Dental Testimonials: Examples, Consent Rules and Dental Patient Testimonial Software

Ask a dental marketing agency about testimonials and you will hear about HIPAA. HIPAA is real and it matters, but it is a privacy law. It has nothing to say about whether a testimonial is honest advertising, and that second question belongs to your state dental board, which licenses you and can discipline you. The American Dental Association puts it plainly in its own guidance: many states regulate the use of testimonials in dentistry advertising. Some restrict them heavily. Two examples show how far apart the requirements sit, and both are quoted here from the regulations themselves.

Read B.7.f slowly, because it is stranger than it looks. Colorado defines reasonable substantiation at B.4 as tests, analysis, research, studies or other evidence based on the expertise of professionals, using procedures generally accepted in the profession. Now consider the testimonial every dental practice in America has on its website: a patient saying the crown is perfect and the dentist does beautiful work. That is a statement attesting to technical quality. There is no study you can produce to substantiate it. The practical reading most dental counsel land on is to publish testimonials about the patient experience, which the patient genuinely witnessed and can speak to, and to be much more careful with quotes that grade your clinical skill.

These two states are not the ceiling or the floor, they are illustrations. Check your own board rule. If your practice also sits in a state with a stricter code, the stricter one governs.

Here is a real problem that only appears when you read both rules at once. Standard HIPAA-conscious dental marketing advice is to anonymize: publish the quote as Sarah M. or as a happy implant patient, because that way you have not identified anyone. Texas 108.57(c)(8) says a testimonial that is not readily subject to verification, or that fails to include disclosures as to the identity and credentials of the person making the testimonial, is deceptive advertising. An anonymous quote is by definition not readily subject to verification.

Anonymizing does not solve the HIPAA problem either, which is the part that surprises people. The authorization requirement under 45 CFR 164.508 attaches to the use of protected health information for marketing. If you have a real patient statement about their real treatment and you publish it, you used their information, and shortening the name to an initial does not convert a marketing use into a non-use. What anonymizing does is reduce the chance a stranger recognizes them, which is worth something but is not the legal question.

So the two rules only look like they conflict. Both are answered by the same instrument. Get a written authorization that specifically covers publishing the person name and photograph in practice advertising, keep it on file, and then you can publish the name Texas wants without the HIPAA exposure you were anonymizing to avoid. The document has to be a real authorization: six core elements and three required statements, an expiration, and the right to revoke. Miss one and it is defective, which is legally the same as having none. We walk through the elements one at a time in the guide to the patient testimonial consent form, and the general publishing release is covered in testimonial release form.

One more consequence worth planning for. Authorizations are revocable in writing at any time, and the revocation runs forward. A patient who moves away or falls out with the practice can require the testimonial to come down. Build the takedown into the workflow now, including the places you reused the quote, because a testimonial pasted into a printed brochure and three social posts is much harder to retract than one that lives in a single approved wall.

Texas requires the words Actual results may vary on advertising that uses patient photographs. Colorado requires any testimonial to indicate that results may vary in individual cases. Reasonable dentists read that and conclude the disclaimer is the fix: put the line under the smile makeover gallery and the outcome claim is handled. Federally, it is not.

The Federal Trade Commission Endorsement Guides at 16 CFR 255.2(b) treat an endorsement describing results on a central product attribute as a representation of what consumers generally achieve. If your typical implant or clear aligner case does not produce the outcome in the photo, the ad conveys a claim you have to substantiate, and the FTC eliminated the results not typical safe harbor in 2009 and did not restore it in the July 26, 2023 update to the Guides. A disclaimer does not turn an untypical result into a typical one.

That leaves dental practices in a specific and slightly absurd position, which is worth stating clearly because almost no one does: the disclaimer your state dental board obliges you to print is required by state law and is not a defense under federal law. Both apply. Print the line because your board requires it, and separately make sure the cases you show are representative of what you actually deliver, or say plainly what a typical outcome looks like.

Before and after photographs deserve their own sentence, since they are the currency of cosmetic dentistry. A before and after pair makes a typicality claim without a single word attached, which is exactly why the FTC treats it as a performance representation. The practical version: publish a range rather than only your best case, keep the treatment description accurate about how many visits and what it involved, and do not retouch. Our full breakdown of the federal rules sits in FTC testimonial rules, and the same analysis applied to fitness transformations is on gym testimonials, where the before and after problem is identical.

If you look at enforcement rather than at guidance, the pattern is consistent and it is not about the testimonials page. It is about answering reviews.

In October 2019 OCR settled with Elite Dental Associates of Dallas for $10,000 plus a two year corrective action plan. A patient complained in June 2016 that the practice had responded to a Yelp review by disclosing the patient name along with details of the treatment plan, insurance and cost. The investigation found the practice had also disclosed protected health information of other patients who reviewed it on the same Yelp page, and that it had not implemented policies and procedures for protecting that information. OCR noted it had accepted a reduced amount given the practice size and cooperation.

The ADA states the underlying principle without any hedging: responding to a negative review on a social media site can result in a privacy law violation, because a covered entity must continue to protect information a patient has already publicly disclosed. That last clause is the one that catches practices. The patient wrote publicly that they came to you. That does not release you to confirm it.

Which makes the safe reply strange to write, because it must confirm nothing. Not thank you for coming in, which confirms the visit. Not please call the office to discuss your treatment, which confirms treatment. What works is a short statement of your privacy obligations plus an offline contact route, published as a policy you apply to every review rather than only to the bad ones. The same ADA guidance also warns that a photo or video of a patient, even just sitting in the waiting area, may constitute protected health information, which is worth a conversation with whoever runs the practice Instagram account.

Getting more reviews is a separate and much safer project than answering the ones you have, and there are rules there too, mostly Google policies rather than health law. We cover the compliant version in how to get more Google reviews, and the dental specific walkthrough of what you may ask for and what you may never say back is in can dentists ask patients for reviews. If you want the reviews you already earned displayed on the practice site, the Google reviews widget pulls them in without a second script.

The examples below are patterns rather than lines to copy, because a testimonial that reads like it was written by the practice is worth nothing to the person reading it. What matters is which of these you can defend if a board asks.

Placement matters as much as wording. Put the implant story on the implants page, the sedation story on the sedation page, and the anxious patient story where a nervous new patient lands, because nobody reads a general testimonials page before booking. A short Wall of Love on the home page and beside the contact form does more work than a long page nobody visits. The mechanics of the ask are the same as any practice: see collect testimonials for the request flow, and testimonial form for questions that produce an answer worth publishing.

Dentistry is not the only regulated practice with this problem, and the rules genuinely differ by profession. The broader healthcare picture is on patient testimonials, and behavioral health is stricter in a completely different way, because there the ethics codes limit who a clinician may even ask: see therapist testimonials.

Testimonials is software, not a compliance service, and no product can decide whether a given quote is publishable in your state. What this one does is narrow. It captures an authorization record with each submission and keeps it, it holds the patient contact details your board may ask for even after the published quote has been shortened, it renders required disclosure and disclaimer text inline beside the testimonial rather than behind a link, and it costs the same whether you publish six testimonials or six hundred, on one practice site or twelve. Pricing is flat and unlimited, which matters to dental groups because most review platforms charge per location.

Run your testimonials plan past your state dental board rules and your malpractice carrier before you publish, particularly if you advertise across state lines or your practice has locations in more than one state. Rules cited on this page were read from the regulations in August 2026 and states amend them.