HIPAA-Compliant Video Production: A Guide for Utah Teams
HIPAA-Compliant Video Production: What Utah Healthcare Teams Need to Know Before Filming
HIPAA-compliant video production is the practice of planning, filming, and publishing healthcare video content without exposing protected health information or filming patients who haven't authorized it in writing. If your practice is planning provider profiles, patient stories, or a facility tour, HIPAA applies to your marketing footage just as much as it applies to your medical records, and the mistakes are easy to make and expensive to fix.
We film inside active clinics, hospitals, and labs across Utah, and every healthcare shoot we run is planned around privacy from the first scout. This guide covers what your team needs to have in place before a camera enters the building. One note before we start: we're a production company, not a law firm, so treat this as practical field guidance and have your privacy officer or counsel review your specific situation.
Why HIPAA Applies to Your Marketing Footage
HIPAA protects any information that could identify a patient and relates to their health or care. On a film set, that's much more than a name. A face in a waiting room, a wristband in the background of an interview, a chart on a counter, a schedule on a whiteboard, a room number behind a doctor's shoulder, or a computer screen left open during b-roll can all count as protected health information.
The part that surprises most marketing teams: it doesn't matter that the footage is for promotion rather than treatment. If a patient is identifiable in your marketing video and hasn't signed a valid authorization, the video is a compliance problem no matter how positive the story is. That's why the planning phase of healthcare video production matters more than the filming itself.
Patient Consent and Releases: The Paperwork Behind Every Healthcare Shoot
A standard media release, the kind used for corporate videos, is not enough for patients. Filming a patient for marketing requires a written HIPAA authorization, which is a more specific document. In practical terms, it should spell out what will be filmed, who will use the footage, where it will be published, and how long the authorization lasts, and it should tell the patient they can revoke it.
Two details save headaches later. First, define the use broadly enough to cover real distribution: if the authorization only mentions your website, the social media cutdown you publish next quarter is outside its scope. Second, keep authorizations on file and connected to the footage. In our experience, the most common compliance gap isn't a missing form on shoot day; it's a two-year-old testimonial still running on a homepage with nobody able to locate the paperwork behind it.
Staff are simpler but not automatic. Employees appearing on camera should sign a standard appearance release, and physicians featured in profile videos should approve the final cut, since their name and reputation carry the piece.
How to Prepare a Clinic or Hospital for a Film Crew
The difference between a smooth clinical shoot and a stressful one is decided before the crew arrives. Here's the preparation checklist we walk through with every healthcare client:
1. Walk the location with your production partner and mark approved filming zones. Hallways with patient flow, check-in desks, and open bays are usually out; conference rooms, empty exam rooms, and staged areas are in.
2. Schedule around care. Early mornings, admin days, and post-clinic hours give you clean footage without asking patients to navigate a film set.
3. Clear the frame. Screens locked or turned off, whiteboards wiped or covered, charts and printed schedules out of sight, room signage checked.
4. Notify staff in advance so nobody is surprised by a camera, and give front desk teams simple language for patients who ask what's happening.
5. Plan for incidental capture. If a patient walks through a shot, the take gets flagged and cut. Your production partner should treat that as routine, not as a judgment call made in the edit.
Filming in Labs and Research Facilities: A Different Kind of Privacy
Laboratories and research facilities swap patient privacy concerns for a different set: proprietary equipment, unpublished research, and processes that competitors would love a good look at. Before filming in a lab, agree on what's confidential, get NDAs signed where they're needed, and have a technical reviewer watch the edit specifically for whiteboards, screens, and labeled samples.
Cleanroom and sterile environments add physical constraints: gowning procedures, equipment that can't be moved, and gear restrictions. A crew that has filmed in these spaces plans smaller and slower, and gets better footage because of it.
The Compliance Mistakes We See Most Often
After years of healthcare and lab shoots, the same handful of problems come up again and again:
• B-roll filmed in live waiting rooms, with identifiable patients captured incidentally and nobody assigned to catch it before publication.
• Testimonials published years ago with authorizations that expired, were revoked, or can't be found.
• Footage reused in a new context the patient never authorized, like a clip from a website video appearing in a paid ad campaign.
• Social cutdowns created long after the original project without re-checking what the authorization actually covers.
• Screens, schedules, and wristbands visible in the background because the review process checked the story but not the frame.
None of these require bad intent. They happen when video is treated as a marketing task instead of a marketing task inside a regulated environment.
What a HIPAA-Aware Production Partner Handles for You
A production partner that works in healthcare should carry most of this weight for you: release and authorization workflows built into pre-production, shot lists reviewed against approved zones, crews that default to cutting a take when a patient enters frame, and an edit review that checks backgrounds as carefully as it checks the story.
That's how we run our healthcare video production in Salt Lake City and across Utah, from single provider profiles to multi-location systems and the labs and life sciences companies along Silicon Slopes. If you're planning a project and want the compliance side handled by people who film in these environments every month, we'll walk you through the whole process in a free strategy call.
Frequently Asked Questions About HIPAA and Video Production
Do patients need to sign a consent form to appear in a marketing video?
Yes. Patients who are identifiable in marketing footage need a written HIPAA authorization, not just a standard media release. The authorization should describe what's being filmed, where it will be used, and how long it lasts, and patients keep the right to revoke it.
Can you film in a hospital waiting room?
Generally no, not while patients are present. Waiting rooms can be filmed empty, staged with staff or actors, or scheduled outside clinic hours. Filming a live waiting room risks capturing identifiable patients who haven't authorized anything.
Does HIPAA apply to staff training videos that never leave the organization?
HIPAA still applies if real patient information appears in the footage, even for internal training. Most organizations solve this by staging scenarios with staff or standardized patients and keeping real charts, screens, and schedules out of frame.
What should a HIPAA video authorization include?
At minimum: a description of the footage being captured, who will use it, where and how it will be published, an expiration date or event, the patient's right to revoke, and a signature with date. Have your privacy officer review the form before your first shoot.
Do old patient testimonial videos need new consent?
They need a valid authorization on file that covers how the video is being used today. If the authorization expired, was revoked, can't be located, or doesn't cover the current use (for example, a paid ad), the safe move is to pull the video until new authorization is signed.