No. In Australia you cannot publish patient testimonials about the clinical side of your service, and that includes your own website. This is not agency caution or a grey area. It is written into Section 133 of the National Law, it applies to every registered practitioner and the businesses they work in, and the penalties are real. The good news, which the rest of this article is about, is that testimonials were never your strongest trust signal anyway.
You did not train for years to become a compliance expert on top of everything else. So most practitioners find this out the hard way: a marketing person adds a glowing patient quote to the homepage because it seems obviously helpful, and it sits there quietly creating risk. If that describes your site, you are in very ordinary company. Let me walk you through it the way I would if we were looking at your website together.
01.The Short Answer, and Why It Surprises People
Testimonials about the clinical aspects of a regulated health service are prohibited in advertising under the National Law. A patient describing their treatment, their recovery, their surgeon or their outcome is a clinical testimonial. It does not matter that the patient wrote it themselves, offered it happily, or gave written consent. If it appears on a platform you control, you have published it, and the responsibility is yours.
The reason this catches so many good clinicians off guard is that it is the opposite of what almost every marketing guide on the internet tells you to do. Nearly all of that guidance is written for the United States, where testimonials are not only legal but actively encouraged. Apply that advice in Australia and you are following a rulebook for the wrong country.
I read fifteen of the most widely shared healthcare marketing guides while researching this. Eleven of them recommend collecting and displaying patient testimonials. Every one of those eleven was written for a market where that is fine. None of them mentions AHPRA. That is the trap.
02.Why the Rule Exists (It Is Not Arbitrary)
It helps to understand the thinking, because once you do, the compliant path stops feeling like a restriction and starts feeling obvious. The regulator's position is that testimonials are a poor and potentially misleading basis for a patient to choose care, for a few reasons that are hard to argue with once they are laid out.
- One person's outcome is not a promise to the next. A knee replacement that went beautifully for one patient tells a prospective patient very little about their own likely result, which depends on their body, their condition and a dozen clinical factors.
- They are never balanced. A clinic publishes its happiest patients, not a representative sample. The reader has no way to see the full picture.
- Patients cannot easily judge clinical accuracy. A confident-sounding testimonial can imply things about a treatment that are not clinically sound, and the reader is not equipped to tell.
Framed that way, the rule is really about the same thing your registration is about: protecting patients from making high-stakes decisions on weak information. That is worth remembering when a patient genuinely wants to leave you a lovely review and you have to explain why you cannot feature it.
03.What Actually Counts as a Testimonial
This is where the practical confusion lives, so let me draw the line clearly. The prohibition is specifically about the clinical aspects of your service. That single word does a lot of work.
There is a narrow band for genuinely non-clinical comments, for example a note that reception was welcoming or the clinic was easy to find. In practice that line is easy to cross without realising, because most patient comments drift into the care itself within a sentence or two. Most practices decide the safest position is to avoid reproduced patient comments altogether and prove their credibility another way. I think that is the right call, and by the end of this article I hope you will agree it is also the more effective one.
04.Where Google Reviews Fit In
This is the question I get asked most, so let me be precise about it, because there is a real and useful distinction here.
A review sitting on Google, on a platform you do not control, is treated differently from the same review reproduced on your own website. You are not responsible for what a patient independently posts on Google. You become responsible the moment you bring that content onto a page you control.
So the compliant position looks like this. Displaying your aggregate rating as a plain factual statement, for example "4.9 stars on Google" with a link to your profile, is generally accepted, because it is a verifiable fact rather than a personal endorsement of your clinical care. What is not acceptable is lifting individual reviews that talk about treatment and featuring them on your homepage, in a slider, or as a screenshot on social media. The instant you reproduce the substance of the review, you have published a testimonial.
The review widget trap
Many clinic websites install a plugin that pulls in and displays your latest Google reviews automatically. If those reviews mention clinical care, that widget is publishing testimonials on your behalf, every time it refreshes. An automated feed does not reduce your responsibility. Show the star rating, link to the profile, and switch off the individual review display.
05.The Penalties Are Real, and So Is the Enforcement
It would be easy to read all this and quietly decide the risk is theoretical. It is not. The financial penalties are set out in the National Law, and enforcement has been getting firmer, not softer.
Beyond the fine, there is the part that worries most practitioners more: a breach can be referred to your National Board. For a registered clinician, a regulatory notification is a far heavier cost than any advertising fine, in time, stress and reputation. The September 2025 cosmetic advertising guidelines, which included an outright ban on influencer testimonials in that sector, are a clear signal of the direction of travel.
The rule applies to your whole team, and your agency
Responsibility rests with whoever controls the website. If a marketing agency, a web developer or a staff member who is not registered adds a testimonial, you are still accountable. You cannot delegate the liability away. This is exactly why the compliance review has to happen before anything is published, not after a complaint arrives.
