Grateful patient programs and auction fundraising

Grateful patient fundraising is a large part of what hospital foundations do, and it is also the area where general fundraising advice is least safe to follow. Patient information is regulated, and the regulation binds the foundation's use of it as much as it binds clinical staff.

The shape of the problem, and the questions to take to your privacy officer, are below. None of it is a compliance opinion — your own counsel's answer governs.

The constraint, in plain terms

Development cannot treat the medical record as a prospect list. A physician cannot informally hand over names of patients to invite. An item description cannot reference an identifiable patient because a staff member mentioned them. All three happen, and all three are the same mistake.

There are lawful routes. They involve defined categories of information, defined internal processes, patient communications about fundraising, and a way for a patient to say they do not want to be contacted. The route exists — it just does not start with a spreadsheet from a clinician.

The questions to take to your privacy officer

• What patient information, if any, may reach development, and through what process?
• What notice is given to patients about fundraising, and where does it live?
• How does a patient opt out, how is that recorded, and who checks it before a mailing?
• May a physician introduce a patient to the foundation, and what does the patient have to agree to first?
• What may be published about a patient who has agreed — name, condition, photograph, and where?
• Does agreement expire, and what happens when the material is reused next year?

Bring the actual auction plan to that meeting rather than the general question. "Can we do grateful patient fundraising?" gets a cautious answer; "here is the invitation list we want to build and the item description we want to publish" gets a usable one.

Patient stories in an auction

A patient's story is powerful in exactly the way it is risky. Two rules that hold regardless of how your privacy officer answers the questions above.

Consent is specific. A patient who agreed to appear in a hospital publication has not agreed to have their diagnosis in an auction item description on a public web page. Put the actual words and the actual photograph in front of them, in writing, say where it will appear and for how long, and let them sit with it.

Withdrawing has to be easy and real. One named contact, and a commitment to take it down the same day. Circumstances change, and a patient who agreed last year may feel differently now — check before reusing anything rather than treating agreement as standing.

If the answer is no, take it, and do not publish an anonymised version or a composite. Describe what the money funds instead of who it helped; a clear account of a program is a perfectly good appeal.

What you can always do

Nothing above prevents the foundation from fundraising well. Program descriptions, clinician voices with their own consent, equipment and facility needs, outcomes reported in aggregate, and donors who volunteer their own story to you unprompted — all of it is available, and most hospital campaigns run largely on it.

General information, not legal or compliance advice for your organization. Patient privacy and healthcare compliance rules are fact-specific — take anything here to your own privacy officer and counsel before you act on it.