Review Medical Advertising Before Claims, Testimonials, and Patient Images Go Live

The Federal Trade Commission regulates advertising claims across all industries, but healthcare marketing receives particular scrutiny. The FTC's Endorsement Guides, updated in 2023, establish baseline requirements that apply regardless of your state's medical board rules.

Testimonials and Typical Results

Patient testimonials must reflect honest opinions based on actual experience and cannot communicate claims the advertiser could not substantiate directly. If a testimonial conveys results consumers cannot generally expect, substantiate the claimed typicality or clearly and conspicuously disclose the generally expected performance.

The old "results may vary" disclaimer no longer provides adequate protection. If a testimonial describes dramatic weight loss, pain elimination, or cosmetic transformation, the FTC expects adequate substantiation or a clear and conspicuous disclosure of the generally expected performance.

Editing, excerpting, headlines, surrounding copy, and visual presentation all shape the message a testimonial conveys, so check them against the patient's original statement and escalate statements about dramatic clinical, cosmetic, pain, weight, recovery, or functional outcomes before publication.

Material Connections

Any relationship that might affect a testimonial's credibility must be disclosed. This includes:

• Patients who received discounted or free services in exchange for reviews
• Staff members or their family members providing testimonials
• Influencers or content creators with any compensation arrangement
• Patients participating in referral programs where testimonials generate rewards

Disclosures must be clear and conspicuous-not buried in fine print or hidden behind "more" links on social media. The standard is whether a reasonable consumer would notice and understand the disclosure.

Evaluate disclosure placement and wording in the actual format used, including mobile screens, video, short-form social content, landing pages, and paid ads. In practice, each type of relationship calls for its own handling:

• Patient incentives - Do not purchase positive sentiment or condition a benefit on favorable review content.
• Staff and family endorsements - Make the relationship visible when it could affect how the statement is understood.
• Influencer arrangements - Document compensation, services, affiliate relationships, and any instructions given to the creator.
• Referral programs - Separate lawful patient-acquisition programs from testimonial claims and check whether a reward creates a disclosure or professional-rule issue.

This is educational content, not legal advice. Consult healthcare marketing counsel for guidance specific to your campaigns.

While FTC guidelines create a federal baseline, state medical boards impose additional-and often stricter-advertising requirements. These rules vary significantly, making multi-state practices particularly complex to market.

A campaign prepared for one state should be reviewed before it is reused in another, because requirements depend on the jurisdiction, the clinician's license, the service advertised, and the wording or media used.

Common State Board Prohibitions

Most state medical boards restrict or prohibit:

• Superlative claims: "Best surgeon in" plus a city name, or "top-rated practice", without objective substantiation
• Guarantees of outcomes: Promising specific results from treatment
• Misleading credentials: Implying board certifications or specialties not actually held
• False or deceptive statements: Any claim that could mislead patients about qualifications, experience, or results

State-Specific Examples

California's Medical Practice Act requires that any claim of board certification specify the certifying board and whether it's ABMS-recognized. Texas Medical Board rules prohibit advertising that "is not readily subject to verification" and require specific disclosures for certain cosmetic procedures.

Florida's Board of Medicine mandates that testimonials include disclaimers that results may vary and that the testimonial doesn't guarantee similar outcomes. New York requires disclosure of physician-ownership interests in facilities advertised.

For every state in which the practice advertises, identify the applicable authority, retrieve current guidance, record the date reviewed, and note affected website pages, ads, landing pages, profiles, or social campaigns.

Credential and Specialty Claims

How you describe specialization matters significantly. Many states restrict use of "specialist" terminology unless you hold board certification in that specialty. Fellowship training or focused practice areas may need careful language to avoid implying certification you don't possess.

Terms such as specialist, board-certified, fellowship-trained, expert, or center carry meanings that patients interpret as professional qualifications. Build state-rule review into ongoing marketing review because services, clinicians, locations, credentials, advertising channels, and jurisdictions change.

