Unlike India, the United States lets doctors advertise freely — as long as they never mislead. But that freedom sits on top of the FTC, HIPAA, state medical boards, the FTC's new fake-reviews rule, and the anti-kickback laws. Here is exactly where the lines fall and how to market a US practice without inviting an enforcement action.
If you have read our guide to India's medical advertising rules, the United States will feel like a different planet. In India the default is "doctors may not advertise." In the US the default is the opposite: truthful, non-misleading physician advertising is constitutionally protected commercial speech. Ever since the Supreme Court's decision in Bates v. State Bar of Arizona (1977), professional advertising has been protected by the First Amendment, and states may regulate false or deceptive advertising but cannot ban truthful advertising outright.
So the American rule, in one sentence, is this: you may advertise — just never lie, never mislead, and never expose patient information without permission. That sounds simple, and at the level of principle it is. But underneath it sits a dense stack of federal and state law — the FTC, FDA, HIPAA, the TCPA, the federal Anti-Kickback Statute and Stark Law, fifty different state medical boards, and a brand-new FTC rule on fake reviews — and a single careless campaign can breach several of them at once. This guide walks through all of it and ends with a practical playbook for marketing a US practice safely. (As always: this is general information, not legal advice. Verify specifics with a healthcare attorney and your state board.)
The reason US doctors can do things their Indian counterparts cannot — name prices, run comparative ads, publish patient testimonials, advertise specific procedures — is that American law treats medical advertising as commercial speech that the public benefits from receiving, rather than as solicitation that must be suppressed. The state's role is limited to policing deception.
That single philosophical difference cascades into everything below. The American questions are never "am I allowed to advertise this?" They are "is this claim true, is it substantiated, is it misleading in its overall impression, and do I have the right consents?" Get those four right and you have enormous latitude. Get them wrong and the penalties are severe.
The FTC Act is the master rule of truthful advertising. The Federal Trade Commission requires that advertising be truthful and not misleading, and — critically — that claims be substantiated before they are made. For health claims specifically, the FTC applies a high bar it calls "competent and reliable scientific evidence," which for a meaningful health benefit generally means well-designed human clinical studies. This applies to express claims and to implied claims, and the FTC looks at the "net impression" an ad creates: an advertisement every word of which is literally true can still be illegal if the overall impression misleads. A disclaimer in fine print cannot rescue an ad that is deceptive on its face.
HIPAA governs every use of patient information in marketing — and this is where most practices stumble. Under the HIPAA Privacy Rule, using protected health information for marketing generally requires a valid, written patient authorization. That includes patient testimonials, patient names, patient stories, and patient photographs — and yes, before-and-after photos are protected health information. There are only narrow exceptions (face-to-face communications and nominal promotional gifts). The authorization must be specific about what is being used and for how long, it is revocable, and if the practice is being paid by a third party in connection with the marketing, that must be disclosed. The practical rule: never put a real patient's image, words, or story into your marketing without a signed HIPAA authorization on file, and never reuse it beyond what they authorized.
HIPAA also limits how you respond to reviews. This catches many doctors by surprise. When a patient leaves a negative online review, you may not confirm in your public reply that the person was even a patient, and you certainly may not discuss their care — doing so discloses protected health information, and the federal Office for Civil Rights has penalized providers for exactly this. Respond generically and move specifics to a private channel.
The FDA governs the promotion of prescription drugs and medical devices. Most of its rules bind manufacturers, but a practice that promotes a specific branded drug or device — a med-spa marketing a branded injectable, for example — can be drawn into them.
The TCPA governs marketing by phone and text. Marketing calls or texts sent by autodialer or with a prerecorded voice generally require prior express written consent. Statutory damages run at a fixed amount per message and rise for willful violations, with no aggregate cap — which is why TCPA class actions are a genuine business risk, not a footnote.
The Anti-Kickback Statute and Stark Law turn certain marketing arrangements into federal offences. If a "marketing" deal is really a payment for referrals of patients whose care is billed to a federal program — per-patient lead-generation fees, affiliate referral cuts, paid arrangements dressed up as marketing — it can be a kickback. The Anti-Kickback Statute is criminal and requires intent; Stark is civil and is strict-liability. Many states have their own anti-kickback and fee-splitting laws that apply even to cash-pay practices outside the reach of federal programs.
On top of all that federal law, every state medical board independently prohibits false, deceptive, or misleading advertising and can discipline the individual physician's license. The FTC regulates the business; the board regulates the doctor. The rules vary materially from state to state.
The most common state-level trap is board-certification and specialist claims. Many states (California and Texas are leading examples) only permit a physician to advertise as "board certified" if the certifying board is a recognized one — typically a member board of the American Board of Medical Specialties or an equivalent. Advertising "board eligible," or claiming a specialty you are not certified in, or implying surgical training you do not have while marketing cosmetic surgery, is a recurring source of board discipline. If you advertise credentials, make sure they are stated precisely and are from a qualifying body.
Because the US default is permissive, the list of permitted marketing is long: truthful advertising of your services, locations, and hours; your genuine credentials and training; price and financing advertising (protected since Bates); accurate board-certification claims; educational and reputation content; and even patient testimonials and before-and-after photos — provided you have HIPAA authorization, the results shown are representative, and any material disclosures are clear.
