Dental advertising in the US is governed by three layers: the FTC’s ban on deceptive claims, HIPAA’s rules on using patient information, and your state dental board’s advertising regulations — with the ADA Code of Ethics sitting underneath most board rules. Get one layer wrong and the fix can mean legal fees, a board inquiry, and a public reprimand. Here is what you can and cannot say in 2026.
One caveat first: this is not legal advice. Every state board interprets its rules differently, and they change — your dental board and a healthcare-advertising attorney are your authoritative sources. Treat this as a map of where the landmines usually sit.
What federal rules apply to every dental practice?
Two federal frameworks apply to every US practice, whatever the state: the FTC Act and HIPAA.
- The FTC Act bans deceptive advertising. Any claim has to be substantiated. “Best dentist in [City]” is unsupported unless a recent, verifiable third-party ranking backs it. “Painless dentistry” is risky unless it is heavily qualified.
- HIPAA governs patient information in marketing. You cannot use patient photos, testimonials, or stories without specific written authorization, and some identifiable details need extra protection even when you have it.
How do state dental boards add to the federal rules?
On top of that baseline, every state dental board issues its own advertising rules — and while the wording varies, the same patterns show up again and again.
- Specialty claims. Most boards restrict “specialist” and “specialty practice” to ADA-recognized specialties such as endodontics, orthodontics, periodontics, prosthodontics, pediatric dentistry, and oral and maxillofacial surgery. A general dentist calling themselves a “cosmetic dentistry specialist” is a common misstep.
- Superlatives. “Best,” “top,” and “leading” generally require substantiation, and awards from pay-to-play directories usually do not count.
- Before-and-after photos. Usually allowed with patient consent and a disclaimer, though some boards specify language about typical results.
- Free-service offers. Some boards restrict advertising a “free” exam or whitening as patient solicitation, so check your board’s wording before you run one.
Where does the ADA Code of Ethics fit in?
State boards rarely write their advertising rules from scratch — most borrow the logic from the ADA’s Principles of Ethics and Code of Professional Conduct. Section 5, Veracity, is the part that speaks to advertising: a dentist shall not make false or misleading representations about services, credentials, or fees.
Reading it takes under an hour and gives you the reasoning behind your board’s rules, which makes the gray areas much easier to judge. When I pressure-test marketing copy, it is the first document I check a claim against, with the state board rules layered on top.
Which marketing claims draw the most complaints?
The riskiest claims cluster around a handful of phrases that overpromise or blur the truth. Insurance wording is a quiet one: in our audit of 6,554 dental practice websites, 37% never mention insurance at all, and many that do simply say “insurance accepted” — which patients read as “my plan is in-network.” The table below shows the phrases that draw complaints and safer ways to say the same thing.
| Claim | Why it is risky | A compliant way to say it |
|---|---|---|
| Painless dentistry | Draws a complaint if a patient feels any discomfort | Gentle dentistry; sedation options for anxious patients |
| Best price guaranteed | Triggers FTC substantiation rules and most board superlative rules | Transparent pricing; free treatment estimates |
| Insurance accepted | Reads as “in-network”; a perception and possibly compliance problem if you are out-of-network | We accept most PPO plans and file your claims for you |
| Same-day crowns | Fine when always true; misleading when lab fabrication is sometimes needed | Same-day crowns available for many cases |
| #1 / best dentist in town | Unsubstantiated superlative; pay-to-play awards do not qualify | Cite a specific, verifiable third-party rating |
What is safe to post on social media?
Social media is where HIPAA and marketing collide most often, because the safe line is not obvious. The rule of thumb: nothing that identifies a patient or confirms they were treated goes out without specific, written, HIPAA-compliant authorization. The most common missteps:
- Posting a patient case photo on a general consent form — a marketing authorization is a separate, specific document
- Replying to a public review with any detail that confirms the person was a patient or describes their visit
- Sharing operatory video that incidentally shows another patient in the background
The FTC’s Endorsement Guides apply too: testimonials and reviews have to reflect honest experience, and you cannot post fabricated or incentivized reviews without disclosing the connection.
The empathy-first move most practices miss: you do not need risky testimonials to show social proof. In the same audit, one pattern kept repeating — practices sitting on dozens of genuine Google reviews while showing none of them on their own homepage. Those reviews are already public and patient-published, so surfacing them is lower-risk and more persuasive than chasing new testimonials that each need an authorization form. When you do respond to reviews, keep it generic and warm — our guide to responding to negative reviews covers the HIPAA-safe phrasing, and the same anxiety-aware tone belongs in your website copy.
Do paid ads have extra rules?
Yes. If you run Google Ads, a third layer stacks on top of the FTC and state rules: Google’s own healthcare and medicines advertising policy. It restricts certain claims and targeting for health services, and violations get ads disapproved or accounts suspended without a human conversation.
Two practical implications: avoid implying guaranteed outcomes even where your board would tolerate the phrasing, and never build remarketing lists from patient data — that crosses Google policy and HIPAA at once. Whoever runs your ads should be able to explain this policy; if they cannot, that is a vendor-quality signal. For the full setup, see our guide to Google Ads for medical clinics.
Which compliance documents should every practice keep?
Five documents cover almost every advertising and HIPAA question a practice hits:
- A HIPAA-compliant marketing authorization form for testimonials, case photos, and patient stories
- An internal social media policy specifying what staff may and may not post
- A review-response protocol with pre-approved template replies
- A state-board compliance checklist you refresh once a year
- A vendor agreement with your marketing partner confirming they will comply with HIPAA and state rules — the same standard you would expect from any HIPAA-compliant website build
What should you do this quarter?
Five steps clear most of the risk over a single month:
- Pull every marketing claim on your website and confirm each one can be substantiated.
- Audit the last 12 months of social posts for HIPAA exposure and take down anything that identifies a patient.
- Email your state dental board and request its current advertising-guidelines document.
- Put your existing Google reviews on your homepage, and remove any testimonial you cannot tie to a signed authorization.
- Read Section 5 of the ADA Code so you can judge the gray areas yourself.
This work is unglamorous, but a board complaint is expensive — legal fees, board correspondence, sometimes a public reprimand — and almost always costs far more than prevention. For the wider picture, our complete guide to dental marketing shows where compliant advertising fits into the whole funnel.
Want a second set of eyes? Send me your URL and I will flag the advertising and HIPAA red flags I can see from the outside — get in touch, or book a free website audit to walk it with me.
Frequently asked questions
What rules govern dental advertising in the US?
Three layers apply: the FTC Act, which bans false or misleading claims; HIPAA, which controls the use of patient information in marketing; and your state dental board’s advertising rules. The ADA Code of Ethics (Section 5, Veracity) sits underneath most board rules and explains the reasoning behind them.
Which dental marketing claims draw the most board complaints?
The highest-risk claims are painless or pain-free guarantees, unsubstantiated “best” or “#1” superlatives, before-and-after photos without patient consent, “same-day crowns” marketed where lab fabrication is sometimes needed, and vague “insurance accepted” wording that patients read as in-network.
Can a dental practice post patient photos or stories on social media?
Only with a specific HIPAA-compliant marketing authorization — separate from a general photo consent form — that names the platform and content and includes the patient’s right to revoke. A safer path is to surface the Google reviews patients have already published rather than collecting new testimonials that each need their own authorization.
Do Google Ads have extra rules for dentists?
Yes. Google’s healthcare and medicines advertising policy restricts certain claims and targeting for health services. Avoid implying guaranteed outcomes, and never build remarketing lists from patient data — that violates both Google policy and HIPAA at once.