Health services · public conversations

Careful communication needs a careful record.

Health services talk to the community where the community is: on social media. Brolly captures every post, comment, edit and deletion on official channels as a record, so your comms team can respond in the moment and your records team can answer for it later.

Local health districtsHospitalsPrimary health networksPublic health teams

30-day free trial · no credit card · unlimited accounts and users

A health service communications team reviewing public messages together
Every official channelCaptured as it happens
Whole conversationsPosts, comments and replies
Moderation historyEdits, removals and actions
Request-readyPDF · CSV · HTML · JSON

Health organisations that use Brolly

  • NDIS
  • Victoria Department of Health and Human Services
  • Australian Institute of Health and Welfare
Different rules · one public channel

Health social media carries more than one obligation.

The right response depends on who you are and what appeared. Brolly keeps the source and the context; your records, privacy and comms teams make the decisions.

Recordkeeping

State records legislation

Public health services, local health districts and hospitals are generally public offices under their state or territory records act. Content on official channels can be subject to those requirements, including comments, edits and deletions.

Privacy

Health information in public

A comment can disclose a patient relationship or a diagnosis. The Privacy Act 1988 (Cth) and state health records laws shape what you can say in reply and how long you keep what was said. Brolly keeps the record; your privacy officer sets the policy.

FOI

Requests and inquiries

FOI, GIPA and RTI requests reach social media, as do coronial inquiries, complaints commissioners and the Ombudsman. A searchable archive means the answer is minutes away, not a week of screenshots.

The same comment · two responsibilities

Protect the person now. Keep the record anyway.

One public moment becomes two connected views: a clean, useful page for the community and a restricted chronology for the people who need it.

01
Act in the public momentRespond without confirming care, diagnosis or patient status. Hide exposed details when your policy requires it.
02
Keep the restricted recordThe captured original, the conversation around it, timestamps and the moderation action stay together.
What the public seesFacebook · fictional scenario
Health service communications colleagues coordinating a public update
Illustrative photo · comms team

Our outpatient entrance will reopen at 3 pm. Please use the east entrance until then.

Public question

Where should I go for my appointment?

Riverview Health

Please use the east entrance and check in at reception.

Patient detailHidden publicly
Captured before it was hidden
What the record keepsRestricted view · fictional scenario
Health service communications and privacy colleagues reviewing a response
Illustrative photo · restricted review
Riverview HealthRecord HC-0218 · complete chronology
Official service update

Post, account identity and source metadata kept.

Patient disclosure captured

Original comment kept under restricted access before it was hidden.

Hidden publicly + response

Moderation time and conversation context stay connected.

Role-based accessVersion historyAction timestampDigital checksum

Public exposure identified; the sensitive detail is ready for action under your policy.

Built for real teams

One archive across different health service responsibilities.

Comms, privacy, records and public health teams need the same source record without the same view or access.

Hospital communications and privacy colleagues reviewing a responseResponse review
Public health communications team preparing a community advisoryPublic health messaging
A team reviewing public comments against their moderation policyModeration review
A health service on record
“Brolly brought all of our social media channels together for bulk exporting of social records.”

Matthew Kenny · Senior Project Officer, Communications & Health Promotion, SA Dental · read the story

From public post to restricted record

One connected path from capture to response.

Brolly keeps the public source and what changed. Your procedures decide the review, escalation and response.

01 · Capture

Keep the source

Posts, comments, replies, media, metadata, edits and deletions from every official account, as they happen.

02 · Assess

Route by policy

Privacy, patient experience, records or comms teams assess the content under your own procedures.

03 · Act

Keep the action history

Captured originals and timestamps stay when content is answered, changed, hidden or escalated.

04 · Produce

Prepare the record

Search the chronology and export a package with metadata and digital checksums.

Privacy in public

Hide the sensitive comment. Keep what happened.

When someone posts their own health details, or another person’s, your team needs to act fast. Brolly captures the comment the moment it appears, so hiding or removing it from public view does not erase the record of what was said, when, and what your team did about it.

  • Original wording and timestamps preserved
  • Moderation history recorded alongside the comment
  • Role-based access limits who can see sensitive captures
Privacy-aware conversation · fictional record
Hospital communications colleagues reviewing a public response
Riverview Health

Outpatient entrance update · 2:18 pm

Public health messaging

Emergencies move fast. So does the record.

