2 November 2026

Plexo illustration for Ahpra Advertising Guidelines: A Plain Guide for Wellness Brands

Ahpra Advertising Guidelines: A Plain Guide for Wellness Brands

The Ahpra advertising guidelines apply to anyone who advertises a regulated health service in Australia. That includes practitioners, clinic owners and the marketing teams or agencies who write for them. The main rules are simple to state. Be accurate. Do not use testimonials. Do not offer inducements without clear terms. Do not create unrealistic expectations. Your email and data practices also fall under the Spam Act and the Privacy Act.

This guide explains each rule in plain words. It is written for wellness founders and marketing managers. It is general information, not legal advice. If you are unsure about a specific ad, check the Ahpra advertising hub or speak to a lawyer who knows health advertising.

Plexo
Keep Wellness Marketing Aligned
Plexo aligns content, operations, and revenue for wellness brands, helping teams manage marketing with a clearer view of their systems.
Explore Plexo

TL;DR

  • The guidelines sit under the National Law. They cover any advertiser of a regulated health service, including businesses and agencies, not only practitioners.
  • Testimonials about clinical results are not allowed in advertising. That includes a clinic’s own social media page.
  • Breaching the advertising rules can cost up to $60,000 for an individual and $120,000 for a body corporate, per offence.
  • Marketing emails need consent, clear sender details and a working unsubscribe. Health information is sensitive under the Privacy Act.
  • You stay responsible for content that staff or agencies publish for you.

Table of Contents

Who the Ahpra advertising guidelines apply to

The guidelines were developed under the National Law. They set out what advertisers must do to protect the public. The rules apply to any person, business or corporate entity that advertises a regulated health service. That means services provided by, or usually provided by, a registered health practitioner. Ahpra’s guidelines say an advertiser is anyone who controls part or all of the content. This includes practitioners, non-practitioners and third-party marketing agencies that authorise or direct the drafting of content.

This surprises some wellness founders. You may not be a practitioner. You may own the brand, run the website or approve the posts. If you do, the rules can apply to you.

Not every wellness service is a regulated health service. A meditation app is a different case from a physiotherapy clinic. The test is whether the service is provided by, or usually provided by, a registered health practitioner. If your business offers any services like that, treat the guidelines as applying to you. If you are not sure, ask the relevant National Board or a lawyer.

What counts as advertising

Advertising is wider than a paid ad. Ahpra’s definition covers verbal, printed or electronic communication designed to attract a person to a regulated health service. In practice that includes:

  • Your website and landing pages
  • Social media pages and posts
  • Email newsletters and automated email series
  • Brochures, flyers and signage
  • Paid ads on any platform

The definition leaves out information about treatments or costs that a practitioner gives directly during a consultation. That can be in person, by phone, by video or by another digital channel. A practitioner explaining options to a patient is not an advertisement. A public post describing the same options may be.

What you cannot do in health advertising

The National Law restricts several kinds of content. Per Ahpra’s guidelines, advertising must not contain:

  1. False, misleading or deceptive claims, or claims likely to mislead
  2. Testimonials or purported testimonials
  3. Inducements without clearly stated terms and conditions
  4. Content that creates an unreasonable expectation of beneficial treatment
  5. Content that encourages indiscriminate or unnecessary use of health services

These five points cover most of the problems we see in wellness marketing. Headlines that promise a cure. Before-and-after stories that imply a typical result. A “free” offer with no terms. A countdown timer that pushes people to book.

Take the third point. If you offer a discount, a bundle or a gift with a booking, state the terms. Who is eligible? What is included? What does it cost after the offer? A vague offer with hidden conditions is where advertisers get caught.

Testimonials and reviews

Testimonials are the area where most wellness businesses slip. The rule is firm. The National Law does not allow testimonials or purported testimonials in advertising a regulated health service. Ahpra describes a testimonial as a positive statement or recommendation about the clinical aspects of a service. Clinical aspects include symptoms, diagnosis, treatment and outcomes.

There is a useful distinction. Comments about customer service or communication style do not refer to clinical aspects. Ahpra’s testimonial guidance says these are not treated as testimonials. A review that says the front desk was friendly and the booking was easy is generally fine. A review that says the treatment fixed someone’s back pain is not.

