Answers for medical practices
Can medical practices use patient testimonials in marketing videos?
Yes, with one condition. A patient testimonial in a marketing video uses protected health information, and HHS guidance says the HIPAA Privacy Rule, with limited exceptions, requires the individual's written authorization before that information is used or disclosed for marketing. So the answer isn't really about whether testimonials are allowed. It's about whether the specific testimonial you want to run is authorized, and whether the people producing it can tell a real patient apart from a synthetic depiction of one.
Why does a patient testimonial trigger HIPAA at all?
A testimonial works because it ties a real person to your practice. That same tie is what makes it protected health information.
HHS guidance defines marketing as a communication that encourages recipients to purchase or use a product or service, and it says those communications generally require authorization when protected health information is involved. A patient on camera praising a procedure is exactly that kind of communication. The patient's identity, their condition, and the fact that they were treated at your practice are all the regulated detail, so consent given verbally on set or buried in an intake form usually isn't the written marketing authorization the rule asks for. The fix is straightforward once you see it clearly: treat authorization as a production gate, not an afterthought you reach for in editing.
What does proper authorization actually require?
Written, specific, and scoped to marketing. That's the short version.
The HHS marketing guidance is clear that the authorization has to be written before the use or disclosure happens, and it has to cover the marketing purpose rather than general treatment. A medical practice that wants to run a patient story needs that document in hand before the testimonial is captured, reused, or cut into a new spot. This is where FMAI's workflow does the unglamorous work: the doctors page says the company routes every script through a HIPAA-aware compliance pass that handles patient privacy, off-label compliance, and FTC advertising rules. The point of that pass isn't to slow you down. It's to make sure the testimonial you publish is one you can defend if anyone asks who authorized it.
How does FMAI handle real testimonials versus synthetic patients?
These are two different things, and a serious workflow never blurs them. FMAI's doctors page draws the line explicitly.
It says the company handles real patient testimonials traditionally, captured once and reused across campaigns. These are separate streams. It also says synthetic patient depictions require explicit disclosure, and that disclosure is built into the spot by default. That distinction matters more than it first appears, because the failure mode in AI video is a generated face that reads as a real patient when no real patient ever consented. Keeping the two streams separate means a real testimonial carries real authorization, and a synthetic depiction carries a disclosure that tells the viewer it isn't a patient. Get that separation wrong and you've created the exact privacy and advertising problem the workflow exists to prevent.
Can you reuse a patient testimonial across campaigns?
Yes, and that's part of why testimonials are worth the compliance effort. FMAI's doctors page says real patient testimonials are captured once and reused across campaigns.
The economics are obvious: you authorize and film a patient story a single time, then run it across multiple spots without dragging that patient back for another shoot. The compliance side has to keep up with that reuse, though. Authorization scoped to one campaign doesn't automatically cover every future use, so the safe practice is to authorize the testimonial for the range of marketing you actually intend, and to keep that record where your compliance pass can check it. Reuse is a feature, not a loophole.
Where FMAI fits
FMAI's position on testimonials is narrow and honest. A medical practice can absolutely use patient testimonials in marketing video, and they can be some of the strongest social proof you have. The condition is that the use is authorized under HIPAA in writing, and that real testimonials never get confused with synthetic patient depictions.
If a vendor pitches patient testimonials without mentioning written authorization, that's your first warning. If they can't tell you how they keep real patients separate from generated, disclosed depictions, that's the second, and it's the one that should end the conversation before any footage ever gets made. Press on the authorization record and the separation rule until you get specific answers. The compliance answer is the product. Everything else is just footage.
Related questions
If you're scoping patient-trust video for your practice, keep going: How can a doctor market the practice with video without filming patients?, Is AI video HIPAA compliant for medical practices?, and What should a medical practice look for in a HIPAA-aware AI video workflow?.