Healthcare advertising: what you may say, and how to brief an agency

Healthcare advertising is ordinary advertising with three constraints running through it at once: every health claim has to be substantiated and not misleading, the advertising platforms require certification and restrict whole categories, and patient information is regulated so your tracking and targeting have to be built differently. Work in that order. Decide what you are allowed to say and who signs it off, confirm which certifications your channels need, set up measurement that never carries health information, and only then write the campaign.

This page covers the three constraints, what a healthcare advertising agency does, how to choose one, and how to measure without touching patient data.

Constraint one: the claims

Health claims are held to a higher evidential standard than claims about any other product category.

• Substantiation. The FTC's Health Products Compliance Guidance sets the United States standard: advertising must be truthful and not misleading, and advertisers need adequate substantiation for objective claims, which for health benefits means competent and reliable scientific evidence. It also makes the point that matters most in practice, that you cannot imply a benefit you would not be allowed to state directly.
• Prescription medicines to the public. Advertising prescription drugs directly to consumers is permitted in very few countries, the United States and New Zealand among them, and is prohibited in most others. If you work across markets, this is the first question to settle, not the last.
• Local advertising codes. In the UK the CAP and BCAP codes administered by the ASA contain specific rules on health, beauty and medical claims, including who may make them and which conditions may not be advertised as treatable.
• Professional regulators. Clinicians are bound by their own body's advertising rules on top of advertising law, covering testimonials, before and after imagery and specialist titles. Those rules, not the agency's instinct, decide the creative.

Constraint two: the platforms

The large advertising platforms operate their own healthcare rules, and they are stricter than the law in some places and differently drawn in others. Google's healthcare and medicines policy is the reference point for search and display: some categories need Google certification before a campaign can run, including prescription drug advertising, online pharmacies, telemedicine, addiction treatment and health insurance in the United States, and the rules vary country by country. Certain products are not advertisable at all.

Two practical consequences. Build certification time into the campaign timeline, because it is not instant. And expect limits on audience targeting: platforms restrict personalised advertising based on health conditions, so a campaign plan built around condition level audiences will not survive review.

Constraint three: patient data

This is where healthcare marketing most often goes wrong quietly. Analytics tags, advertising pixels, call recordings and chat tools can all capture information about a person's health, and in healthcare that information is regulated.

• In the United States, protected health information held by a covered entity is governed by HIPAA, which restricts marketing uses and places obligations on the vendors who process it. Tracking technologies on patient facing pages and portals deserve a specific review rather than a default install.
• In the UK and EU, health information is a special category of personal data under data protection law, so consent and lawful basis have to be established before any health related targeting or measurement. The ICO publishes guidance on both consent and direct marketing.
• Keep condition information out of URLs, form field names, call recordings and conversion event names. Once it is in a measurement system it is very hard to remove.
• Prefer aggregate and server side measurement, and do not pass identifiers into advertising platforms from any page a patient reaches while describing a symptom.

What a healthcare advertising agency does

The field splits into specialisms that share very little day to day: pharmaceutical and medical device work, which lives or dies by regulatory review; hospital and health system marketing, which is service line and catchment led; clinic, dental and practice marketing, which is local search and reputation led; and health technology, which is business to business marketing with clinical proof attached.

A competent partner in any of them produces a claims position in the first month, names the certifications your channels need, specifies the measurement setup including what will not be collected, and reports booked appointments or qualified enquiries rather than impressions.

How to choose one

Ask this	What a good answer sounds like
Which healthcare categories have you been certified in?	Named certifications and the markets they cover
Who reviews claims before publication?	A named process with a clinician or compliance reviewer in it
How will you set up measurement?	A specific answer about what is not collected, and server side handling
What will you report?	Booked appointments or qualified enquiries, with a baseline taken first
Who writes the clinical copy?	A writer working from a clinician's words, with the clinician credited
What will you refuse to run?	Concrete examples, which is the best sign of real experience

Be wary of anyone who promises patient volumes before seeing your capacity, offers to write clinical claims without evidence, or proposes condition level audience targeting. Walk away from testimonial campaigns assembled without written patient consent.

Creative that is compliant and still persuasive

• Specificity instead of superlatives: the procedure, the clinician's qualification, the wait time, the aftercare.
• Named clinicians with real credentials, which is both a trust signal and a regulatory safe harbour against vague expertise claims.
• Outcomes stated with their source, or not stated.
• Patient stories only with written, informed, revocable consent, and only where the regulator allows them.
• Plain language for conditions, so the person searching recognises their own words.
• Accessibility treated as part of the brief, since a large share of this audience needs it.

This page covers advertising for healthcare organisations: claims, platforms, data and agency selection. For organic search and local visibility for a clinic or practice, that is a separate discipline with its own method.

What people ask about healthcare advertising

Can you advertise prescription medicines to patients?

Only in the small number of countries that permit direct to consumer prescription advertising, the United States and New Zealand among them, and even there with certification and heavy disclosure requirements. Elsewhere, communication about prescription products is aimed at healthcare professionals.

Do we need Google certification to advertise a clinic?

Many healthcare categories require it, including telemedicine, addiction treatment and some pharmacy services, and the requirements vary by country. Check the healthcare and medicines policy for every market you plan to run in, and apply before you build the campaign.

Can we use patient testimonials?

It depends on your regulator and your market. Where they are permitted, you need written informed consent, no implied guarantee of outcome, and a record of the consent. Some professional bodies prohibit them outright for certain practitioners.

Can we retarget people who visited our symptom pages?

Treat that as off limits. Retargeting built from health interest carries both platform policy and data protection exposure. Retarget from neutral pages instead, such as a general services page, and keep condition detail out of the data entirely.

How do we measure campaigns without patient data?

Count appointments booked, calls answered and enquiries received, with no condition attached to the record. Use call tracking configured not to retain health information, aggregate reporting by service line rather than by individual, and a baseline recorded before the campaign begins.

Where patients are asking before they call

Patients increasingly describe symptoms to ChatGPT, Gemini, Perplexity, Claude or Google's AI Overviews before they book anything, then ask where to go. Those five answer differently, name different providers and cite different sources, and they share no common ranking, so being named by one says nothing about the others. For health questions they lean heavily on recognised medical publishers, professional directories and provider sites with clear clinical authorship.

Very few providers have looked at what those answers say about their service line and their city. Ask the questions a patient would ask in two or three assistants, keep your own name out of the prompt so the answer comes back clean, and note who gets named and which sources are cited. AI Knows Us tracks what those answers say about a provider.