmlessness finding, or promised outcome.

Address Vik's main interpretation risk

Twenty-one of 25 measures operational disposition. It cannot establish valid authorization, security, accessibility, truthful advertising, or freedom from pressure. Eleven holds and one response miss remain visible. Review source currency, roles, power, benefit, privacy, access, financial or personal interest, client experience, alternatives, continuity, incidents, missingness, and decision quality separately.

Place Vik's issue in an organizational system

For Vik, the CASP Organizational Guidelines public overview describes recommendations across business operations, clinical operations, and risk management for autism service organizations. CASP sells the detailed guidelines. This digital-contact and marketing boundary register is Finni's editorial control model rather than a CASP procedure or legal standard.

Apply the current behavior-analyst code to Vik

The current BACB Ethics Code applies to BCBA and BCaBA certificants and people who completed an application. It addresses multiple relationships, gifts, coercive or exploitative relationships, conflicts, confidentiality, client involvement, public statements, referrals, continuity, supervision, documentation, and other covered conduct. BACB has no separate jurisdiction over organizations or corporations, so entity policy and other authorities still matter for Vik.

Keep Vik's preferences and context visible

With Vik, ACL person-centered-planning guidance emphasizes a person-directed process grounded in strengths, preferences, needs, and desired outcomes. Culture, geography, community, access, and available alternatives can affect a boundary decision. Person-centered planning does not erase power, confidentiality, competence, law, policy, contract, or safety duties.

Preserve Vik's communication authorship

During Vik's boundary review, the ASHA AAC portal supports continuous access to communication tools or devices. Use accessible ways to ask, decline, report pressure, request privacy, correct a record, or appeal. A supporter may facilitate communication without speaking for Vik, filtering a concern, or turning silence into agreement.

Separate HIPAA marketing questions for Vik

Vik's team uses HHS HIPAA marketing guidance only when the entity, information, and activity fall within its scope. HHS explains that covered entities generally need written authorization to use or disclose PHI for marketing, subject to defined exceptions. A clinical consent, general media release, or relationship alone does not answer the marketing analysis; other privacy laws can also apply.

Map health-information rules around Vik

For Vik, HHS guidance on HIPAA and FTC health-information obligations explains that HIPAA limits uses and disclosures by covered entities and business associates and that other consumer-health activities may fall under FTC authority. Classify the entity, role, data, purpose, recipient, authorization, and other applicable law before using health information in a boundary, vendor, digital, or marketing workflow.

Keep endorsements truthful around Vik

Vik's public-content review uses the FTC Endorsement Guides Q&A for its actual advertising scope. Endorsements must reflect honest opinions and cannot communicate claims the advertiser could not substantiate directly. Unexpected material connections should be disclosed clearly and conspicuously. Those advertising rules do not create permission to use PHI or override clinical ethics.

Apply the consumer-review rule separately for Vik

The FTC Consumer Reviews and Testimonials Rule Q&A explains the rule that took effect October 21, 2024 and addresses fake or false reviews, sentiment-conditioned incentives, deceptive suppression, and related practices. For Vik, a review request remains separate from clinical feedback, grievance handling, quality data, testimonial permission, and care. Staff never make access or responsiveness depend on review sentiment.

Make Vik's boundary process accessible

For Vik, DOJ effective-communication guidance explains how title II and title III covered entities approach communication aids and services based on the nature, length, complexity, context, and person's usual method. Apply the actual entity and legal standard. A boundary, conflict, or marketing conversation remains accessible, private, and open to questions rather than using communication difficulty as agreement or a reason to exclude the person.

Choose Vik's next review trigger

Reopen after a platform, feature, audience, data type, marketing purpose, relationship, permission, withdrawal, review campaign, security incident, or legal source changes. Record the qualified owner, source, effective date, role and setting scope, accessible explanation, privacy boundary, alternative, recusal or safeguard, continuity result, complaint route, and reassessment date.

Close Vik's professional-boundary plan

Review the digital-contact and marketing boundary register with Vik, qualified clinical and organizational owners, chosen or authorized supporters as applicable, and the specialists named in the manifest. Confirm that clinical, supervisory, employment, business, social, caregiving, financial, digital, marketing, transport, household, privacy, and safety decisions remain separate; every denominator is reproducible; immediate care, AAC, access, privacy, nonretaliation, and withdrawal remain protected; and conclusions stay bounded to current facts. Keep this page draft and noindex until every required review is complete.

Related resources

Sources