Consent, Data and Social Media in Coaching & Mentoring
Image of social media likes and hearts plus hands reaching skywards
Imagine… you’ve taken a leap of faith, signed up for coaching, started diving into your challenges and goals, and begun sharing some personal information. The process is helping you gain clarity and identify what might be getting in the way of your goals and desires. You’ve started making changes. The space with your Coach feels alive and energising - perhaps it’s the first time you’ve been able to talk in this way, to someone who is not family, a friend, or colleague. To be listened to with compassion and curiosity. To be gently and intentionally challenged.
And then you see it: Your words. Repurposed. For their online content. Contextualised: “This morning, my client …”. Something you said in confidence to your Coach, is now on their LinkedIn feed. You’re not named but it’s undoubtedly from your story. How do you feel now?
When this happened to me, I felt shocked and betrayed. In my case, it was a therapist. Twenty minutes after one of our sessions ended, I spotted them using part of our conversation, verbatim, in an Instagram post. This amplified the power differential and diminished trust. Ironically, our session had been focused on boundaries. The experience has stayed with me and informs how I work as a Coach and Mentor.
Social Media Dilemma
I use - and sometimes even enjoy - social media. Occasionally (more often than I like), I find myself sucked into it, mindlessly scrolling and wasting precious time. This is all by design. I know this. I’ve worked in tech for 25 years and am not immune to its pull.
Social media offers me a way to share my work and perspectives, some (hopefully) helpful information, and the occasional dose of humour. I connect with people from different places, learn from them, and explore new-to-me things. And OK, yes, I admit it, I’m partial to a cute animal video, a nugget of silliness, or a good news summary. However, I’m also mindful of its darker side: misinformation, binary positioning, and endless bots. And I am very concerned by what appears (to me) to be an accelerating erosion of privacy and consent.
Normalisation of Sharing and Capturing Without Permission
In my experience of groups, it is generally agreed that things discussed within the group aren’t shared outside of the group, not just for privacy and intellectual property purposes but also for safety. This safe containment is even more vital in 1-2-1 work.
Yet social media and being online seem to have diluted this. Posting others’ work as one’s own, recording without asking, and sharing unsolicited photos of group peers is no longer unusual. If anything, it's become normalised.
I’ve experienced wellbeing practitioners taking in-class photos/videos, without consent, for use on their social media. I’ve learned of therapists using AI to live-capture session notes, without knowing where/how the data is stored, accessed and used. I’ve joined online meetings where video recording and transcription were already active, and no confidentiality agreement is in place. Such is the allure of easier and faster. The risk, as I see it, is that individuals' personal/sensitive data (which may include their image and voice) is effectively being handed over to tech companies, without their consent.
Am I Overreacting?
In a former COO role, I oversaw data governance for a Tech Company. This has undoubtedly informed my sensitivity and caution. I know data capture is ubiquitous, and that data is both valuable for growth, and vulnerable to misuse. As an active technology user who appreciates its many benefits, I’m conflicted.
In the face of rapid AI advancements, I wonder if I am a bit of a dinosaur for worrying/caring about privacy and consent? Has chasing audiences, hacking algorithms, and training AI engines overshadowed copyright, confidentiality, and safety? Does the pressure to build a brand and generate an income overshadow our respect for others’ privacy? Has it become so difficult to promote a business that people are not just customers or clients, but marketing commodities? Or is this just the way of the world we now live in?
My Approach to Data Protection & Consent
Regardless of the technological and social shifts, I’ve reflected on what feels important to me. I want to deepen my endeavours regarding data privacy and consent. I want to be as ethical as possible. I recognise it's an ongoing effort and will evolve my working practices with each new thing I learn. For now, in practice, here’s what it looks like for me:
Accountability: I use third-party tools, and though I can’t control their data processing and security, I undertake best efforts in terms of due diligence and tool selection. I won’t always get it right but I will remedy any issues promptly.
Code of Ethics: I adhere to standards set by my accreditation bodies (ICF, EMCC).
Contracts: Before beginning work, I establish a written B2C/B2B contract that covers working practices, fees, cancellation policies, and, importantly, confidentiality.
Data Protection Compliance: I capture consent in writing, honour UK GDPR, and maintain my registration with the ICO.
Feedback & Ideas: I ask my clients for permission before sharing an observation or suggestion (in session) rather than offering unsolicited advice.
Governance: I refer to my training with the Chartered Governance Institute UK & Ireland (CGIUKI).
Legal: I maintain contracts and policies via a qualified lawyer.
Mailing List: I offer optional opt-in and easy unsubscribe options for mail lists.
Media Usage: I don’t take photos of videos unless required for training/accreditation purposes, and only with explicit written consent obtained first.
Session Boundaries: If a sensitive topic arises, I ask clients if they want to explore it - I don’t assume they do - and I remain attentive to anything better suited to therapy.
Session Logs: I hold basic session information for accreditation purposes, ensuring advance consent is obtained for data retention. Data is deleted when no longer needed.
Social Media Usage: No client experience (e.g., testimonial, or case study) is shared without the client's express, written consent.
Session Notes: I minimise/hide identifying data, use MFA and passwords, and do not share notes with a Coachee’s employer.
Testimonials: I explain why I’m requesting one, and how and where it will be used.
Website Privacy Policy: I clearly outline how personal data is handled.
Client Invitation: Be Bold and Ask
It’s entirely reasonable to ask your Coach, Therapist, Mentor, or Practitioner about their privacy policy, data storage/processing and approach to social media. It’s your right to know, and their responsibility to be precise. Before you work with a professional, make sure you are clear on, and comfortable with, how they respect your confidentiality.