Social media pages

The rule applies to social media. Ahpra says that if a page is used to promote a regulated health service, such as a clinic’s Facebook page, it is advertising. It must not include testimonials. Not every platform lets you edit or remove comments, so plan for that. Set moderation rules. Check your page often. Remove or hide clinical comments where the platform allows it.

A few practical habits help:

  • Do not repost patient stories, ratings or quotes about results.
  • Do not ask customers to leave clinical reviews on pages you control.
  • Keep a record of when you checked and what you removed.
  • Brief anyone who manages your social accounts, including agencies and freelancers.

Claims, evidence and unrealistic expectations

Ahpra expects advertising to be accurate and clear. That matters for wellness brands because the language of the category is often loose. Words like “detox”, “heal” and “reverse” can imply results you cannot support.

Use this short check before any claim goes live:

  • Can we show the evidence behind this claim if Ahpra asks?
  • Would a reasonable reader expect the same result for themselves?
  • Does the wording suggest that everyone needs this treatment?
  • Are the terms of any offer written down next to the offer?

If an answer is no, rewrite the line. Describe what the service is and what happens in a session. Describe who it may suit. Leave outcomes out unless you can support them. This is also better content. A clear explanation of how a service works usually reads as more credible than a bold promise.

If your brand covers newer or niche modalities, write with extra care. Our mild hyperbaric therapy content guide shows how to describe a service without over-promising.

Penalties for getting it wrong

The cost of a breach is real. Under section 133 of the National Law, advertising offences carry maximum penalties of $60,000 for an individual and $120,000 for a body corporate, per offence. Each ad, post or page can count separately. Ahpra also publishes an advertising compliance and enforcement strategy, and its approach is built around keeping the public safe from unlawful advertising.

Older articles still quote lower figures. Check the date on anything you read and use Ahpra’s current page as the reference.

Email marketing: what the Spam Act requires

Ahpra tells you what you can say. The Spam Act tells you how you can send it. Both apply to a wellness brand running email campaigns.

According to the ACMA, every commercial electronic message needs three things:

  1. Consent. The recipient must have agreed to receive it.
  2. Sender identification. The message must say clearly and accurately who sent it.
  3. A working unsubscribe. It must be free and easy to use. It must not need a log-in. You must action it within 5 working days. It must keep working for at least 30 days after you send the message.

The same rules cover SMS. The ACMA also warns against sending marketing under the label of a service message. In its action against a major bank, it noted that a message containing marketing content, or direct links to it, is commercial. It needs an unsubscribe option.

Automated sequences

Welcome journeys and nurture series are common in wellness. The ACMA has flagged a growing problem in its quarterly report on spam action. Businesses do not always make sure that an unsubscribe at any point opts the person out of the whole series. Test this. Subscribe with a test address, click unsubscribe in the second email and confirm nothing else arrives.

Penalties under the Spam Act

The numbers are larger than Ahpra’s. The ACMA states that the maximum court penalty is $626,000 per day for companies with no prior record. It rises to $3,130,000 per day for companies with a prior record. Those figures come from the ACMA’s October 2024 announcement. Check the ACMA site for current amounts.

Check your email platform

The ACMA says you should not assume your service provider handles compliance. Your email and SMS unsubscribe fact sheet makes the point that your business stays liable. Keep oversight and run regular quality checks.

Privacy Act: health information is sensitive

If you collect client details for marketing, the Privacy Act may apply as well. The OAIC explains that Australian Privacy Principle 7 covers direct marketing by covered private-sector organisations. It applies where the Spam Act or the Do Not Call Register Act does not. Sensitive information can be used or disclosed for direct marketing only with the person’s consent. Applicable direct marketing must include a simple way to opt out. See the OAIC direct marketing guidance.

Health information counts as sensitive information. Under APP 3.3, it generally cannot be collected without the individual’s consent, with limited exceptions. An OAIC enforceable undertaking shows how this plays out. One business collected patients’ health information without consent. Another disclosed patient information without consent. The first also breached the Spam Act by sending marketing SMS messages without consent.

The lesson for marketers is practical:

  • Do not segment email lists by health condition unless the person has agreed to that use.
  • Do not pass client lists to partners or agencies without consent.
  • Collect only what you need. The OAIC says “necessary” is an objective test. It is not enough that the data is helpful or convenient. See the OAIC key concepts chapter.

