Health practitioner advertising rules and websites

Section 133 of the Health Practitioner Regulation National Law sets out specific, binding restrictions on how a regulated health service may be advertised in Australia, and a practitioner’s or clinic’s website is squarely within its reach. The restrictions are more specific than the general Australian Consumer Law position covered elsewhere on this site, and the best-known of them — a ban on testimonials — surprises many practitioners commissioning a website for the first time.

This page describes the general legal framework. It is not legal advice, it is not AHPRA guidance, and it does not determine whether a specific website, practitioner or service is compliant. AHPRA and the relevant National Board are the authorities on that question, and current AHPRA guidance should be checked directly rather than relied on secondhand.

Who the National Law covers

The National Law establishes a national scheme regulating registered health practitioners across Australia, administered through AHPRA and 15 National Boards covering 16 registered health professions — the Nursing and Midwifery Board of Australia regulates both nursing and midwifery, which is why 16 professions sit under 15 Boards, not 16. The scheme spans medicine, nursing, midwifery, dentistry, psychology, physiotherapy, pharmacy and a number of allied and complementary health professions. Whether a specific practitioner, service or business is “regulated” for the purposes of the advertising provisions is a question of which profession and registration category applies, which is confirmed through AHPRA’s own published register and the National Boards list rather than through this general summary.

What section 133 restricts — all five limbs

Section 133 of the National Law sets out five things advertising a regulated health service must not do, and treating any four of them as the complete list is itself a compliance gap. In outline:

1. Be false, misleading or deceptive, or likely to mislead or deceive.
2. Offer a gift, discount or other inducement to attract a person to the service, unless the advertisement also states the terms and conditions of that offer.
3. Use testimonials or purported testimonials about the service or business. The section’s own words are unqualified; the narrowing to clinical aspects comes from AHPRA’s guidance on what counts as a testimonial, not from the text of the section — see below.
4. Create an unreasonable expectation of beneficial treatment.
5. Directly or indirectly encourage the indiscriminate or unnecessary use of health services.

Limb 2 — the inducement rule — is not a soft best-practice point sitting alongside the guidelines’ general advice; it is a standalone statutory prohibition carrying the same maximum penalty as the testimonial rule, and a time-limited offer or discount published without its terms and conditions stated is independently unlawful under this section, regardless of anything else on the page. Limb 5 turns on whether use is encouraged indiscriminately or unnecessarily — not, as a looser paraphrase sometimes has it, whether it is encouraged “unclearly” or “inappropriately”; that is a materially different and looser test than the one the section actually applies.

The testimonial prohibition, specifically — and what “clinical aspects” means

The qualification most people know this limb by is not in the limb. Section 133 prohibits testimonials “about the service or business”, full stop. The word “testimonial” is not defined in the National Law, so it takes its ordinary meaning — and AHPRA’s guidance is what fills that gap, treating the prohibition as reaching statements about a clinical aspect of a service: a claimed outcome, a claimed diagnosis, a claimed treatment result, rather than every favourable statement a patient makes.

That distinction matters for anyone relying on this page. A guidance interpretation is how the regulator says it will read the section, not a limit written into the section — a practitioner relying on the clinical-aspect narrowing is relying on consistent regulatory practice, not on a guarantee in the words of the Act itself. That does not make the guidance toothless: in a prosecution for a section 133 offence, a court may have regard to a National Board–approved guideline about advertising a regulated health service, so the regulator’s stated interpretation carries real weight even though it is not the section’s own text.

AHPRA’s guidance treats patient stories, success accounts and similar first-person statements about a clinical outcome as testimonials caught by this limb wherever the practitioner or business has had a role in soliciting, commissioning or prominently featuring that content as part of its own advertising. This is a materially stricter position than the general Australian Consumer Law approach to testimonials covered on testimonials and reviews under the ACL — the ACL asks whether the way a testimonial is used is misleading; section 133 prohibits testimonial-style advertising of a clinical outcome outright, regardless of whether the specific testimonial is truthful.

What amounts, in substance, to two tests for whether a review is a “testimonial”

This is the single most useful distinction on this page, and it is this site’s own framing of AHPRA’s published position, not a quotation of AHPRA’s own terminology — AHPRA states the underlying principles below without naming them as two separate tests. The position itself is stable rather than unsettled.

