Can my clinic ask patients for Google reviews under AHPRA rules?

Here is the short answer. Yes, you can ask.

The regulator, the Australian Health Practitioner Regulation Agency (AHPRA), has never banned patients from reviewing you. It does not ban a fair, open request either. The law bans something else: you using testimonials about clinical care in your own advertising.

That one line decides everything. Get it right and you can build a steady review profile with confidence. Get it wrong in either direction and you pay. Fines one way, invisibility the other.

Staying silent about reviews does not make your clinic compliant. It makes it invisible, and it does not remove your risk. Some clinics doing the risky thing believe they are doing the safe thing.

Picture the end of a good appointment. Your patient is relieved, grateful, halfway out the door. You want to ask for a Google review. Then you remember a warning from a colleague or a Facebook group, something about AHPRA and testimonials and fines, and you say nothing. Again.

Meanwhile your clinic sits at four Google reviews while the practice up the road holds ninety. Patients notice. The AI assistants that a growing share of Australians now ask about their health notice too.

This post draws the line where AHPRA draws it. What is banned, what never was, what the penalties look like in 2026, and a review system a clinic can run without touching the line.

What does the AHPRA testimonial rule ban?

Section 133 of the Health Practitioner Regulation National Law makes it an offence to advertise a regulated health service using testimonials. That is the whole rule. The two loaded words are advertise and testimonial.

Advertising means promotion you control: your website, your clinic's social pages, your ads, your printed material. A patient typing their opinion into Google is not your advertising.

A testimonial, in AHPRA's definition, is praise about the clinical side of care. Their testimonial tool draws the line at four things: a symptom or reason for treatment, the diagnosis or treatment itself, the outcome, or your skill and experience.

The consequence: "My physio fixed my sciatica in three visits" is a testimonial. "The clinic always runs on time and the receptionist is lovely" is not, and AHPRA says non-clinical comments like these sit outside the ban.

The penalties grew teeth recently. Maximum fines for advertising offences rose twelvefold, to $60,000 per offence for an individual and $120,000 for a company. They have applied in every state and territory since Western Australia adopted the change in July 2024. One screenshot of clinical praise on a clinic homepage is the kind of thing the rule reaches.

Can patients leave Google reviews for your clinic?

Yes. AHPRA's own guidance says the ban does not stop patients sharing views online or posting reviews on review platforms. The offence sits with the advertiser who uses a testimonial, never with the patient who writes one.

The test that keeps this clean is control. You are responsible for channels you can edit, curate or switch off: your website, your clinic's Facebook or Instagram, a reviews widget you installed. You are not responsible for what patients post on an independent platform such as Google, where you cannot edit or remove reviews.

That is why the safe home for patient reviews is the place you do not control. A review with clinical detail sitting on your Google profile is the patient's speech. The same review copied onto your homepage becomes your advertising, and your breach.

The practical rule for asking follows from that. Invite every patient to share honest feedback on Google, keep the request neutral, and let the reviews live where they land. AHPRA does not require you to police what patients write there. It requires you not to harvest it.

Is the testimonial ban being lifted?

Not yet, and this is where clinics get caught out by headlines.

In 2022 the National Law was amended. One legislated change would swap the blanket ban for rules against testimonials that are false, misleading, paid for without disclosure, or likely to inflate expectations. Law firm briefings at the time fairly described the ban as being lifted.

That change has still not started. Its start date was pushed back until new guidelines were ready. As of August 2026, AHPRA's published position is unchanged: testimonials in your advertising are not allowed.

The rule for you is simple. The law that binds your clinic is the one in force, not the one on the way. And if the change does land, the system in this post still works. It is built on fair asking and arm's length, not on the ban itself.

Where do the fines really come from?

Not from asking. Australia's landmark penalty in this territory punished a business for curating reviews, not collecting them.

Between 2015 and 2018, the booking platform HealthEngine held back around 17,000 patient reviews and edited around 3,000 more to strip out negative comments. In 2020 the Federal Court ordered it to pay $2.9 million. The conduct that cost millions was making real feedback look better than it was.

The consumer watchdog, the Australian Competition and Consumer Commission (ACCC), points every business the same way, clinics included. No fake reviews. No rewards unless they apply to honest reviews good or bad, and are disclosed. No removing or editing real negative reviews. Screening patients first and sending only the happy ones to Google, known as review gating, sits in the same family.

AHPRA's warning matches. Editing or hand-picking reviews risks breaking the National Law and Consumer Law at the same time.

Worth saying calmly: AHPRA is not raiding clinics over Google reviews. Its published approach starts with education and notices. It saves prosecution for the serious end, such as cancer-cure claims. The point of knowing the line is not fear. The line is easy to stay behind once you can see it.

What praise can you put on your own website?

Non-clinical praise. This is the part most clinic owners never hear, and it is a real opportunity.

AHPRA defines a testimonial by its clinical content. That means feedback about everything around the care can appear in your marketing. Side by side:

Breaches the rule: "After two years of back pain I could barely walk. Three sessions here and I am pain free. The best physio I have ever seen."

