If you run a cosmetic clinic in Australia and your website was built by a generalist agency more than two years ago, there's a strong chance it's currently non-compliant with AHPRA's advertising rules. Maybe not in an obvious way. Maybe in the form of a single testimonial, a "before and after" gallery without proper consent paperwork, the word "surgeon" used by a practitioner who isn't entitled to it, or a vague claim about results that AHPRA would now treat as misleading.

The rules sharpened considerably in 2023 after the cosmetic surgery review, and the maximum penalty for advertising offences went from $5,000 to $60,000 per offence for individuals and $120,000 for body corporates. Practices that haven't reviewed their website since then are exposed. This post is the plain-English read of what's actually allowed, what isn't, and what we'd change on a typical clinic site today.

I'm not a lawyer and this isn't legal advice. The actual rules sit in Section 133 of the National Law and the AHPRA Advertising Guidelines. If your site is doing serious advertising work, get a compliance review from someone qualified. This post is about what we usually see on cosmetic clinic websites and where the predictable problems sit.

The five things AHPRA actually prohibits

Section 133 of the National Law is the spine. It says advertising of a regulated health service must not:

Be false, misleading, or deceptive
Offer gifts, discounts, or other inducements without clearly stating the terms and conditions of the offer
Use testimonials
Create an unreasonable expectation of beneficial treatment
Encourage indiscriminate or unnecessary use of regulated health services

That's it. Five rules. Every problem on a cosmetic clinic website is some flavour of one of these five. The detail and the edge cases are where the trouble lives.

Where most clinic sites are quietly breaching

Testimonials are the single most common problem

The testimonials rule is the strictest and the most-breached. Almost every clinic website I've audited has at least one testimonial somewhere — a "what our patients say" section, a Trustpilot widget, a Google Reviews embed, a screenshot of an Instagram comment. All of these are, in AHPRA's reading, advertising that uses testimonials about a regulated health service.

The AHPRA testimonial tool is the official guidance and it's worth reading in full. The short version: a testimonial in advertising is a positive statement about the clinical aspects of a regulated health service. If the website is your advertising and the statement praises the clinical service ("Dr Smith made me feel beautiful again," "I love my new results"), that's a testimonial and it's not allowed.

There's nuance:

Reviews patients write on Google or independent platforms are the patient's speech, not your advertising. You can't be prosecuted for what a patient writes on Google. You can be prosecuted for embedding those reviews on your website as part of your advertising. Same words, different status.
Comments about non-clinical aspects — clean reception, friendly staff, easy parking — aren't testimonials in AHPRA's reading. They're commentary on the experience, not the clinical service. Walking the line here is risky and we'd usually recommend cutting them anyway.
Star ratings, aggregate scores, "rated 4.9 stars by 200 patients" — almost certainly testimonials in spirit, treated as such in practice.

The safest position: no testimonials on the clinic website at all. If you want social proof, link out to Google Reviews from a "Find us on Google" button. Don't replicate the content on the site.

"Surgeon" is a protected title some practitioners are still using

Since July 2023, the title "surgeon" (including "cosmetic surgeon") is restricted to medical practitioners with specialist registration in surgery, obstetrics and gynaecology, or ophthalmology. Practitioners with general registration who used to call themselves "cosmetic surgeons" can no longer use the title. Not in copy. Not in URLs. Not in title tags. Not in meta descriptions. Not in image alt text.

If your website was written before mid-2023, scan it now. Practitioner bios, service page copy, blog posts, the URLs of those blog posts — anywhere the word "surgeon" appears, check whether the practitioner is entitled to it. If not, it has to come out.

Language that trivialises risk

AHPRA explicitly calls out terms used in cosmetic advertising that imply mastery in a way that trivialises the risks of the procedures: "doll-maker," "magic hands," "sculptor," "artist," "the king of [procedure]," "world-renowned," "world's best." All flagged.

This bites in two places. First, in the breathless copy on cosmetic clinic homepages. Second, in any SEO metadata that's been written to rank for terms like "best [procedure] [city]" — that's exactly the kind of language the guidance pushes back on.

Plain, accurate, evidence-based language. That's the bar.

Claims that create unreasonable expectations

The "unreasonable expectation of beneficial treatment" rule is the soft one — it doesn't list specific words. But the spirit is clear:

"Lose 10kg with our non-surgical liposuction" — claim with no qualification of variability, risks, or recovery
"Permanent results" — for procedures where the results aren't, in fact, permanent
"Pain-free" — for procedures that involve discomfort, even if managed
"No downtime" — for procedures that actually have some recovery period

The fix isn't to stop talking about benefits. It's to talk about them accurately, with appropriate qualification of variability and risks. Every claim should be defensible.

Pricing without all-in disclosure

The inducement rule has teeth around pricing. If your site says "Botox $9 per unit" or "$1,200 cheek filler package," AHPRA expects:

The price to be accurate and inclusive of all foreseeable costs
Any conditions to be clearly disclosed (number of units, area treated, consultation fees not included)
Discount or finance offers to clearly state the full terms

"$199 lip filler — limited time!" without disclosure of consultation fees, the actual product cost above 0.5ml, or the conditions of the offer is a textbook breach.