06.What to Use Instead (And Why It Works Better)
Here is the part that should change how you feel about all of this. Testimonials are weak evidence even where they are legal. They are self-selected, unverifiable, and interchangeable between practices. Every clinic has five-star quotes. They prove almost nothing to a discerning patient. The compliant alternatives are genuinely stronger trust signals, and they happen to be exactly what Google and AI search engines reward too.
| Instead of a testimonial | Use this | Why it is stronger |
|---|---|---|
| "My results were amazing" | De-identified outcome data across your patients, or published procedure volumes | A number you can stand behind beats one person's adjective |
| "Dr X is the best" | Your qualifications, registration, fellowships and memberships, shown clearly | Verifiable credentials are what a careful patient actually checks |
| "The whole process was great" | A plain explanation of exactly what happens at each visit | Reduces anxiety and answers the real question a nervous patient has |
| A wall of five-star quotes | Your aggregate Google rating stated as a fact, linked to the profile | Compliant, and readers trust independent platforms more than curated quotes |
| "He fixed my knee" | Content written in your own clinical voice about how you approach that condition | Demonstrates first-hand expertise, which is what Google's quality system looks for |
Notice what has happened here. Every compliant alternative is something only your practice can genuinely provide. A competitor cannot copy your registration, your real outcome data, or your actual clinical reasoning. Testimonials, by contrast, look identical from one clinic to the next. Being pushed away from them by the rules tends to leave you with a more distinctive and more persuasive website, not a weaker one. I have watched this happen with practice after practice.
The search bonus
The same signals that keep you compliant, named clinicians, real credentials, genuine clinical content and cited facts, are precisely what Google's quality framework rewards for health websites, and what AI engines look for before they cite a source. Compliance and visibility are pulling in the same direction here, which is not always the case in marketing.
07.Your 5-Minute Site Check
Before you close this tab, it is worth doing a quick pass over your own website with fresh eyes. Here is what to look for.
- The homepage. Any patient quotes, star-rating sliders that show review text, or a "what our patients say" section that mentions treatment or outcomes.
- Service and treatment pages. These are the most common place testimonials hide, usually near the booking button.
- Any review widget or plugin. Check what it actually displays. If it shows individual review text, not just a rating, it needs changing.
- Social media links and embeds. A reposted patient story on Instagram, linked from your site, carries the same risk.
- Before-and-after galleries. These carry their own rules, tightened in September 2025 for cosmetic work, and deserve a separate check.
If you find something, you do not need to panic, but you should not leave it either. Replace it with one of the compliant alternatives above. If you would rather have someone who does this every day check the whole site properly, that is genuinely part of what a healthcare SEO audit is for, and I have said more about how I approach that below.
08.Questions Practitioners Ask
Can I use testimonials that only praise the reception staff or the parking?
There is limited room for comments about genuinely non-clinical aspects, but the line is easy to cross. The moment a comment touches the treatment, the outcome or the clinical service, it is prohibited. Because most patient comments drift into the care itself, most practices avoid reproduced comments entirely and rely on the stronger signals covered above.
What if the patient gave written consent?
Consent does not create an exemption. The prohibition is about protecting prospective patients from unbalanced and potentially misleading information, so it applies regardless of how willingly the original patient offered their story.
Does this apply to me if I am an allied health practitioner, not a doctor?
Yes. The advertising rules apply to every registered health practitioner across the National Boards, including physiotherapists, psychologists, chiropractors, dentists, podiatrists, optometrists and more, as well as to the businesses that provide those services.
Can I show my Google star rating on my website?
Displaying your aggregate rating as a factual statement, with a link to your Google profile, is generally accepted. What is restricted is reproducing individual reviews that reference clinical care. State the rating, link out, and do not republish the review text.
My agency added the testimonials. Am I still responsible?
Yes. Whoever controls the website is responsible, and that is you or your business, not the agency. This is the single most common way good practices end up exposed, which is why any content added on your behalf should be checked for compliance before it goes live.
Where to Go From Here
If you have read this far, you now know more about health advertising compliance than most of the people building clinic websites in Australia. That is not a compliment to me, it is a comment on how much of the available advice was written for the wrong country.
The practical takeaway is simple. Take the five-minute check above, remove anything that reproduces patient comments about care, and replace it with credentials, process and your aggregate rating. Your website will be compliant, and it will very likely convert better, because careful patients trust verifiable facts more than curated praise.
If you would like a second pair of eyes, a compliance review is built into every audit I run, precisely because a ranking win that triggers a Board notification is not a win. You can read more about how I approach SEO for medical and healthcare practices, or the deeper piece on how clinics demonstrate expertise and trust without testimonials.
📚 Sources
- AHPRA. Testimonials: understand the requirements. ahpra.gov.au
- AHPRA. Guidelines for advertising a regulated health service. ahpra.gov.au
- AHPRA. Summary of the advertising requirements. ahpra.gov.au
- Medical Board of Australia. Advertising a regulated health service. medicalboard.gov.au
Nayananjalee Rajarathna
I help medical and healthcare practices get found on Google and in AI search, without falling foul of the advertising rules that govern regulated health services. Compliance is not an add-on to the SEO. For a health website, it is the foundation everything else is built on.