Reviews

Asking patients for reviews under the FTC Consumer Review Rule

Since October 2024, fake reviews, sentiment-linked incentives and review suppression carry civil penalties. Here is what that means for a practice asking patients to post a review.

By Mariya Di Luzio, Founder and Creative Strategist · Published · 6 min read

The short answer

A practice can ask every patient for a review, and can even offer a small thank-you, as long as the reward never depends on the review being positive. Since October 21, 2024, the FTC rule bans fake or AI-written reviews, undisclosed staff reviews, and threats used to remove bad ones, with civil penalties for knowing violations.1

Key takeaways

  • Ask every patient the same way. Asking only the happy ones is not named in the rule, but the FTC says it could still violate the FTC Act.3
  • An incentive is allowed by the FTC only if it is not tied, openly or by hint, to a positive review. Google bans incentives for reviews outright.25
  • Staff, owners and their relatives may not post undisclosed reviews of the practice.2
  • You may reply publicly to a bad review. You may not threaten the reviewer or make an accusation you know is false.3

What is the FTC Consumer Review Rule?

It is a federal trade regulation, 16 CFR Part 465, formally the Trade Regulation Rule on the Use of Consumer Reviews and Testimonials. The Commission approved it 5-0 in August 2024 and it took effect on October 21, 2024.1 Deceptive reviews were already illegal under the FTC Act. What changed is that a written rule lets the FTC seek civil penalties from businesses that break it knowingly, instead of only ordering them to stop.1

The amount matters because it is per violation. In December 2025 the FTC sent warning letters to 10 companies and reminded them that violations can bring civil penalties of up to $53,088 per violation.4 Those letters were not findings of a violation. The rule covers any business that sells a product or a service, which includes a chiropractic office, a dental practice and a solo health coach.

What exactly does the rule ban?

Six things, in the rule’s own sections.2 For a practice, four of them come up in real life:

  • Fake reviews. Writing, buying or publishing a review that misrepresents who wrote it, whether that person was ever a patient, or what their experience was. The FTC’s announcement names AI-generated fake reviews specifically.1
  • Paying for a particular opinion. Any compensation or incentive "conditioned expressly or by implication" on a positive or a negative review.2
  • Insider reviews. An owner or manager reviewing their own practice without a clear disclosure, and managers soliciting reviews from relatives or staff that then appear without that disclosure.2
  • Review suppression. Using an unfounded legal threat, intimidation, or a knowingly false public accusation to stop a review or get one taken down.2

The other two cover company-controlled "independent" review sites and fake followers or views.2

Can a practice still ask patients for reviews?

Yes, and it should. The FTC’s own guidance says the rule does not prohibit incentives for reviews "as long as there isn’t an express or implied requirement that the reviews have to express a particular sentiment".3 The trap is the implied part. The FTC’s example is a message offering a coupon to "tell us how much you loved your visit", which signals that only a happy review earns the reward.3 A text that says "tell us how your visit went" does not.

Google is stricter than the FTC. Its policy for reviews on Maps and Business Profiles forbids businesses to offer incentives such as payment, discounts, or free goods or services in exchange for posting any review, positive or not.5 Since most practice reviews live on Google, the practical rule is simple: ask, do not pay.

Is review gating illegal now?

Review gating means sending a short survey first and only asking the patients who answer "great" to post publicly. The rule has no section that names it. The FTC’s guidance addresses it directly anyway: the rule "does not contain a specific prohibition against such conduct. But this practice could violate the FTC Act", pointing to the Endorsement Guides.3 Google’s policy forbids it outright, in the words "selectively solicit positive reviews".5

My position: gating is not worth the risk. It invites an FTC Act claim, breaks Google’s terms, and produces a star rating that patients and AI assistants read as a fact about you when it is really a fact about your filter. A 4.6 built from everyone is worth more than a 4.9 built from the people you chose. More on why star ratings feed AI answers is in the guide to becoming the practice AI recommends.

Common review requests, checked against the FTC rule and Google’s policy
What the practice doesFTC ruleGoogle policy
Asks every patient to leave a reviewAllowedAllowed
Offers a gift card for any review, good or badAllowedNot allowed
Offers a gift card for a 5-star reviewBannedNot allowed
Asks only patients who scored a survey highlyCould violate the FTC ActNot allowed
Front desk staff review the practice, undisclosedBannedNot allowed
Threatens to sue over a fair negative reviewBannedNot allowed

What about reviews on the practice’s own website?

