Health fairs and free screening events: a marketing and compliance guide for practices

Health fairs, community screening days and booths at employer or church events are some of the oldest marketing a practice can do. They put clinicians in front of people who would never click an ad, and they build goodwill in the neighborhood. They also bring a cluster of rules that a normal ad campaign does not: testing rules for anything done on a specimen, privacy rules for sign-in sheets and results, consent rules for the follow-up, and federal limits on what a practice may give away to people with Medicare or Medicaid.

This guide walks through those rules in the order you meet them when you plan an event: before the event, at the table, and after. It is about promoting and running the event, not about which screenings suit which people, which is a clinical decision. When the event is hosted by a church or community group, see our guide to partnering with churches and community groups. For pairing an event with a donation for each new patient, see our charity donation promotion guide. Blood pressure and cholesterol checks at events are covered in heart health screening outreach, including 911 signs for heart attack and stroke.

Before the event: decide what you will actually do at the table

The first planning question is not the banner or the giveaway. It is what the clinical team will do with each visitor, because that decides which rules apply. A table that hands out education and books appointments carries far fewer obligations than one that pricks fingers and reads out numbers.

If the event includes any test on blood or another specimen, look at the federal laboratory rules first. Under 42 CFR 493.2, a laboratory is a facility that examines materials derived from the human body to provide information for the diagnosis, prevention or treatment of disease or the assessment of health. Facilities that only collect or prepare specimens, or only mail them, and do not perform testing are not considered laboratories. Under 42 CFR 493.3, a laboratory needs a current CLIA certificate that fits the tests it performs, such as a certificate of waiver, unless it is exempt.

The rules anticipate events like yours. 42 CFR 493.35(b)(1) says laboratories that are not at a fixed location, including mobile units, health screening fairs and other temporary testing sites, may be covered under the certificate of the designated primary site or home base, using its address. In practice that means:

• Check your certificate before you advertise a test. If your office holds a certificate of waiver, confirm the test you plan to run at the fair is one it covers.
• Know whose certificate covers the table. If a hospital, lab company or sponsor runs the testing, the event is covered by their certificate, not yours. Say so in your promotion so you do not imply you are performing it.
• Do not advertise what you cannot run. If the test is not covered, change the event to education and appointments rather than promoting a screening you would have to cancel.

Promoting the event honestly

Most event promotion is a flyer, a social post, an email to existing patients, a Google Business Profile post and a listing with the host organization. The same advertising rules apply to all of them.

Say what the screening is and is not. The FTC Health Products Compliance Guidance says health-related claims must be truthful, not misleading and supported by competent and reliable scientific evidence, and that the FTC looks at the net impression of an ad, not only its literal words. Illustration: a flyer that says “Find out if your heart is healthy in 5 minutes” implies far more than a single blood pressure reading or fingerstick can show. Name the test, and say plainly that a screening at an event is not a diagnosis and that results should be discussed with a clinician.

Be careful with the word “free”. The FTC’s Guide Concerning Use of the Word “Free”, 16 CFR 251.1, is written mainly for offers where something is free when a customer buys something else. If your free screening is tied to booking a paid visit, or the free item comes with a purchase, the guide applies directly. Two of its principles are worth following for any free event:

1. Put the conditions up front. 251.1(c) says all terms, conditions and obligations of a free offer should appear clearly and conspicuously at the outset, in close conjunction with the offer. A footnote reached by an asterisk is not disclosure at the outset.
2. Do not recover the cost elsewhere. Under 251.1(b), “free” means the person pays nothing for that item and no more than the regular price for anything they must buy. And under 251.1(i), calling the item a “gift” or “bonus” instead does not fix an offer that would be deceptive as “free”.

If you also run new patient specials, our guide to new patient offers covers the same rules in more depth, and our guide to advertising cash prices covers posting prices accurately.

Free services and Medicare or Medicaid attendees

Community events draw older adults, and many attendees will have Medicare or Medicaid. Two federal laws matter here.

• Beneficiary inducement. 42 U.S.C. 1320a-7a(a)(5) provides civil monetary penalties for offering remuneration to a Medicare or Medicaid beneficiary that the offeror knows or should know is likely to influence the beneficiary to choose a particular provider for items or services paid by those programs. The statute defines remuneration to include items and services given for free or for less than fair market value. The HHS OIG policy statement of December 7, 2016 interprets nominal value as no more than 15 dollars per item or 75 dollars in the aggregate per patient per year. A free screening that leads straight to billable follow-up for program patients is the arrangement to review with counsel before you promote it.
• Anti-kickback. 42 U.S.C. 1320a-7b(b) makes it a crime to knowingly and willfully offer or pay remuneration to induce someone to refer patients for items or services paid by a federal health care program. Paying a host organization, a community group or a promoter per attendee who books with you is the kind of arrangement that needs legal review first.

Keep giveaways modest and generic, such as water bottles or pens, and avoid raffles of valuable prizes tied to booking an appointment. Our guides to marketing to Medicare patients and vein clinic marketing cover screening offers in more detail.

At the table: sign-in sheets, results and privacy

Once a clinician screens someone, your practice is handling health information about that person. If your practice is a HIPAA covered entity, plan the table as you would plan a waiting room.