Outbreak advice, heat warnings, vaccination clinics, service changes: the message you post at 9 am may be corrected at 11 am and replaced by 3 pm. Brolly keeps every version and the community conversation around it, so the chronology is ready for the debrief, the inquiry or the FOI request.

  • Every edit captured as a new version of the record
  • Keyword alerts when a topic or phrase appears in comments
  • Exports in PDF, CSV, HTML or JSON with media included
Version history · fictional record
Public health communications team preparing an advisory
Heat health advice post

Current public wording captured at 3:10 pm.

Misinformation and abuse

Moderate with an evidence trail.

Health pages attract misinformation, abuse aimed at staff and, sometimes, comments that breach advertising rules for therapeutic goods. Brolly Protect can hide harmful comments against rules you set, while the archive keeps the comment and the action together. You can show what was there and why it went.

  • Protect hides comments that match your rules, around the clock
  • The record of the comment and its removal is retained
  • Review hidden comments and restore them if needed
Evidence bundle · fictional record
One recordSource, conversation, actions and export stay connected.
One record · three teams

Give each team the context its job requires.

A health service does not need three separate evidence folders for the same public conversation.

Comms and patient experience

Respond without losing context

Keep public channels useful while the captured conversation and moderation history continue in the background.

Privacy, records and legal

Review the captured chronology

See what appeared publicly, what changed, which action followed and who can access the record. Records can flow into Content Manager through the EDRMS integration.

Public health and emergency comms

Return to the original advice

Every version of an advisory and the public conversation around it, ready for the debrief or the inquiry.

Trust

Security your ICT team can sign off on.

Brolly Australasia Pty Ltd is ISO/IEC 27001:2022 certified and CSA STAR registered, with practices aligned to the Australian ISM and the ASD Essential Eight. Your data is stored on AWS cloud servers located in Australia. Records are encrypted in transit and at rest, with complete audit trails.

ISO/IEC 27001:2022Certified information security management system.
CSA STAR registeredListed on the Cloud Security Alliance STAR registry.
ISM and Essential Eight alignedPractices aligned to Australian Government guidance.
Encrypted everywhereAES-256 at rest, TLS 1.2+ in transit.
99.9% availability SLACommitment in the service level agreement.
MFA and role-based accessAccess scoped to your team, with complete audit trails.
Health service questions

Asked by records, privacy and comms teams.

Do state records laws apply to a health service’s social media?
Often, yes. Public health services, local health districts and hospitals are generally public offices under their state or territory records legislation, such as the State Records Act 1998 (NSW), the Public Records Act 1973 (Vic) or the Public Records Act 2002 (Qld). Content created or received on official channels in the course of business can be subject to those obligations, including comments and content that was later edited or deleted. General information, not legal advice.
Which privacy laws matter when someone posts health information on our page?
It depends on who you are. Commonwealth bodies and private providers are covered by the Privacy Act 1988 (Cth). State public health bodies are usually covered by state health records legislation, such as the Health Records and Information Privacy Act 2002 (NSW), the Health Records Act 2001 (Vic) or the Health Records (Privacy and Access) Act 1997 (ACT). Brolly preserves the captured comment and your moderation history; your privacy officer decides the response, access and disclosure.
What happens if we hide or delete a comment that discloses someone’s health details?
Brolly captures the comment when it is posted, so the original wording, its timestamps and the action your team took are retained in the archive even after it is hidden or removed from public view. Access to the archive is role-based, so sensitive captured content can be limited to the people who need it.
Can Brolly help during a public health emergency?
Yes. Emergency messaging changes quickly, and every version of an advice post, correction or clarification is captured as it happens, along with the public conversation around it. When the debrief, inquiry or FOI request comes later, the chronology is already there.
What about comments that breach advertising rules for therapeutic goods?
If your service promotes health products or services, the Therapeutic Goods Administration’s advertising requirements may mean you need to remove testimonials or comments. Brolly keeps a record of the comment and of its removal, so you can show what was there and what you did about it.
What does Brolly capture, and where is it stored?
Posts, comments, replies, reactions, edits, deletions, images and video, and direct messages where the platform API provides them, from Facebook, Instagram, Threads, X, YouTube, LinkedIn and TikTok. Each record carries its metadata and a digital checksum. Your data is stored on AWS cloud servers located in Australia.

Protect the conversation. Keep the record.

See complete capture on your own channels in a 20-minute walkthrough. Records, privacy and comms teams all welcome.