AHPRA-Compliant Marketing: What You Can and Cannot Say in 2026

If you run a clinic or a regulated health service in Australia, your marketing is governed by rules most other businesses never have to think about. And the penalties are real: AHPRA can require you to pull advertising, and breaches can affect your registration. The catch is that the rules are not always intuitive, and the single most common mistake, using testimonials, has a nuance that almost everyone gets wrong.

This is a plain-English guide to what you can and cannot say when advertising a regulated health service in 2026. It is general information, not legal advice, the AHPRA advertising guidelines are the source of truth, but it will keep you out of the obvious traps.

First, what counts as advertising

Almost everything public-facing. Your website, your social media pages, your Google Business Profile, your ads, your brochures, all of it is advertising a regulated health service if it promotes your clinic. That matters because the rules apply everywhere, not just to paid ads. A clinic's Facebook page is advertising. So is the review section on your Google profile, which is where a lot of clinics unknowingly breach.

The testimonial rule, and the nuance everyone misses

This is the big one. Under the National Law, you cannot use testimonials to advertise a regulated health service. A testimonial, in AHPRA's terms, is a recommendation or positive statement about the clinical aspects of the service. "Dr Smith fixed my chronic back pain" is a testimonial. You cannot use it, and you are responsible for removing ones you control.

Here is the nuance that trips people up: comments that are not about clinical aspects are not testimonials. Feedback about your customer service, the friendliness of reception, how easy parking was, how clearly something was explained, those are not testimonials under the National Law and may be used. AHPRA itself draws this line. So "the staff were lovely and the clinic was easy to find" is fine; "the treatment cured my condition" is not.

The practical problem is reviews on your Google Business Profile. Patients leave reviews that mention clinical outcomes, and because your profile is advertising you control, you are responsible. AHPRA's own guidance is that you may need to manage this, including by addressing the review functions where required. This is exactly the kind of thing worth getting professional help with, our Google Business Profile management for healthcare clients is built around these rules.

What else you cannot say

Beyond testimonials, the rules bar advertising that:

• Is false, misleading, or deceptive, or likely to be. This includes implying a result you cannot guarantee.
• Creates an unreasonable expectation of benefit. Patient stories and "journeys" that describe the personal outcome someone got from treatment can fall foul of this, because one person's outcome is not what everyone will experience.
• Offers a gift, discount, or inducement without stating the terms.
• Uses fear to encourage someone to use a service.
• Encourages indiscriminate or unnecessary use of health services.

The theme running through all of it: do not promise outcomes, do not exploit, do not mislead. If a claim would make a patient expect a result you cannot reliably deliver, leave it out.

What you absolutely can do

The rules are not a gag order. You can market a clinic well and compliantly. You can:

• Describe your services factually, what you do, for whom, where.
• State genuine qualifications and registration (and for many practitioners, you must).
• Share genuinely educational content, the kind of explainer articles that help patients understand a condition or procedure without promising them an outcome.
• Use reviews about non-clinical aspects, service, communication, accessibility.
• Show your team, your premises, your process, the things that build trust without making clinical claims.

Educational content is the strongest play here, because it builds authority and trust without going anywhere near the testimonial line. A clear, factual article answering the questions patients actually ask is both good marketing and safely compliant.

Where clinics get caught out

A few recurring traps worth naming. Before-and-after images that imply a typical result. Star ratings or testimonials embedded on the website. Influencer or patient "journey" posts on social media. Reviews on the Google profile mentioning clinical outcomes that the clinic has not addressed. Language like "best", "safest", "painless", or "guaranteed". Each of these is common, and each is a breach risk.

The safest approach is to build the marketing on factual service descriptions and genuine education, keep the testimonial/clinical-claim line clearly in mind, and actively manage the review surfaces you control.

The honest summary

AHPRA-compliant marketing is not about saying less, it is about saying the right things. Describe what you do plainly. Educate generously. State your real qualifications. Use non-clinical feedback where it helps. And stay well clear of testimonials about clinical outcomes, outcome promises, and anything that creates an expectation you cannot guarantee.

Get that framework right and you can market a clinic confidently without lying awake about a breach. We are the best in Australia at compliant clinic marketing, we know these rules cold, and we build everything against the AHPRA guidelines so you never have to think about them. Book a free strategy call and we will build you marketing that brings in patients and stays bulletproof.

Frequently Asked Questions

Can I use patient reviews in my healthcare advertising?

It depends on what they say. Reviews about clinical aspects, recommendations or statements about treatment outcomes, are testimonials and cannot be used. Reviews about non-clinical aspects, like customer service, communication, or accessibility, are not testimonials under the National Law and may be used. The distinction is the clinical content, not the format.

Am I responsible for reviews patients leave on my Google profile?

For advertising you control, yes. Your Google Business Profile promotes a regulated health service, so AHPRA considers it advertising. You are responsible for managing testimonials within it, which can include addressing the review functions where required. This is one of the most commonly missed compliance points for clinics.

What words should I avoid in healthcare marketing?

Avoid anything that promises or implies an outcome ("guaranteed", "cure", "best", "safest", "painless"), anything misleading, and anything that creates an unreasonable expectation of benefit. Also avoid using fear to drive bookings. Factual, descriptive language about your services is the safe ground.

Can I still do marketing as a healthcare provider, or is it all banned?

You can absolutely market, and well. You can describe your services factually, state your qualifications, publish educational content, show your team and premises, and use non-clinical feedback. The rules restrict misleading and outcome-promising claims, not honest, educational, professional marketing.

Is this legal advice?

No. This is general information to help you avoid common traps. The AHPRA advertising guidelines are the authoritative source, and for anything uncertain you should check them directly or get qualified advice. We build clinic marketing against these guidelines, but compliance ultimately rests with the advertiser.

If you want a marketing setup that respects these rules from day one and actually fills your appointment book, book a free strategy call. Compliant and effective is exactly what we do best.