Patient Consent for Clinical Photography: A Practical Template
What a good consent process for clinical photos and 3D scans looks like in Indian clinics, with clauses to include and mistakes to avoid.
Consent is the foundation of clinical imaging. Without it, a photo or 3D scan is a liability, not an asset. With a clear process, it protects the patient, the clinician and the clinic. This guide sets out what a good consent process includes. It is general guidance, not legal advice; adapt it with your own legal adviser.
Why consent matters more now
India's DPDP Act, 2023 requires consent that is free, specific, informed, unconditional and unambiguous, given through a clear affirmative action, with the ability to withdraw it as easily as it was given. Most core obligations apply from May 2027 under the DPDP Rules, 2025. See the DPDP Act and patient photos.
Beyond law, consent is about trust. Patients who understand why images are taken, and who controls them, are more comfortable being photographed, which makes documentation better.
What the consent should cover
1. What will be captured
Name the types: standard photographs, 3D scans of the face, hairline or body, close-up images, expression views. Patients should not be surprised by what is captured.
2. Why
The clinical purposes: assessment, treatment planning, documenting results, comparing follow-up visits, and keeping the medical record.
3. Who will see the images
The treating clinician and team. If images may be reviewed by other clinicians for second opinions, say so.
4. How images are stored and protected
Where they are stored (for example, a secure system in India), that they are encrypted, that access is limited by role, and that they are not kept on staff phones. See stop storing patient photos on staff phones.
5. How long they are kept
Your retention approach, aligned with any medical record requirements.
6. The patient's rights
How to access images, ask for correction, withdraw consent or request deletion, and whom to contact.
7. Separate optional uses
Each as a separate yes/no choice:
- use in de-identified form for internal teaching,
- use in de-identified form for research or audit,
- use on the clinic website or social media, with face visible or cropped,
- use in presentations to other professionals.
A patient should be able to agree to clinical imaging and decline all of these without any effect on their care.
Sample wording
"We take photographs and 3D scans of the treatment area to plan your treatment and compare your results over time. These images are part of your medical record. They are stored securely and encrypted, kept in India, and only your treatment team can view them. You can ask to see them, or ask us to delete them, at any time by contacting [clinic email]."
Optional uses (tick if you agree): ☐ Website and social media, face visible ☐ Website and social media, face not visible ☐ Professional presentations, de-identified
Adapt this to your clinic and your legal advice.
Process tips
- Record consent before the first capture, not afterwards.
- Timestamp and store consent with the images, not in a separate paper file.
- Re-confirm marketing consent before publishing any specific image.
- Children: for under-18 patients, obtain verifiable consent from a parent or guardian.
- Expression and body images deserve explicit mention; see breast surgery consultations and documenting botulinum toxin results.
- Withdrawal: act promptly, remove marketing uses and record the request.
Common mistakes
| Mistake | Fix |
|---|---|
| One blanket consent for everything | Separate clinical and optional uses |
| Consent buried in a long treatment form | Short, dedicated imaging section |
| No record of which images it covers | Store consent with each capture |
| Marketing consent assumed from clinical consent | Ask separately, every time |
| Images on staff phones despite consent wording | Use one secure clinic system |
How Edebo supports consent
Edebo records consent with every scan before capture, so each 3D record carries its consent with it. For the wider marketing question, read ethical aesthetic clinic marketing.
Frequently asked questions
Do I need written consent for clinical photographs?
You need clear, recorded consent. Written or digital consent with a timestamp is the practical standard, because it can be produced later if questioned.
Should consent for marketing use be separate?
Yes. Consent for clinical documentation and consent for marketing or social media use should be separate choices, so the patient can agree to one without the other.
Can a patient withdraw consent for photos?
Yes. Patients can withdraw consent, and the clinic should stop the consented use. For clinical records, any applicable medical record retention requirements also need to be considered.
Edebo is a measurement and visualisation tool, not a diagnostic device. Clinical decisions remain with the treating practitioner.