Dental testimonials rules decide whether you can publish a patient's words, face, or star rating, and what has to travel alongside it when you do.

Three rulebooks stack: the FTC's federal endorsement and review rules, your state board's advertising rules, and HIPAA whenever the testimonial identifies a patient.

This page is the testimonial chapter of dental advertising regulations, the broader rulebook that also covers pricing wording, specialty claims, and photo rules.

The FTC testimonial rules dentists need to know

Under the FTC's endorsement guides (16 CFR Part 255), a testimonial is any ad message the public is likely to read as the opinion or experience of someone other than the practice, and that definition reaches patient quotes, video stories, social media tags, and a patient's name or likeness.

Enforcement got sharper on October 21, 2024, when the FTC's rule on consumer reviews and testimonials (16 CFR Part 465) took effect with court-imposed civil penalties for knowing violations, which the FTC put at up to $53,088 per violation in December 2025, a figure adjusted for inflation each year.

The rule bans writing, creating, or selling fake reviews and testimonials, including quotes from people who never used the service, and spreading reviews the business knew or should have known were fake.

It also bans compensation offered in exchange for a review that expresses a particular sentiment, positive or negative, whatever the amount.

Reviews from insiders are not banned: owners, managers, employees, and their relatives may post about the practice, but the relationship must be clearly and conspicuously disclosed, and a manager who asks an employee or relative for a review has to tell them to disclose it.

The subtler federal rule is about implications: a testimonial about a key result, a restored implant, a straightened smile, will likely be read as what patients generally achieve, and if the practice cannot back that up, the ad must clearly disclose the generally expected result in a way that changes the ad's overall impression.

That is why a bare "results may vary" line is not a federal safe harbor: the guides require the generally expected performance, stated clearly enough to change the overall impression of the ad.

The guides also tell advertisers not to procure, suppress, boost, organize, or edit reviews in ways that distort what customers think, which reaches a curated testimonial page, not just an outright fake.

And if your own website displays patient reviews, the rule bans presenting them as all or most of your reviews while negative ones are held back because of their rating, though withholding under neutral criteria applied to every review, abusive content for example, remains allowed.

Dental review incentives: the line between allowed and banned

The FTC's rule bans incentives tied to a particular sentiment and says plainly that it does not ban review incentives that carry no express or implied sentiment condition.

A neutral incentive still has to be disclosed under the endorsement guides, and if incentivized reviews materially raise an average star rating, a disclosure to the people who see that rating may be needed.

Google's policy is stricter than federal law on its own platform: anything of value in exchange for posting, changing, or removing a Google review is strictly prohibited, which covers discounts, gift cards, raffle entries, and free services.

State law can go further still: Illinois bans gifts to attract patients altogether (225 ILCS 25/45), Texas caps gifts to prospective new patients at $10 (22 Tex. Admin. Code 108.58), and New York limits inducements to discounts off established fees (8 NYCRR 29.1).

Review gating, happy patients sent to Google while unhappy ones go to a private form, has no specific ban in the FTC rule, but the FTC has said the practice could violate the FTC Act, and Google's Maps policy prohibits it outright.

The asking system itself, scripts, QR codes, and cadence, is covered in dental Google reviews; the rules above are the lines that system has to respect.

Patient testimonials dental boards allow, state by state

State boards attach license consequences to their ad rules, so the state layer usually binds hardest.

Five states spell their testimonial rules out in enough detail to show the range, and none of them bans patient testimonials outright.

New York's unprofessional-conduct rules (8 NYCRR 29.1) allow testimonials only with the patient's written authorization, require disclosures that prevent misleading impressions about the patient's identity plus reasonable disclaimers about results, and ban fictional testimonials completely.

Texas's advertising rule (22 TAC 108.57) bars a testimonial from anyone who is not a patient of record and requires disclosures about the patient's identity and credentials, and patient photos in ads need written consent plus the exact words "Actual results may vary."