Rules change-verify current advertising requirements with your state medical board before launching new campaigns.

Patient reviews and testimonials represent both a marketing necessity and a compliance challenge. The rules apply whether you're featuring quotes on your website, responding to Google reviews, or sharing patient stories on social media.

An independently posted review is different from a quote the practice selects, edits, republishes, promotes, or pairs with marketing claims. Build separate workflows for requesting honest public feedback, using patient endorsements in advertising, and responding to reviews.

What You Can and Cannot Do With Reviews

Generally permissible:

• Inviting patients to share honest feedback without selecting only those expected to be positive, scripting sentiment, or conditioning incentives on review content
• Displaying authentic, unedited patient testimonials with appropriate disclosures
• Responding to reviews with general practice information (while maintaining HIPAA compliance)

Generally problematic:

• Offering discounts, gifts, or other incentives for positive reviews without clear disclosure
• Editing patient testimonials to make results sound more dramatic
• Featuring exceptional outcomes without substantiating typicality or clearly and conspicuously disclosing generally expected performance
• Compensating patients for testimonials without disclosure of the arrangement

The Intersection With HIPAA

Review responses create unique compliance challenges. Even acknowledging someone is your patient technically confirms protected health information. Many practices adopt policies of responding only with general information that neither confirms nor denies the patient relationship. Our HIPAA compliance guide covers patient review response protocols in detail.

Keep appointments, diagnoses, treatment, outcomes, records, billing, and other patient-specific facts out of public responses, and have practice-specific response policies approved by the appropriate privacy and legal reviewers.

Social Media Testimonials

Patient success stories shared on Instagram, TikTok, or Facebook carry the same FTC and state board requirements as website testimonials. Video testimonials need verbal or on-screen disclosures, not just description text that viewers might miss. Patient authorization for social media differs from HIPAA authorization-both may be required.

Video, short-form clips, captions, overlays, and linked landing pages all contribute to the message a viewer receives, so review the endorsement, authorization, disclosure, editing, and claim implications in the actual medium used.

Before/after imagery drives significant patient interest, particularly for cosmetic, dermatologic, and weight management practices. These photos also carry the highest compliance risk in medical advertising.

Before-and-after imagery can communicate a strong outcome claim even when the surrounding copy is restrained, so the comparison itself, how the images were produced, and any material differences between them all need attention.

Common Disclosure Requirements

Most regulatory frameworks expect before/after photos to include:

• Whether the results shown are typical or exceptional
• Any photo enhancements, lighting differences, or editing applied
• The timeframe between photos
• Whether the patient received additional treatments affecting results
• Patient authorization for commercial use of their images

Pose, camera angle, image processing, makeup, clothing, cropping, and retouching can alter the viewer's impression as much as lighting, and the patient authorization should cover the exact commercial use, channel, duration, and media.

State-Specific Before/After Rules

Some states impose detailed requirements. California's Medical Board has issued guidance on cosmetic surgery before/after photos requiring disclosure of whether results are representative. Florida requires that before/after images not be "deceptive or misleading" and mandates certain disclaimers for cosmetic procedures.

Platform-Specific Policies

Beyond regulatory requirements, advertising platforms impose their own rules. Google Ads restricts before/after imagery for certain procedure types. Meta's advertising policies prohibit images that imply unrealistic expectations or focus excessively on specific body parts. Violating platform policies can result in ad account suspension-a separate consequence from regulatory issues.

Platform policies change, so check the current rule for the exact ad format, audience, procedure, image, landing page, and claim.

Documentation Practices

Maintain records of:

• Patient authorization forms specifically covering marketing use
• Original, unedited photos alongside any enhanced versions used
• The disclosures and disclaimers used with each image set
• The platforms and contexts where images were published

This documentation provides defense if a board investigator or FTC inquiry questions your practices later.

Understanding how compliance issues typically surface helps practices prioritize protective measures. Enforcement doesn't happen randomly-certain patterns attract regulatory attention.

