What Indian Doctors Are Actually Allowed to Say Online

Updated 11 October 2026 for the National Medical Commission's ethical advertising guidelines.

Ask ten Indian doctors whether they are allowed to advertise and you will get ten different answers, most of them confident and several of them wrong. Until recently the confusion was understandable: the professional ethics code was restrictive but old, and the market was visibly full of clinicians running advertisements and building large followings.

That changed on 6 October 2026. The National Medical Commission issued its Guidelines on Ethical Advertising and Public Communication by Hospitals/Medical Institutions and Registered Medical Practitioners (Public Notice R-13014/01/2024-Ethics), in force with immediate effect. Here is a plain reading of what now governs a doctor's marketing in India, and where the real risk sits.

This is a practitioner's summary written by marketers, not legal advice. Regulations change, and enforcement varies. Confirm the current text with your regulator or your own counsel before you publish.

Five separate rulebooks apply, not one

The professional ethics framework. The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 still apply, and they treat soliciting patients as unethical. The National Medical Commission, which replaced the former Medical Council of India under the NMC Act 2019, now administers them. The 2026 guidelines are read with those regulations and the NMC Act (para 4.2), and they are far more specific: digital, social, sponsored, influencer-led, search-engine and AI-generated promotion all count as advertising when it is promotional (para 3.2). Hospitals and clinics are covered too, read with the Clinical Establishments Act or the state act that applies to them (para 4.3). State medical councils enforce against doctors.

The Drugs and Magic Remedies (Objectionable Advertisements) Act, 1954. Old, narrow and still enforced. It prohibits advertising remedies claiming to diagnose, cure or prevent a schedule of specified conditions. Any marketing that promises to cure a listed condition is exposed here regardless of the ethics code.

Consumer protection law. The Consumer Protection Act, 2019 and the central authority's guidelines on misleading advertisements and endorsements bring healthcare claims squarely into consumer-protection territory, with disclosure obligations attaching to endorsements.

Self-regulatory advertising standards. The Advertising Standards Council of India's code applies to advertising generally, and its guidance for health and wellness content sets expectations around who may give health advice in influencer content and how qualifications and material connections must be disclosed.

Data protection. The Digital Personal Data Protection Act, 2023 governs consent, notice, purpose limitation and data-principal rights for every enquiry form, CRM record and marketing list you hold. The NMC guidelines point to it directly (para 7.6).

Layered on top: the Telemedicine Practice Guidelines constrain how teleconsultation may be promoted, and clinical establishment registration and accreditation carry their own representation requirements.

The distinction that still resolves most of the confusion

The rules target solicitation and self-promotion: canvassing for patients, touting, claims of superiority, inducements. They do not stop a doctor from being findable, from being accurately described, or from educating the public. Public-health education that does not promote personal practice, solicit patients or get monetised through promotional marketing is expressly allowed (para 5.1), and so are talks on public health in your own name and designation (para 8.2(iii)).

What the 2026 guidelines add is precision about where the line sits:

Clearly on the safe side. A factual website. Accurate qualifications, registration details and areas of practice. Services offered, timings, location, and fees stated factually (para 8.1(x) allows factual disclosure of charges). A complete, accurate Google Business Profile. Genuine patient education explaining conditions and procedures, with risks and alternatives. Formal announcements about starting practice, a change of address or a temporary absence (para 8.2(ii)). For hospitals, factual institutional information: departments, facilities, equipment, emergency services, accreditation and charges (paras 8.3 and 9.1).

Clearly on the wrong side. "Best", "No.1", "top", "leading", "most trusted" or similar unless independently verifiable under a disclosed method (para 8.1(ix)). Guarantees of outcome, "painless" claims and success rates (para 8.1(iii)). Patient testimonials and reviews shared or requested by a doctor for promotion on social media (Explanation V to para 3.2). Before-and-after photos, surgical results, celebrity patients and success stories, unless strictly scientific or educational with anonymised consent (para 8.1(v)). Discounts, limited-period offers, coupons, cashbacks, referral benefits and free procedures used as inducements (para 8.1(x)). Influencers, celebrities or patients promoting your services (para 8.1(xi)). Bought followers, reviews or ranking manipulation (para 8.1(xii)). Claims to cure a condition covered by the 1954 Act.

