Why Compliance Is an SEO Issue
Reviews, testimonials, before-and-after galleries and treatment claims are also some of the strongest SEO and conversion assets a med spa has. That’s exactly why they’re regulated. Shortcuts - bought reviews, stock results, exaggerated claims - can bring regulatory penalties, platform removals and profile suspensions that wipe out search visibility.
This guide is general information, not legal advice. Consult a healthcare attorney about your state’s rules.
The FTC Consumer Reviews and Testimonials Rule
The Federal Trade Commission announced its final rule in August 2024; it was published in the Federal Register on August 22, 2024 and took effect 60 days later, on October 21, 2024. It allows the FTC to seek civil penalties against knowing violators. The rule prohibits:
- Fake or false reviews and testimonials, including those from people who don’t exist or didn’t have actual experience with the business - and AI-generated fake reviews.
- Buying positive or negative reviews - providing compensation conditioned on a review expressing a particular sentiment.
- Undisclosed insider reviews by owners, managers, employees or agents without clear disclosure of the connection.
- Company-controlled “independent” review websites that misrepresent their independence.
- Review suppression through unfounded legal threats, intimidation or false accusations, and misrepresenting that displayed reviews are complete when negative ones are hidden.
- Buying or selling fake social media indicators such as followers or views.
What this means for med spa SEO
- Ask every client for an honest review - don’t filter who gets asked based on expected sentiment.
- Don’t let staff or friends post reviews without clear disclosure.
- Display reviews honestly on your website; don’t hide negative ones while implying you show all of them.
- Never hire vendors that sell reviews or followers.
HIPAA and Review Responses
Med spas that are HIPAA-covered entities must protect patient information everywhere, including social media and review platforms. In a widely cited case, HHS’s Office for Civil Rights settled with a dental practice for $23,000 after it disclosed patients’ names and treatment details in responses to Yelp reviews. OCR’s message was direct: providers cannot disclose patients’ protected health information when responding to negative reviews.
Safe review response rules
- Don’t confirm or deny that the reviewer is a patient.
- Don’t mention treatments, dates, providers or outcomes related to the reviewer.
- Keep responses general and move the conversation offline.
- Train staff and audit your profiles periodically.
| Avoid | Use instead |
|---|---|
| “Sorry your lip filler with Jessica didn’t turn out as expected.” | “We take all feedback seriously. Please call our office manager so we can learn more.” |
| “Glad your Botox results look great, Sarah!” | “Thank you for the kind words - we appreciate you taking the time to share.” |
Before-and-After Photos
- Obtain written patient authorization for marketing use before posting anywhere.
- Use genuine photos from your own practice; don’t use manufacturer or stock images as if they were your results.
- Keep lighting, angles and timing consistent, and don’t retouch in ways that misrepresent results.
- Note that individual results vary and, where helpful, the time since treatment.
- Remove identifying details that aren’t covered by consent.
Treatment Claims & Content
The FTC requires that advertising claims be truthful, not misleading and supported by evidence - and health-related claims generally need competent and reliable scientific evidence. For med spa pages and blogs:
- Avoid absolutes like “painless,” “permanent,” “no risk” or “guaranteed results.”
- Describe FDA-cleared or FDA-approved uses accurately and don’t imply approval that doesn’t exist.
- Include realistic downtime, side effects and candidacy information.
- Name the licensed professionals who perform treatments, consistent with your state’s scope-of-practice rules.
- Use trademarks accurately and without implying endorsement.
Compliance Checklist
- ☐ Review requests sent to all clients, no incentives
- ☐ Staff and affiliate reviews disclosed or avoided
- ☐ Review responses contain no patient information
- ☐ Written consent on file for every before-and-after
- ☐ Treatment claims reviewed for accuracy and substantiation
- ☐ Provider credentials displayed accurately
- ☐ Website forms warn visitors not to submit health information
- ☐ Marketing vendors contractually barred from fake reviews and followers
Every campaign at The Med Spa SEO Company is built with these guardrails in place.
Sources: FTC press release on the final rule; Federal Register, 16 CFR Part 465; FTC Rule Q&A; Mintz on the OCR dental practice settlement.