Dental marketing compliance is the set of federal, state, and professional rules that govern how a dental practice advertises, communicates with patients, and handles patient information. A practice that markets without knowing these rules risks fines, license complaints, and reputational damage. A practice that builds compliance into its marketing systems avoids those risks.
Sunrise Dental Solutions advises dentists nationwide on practice systems from its office in Lexington, KY. The firm works with practices in Hamburg, Beaumont Centre, Chevy Chase, and markets across the United States. This article explains the compliance areas that affect dental marketing, the rules that apply to each, and the steps a practice should take to keep campaigns legal. For the broader plan, start with Dental Marketing Strategy for Practice Growth and return to The Proactive Dentist’s Guide.
Table of Contents
Key Takeaways
HIPAA governs how a practice uses patient information in marketing. A practice needs written authorization before using a patient’s name, photo, or treatment details in advertising.
The FTC Act prohibits deceptive or misleading advertising claims. A practice cannot claim a treatment is “painless” or “guaranteed” without evidence to support the claim.
State dental boards set additional advertising rules. Rules vary by state and cover specialty claims, credential disclosure, and the use of terms like “specialist.”
Review responses must not confirm that the reviewer is a patient. Confirming a patient relationship in a public response can violate HIPAA.
A compliance checklist keeps campaigns legal. A practice that reviews the checklist before launching a campaign catches problems before they become violations.
HIPAA and Dental Marketing
HIPAA governs how a dental practice uses and discloses protected health information (PHI). PHI includes a patient’s name, address, birth date, treatment details, and photographs. Marketing that uses PHI requires written patient authorization under the HIPAA Privacy Rule.
A practice that wants to feature a patient in a before-and-after photo needs a signed authorization form. The form must describe the specific use, name the practice, and include an expiration date. A practice that posts a patient photo without authorization violates HIPAA, even if the patient verbally agreed.
Marketing communications that do not use PHI are not subject to the authorization requirement. A practice can send a general newsletter about oral health without authorization because the newsletter does not reference a specific patient. A practice can send a recall reminder to a specific patient because the reminder relates to treatment, which HIPAA treats as a permitted communication, not marketing.
Local Insight: HIPAA in Lexington Practice Marketing
We have reviewed marketing materials from practices in the Hamburg corridor, Palomar Centre, and the Beaumont Centre area. The most common HIPAA problem is before-and-after photos posted to social media without a signed authorization. The practice assumes the patient’s verbal permission is enough. It is not. A signed authorization form protects the practice from a complaint. The form takes five minutes to collect and prevents a problem that can cost far more. Every practice should have a standard authorization form and use it every time a patient appears in marketing.
HIPAA marketing rule: A practice must obtain written patient authorization before using a patient’s name, image, or treatment information in marketing. The authorization must describe the specific use and include an expiration date. Verbal permission is not sufficient.
FTC Rules for Dental Marketing
The Federal Trade Commission (FTC) enforces rules against deceptive advertising. A dental practice that makes a claim about a treatment must be able to substantiate the claim with evidence. A claim that cannot be substantiated is deceptive, even if the practice believes it is true.
The FTC rules apply to several common dental marketing claims. A practice cannot advertise a treatment as “painless” without evidence. A practice cannot claim a procedure is “guaranteed” because dental outcomes depend on patient factors the practice cannot control. A practice cannot claim to be “the best dentist in [city]” because the claim is subjective and unverifiable.
The FTC also regulates testimonials and endorsements. A testimonial must reflect the honest experience of the patient. A practice cannot edit a testimonial to change its meaning. A practice cannot pay for a testimonial without disclosing the payment. A practice cannot use a testimonial that makes a claim the practice could not make directly.
FTC marketing rule: A practice must be able to substantiate every objective claim it makes in advertising. A claim that cannot be substantiated is deceptive. Testimonials must reflect honest experience and disclose any payment or connection.
State Dental Board Advertising Rules
State dental boards set additional advertising rules that apply to licensed dentists. The rules vary by state. A practice that markets across state lines must follow the rules of each state where it advertises.
Common state board rules cover specialty claims, credential disclosure, and the use of terms like “specialist.” A general dentist cannot advertise as a specialist unless the dentist has completed an accredited specialty program and holds the corresponding license. A practice that advertises “orthodontics” without a licensed orthodontist on staff may violate state board rules.
State boards also regulate the use of patient testimonials, before-and-after photos, and claims about treatment outcomes. Some states require a disclaimer on marketing materials. Some states prohibit certain types of advertising entirely. A practice should review its state board’s advertising rules before launching a campaign.
State board rule: A dentist must follow the advertising rules of the state where the dentist is licensed and the state where the advertisement runs. Specialty claims require the corresponding license. Credential claims must be accurate and verifiable.
Trend to watch: As of 2025, state dental boards have increased enforcement of advertising rules related to specialty claims and credential disclosure, according to a review of board actions compiled by the American Dental Association. The increase reflects the growth of dental service organizations and multi-state marketing campaigns. Practices that advertise across state lines should review each state’s rules annually.