California's healing-arts advertising statute (Business and Professions Code 651) allows testimonials unless they mislead through a failure to disclose material facts, and its photo rules require models to be labeled as models, before-and-after photos to name the procedures performed and be presented comparably, and a statement that results may not occur for all patients.

Florida's dental advertising statute (Fla. Stat. 466.019) never singles testimonials out, but it bars laudatory statements about the dentist across all advertising, websites and social media explicitly included, which makes self-praising quotes risky there.

Illinois's Dental Practice Act (225 ILCS 25/45) bans gifts to attract patients and claims of superior quality of care, which squeezes both the incentive side and the glowing-superlative side.

A testimonial that clears every layer

  • A real patient of record, with signed authorization on file

  • Identity, credentials, and any material connection disclosed

  • Outcome language your own results can back, with the generally expected result clear

  • Your state's prescribed wording, wherever one is required

A testimonial that creates risk

  • An actor or composite "patient": fictional testimonials are banned in New York, and fake endorsements are banned federally

  • A gift card given only for a five-star review: sentiment-conditioned, and prohibited by Google regardless

  • "Anyone can get the same result": an implied typical result the practice would have to prove, and an unjustified expectation under the ADA's ethics code

  • A guaranteed outcome: Texas lists guarantees among its banned ad examples, and no testimonial should make one

Consent and HIPAA: the paperwork behind a compliant testimonial

A testimonial that identifies a patient uses protected health information to promote the practice, which takes the patient's written authorization under HIPAA's marketing provisions (45 CFR 164.508), before state consent rules are even counted.

The file should also record anything a viewer would not expect about the patient, an employee, a family member, or free or discounted treatment, because those material connections must be clearly disclosed under the endorsement guides.

Before-and-after photos carry their own state requirements, covered separately in dental smile galleries.

Keep the paperwork after publishing too: New York requires ad copies kept for one year after the ad last appears, Illinois for three, and Texas for four.

  • Signed HIPAA authorization on file whenever the patient is identifiable

  • Every state condition met: written authorization, patient-of-record status, identity disclosures, prescribed wording

  • Material connections disclosed: staff, family, free or discounted care

  • Outcome claims matched to what patients generally achieve

  • No sentiment condition behind any incentive that touched the review

  • Consent and a copy of the finished ad saved for your state's retention period

  • Confirmed against your own state board's rule, not a neighboring state's

Replying to reviews is the adjacent compliance corner with its own HIPAA trap, covered in responding to negative dental reviews.

This page describes the rules as they appear in the statutes and codes cited, it is not legal advice, and your state dental board or a healthcare attorney should confirm any testimonial campaign before it runs.

Frequently asked questions

Do I need permission to use patient testimonials?

In practice, yes: New York requires the patient's written authorization, Texas limits testimonials to patients of record with identity disclosures, and using an identifiable patient's story to promote the practice takes written authorization under HIPAA's marketing provisions. Your state board sets the exact form, so confirm before publishing.

Are patient testimonials legal in every state?

None of the five states checked for this guide (California, Texas, Florida, New York, Illinois) bans testimonials outright, but each attaches conditions, and New York bans fictional testimonials completely. Rules are set state by state, so the answer for your practice is whatever your board's rule says.

Does a 'results not typical' disclaimer make a testimonial compliant?

Not by itself. Under the FTC's endorsement guides the disclosure has to state the result patients generally achieve, in a way that changes the ad's overall impression, so a bare 'results may vary' line does not clear the federal bar. Texas separately requires the exact words 'Actual results may vary' on patient photos.

Can I pay patients for video testimonials?

Paying for a review that expresses a particular sentiment is banned by the FTC's review rule, and Google prohibits anything of value in exchange for a Google review. A no-strings incentive is not banned federally, but it still has to be disclosed, some states restrict patient gifts, and incentives for Google reviews are out entirely.

Can my team or their relatives leave reviews about the practice?

Yes, but the relationship has to be clearly and conspicuously disclosed: the FTC's rule covers owners and managers posting about their own business, and managers who ask employees or relatives for reviews without telling them to disclose the connection. The safest habit is an explicit disclosure line in the review itself.