Compliant: "Booking was easy, I was seen on time, and every step was explained clearly. The front desk team is wonderful."

The second blurb is legal on your website. It says nothing about symptoms, treatment, outcomes or skill. It still needs to be a real, unedited patient comment, because the rules on misleading claims sit under everything.

Here is the quiet advantage. Dr Nathan Pinskier, a GP quoted in the RACGP's coverage of the guidance, notes that what consumers tend to judge is behaviour, appearance and waiting times. Most of what patients praise is non-clinical anyway. The compliant material and the persuasive material are largely the same material.

Build the rest of your authority from what AHPRA has no quarrel with: your qualifications, your registration, plain-English answers to the questions patients ask, accurate service pages, and a complete Google Business Profile. Authority built on clarity needs no borrowed praise.

Why does any of this matter for AI recommendations?

Because the way patients find clinics is shifting under your feet, and reviews are the currency of the new channel.

A national survey published in the Medical Journal of Australia found 9.9 per cent of Australian adults, about 1.9 million people, had asked ChatGPT health questions in a six-month window. Another 38.8 per cent of people aware of the tool said they would consider it. That is a meaningful share of your future patients meeting you, or missing you, inside an AI answer.

AI assistants are choosier than search ever was. In SOCi's 2026 index of local visibility, ChatGPT recommended about one local business for every thirty that appeared in Google's local results. When a tool names that few, it leans on proof. A live, steadily growing review profile is one of the strongest proofs it can read.

Treat the AI like a careful new team member deciding which clinics to mention. It cannot see your clinical skill. It can see that real patients keep vouching for you in public, on a platform you cannot edit. The arm's-length review profile AHPRA is comfortable with is exactly the evidence AI trusts most.

An empty profile, kept empty out of compliance fear, fails both audiences at once. It gives cautious patients nothing to trust, and it gives AI assistants nothing to verify.

The Arm's-Length Review System

A clinic needs a review system a regulator could read over your shoulder. This one has four parts. The name carries the principle: reviews build your reputation at arm's length from your marketing.

1. Ask everyone. Every patient gets the same invitation, in person as the visit ends, then a direct Google review link by SMS or email a day or two later. No screening by mood, no incentives tied to sentiment. Open asking is what keeps volume high and conduct clean.

2. Arm's length. Reviews live on platforms you do not control, with Google first. No review widgets you can curate, no reposting to your clinic's pages, no screenshots in your marketing. What patients say there, clinical or not, stays there.

3. Answer without echo. Reply to every review, warm or hard, with measured and factual language. Never discuss anyone's care in public, never confirm clinical details, and never repeat a reviewer's clinical praise in your reply. Thank them and stop. For a warm review: "Thank you for taking the time to share this. The team will be glad to read it." For a hard one: "Thank you for the feedback. We take all comments seriously and would welcome the chance to talk. Please call the practice on [number]."

4. Authority on your own terms. Your website carries the proof you are allowed to own: credentials, registration, clear service information, educational answers to real patient questions, and genuine non-clinical feedback. Clinical outcomes stay out of your marketing entirely.

How do you set this up this week?

1. Day 1. Claim and complete your Google Business Profile. Correct name, category, hours and contact details. This is the listing patients and AI assistants both lean on.
2. Day 1. Generate your direct review link from the profile and save it as a short link and a QR code.
3. Day 2. Write one neutral request script for the front desk and one SMS or email template. Honest feedback, every patient, no reward attached. In person, as the visit closes: "If you have a minute later, honest feedback on Google helps other people find the clinic. We will text you the link." By SMS the next day: "Hi [name], thank you for coming in. If you have 60 seconds, honest feedback helps others find the clinic: [link]. Good or bad, it is welcome."
4. Day 2. Audit your website and social pages. Remove any patient praise that mentions symptoms, treatment, outcomes or skill. Keep genuine non-clinical comments if you wish.
5. Day 3 onward. Ask every patient as the visit closes, send the link within 48 hours, and spread requests across the week rather than in bursts.
6. Ongoing. Reply to every review within a couple of days, measured and free of clinical detail, and check monthly that nothing on your owned channels has drifted over the line.

Run it for a quarter and the numbers move on their own. No single push, no gimmicks, a system that compounds.

The bottom line

The rule most clinic owners fear does not say what they think it says. Patients reviewing you was never the offence. Republishing their clinical praise is, and the penalties for guessing wrong now run to $60,000.

The freeze is the real cost. Every happy patient who leaves unasked is proof of your care that neither the next patient nor an AI assistant will ever see.

Ask the next patient who thanks you. Send the link tomorrow. Keep their words at arm's length, and let the profile you were afraid to build become the reason you get found.

This post is general information, not legal advice. For a specific advertising question about your practice, AHPRA's advertising hub and your professional indemnity insurer are the right first calls.

If you want to know what AI assistants say about your clinic today, run a free AI visibility scan and get your before picture. For the wider system, read how to ask customers for reviews and whether ranking on Google means AI will recommend you, or see the common scan questions.