If your site shows a reviews section, you cannot hide the negative ones and let visitors assume they are seeing all of them.2 You can still hold back reviews for reasons you apply to every review equally. The rule lists them: reviews containing confidential information, defamatory, harassing, obscene or discriminatory content, the personal information of another person, clearly false content, reviews you reasonably believe are fake, and reviews unrelated to what you offer.2

For a health practice, "the personal information or likeness of another individual" is the exception you will use most. Write the moderation policy down before you need it, and apply it to five-star reviews as strictly as to one-star ones.

Hand-picked quotes on a service page are testimonials, covered in testimonials and social proof.

Can a practice respond to a negative review?

Yes. The FTC says you can respond publicly and "you should watch what you say": the rule prohibits accusing the reviewer of something you know is false, or saying it with reckless disregard for whether it is true.3 For a practice there is a second limit, which comes from HIPAA rather than the FTC. A reply that confirms the reviewer was a patient, or mentions their treatment, can be an impermissible disclosure of health information. How to answer without that is in responding to reviews without breaking HIPAA.

A review request that passes every check

  1. Send the same request to every patient after the visit, by the same channel, with no survey step in front of it.
  2. Use neutral wording: "How was your visit? We would value a review on Google."
  3. Offer nothing in exchange. If you want to thank people, thank everyone, whether or not they post.
  4. Tell staff in writing not to review the practice, and not to ask family to.
  5. Reply to criticism with facts about your process, never about the patient.

If you want these checked across your site, your Google Business Profile and your follow-up messages, that is part of a technical and compliance rebuild. This post explains the rule as published. It is not legal advice, and a practice with a specific dispute should speak to a lawyer.

Questions practice owners ask

When did the FTC Consumer Review Rule take effect?

The rule took effect on October 21, 2024. The Commission approved it by a 5-0 vote in August 2024. It is codified at 16 CFR Part 465 and applies to practices of every size.

Can my practice offer a discount for leaving a review?

Under the FTC rule, only if the discount does not depend, openly or by implication, on the review being positive. Google’s review policy is stricter and forbids incentives for any review. Because most practice reviews are posted on Google, the safest approach is to ask every patient and offer nothing in return.

Is it illegal to only ask happy patients for reviews?

The FTC rule has no section that names this practice. The FTC’s own guidance says it could still violate the FTC Act, citing the Endorsement Guides. Google’s policy forbids selectively soliciting positive reviews. Asking every patient the same way avoids both problems.

What are the penalties under the FTC review rule?

The FTC can seek civil penalties against knowing violators. In its December 2025 warning letters to 10 companies, the FTC stated that penalties can reach $53,088 per violation.


Sources, and how much weight each one carries

  1. Federal Trade Commission, "Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials", press release, August 14, 2024.
    Official regulator announcement. States the 5-0 vote, the practices banned and the civil penalty authority.
  2. Electronic Code of Federal Regulations, 16 CFR Part 465, Trade Regulation Rule on the Use of Consumer Reviews and Testimonials, sections 465.2 to 465.8.
    The regulation itself. The primary source for every prohibition described here.
  3. Federal Trade Commission, "The Consumer Reviews and Testimonials Rule: Questions and Answers", business guidance.
    Official regulator guidance on how the FTC reads its own rule, including incentives, review gating and responses.
  4. Federal Trade Commission, "FTC Warns 10 Companies About Possible Violations of the Agency’s New Consumer Review Rule", press release, December 22, 2025.
    Official regulator announcement. Source of the $53,088 per violation figure. The letters are not findings of violation.
  5. Google, "Prohibited and restricted content", Maps User Generated Content Policy Help, section "Rating Manipulation".
    Platform policy from the operator of the review site. Binding on Google reviews, not a law.

This article is about marketing, website and compliance practice. It is not medical or legal advice, and nothing in it is intended to diagnose, treat, cure or prevent any disease. For a decision about your own practice, speak with a qualified attorney or the relevant regulator.

Want to know if your review requests would pass?

The free check looks at your Google Business Profile, your reviews and what AI assistants repeat about you. Then thirty minutes on a call to go through it.

Run the free check

Free check · findings by email within one working day

What does AI say about your practice?

  1. 1 Tell me what a patient would search for, and where.
  2. 2 An AI assistant searches the live web and answers, as a patient would see it.
  3. 3 I read the result and email you the findings, with what they mean.

The search it will run

Your name, email and practice go to the studio so the findings can be sent. Nothing else, never sold, never used for advertising. How data is handled.

This is one question. The full check asks a fixed list of 25, across four assistants, and records every answer word for word. We go through it on the call.

More insights