The HHS Office for Civil Rights FAQ on sign-in sheets says covered entities may use patient sign-in sheets or call out names, so long as the information disclosed is appropriately limited. The Privacy Rule, at 45 CFR 164.502(a)(1)(iii), permits the incidental disclosures that result, such as one person seeing another’s name on the sheet, but only when the covered entity has reasonable safeguards and applies the minimum necessary standard. The FAQ’s example is direct: a sign-in sheet may not display medical information that is not needed for signing in, such as the reason for the visit. 45 CFR 164.530(c) requires reasonable safeguards to limit incidental uses and disclosures.

For an event table, that translates into a short checklist:

• Sign-in asks only for what you need to run the line. A name and a time are enough. Do not add columns for symptoms, conditions or medications.
• Results go on a card handed to the person, not read aloud across a crowded room and not written on a shared sheet.
• Screening happens where others cannot easily see or hear, such as a corner of the booth with a privacy screen.
• Paper leaves with your staff. Forms and sheets go into a closed folder or box at the table, and nothing is left behind when you pack up.
• Tablets and sign-up apps follow your usual rules. Use only tools whose agreements cover patient information, not a free form builder set up for the day. Our guide to online patient intake forms covers what to check.

After the event: follow-up needs the right permission

The follow-up is where an event pays off, and where practices most often go wrong. A list of people screened at an event, with their results, is health information. Using it for promotion has rules.

Under 45 CFR 164.501, marketing means a communication about a product or service that encourages the recipient to purchase or use it, with exclusions that include communications for the treatment of the individual by a health care provider, unless the covered entity is paid by a third party for making them. Under 45 CFR 164.508(a)(3), a covered entity must obtain an authorization for any use or disclosure of protected health information for marketing, except for a face-to-face communication made by the covered entity to the individual, or a promotional gift of nominal value.

Three practical consequences follow:

1. Talk at the table. Explaining your services to someone in person is a face-to-face communication. That is the moment to offer a card and invite them to book.
2. Follow up on the person’s own result as care, not as a campaign. A clinician calling someone about their own screening result to recommend next steps is closer to treatment. A promotional email blast to everyone screened, built from the results list, is the kind of use that needs an authorization, so get counsel’s view before you send one.
3. Ask for permission in writing when they sign up. If you want to send event attendees newsletters or offers, collect a separate opt-in that says what you will send. For texts, also follow the consent rules covered in our guide to text message appointment reminders.

Never share an attendee list with the host organization, a sponsor or a vendor for their own marketing. If a vendor helps with the follow-up, confirm what its agreement covers before any patient information reaches it. When the host is a school, student records follow FERPA as well as HIPAA; see our guide to school-based health center marketing.

Photos and social posts from the event

Event photos make good social posts, but a photo of someone having their blood pressure taken shows that they received a health service. If that person is your patient, using the photo to promote your practice is a use of protected health information for marketing, which needs a written authorization under 45 CFR 164.508. Even when HIPAA does not apply, ask for written permission before you post anyone’s photo.

The safest event photos show your team, your booth and the host’s signage, not people being screened. Our guides to patient testimonials and photos and a healthcare social media policy cover authorizations and posting rules.

If your screenings run from a van or coach that moves between sites, our mobile health clinic and mobile mammography guide covers stop schedules, Google listings, MQSA certificate wording and results timing.

An event plan, start to finish

Illustration: a family practice is invited to staff a table at a neighborhood health fair and wants to offer blood pressure checks and fingerstick glucose tests. A plan in this order keeps the event useful and within the rules.

1. Confirm testing coverage. Check that the glucose test is covered by the office’s CLIA certificate and that the event can be run under the home base certificate, as 42 CFR 493.35(b)(1) allows.
2. Ask counsel about the offer. Confirm the free checks and any giveaways are acceptable for Medicare and Medicaid attendees, and that nothing is paid to the host per patient.
3. Write the promotion. Name the tests, state that a screening is not a diagnosis, and put any conditions next to the word “free”.
4. Set up the table. A name-only sign-in sheet, a private corner for testing, result cards handed to each person and a closed box for paper.
5. Collect opt-ins separately. A short, optional form for people who want to hear from the practice, saying what they will receive.
6. Follow up correctly. Clinicians follow up on results that need it; promotional messages go only to people who opted in.
7. Post the right photos. Team and booth photos, or attendee photos only with written permission.

How we handle this

We help practices promote community events with landing pages, Google Business Profile posts and follow-up flows that keep sign-ups separate from health information. Our work is built with HIPAA in mind, and we confirm in writing what a BAA covers before any patient information flows through a tool; if it is not covered, we do not route patient information through it. We do not buy or sell lead lists. See our medical lead generation service for how we approach it.

Sources

• 42 CFR 493.2: Definitions (laboratory)
• 42 CFR 493.3: Applicability
• 42 CFR 493.35: Application for a certificate of waiver (health screening fairs)
• HHS Office for Civil Rights FAQ: May health care providers use sign-in sheets?
• 45 CFR 164.502: Uses and disclosures of protected health information (incidental disclosures)
• 45 CFR 164.530(c): Safeguards
• 45 CFR 164.501: Definitions (marketing)
• 45 CFR 164.508: Uses and disclosures for which an authorization is required
• 16 CFR 251.1: FTC Guide Concerning Use of the Word “Free”
• 42 U.S.C. 1320a-7a: Civil monetary penalties (beneficiary inducement)
• 42 U.S.C. 1320a-7b: Criminal penalties (anti-kickback)
• HHS OIG: Policy Statement Regarding Gifts of Nominal Value to Medicare and Medicaid Beneficiaries (December 7, 2016)
• FTC: Health Products Compliance Guidance

More in Healthcare advertising guides