The Atlanta Privacy-Sensitive Practice 360 Playbook

Platform privacy and health privacy are different boundaries

Google’s Maps privacy policy tells contributors not to publish identifiable people without permission, especially in sensitive locations, and prohibits private or confidential information such as medical records. It also states that automatic face and license-plate blurring applies to Street View content created from submitted 360 video, not automatically to user-submitted non-video imagery. A professional still-photo workflow therefore needs its own prevention and review process.¹

For health care providers subject to the HIPAA Privacy Rule, HHS guidance is stricter than “we can blur it later.” HHS says independent media personnel may not enter treatment or other areas where protected health information is accessible without the required prior written authorization, and that masking identity after access is not sufficient. The guidance separately recognizes that a contractor performing services on a covered entity’s behalf may occupy a different role when the required agreements and safeguards are in place. The practice’s privacy officer or counsel—not the photographer—should determine that status. Not every wellness or professional-service business has the same legal obligations.³

Those are evidence boundaries, not a compliance checklist. The photographer should not decide whether an organization is a covered entity, whether a document is legally de-identified, or whether a release is sufficient. The practical recommendation is to have the practice’s authorized privacy or operations lead define access, remove sensitive material before the photographer enters, and exclude any room whose status is uncertain.⁴

Solve the Atlanta arrival problem without exposing the practice

The Atlanta Regional Commission’s survey describes how employed residents commute; it does not measure patient or client appointment travel and cannot tell a practice which approach matters most. Use the practice’s own appointment questions, call logs, arrival instructions, staff observations, and building information to identify the real trouble spots. In Atlanta that might be a parking-deck bridge, street entrance, transit-side entrance, elevator lobby, or multi-tenant corridor—but the choice should come from this location’s evidence, not a regional commuting average.⁵

A privacy-sensitive route can be generous outside the clinical or confidential boundary. Show the correct building frontage where permission allows, the public approach identified by the property, the lobby or elevator decision, the floor or suite identifier, and the practice entrance. Do not make accessibility claims from appearance alone; publish separately maintained access details and confirm current conditions with the property and practice.

At the suite, stop the arrival story at reception unless the business has approved a prepared representative room. A prospective visitor usually needs orientation, not a navigable map of staff offices, records storage, counseling-room occupancy, medication areas, cash handling, or security systems. A shorter route can provide more confidence because its boundary is legible.

Draw three zones before choosing camera positions

Zone A is public orientation: building approach, suite entrance, empty reception, a generic waiting area, and any public corridor the property permits. Zone B is conditional presentation: a consultation, treatment, meeting, studio, or conference room that the authorized lead can clear, stage truthfully, and approve. Zone C is excluded: active care or counseling, occupied rooms, records, scheduling, billing, staff work, storage, server and security areas, changing spaces, and any location whose public value is lower than its disclosure risk.

The categories are operational recommendations, not legal labels. A room can move from B to C on the day because a whiteboard was not cleared, an adjacent conversation is audible, a glass wall reveals an occupied area, or an unexpected client arrives. Conversely, clearing a room does not automatically make it publishable. The practice lead still decides whether showing the room fits its professional and privacy obligations.

HHS de-identification guidance illustrates why casual judgment is dangerous: identifiers can include names, contact information, record and account numbers, dates, full-face photographs, device identifiers, and other unique characteristics. That formal guidance applies in a defined HIPAA context. The field inference is broader and simpler: sweep for combinations that identify a person or reveal a sensitive relationship, not merely for large readable names.⁴

• Zone A: approved public arrival and orientation
• Zone B: cleared representative rooms requiring explicit approval
• Zone C: records, operations, occupied services, changing, security, and unresolved space

Capture during a controlled closure, then run a two-person sweep

Schedule when no patients, clients, members, or deliveries can enter the route. Use staff-controlled ingress without obstructing required egress, silence appointment notifications, and assign one staff member to handle unexpected arrivals away from camera range. The photographer should never be the person deciding whether someone may appear. If the closure cannot be maintained, stop the affected zone and reschedule.

Before the camera enters, the practice removes sign-in sheets, schedules, charts, prescription or treatment material, mail, shipping labels, client work, billing information, key tags, badges, voicemail screens, and personal notes. Turn displays off rather than trusting distance. Check translucent folders, glass cabinets, monitor reflections, mirrors, windows, device screens, printer trays, and the underside of clipboards. Avoid decorative staging that implies equipment, credentials, services, or accommodations the practice does not actually provide.

Then conduct two sweeps. The practice lead sweeps for information and professional boundaries; the photographer sweeps the complete sphere for visual exposure, reflections, stitch zones, and connected views into adjacent rooms. Both must approve every point. Google’s privacy rules remain the publication floor, but a practice may set a narrower internal boundary.¹

Publish the minimum route that answers the visit

Build the route around four questions: Which building and entrance? Which floor or suite? What happens at check-in? What approved environment can I expect next? A representative room may help a new patient or client understand scale and atmosphere, but it should be visibly unoccupied, generic, current, and separated from real records or active operations. End the route where staff control normally begins.

Review each panorama at high magnification and traverse every connection. Look for faces and plates outside windows, names, calendars, documents, reflections, screens, personal items, neighboring-suite information, security hardware, and unintended sightlines into Zone C. Obtain dated approval from the authorized practice lead for the exact points and connections, not merely for the idea of “a tour.” Keep an exclusion list so a later update does not reopen a settled boundary casually.^1,2

Describe the outcome precisely. The tour can show a prepared customer-facing route and may help visitors understand arrival and atmosphere. It does not verify confidentiality practices, clinical quality, accessibility compliance, licensure, safety, or a legal privacy standard. Those matters require their own current documentation and qualified review. The strongest playbook promise is narrower: collect less, expose less, review more, and publish only what the visit genuinely requires.