The prohibited list is about deception, not promotion. Off-limits: false or misleading claims, including a misleading net impression even when each word is true; unsubstantiated superiority claims ("best," "#1," "safest") and guarantees of outcome ("guaranteed results," "painless," cure claims) without rigorous evidence; testimonials that present atypical results as typical, or that come from non-patients; undisclosed paid endorsements; before-and-after photos that are filtered, mismatched, or non-representative; any use of patient information without authorization; and marketing arrangements that are disguised kickbacks.
Two recent FTC actions changed the landscape for online marketing and deserve special attention, because healthcare marketing leans heavily on reviews and influencers.
The updated FTC Endorsement Guides (2023) require that any material connection between an endorser and the advertiser — employment, family, payment, or even free or discounted products — be disclosed clearly and conspicuously, and in social media that disclosure must be hard to miss, not buried in a bio or behind a "more" link. They also reach incentivized reviews and the use of testimonials.
The FTC's fake-reviews rule (16 CFR Part 465), effective October 21, 2024, is the first binding FTC rule on reviews, and it carries civil penalties. It prohibits, among other things: fake or AI-generated reviews and reviews by people who did not use the service; buying reviews that express a particular sentiment (positive or negative); insider reviews by employees, officers, or their relatives without clear disclosure; company-controlled "review sites" presented as independent; review suppression — using threats or intimidation to remove negative reviews, or showing only the positive ones while hiding the negative; and buying fake followers or engagement to misrepresent influence.
For a medical practice, this rule directly outlaws several common tactics: review gating (sending only happy patients the review link while diverting unhappy ones), incentivizing five-star reviews, and posting staff reviews without disclosure. Recent FTC enforcement against telehealth and weight-loss marketers — for fake testimonials, fabricated before-and-after photos, manipulated third-party reviews, and hidden fees — shows the agency is actively policing exactly this space.
The consequences span regimes and stack. FTC actions bring cease-and-desist orders, mandated corrective advertising, consumer refunds, and — where a rule like the fake-reviews rule is violated — substantial per-violation civil penalties (the FTC adjusts the maximum annually for inflation). State medical boards can reprimand, fine, restrict, suspend, or revoke a license. HIPAA violations carry tiered civil penalties that climb steeply for willful neglect, plus criminal penalties for knowing wrongful disclosure. Anti-Kickback breaches are criminal and can mean prison and exclusion from federal programs; Stark brings refunds and civil penalties. TCPA exposure is per-message with no cap. And competitors can sue for false advertising under the Lanham Act, while patients can pursue consumer-protection and misrepresentation claims. Beyond the formal penalties, an enforcement action in healthcare is reputationally devastating.
The good news is that the most effective American healthcare marketing is also the most compliant. Build a complete, accurate digital presence — your services, credentials, locations, and honest pricing. Compete on findability and education: rank for the conditions you treat by explaining them accurately, because the systems that rank health content are actively trying to reward genuine, clearly-attributed expertise. Use testimonials and before-and-after imagery if you wish, but only with signed HIPAA authorizations, representative results, and required disclosures. Gather reviews honestly — never gate them, never buy them, never incentivize sentiment, and always disclose insider connections. Respond to reviews without ever confirming someone was a patient. Disclose every material connection in influencer and endorsement content. Get any phone or text marketing onto proper written consent. And structure any third-party marketing relationship so it can never be characterized as payment for referrals.
Do those things and you can market a US practice aggressively and confidently, with the First Amendment behind you and none of the enforcement risk in front of you.
This is general educational information, not legal advice. US medical advertising law is federal, state, and constantly evolving, and several figures and rules above are inflation-adjusted or amended periodically. Confirm the current position with a qualified US healthcare attorney, your state medical board, and the relevant federal agency before acting.
Writing on healthcare growth, AI-powered patient acquisition, and the operational reality of marketing inside hospitals and clinics.
The exact 90-day patient-acquisition system, step by step.
Third-party targeting is fading and health data carries the strictest handling rules of any category. Building your own …
A cardiology patient and a maternity patient do not share a journey, yet most hospitals market to them identically. Here…
Browser-based pixels are losing data and creating compliance risk on medical websites. Here is how to move healthcare me…
Six reasons hospitals, clinics, and doctors pick a healthcare-only firm over a generalist agency.
It's all we do. No retail, no fintech — the whole team thinks in patient journeys, clinical trust, and the way people actually choose a doctor.
Receptionists, WhatsApp triage, and attribution built in-house — we answer patients in seconds and tie every click to a booked appointment.
HIPAA, ASCI, NABH and GDPR sign-off baked into every campaign — our standard, not an upcharge or an afterthought.
The senior who pitched you stays on the engagement. No bait-and-switch to juniors learning on your budget.
Patient-level attribution across calls, forms, and walk-ins. Monthly reports show booked patients — not just clicks and impressions.
We name our clients and show the work. Quarterly reviews with the numbers attached, every cycle.
Adjacent practices, the relevant tools, and the case files where we shipped this thinking against real patient-acquisition targets.
