That every business should have asocial media policy in place is a given. I have no doubt that the Mayo Clinic have a detailed policy in place, besides this brief one listed below, which though pithy, covers all the bases beautifully.
Don’t Lie, Don’t Pry
Don’t Cheat, Can’t Delete
Don’t Steal, Don’t Reveal