UK healthcare ads are policed by the ASA under the CAP Code, with GMC duties for doctors, CQC rating-display rules for providers, a ban on advertising prescription-only medicines such as Botox, and a statutory ban on fake reviews since April 2025.
This is a working summary for marketing teams, not legal advice. Every rule below names the instrument it comes from so you can read the source rather than take our word for it, and so you can tell when something here has gone out of date.
Who regulates healthcare advertising in the United Kingdom
- ASA and the CAP Code (non-broadcast), sections 2, 3 and 12, with the CAP/BCAP guidance on cosmetic interventions
- GMC Good medical practice 2024 and GMC guidance on social media, cosmetic interventions and patient recordings
- Human Medicines Regulations 2012, reg 284, and the MHRA Blue Guide
- Digital Markets, Competition and Consumers Act 2024, Schedule 20 (in force 6 Apr 2025), with CMA guidance CMA208 on fake reviews
- Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, reg 20A: CQC rating display
- UK GDPR, the Data Protection Act 2018 and PECR
More than one of these usually applies at once. A campaign can satisfy the advertising regulator and still breach the data-protection one, which is the failure mode that catches most practices: the creative gets reviewed and the tracking does not.
The rules that actually change what you can publish
- No ads to the public that are likely to lead to use of a prescription-only medicine, including Botox and weight-loss injections. Indirect wording such as “weight-loss jab” is caught (HMR 2012 reg 284; CAP 12.12).
- Fake reviews and reviews that hide an incentive have been banned outright since 6 Apr 2025. Inviting only satisfied patients is cherry-picking (DMCC Sch. 20 para 13; CMA208 para 4.5).
- Testimonials must be genuine, held on file with contact details, relevant and used with permission (CAP 3.47–3.50).
- Before/after needs signed, dated proof from the patient and unretouched originals, and is not acceptable for Botox (cosmetic interventions guidance paras 28–35).
- Hold evidence before making an objective claim. “Leading” or “best” surgeons must be provably near the top of their specialty (CAP 3.7; guidance para 13).
- No countdown clocks or “offer ends Friday” pressure for cosmetic procedures, and no cosmetic ads aimed at under-18s (guidance paras 65–69; CAP 12.25).
- Paid posts must carry an upfront “#ad” label (CAP 2.1).
- Registered providers must show their current CQC rating on every website they run, and must not present CQC registration as an endorsement (reg 20A).
At a glance: tactic by tactic
| Tactic | Where it stands | What applies |
|---|---|---|
| Patient testimonials | Allowed with conditions | Allowed if genuine, held on file with the person's contact details, relevant to the service and used with permission. Not for prescription-only medicines. Source: CAP Code 3.47–3.50, 12.18. |
| Asking for and showing reviews | Allowed with conditions | Invite every patient or a random sample, never only happy ones. Fake reviews and undisclosed incentives are banned, and negative reviews must be published on the same terms as positive ones. Source: DMCC Act 2024 Sch. 20 para 13; CAP Code 3.44–3.46; CMA208 para 4.5. |
| Before-and-after images | Narrow exceptions | Allowed with signed, dated proof from the patient and unretouched originals kept on file. Not acceptable for Botox or other prescription-only medicines. Source: CAP/BCAP cosmetic interventions guidance paras 28–35. |
| “Best”, “No.1” and guarantee claims | Narrow exceptions | Objective claims need evidence on file. “Leading” or “best” surgeons must be provably near the top of their specialty, and doctors must not imply results are risk-free or guaranteed. Source: CAP Code 3.7, 12.1; CAP/BCAP cosmetic guidance para 13; GMC cosmetic guidance paras 49, 51. |
| Prices, discounts and offers | Narrow exceptions | No price promotions or free offers for prescription-only medicines. Cosmetic promotions may not pressure: no countdown clocks or “ends Friday”. Prices must include all fees. Source: MHRA Blue Guide App. 6; CAP/BCAP cosmetic guidance paras 65–69; CAP Code 3.17–3.22. |
| Influencers and endorsements | Narrow exceptions | Paid posts need an upfront “#ad” label. No influencers or health professionals endorsing prescription-only medicines, and no cosmetic ads aimed at under-18s. Source: CAP Code 2.1, 12.18, 12.25; DMCC Act 2024 Sch. 20. |
| A doctor promoting their own practice | Allowed with conditions | Allowed if accurate, not misleading and not minimising risk, with conflicts of interest declared. “Consultant”, “specialist” and “qualified” need the matching register entry or post. Source: GMC Good medical practice 2024 paras 89–90; CAP/BCAP cosmetic guidance paras 6–11. |
| AI-generated content | Narrow exceptions | No AI-specific rule, and an AI label does not cure a misleading ad. AI patients, doctors or results presented as real would breach the CAP Code. Source: ASA guidance on AI in ads (2025, 2026); CAP Code 3.1, 3.47–3.49. |
| Patient images and data | Allowed with conditions | Health data is special category data: explicit, separate, withdrawable consent for marketing use. Doctors need consent before recording patients for public media. Source: UK GDPR Art. 9; GMC recordings guidance para 37. |
| Regulator approval before publishing | Process | No pre-clearance, but evidence must be held before publishing. CAP Copy Advice is available for borderline ads. Source: CAP Code 3.7. |
How Branding Pioneers handles it
- Before work starts we confirm the client's CQC registration and rating, and the GMC, GDC, NMC (nursing) or GPhC number of every named clinician.
- A hard filter keeps prescription-only medicine names, “GLP-1” wording and pen or vial imagery out of ads, posts, URLs and influencer briefs.
- Every claim has evidence on file. “Risk-free”, “painless”, “guaranteed” and “best” are blocked unless the evidence exists.
- Before/after packs hold signed consent, unretouched originals and typical-result support.
- Review invitations go to every patient or a random sample, never only happy ones.
- Every piece that names a doctor or dentist is approved by that registrant.
Tracking deserves the same scrutiny as copy. Analytics, pixels and remarketing tags routinely collect more than a healthcare provider is permitted to share, and the default installation of most of them is not compliant in the United Kingdom. Audit what your tags send before you audit your ad copy.
Before you run anything
- Can you substantiate every claim in the creative, today, from a document you can produce?
- Do you have written consent for every patient who appears, covering this specific use?
- Has the approval or licence this market requires been granted, and is its number on the creative where required?
- Does your tracking send anything that identifies a patient or their condition?
- Has someone qualified in the United Kingdom reviewed the campaign, not just the marketing team?
If the answer to the last one is no, that is the gap worth closing first. We work inside these rules daily and will tell you when something you want to publish is not worth the exposure, but we are a marketing agency, and a regulated market deserves a qualified reviewer as well.
Not legal advice. A planning summary of published rules, last checked on 11 October 2026. Rules change, so confirm the current text with the regulator or local counsel before relying on it.