No longer grey. Two things practices used to treat as judgement calls are now settled. Consent does not make a testimonial, promotional patient story or before-and-after permissible (para 6.2). And a vendor arrangement where an agency, influencer or platform is paid per patient or per referral is out (paras 8.1(vii) and 8.1(viii)).

Three new obligations most practices are missing

The disclosure line. Every electronic-media post by a doctor should show their name, qualifications, registration status and State Medical Register or National Medical Register number (Explanation III). Hospitals should show the same for every doctor they feature (Explanation IV). Put it on the post itself, not only in the bio.

AI rules. AI-generated promotional campaigns for commercial interest are prohibited. Any AI-generated content that otherwise complies must carry a source mark stating that it is AI-generated, and AI must never create synthetic patients, testimonials, voices or endorsements that appear to come from a real person (para 7.2).

Agencies don't shield you. Publishing through an agency, influencer or platform does not absolve the doctor or hospital of content they authorised, commissioned or knowingly permitted (para 4.4).

What it costs to get wrong

The guidelines set out a graded ladder a State Medical Council may apply (para 10.1): a warning and mandatory ethics training for a first violation; censure and a monetary penalty for a second; suspension of registration for three to six months for a third; six to twelve months for serious violations such as misleading cure claims, inducements or digital mass solicitation; and removal from the register for one to three years for repeated violations. A show-cause notice comes first. Hospitals are dealt with under their clinical establishments law, and a doctor who authorised the content can face the council separately.

Where practices actually get into trouble

A superlative in a headline. "Best fertility specialist in the city" is now named almost word for word in the guidelines, and it is still the most common single problem on Indian clinic websites.

An outcome number with nothing behind it. Success rates, cure rates, patient counts, satisfaction scores: often inherited from an agency that invented them for design purposes. Para 8.1(iii) bars advertising them.

Patient content. Testimonial reels, reshared thank-you posts, review screenshots and before-and-after carousels. Archive them, and replace them with education.

Fixing these costs nothing and removes most of the exposure. Our NMC guidelines hub walks through every clause with a channel-by-channel checklist, and the NMC compliance handbook is the version to hand your team.

The data layer nobody has addressed

The DPDP Act changes the enquiry form from a design element into a compliance artefact. The practical requirements:

• A clear notice at the point of collection: what you are collecting, why, and what it will be used for.
• Purpose limitation. Data collected to arrange care cannot be repurposed for marketing without consent for that purpose. Uploading a patient contact list into an advertising platform to build audiences is the shortcut to avoid.
• Separate marketing consent, recorded — the date, the mechanism, and the wording the patient actually saw.
• Withdrawal and erasure that actually work operationally, not just as a line in a privacy policy.
• Vendor discipline. Whoever processes patient data on your behalf needs a contract that reflects it, and you need to know where the data sits.

While you are in there, keep condition names out of URLs and query strings, and check what your website is sending to third-party scripts before consent. A page about a diagnosis, plus a device identifier, sent to an advertising platform, is a disclosure you almost certainly did not intend to make.

What a workable governance routine looks like

You do not need a compliance department. You need four habits.

A claims register. A single sheet listing every factual claim on your website and marketing material, with the evidence next to it. Anything without evidence comes off. Review it quarterly.

One reviewer. Every piece of public content — including social posts and video — is read by one named person against the claims register and the NMC checklist before it goes out, and the approval is logged.

A consent record. Where any patient material is used lawfully, for example an anonymised case in a journal or CME talk, consent must be specific, informed, voluntary, documented and verifiable (para 6.3), with a process for withdrawal.

Vendor terms. Fixed fees for defined work, written approval rights, and no payment linked to patients, appointments or leads.

The strategic point

Everything the rules prohibit is also, in 2026, ineffective. Search engines increasingly reward demonstrated expertise and penalise thin promotional content. Patients have seen enough superlatives to discount them automatically. The claims that carry regulatory risk are the same claims that no longer persuade.

What remains — depth, transparency about what a procedure involves, honest cost information, real credentials, fast and human responses — is both compliant and, measured over any reasonable horizon, the thing that actually builds a practice.

Our NABH and ASCI compliance notes cover the standards side in summary form, and the healthcare marketing guide covers the strategy. If you want your existing site and social accounts read against the NMC guidelines before somebody else reads them that way, request the free NMC compliance audit.