The clinical-aspect test. A statement is only a testimonial for the purposes of limb 3 if it addresses a clinical aspect — a symptom, a diagnosis or treatment, or a clinical outcome. A review that praises service, friendliness, wait times, communication or the practice environment is not a testimonial under section 133 on any platform, because it says nothing about a clinical aspect of care.

The control test. Responsibility follows control, not mere existence. A practice is not responsible for an unsolicited review a patient posts on a third-party platform the practice does not control and did not solicit. A practice becomes responsible the moment it republishes the review (on its own website, in a social media post), responds to it in a way that engages with or amplifies its content, or otherwise uses it as part of its own advertising. The platform a review sits on is not what matters; what the practice does with it is.

Applied together: a five-star Google review saying “friendly staff, easy to book” engages neither test and is not section 133 territory. A review saying “fixed my back pain in two sessions,” shared to the practice’s own Instagram, fails the clinical-aspect test and — because the practice actively republished it — also fails the control test. Both tests need to be applied to the same piece of content; passing one does not clear it if the other fails.

Misusing a protected title is a separate, more serious offence — not an advertising guideline

Separately from the advertising provisions, sections 113 to 120 of the National Law protect specific professional titles — including “specialist” titles restricted to practitioners holding the relevant specialist registration — and using a protected title without holding the matching registration is a distinct criminal offence, not a matter of advertising style. This sits in a different part of the National Law from section 133 and is not a “guideline” a practice can weigh against other marketing considerations; it is a title offence with its own penalty, addressed further below.

Why the supplier who writes the words is independently liable, not just the client

A website brief that simply tells a supplier “make sure the content complies with AHPRA rules” understates where the exposure actually sits. AHPRA’s position is that a person who authorises or drafts advertising content — including a marketing agency or web designer who writes the claims, not only the practitioner whose service is advertised — is an advertiser in their own right under the National Law, and can be held independently liable for a contravention. The National Law’s defence for a person who merely publishes or broadcasts material is narrow: it protects someone who mechanically prints or publishes content authored by another party, not a supplier who originated the wording. A web designer or copywriter who writes patient-facing claims about a clinical outcome, or drafts a time-limited offer without its terms, is exposed on their own account — this is not a risk that transfers to the client simply because the client commissioned the site.

Penalties — stated with the correction this page’s own sourcing requires

Non-compliance with the advertising provisions carries substantial penalties, and the figures matter enough to state precisely rather than vaguely, provided they are sourced to the Act rather than to secondary guidance. As at 4 August 2026, the National Law’s advertising-contravention penalty is up to $60,000 for an individual and $120,000 for a body corporate, per contravention. Misuse of a protected title under sections 113 to 120 is a separate and more serious offence, carrying a maximum penalty of $60,000, three years’ imprisonment, or both, for an individual.

A specific caution on where not to source these figures. The advertising guidelines document itself still carries the pre-2022 penalty figures. AHPRA’s advertising hub sets out the increase separately and states the guidelines will be updated at their next review. If you are checking a penalty figure, take it from the current reprint of the National Law rather than from the guidelines document.

What this means for commissioning a website

A website brief for a health practice should state explicitly that content must comply with the National Law’s advertising provisions, name section 133 specifically if the supplier is not already familiar with it, and exclude patient testimonials about clinical outcomes from the content plan by default rather than by exception. It should also confirm, in writing, who is responsible for reviewing and republishing patient reviews before any go onto the practice’s own channels, given that republishing is what triggers the control test above. A supplier without health-industry experience may not be aware of the testimonial prohibition, the inducement rule, or their own independent exposure as the author of the content — each of these is stricter, and reaches further, than the general marketing conventions that apply outside regulated health services.

What genuinely needs AHPRA’s own guidance or advice, not this page

Whether a specific practitioner or service is within scope of the National Law’s advertising provisions. Whether a specific piece of existing website content — a patient story, a before-and-after image, a review a practice has republished — breaches section 133. Whether a specific title used on a website is a protected title requiring specific registration. What penalty applies to a specific contravention on its actual facts. Each of these is answered by AHPRA’s current published guidance, the relevant National Board, or a lawyer with health-sector experience, not by a general information page.

What to do next

If your business provides a regulated health service, check the current AHPRA advertising guidelines directly before publishing or retaining any patient testimonial, before-and-after imagery, or promotional offer on your website, and treat this page as a map of the territory rather than a substitute for that check. Where the practical build questions specific to a healthcare website are covered — separate from this legal framework — is on healthcare and medical web design.