Not every business is covered by the Privacy Act. Check with the OAIC or your lawyer whether yours is.

You are responsible for content others publish

Handing work to an agency does not hand over the risk. Ahpra’s position is that advertisers are responsible for content published on their behalf. You must check and maintain compliance for content created by staff or third parties. The ACMA says the same for email service providers.

In practice, this means you need a process, not just good intentions. A simple version looks like this:

Step Who What they check
Draft Writer or agency Claims, offers, tone
Review Named owner at your business Testimonials, inducement terms, expectations
Email check Marketing lead Consent, sender details, unsubscribe
Publish and log Social or email manager Date, version, approver
Monthly sweep Owner Comments, old posts, live pages

We cover how to set owners and review cadence in our guide to marketing ops governance. For the wider picture of how content, systems and revenue fit together, see our integrated marketing strategy guide.

A quick pre-publish checklist

Use this before you press send or publish.

  • Is the service a regulated health service, or one usually provided by a registered practitioner?
  • Is every claim accurate and supportable?
  • Have we removed testimonials about clinical results, including comments on our own pages?
  • Do offers state their terms?
  • Does the wording avoid unrealistic expectations and pressure to overuse a service?
  • Does each email identify us, have consent behind it and include a working unsubscribe?
  • Have we used health information only with the person’s consent?
  • Has a named person approved this, whoever wrote it?

Our perspective

Most compliance problems we see are not about bad intent. They come from fragmented marketing. One person writes the posts. Another runs the email platform. A third looks after the CRM. Nobody owns the whole picture.

That is why we treat compliance as part of the operating system, not a final check. When content, operations and revenue are planned together, the rules are built into the workflow. Writers know what they cannot say. The CRM records consent. The unsubscribe works across a whole sequence. Approvals have a name against them.

We also think accountability matters. Handing over a deck of recommendations leaves the risk with you. Our model is to manage the executable plan with you, so there is a clear owner for each task and a live view of what is happening. That makes it easier to spot a problem before it becomes a breach.

For a wellness brand, good compliance and good marketing support each other. Clear, honest content builds trust. Clean consent builds a list you can rely on.

Jordan

How Plexo can help

If your content, email and CRM are run in separate places, a 90-minute review is a practical first step. The Plexo Business Audit costs A$499 as a one-off fee. It identifies operational constraints and gives you a tailored 90-day plan. That plan can cover content workflow, consent capture in your CRM and who approves what.

If you want ongoing help after the audit, our health and wellness marketing services cover content, operations and revenue. We do not give legal advice. We build the systems so your lawyer’s and Ahpra’s guidance is applied every time. You can also read how we helped a wellness brand grow from $65k to $110k in monthly revenue in the P3 Recovery case study.

FAQ

Do the Ahpra advertising guidelines apply to me if I am not a practitioner?

They can. The guidelines apply to any person or business that advertises a regulated health service, and to agencies that control or direct the content. What matters is the service being advertised, not your own registration. If the service is provided by a registered health practitioner, treat the rules as applying to your marketing.

Can I show client reviews on my website or social pages?

Only if they are not about clinical aspects. Ahpra treats comments about clinical results as testimonials, and these are not allowed in advertising. Comments about customer service or communication style are not testimonials. Social media pages used to promote a service count as advertising, so the same rule applies there.

Yes. The Spam Act requires consent for commercial messages, clear sender identification and a working unsubscribe. The unsubscribe must be free, need no log-in and be actioned within 5 working days. If you use health information to target the email, the Privacy Act may also require consent for that use.

What are the penalties for breaching the advertising rules?

The maximum under section 133 of the National Law is $60,000 for an individual and $120,000 for a body corporate, per offence. Spam Act penalties are separate and are set by a court. They can reach $626,000 per day for a company with no prior record. Confirm current figures with Ahpra and the ACMA.

Is my agency liable if their content breaches the rules?

You remain responsible. Ahpra says advertisers must check and maintain compliance for content published on their behalf. The ACMA says the same about email providers. Agree an approval process in writing and name an owner on your side.

Sources

Newsletter

Back to blog