Review Response Compliance
Review responses require care because a public response can confirm a patient relationship. HIPAA prohibits a practice from disclosing that an individual is a patient without authorization. A response that says “Thank you for being our patient” confirms the relationship and may violate HIPAA.
A compliant review response acknowledges the feedback without confirming the relationship. A practice can say “Thank you for your feedback” without saying “Thank you for being our patient.” A practice can say “We take all feedback seriously” without saying “We are sorry your treatment did not go well.” The response addresses the review without confirming or denying that the reviewer is a patient.
Review response rule: A practice must not confirm or deny that a reviewer is a patient. The response should acknowledge the feedback and move the conversation offline. A generic response protects the practice and still shows that the practice listens.
Social Media and Testimonial Compliance
Social media marketing raises compliance questions because content spreads quickly and patients may appear in posts. A practice that posts a patient photo or testimonial on social media must have written authorization. A practice that reposts a patient’s positive comment must have authorization if the comment identifies the patient.
A practice that runs a social media contest or giveaway must follow FTC rules for endorsements and disclosures. A practice that pays an influencer to promote the practice must disclose the payment. A practice that offers a reward for a review must disclose the reward and must not require the review to be positive.
A practice should have a social media policy that covers employee posts, patient posts, and the practice’s own posts. The policy should specify what requires authorization, who reviews content before it goes live, and how the practice responds to negative comments. A written policy protects the practice and gives the team clear guidance.
Social media rule: A practice must have written authorization before posting a patient’s photo, name, or testimonial. A practice must disclose any payment or reward connected to a review or endorsement. A written social media policy keeps the team compliant.
Dental Marketing Compliance Checklist
A dental marketing compliance checklist keeps campaigns legal. The practice runs the checklist before launching any campaign that uses patient information, makes a treatment claim, or runs on social media.
Pre-Campaign Compliance Checklist
☐ Written patient authorization obtained for every patient who appears in the campaign.
☐ Authorization forms describe the specific use and include an expiration date.
☐ Every objective claim in the campaign can be substantiated with evidence.
☐ Testimonials reflect honest experience and disclose any payment or connection.
☐ Specialty and credential claims match the licenses held by the practice.
☐ State board advertising rules reviewed for every state where the campaign runs.
☐ Review response templates do not confirm or deny patient relationships.
☐ Social media policy covers employee posts, patient posts, and practice posts.
☐ Campaign materials reviewed by the practice’s compliance lead or legal counsel before launch.
A practice that runs the checklist before every campaign catches problems before they become violations. The checklist takes 30 minutes. A HIPAA violation or an FTC complaint costs far more.
Common Dental Marketing Compliance Mistakes
Dental practices make five common compliance mistakes. Each mistake exposes the practice to a complaint, a fine, or a license action.
What happens: The practice posts a patient photo after the patient says “sure, go ahead.” No written authorization exists. The patient later complains.
The fix: Collect a signed authorization form every time. The form describes the use and includes an expiration date.
What happens: The practice advertises “painless dentistry” or “guaranteed results.” The claim cannot be substantiated. An FTC complaint follows.
The fix: Make only claims the practice can substantiate. Use descriptive language instead of absolute claims.
What happens: A general dentist advertises “orthodontics” or “specialist” without the corresponding license. A state board complaint follows.
The fix: Advertise only the services the practice is licensed to provide. Use “orthodontic treatment” only if a licensed orthodontist provides it.
What happens: The practice responds to a review with “Thank you for being our patient.” The response confirms the relationship without authorization.
The fix: Use generic responses that acknowledge feedback without confirming or denying the patient relationship.
What happens: A team member posts a patient photo to the practice account. No policy exists. No one reviewed the post. A HIPAA violation follows.
The fix: Write a social media policy. Specify what requires authorization, who reviews content, and how the practice responds to comments.
Frequently Asked Questions
Do I need written authorization to use a patient testimonial in marketing?
Yes. HIPAA requires written patient authorization before a practice uses a patient’s name, image, or treatment information in marketing. A testimonial that identifies the patient or describes the patient’s treatment requires authorization. The authorization form must describe the specific use and include an expiration date. Verbal permission is not sufficient. A practice that uses a testimonial without authorization may face a HIPAA complaint and a fine.
Can a dental practice advertise “painless” dentistry?
A dental practice should avoid advertising “painless” dentistry because the claim cannot be substantiated. The FTC prohibits deceptive advertising claims. A practice cannot guarantee that a patient will feel no pain because pain perception varies by patient and procedure. A practice can advertise sedation options, comfort techniques, and patient comfort as a priority. These claims are descriptive and substantiable. Absolute claims like “painless” are risky.
How should a dental practice respond to a negative online review?
A dental practice should respond to a negative review with a generic acknowledgment that does not confirm or deny the patient relationship. A compliant response says “Thank you for your feedback. We take all feedback seriously and would like to learn more. Please contact our office manager at [phone number].” The response moves the conversation offline without disclosing protected health information. A response that discusses the patient’s treatment violates HIPAA.
What are the state dental board advertising rules for dentists?
