Health systems and hospitals should have social media policies but should avoid limiting protected speech, a legal expert says.