Digital transformation has made social media part of the health service ecosystem. Medical personnel, health workers, and health care facilities use it for education, communication, health promotion, professional networking, and service information delivery. On the other hand, the character of social media that is open, easy to replicate, and has a digital footprint raises legal problems when the content contains identities, health conditions, medical records, photos or videos of patients, professional communications, and inaccurate health information. This study aims to examine the legal aspects of the use of social media in health service practice through the literature review method. Literature searches were carried out on laws and regulations, journal articles, professional guidelines, and scientific literature that discuss patient confidentiality, personal data protection, medical records, consent, digital professionalism, and legal responsibilities of health workers. The selected sources were analyzed thematically to identify patterns of legal problems and forms of risk mitigation. The results of the study show that the use of social media in health services can in principle be carried out as long as it fulfills confidentiality obligations, personal data protection, legitimate consent, professionalism, information accuracy, and professional relationship limits. Patient consent does not necessarily remove all legal obligations because the processing of health data must still meet the principles of purpose, proportionality, security, and accountability. Social media policies are needed at the level of health care facilities, special approval mechanisms for publication, data de-identification, content verification, separation of personal and professional accounts, and incident response procedures. Strengthening governance is important to protect patients' rights while maintaining the benefits of social media for education and health services.