Identify Channels Through Which Problems May Surface

Competitor complaints: Other practices in your market may file complaints about advertising they consider misleading or non-compliant. State boards are required to investigate formal complaints.

Patient complaints: Patients who feel misled by advertising-particularly when outcomes don't match expectations set by marketing-may file board complaints as part of broader grievances.

Board monitoring: Some state boards actively monitor physician advertising, particularly in competitive specialties like cosmetic surgery and pain management. California and Texas have conducted targeted advertising audits.

FTC sweeps: The FTC periodically conducts enforcement sweeps focused on specific industries or advertising practices. Healthcare testimonials and endorsements have been focus areas.

Maintain support for important claims so the practice can explain the basis for each advertisement, and preserve the version that was live at the relevant time.

Potential Consequences

Advertising violations can result in:

• Board investigation and the associated time, stress, and legal costs
• Requirements to modify or remove advertising
• Public reprimands or citations appearing on your license record
• Fines (amounts vary by state and violation severity)
• License probation or, in extreme cases, suspension
• FTC consent orders requiring ongoing compliance monitoring

Platform restrictions on ad accounts can follow as a separate consequence.

Proactive Protection

Practices that document their compliance reasoning-why specific claims are substantiated, how disclosures were crafted, what training staff received-have stronger positions if questions arise. The existence of a thoughtful compliance process, even if imperfect, demonstrates good faith.

When a complaint or inquiry is received:

• Preserve the advertisement, landing page, social post, testimonial, image, or paid creative as it appeared.
• Record evidence used to support the claim and reviewers involved.
• Identify whether the issue involves federal advertising law, professional rules, patient privacy, platform policy, or several layers.
• Escalate to responsible legal, medical, privacy, or regulatory reviewers.

Compliance doesn't mean ineffective marketing. Many successful practices build patient acquisition systems that work within regulatory boundaries-it simply requires more intentional strategy.

What Works Within Compliance Frameworks

Educational content marketing: Detailed information about conditions, treatments, and what patients should expect positions your practice as authoritative without making claims that trigger scrutiny. This approach aligns well with SEO-search engines reward comprehensive, helpful content.

Credential-focused positioning: Emphasizing verifiable credentials, actual training, published research, and professional affiliations builds credibility through facts rather than superlatives. "Board-certified plastic surgeon with fellowship training at" a named institution is more defensible than "top surgeon in the area."

Properly disclosed testimonials: Patient stories remain powerful when handled correctly. Clear disclosures, representative outcomes, and authentic voices can drive conversions while staying compliant.

SEO Within Advertising Rules

Search engine optimization operates somewhat differently than direct advertising, but your website content still falls under FTC and state board jurisdiction. The service pages, procedure descriptions, and practice information you optimize for search must meet the same truthfulness and substantiation standards.

Working with an SEO provider experienced in healthcare marketing-one who understands both search algorithms and regulatory constraints-helps you build visibility while keeping compliance exposure low. Our approach to regulation-compliant SEO for medical practices builds this consideration into strategy from the start.

Physician biographies, location pages, title tags, headings, snippets, and schema-visible facts are public communications about the practice too. When evaluating an SEO provider, ask who verifies physician facts, who flags clinical or comparative claims, which patient data the provider can access, and how state-specific issues are escalated.

Ongoing Compliance Maintenance

Advertising compliance isn't a one-time project. Rules evolve, new guidance issues, and your marketing materials accumulate over time. Establish periodic reviews of all active advertising-website content, social media, paid campaigns, printed materials-to catch issues before regulators or competitors do.

Maintain an inventory of active website claims, paid ads, social campaigns, testimonial uses, patient images, physician credentials, and platform-specific creative. Review materials when clinicians, credentials, procedures, jurisdictions, platforms, or supporting evidence change.

This guide provides educational overview, not legal advice. Consult healthcare marketing attorneys for compliance review of your specific advertising materials.