The case for a more conservative website

The 2023 guidance was the first time AHPRA explicitly took aim at higher-risk non-surgical cosmetic procedure advertising. The intent was clear: the regulator no longer wants to see Instagram-style cosmetic marketing on practitioner websites. The bar is "informational, educational, evidence-based."

Some practitioners read that and panic, then strip their websites down to a contact form and a list of services. That's overcorrecting. AHPRA isn't telling clinics to stop marketing. It's telling them to market more carefully. The clinics that have adjusted intelligently are still doing real marketing work — they've just changed the language, the imagery, and the social proof patterns.

What a compliant cosmetic clinic website actually looks like

Here's the shape, after a compliance pass.

Procedure pages that educate, not sell

Each procedure has its own page. The page describes what the procedure is, what conditions it treats, what the realistic outcomes are, what the risks are, what the recovery process looks like, and what the consultation process involves. Pricing is indicative and conditions are stated.

This sounds dry. It also ranks well on Google because it's exactly the content patients are searching for, and it positions the clinic as the careful, evidence-based operator rather than the salesy one.

Practitioner profiles that establish credentials accurately

For doctors: registration type (general / specialist), specialty if applicable, qualifications, CPCA or ACCSM membership if held, years of experience, areas of focus. No "surgeon" unless entitled. No marketing puffery.

For dentists, nurses, and allied practitioners: registration type, ADA membership if applicable, qualifications, areas of focus.

Before-and-after galleries done properly

We've got a whole separate post on before-and-after galleries — the rules are detailed enough to deserve their own treatment. Short version: written patient consent obtained after the final result, consistent photo conditions, no editing or filters, a disclaimer that individual results vary, disclosure of the procedure performed along with its risks. Images cannot be stored on personal devices.

A booking flow that's informational, not aggressive

A consultation booking form is fine. "Get yours now" pop-ups, countdown timers, "limited spots available," and the rest of the conversion-rate-optimisation toolkit are bad fit for a regulated health service site. AHPRA hasn't explicitly banned any of these, but they sit close to the "encouraging indiscriminate use" rule and they look bad in front of a complaints panel.

Plain pricing or no pricing

Either commit to genuinely transparent pricing (procedure, what's included, what isn't, indicative range with reasons for variation) or skip on-site pricing entirely and quote during consultation. The middle ground — teaser prices designed to attract enquiries, then a quote that's higher — is where the inducement rule bites.

No testimonials

We've covered it. Let it sink in. Strip the testimonials section entirely. Link to Google Reviews if you want the social proof.

The audit pass we run on existing clinic sites

When we audit a cosmetic clinic site for compliance, we work through this checklist:

Are there any testimonials anywhere on the site (homepage, service pages, blog, sidebar widgets, footer)? Strip.
Does any practitioner use "surgeon" without entitlement? Fix.
Are any claims about results unqualified ("permanent," "pain-free," "no downtime," specific outcome guarantees)? Qualify.
Are there any superlatives or trivialising language ("best," "world-renowned," "magic," "artist")? Replace.
Is pricing displayed with full inclusion of foreseeable costs and conditions? Clarify or remove.
Are before-and-after photos backed by current written consent and meeting the imagery rules? Audit and re-consent.
Are there any inducement-style offers (discounts, packages, "limited time") without full T&Cs? Disclose.
Are blog posts and SEO metadata reviewed for the same issues as the main content? Sweep.

A thorough pass on a mid-size clinic site usually surfaces 15–40 separate items. None of them are catastrophic individually. Together they're the difference between a site AHPRA would treat as good faith and a site that would attract enforcement action.

The honest line on enforcement

AHPRA has historically been complaints-driven rather than proactive. Most enforcement comes from competitor complaints, patient complaints, or media coverage. The 2023 review changed the appetite — the Cosmetic Surgery Hub signalled that the regulator was now actively monitoring the cosmetic space. Plenty of practitioners have been warned or sanctioned since.

If your website is doing aggressive marketing and you're in a competitive market, expect competitor complaints. If your website is quietly old-fashioned and out of date, the risk is that a single patient with a bad outcome attaches the website to their complaint, and the regulator finds the breaches that were already there.

The cost of a compliance review and a copy rewrite is small. The cost of a successful prosecution at $60,000 per offence — plus the reputational hit and the Medical Board notification — is large.

The takeaway

AHPRA's rules for cosmetic clinic advertising are five lines in the National Law, fleshed out by guidelines that get more specific every year. The biggest practical issues on websites are testimonials, the title "surgeon," unqualified results claims, trivialising language, inducement pricing, and before-and-after compliance. Most cosmetic clinic websites built before 2024 have problems in at least three of these areas.

The fix isn't to gut the site. It's to align the marketing approach with the regulatory standard — informational, evidence-based, accurate. Done well, this kind of site also outperforms the breathless competitor sites on Google because it answers the questions patients actually have.

If you want a compliance-focused audit on your current cosmetic clinic website — looking specifically at testimonials, claims, pricing, titles, and imagery — book a free audit. We'll send you a structured list of what we'd change and why, with reference to the specific AHPRA guideline points each item relates to.

AHPRA Cosmetic Website Rules: $60K Fines, 5 Traps