State dental board advertising rules vary by state and cover specialty claims, credential disclosure, and the use of terms like “specialist.” A general dentist cannot advertise as a specialist without the corresponding license. A practice that advertises a specialty service must have a licensed specialist on staff or must clarify that the service is provided by a general dentist. A practice should review its state board’s advertising rules before launching a campaign that makes specialty or credential claims.
Do FTC endorsement rules apply to dental practice social media?
Yes. FTC endorsement rules apply to dental practice social media. A practice that pays an influencer to promote the practice must disclose the payment. A practice that offers a reward for a review must disclose the reward and must not require the review to be positive. A practice that reposts a patient’s positive comment must have authorization if the comment identifies the patient. A written social media policy helps the practice stay compliant.
People Also Ask
How can dentists grow their dental practice while staying compliant?
Dentists grow their practice while staying compliant by building a compliance checklist into the marketing workflow. The checklist covers patient authorization, claim substantiation, specialty claims, review responses, and social media policy. A practice that runs the checklist before every campaign catches compliance problems before they become violations. Growth and compliance are not in conflict. A practice that markets with accurate claims and proper authorization builds trust that supports growth.
What does a dental practice consultant do?
A dental practice consultant advises dentists on operations, marketing, finance, and team management. The consultant analyzes the practice’s current performance, identifies gaps, and builds systems to close them. Marketing consulting includes compliance review, claim substantiation, and policy development. Many consultants work with the practice’s legal counsel to ensure marketing materials meet HIPAA, FTC, and state board requirements.
How can dentists reduce overhead and increase profitability?
Dentists reduce overhead and increase profitability by improving scheduling efficiency, increasing case acceptance, and controlling supply costs. Compliance contributes by preventing fines and license complaints that cost money and time. A practice that markets with accurate claims and proper authorization avoids the cost of a HIPAA complaint or an FTC investigation. The money saved stays in the practice.
What is dental practice management?
Dental practice management is the operational discipline of running a dental practice. It includes scheduling, billing, collections, insurance, human resources, compliance, and marketing. Compliance management is a component of practice management. A practice that manages operations well but ignores marketing compliance may face a complaint that disrupts the practice. A practice that manages compliance well but neglects operations may lose patients to poor service.
How do dental practice transitions work?
Dental practice transitions work through a five-step process: valuation, buyer identification, due diligence, financing, and closing. The selling dentist obtains a practice valuation, identifies a buyer (often an associate or a corporate entity), completes due diligence, arranges financing, and closes the sale. Marketing compliance affects the transition because a practice with documented compliance policies and clean marketing history commands a higher valuation than a practice with unresolved compliance issues.
People Also Search For
- HIPAA marketing authorization form for dental practices
- FTC dental advertising rules
- State dental board advertising regulations
- Dental social media policy template
- How to respond to negative dental reviews
- Dental marketing compliance checklist
About the Author
Dr. Anthony S. Feck and Dr. Jodi Danna are the founding partners of Sunrise Dental Solutions, a national dental practice consulting firm based in Lexington, KY. They advise dentists on marketing compliance, HIPAA, and practice systems.
Sunrise Dental Solutions serves dentists and dental practices nationwide from its office in the Hamburg area of Lexington, KY. The firm’s programs include the Perfect Dental Startup Program, Next-Level Production In-Office Training, Dental Practice Transition Planning, and Multi-Practice Ownership Coaching. Explore dental practice consulting services to see how the firm helps practices grow.
Sources
This article references guidance and data from the following organizations and sources:
- U.S. Department of Health and Human Services (HHS) HIPAA Privacy Rule
- Federal Trade Commission (FTC) advertising and endorsement guidance
- American Dental Association (ADA) state board advertising resources
- U.S. Centers for Disease Control and Prevention (CDC) oral health data
- Sunrise Dental Solutions client compliance data, 2018–2026
Last reviewed: September 2026
Conclusion: Build Compliance Into Every Campaign
Dental marketing compliance covers HIPAA, FTC rules, state dental board advertising rules, review responses, and social media. A practice that markets without knowing these rules risks fines, license complaints, and reputational damage. A practice that builds compliance into its marketing workflow avoids those risks without slowing growth.
Sunrise Dental Solutions advises dentists nationwide on compliance and marketing systems from its base in Lexington, KY. The firm works with startups, established practices, and multi-location groups. The work starts with the practice’s legal obligations. The marketing plan follows. Compliance is not a barrier to growth. Compliance is the foundation that makes growth sustainable.
Market With Confidence and Stay Compliant
Sunrise Dental Solutions helps dentists nationwide build marketing systems that meet HIPAA, FTC, and state board requirements. Explore dental practice consulting services to see how the firm helps practices grow. For the complete growth framework, start with Dental Marketing Strategy for Practice Growth.
A practice that wants to market with confidence does not need to avoid marketing. A practice that wants to market with confidence needs to build compliance into every campaign. Get authorization. Substantiate claims. Follow state board rules. Respond to reviews carefully. Write the social media policy. Run the checklist. Then market.