The single highest-converting piece of content on a cosmetic, dental, or dermatology clinic website is the before-and-after gallery. Patients who land on those pages spend longer, scroll deeper, and book consultations at materially higher rates than patients who don't see them. Every clinic owner knows this intuitively.

The same gallery is also the single piece of the website most likely to attract an AHPRA notification, a Health Complaints Commissioner complaint, or — in the worst case — a privacy breach prosecution. The rules around before-and-after imagery for regulated health services aren't subtle. They're spelled out in AHPRA's advertising guidelines and the Medical Board's cosmetic guidelines. Most clinic websites I audit are in breach in at least three places.

This post is the practical build for how to do a before-and-after gallery properly — the consent paperwork, the imagery rules, the design pattern that actually converts, and the technical infrastructure to keep it all maintainable. None of it is rocket science. Almost nobody does it all correctly.

What AHPRA actually requires

Strip back the legal language and the requirements are:

Written consent for any photograph or video used in advertising, separate from the consent for the procedure itself, capturing exactly how the image will be used
Consent obtained after the final result is achieved — not at the time of the procedure
Consistent photo conditions between the before and the after — same lighting, same angle, same distance, same background, same posture
No editing, retouching, or filtering of the images
A clear disclaimer that individual results vary
Disclosure of the procedure performed and its risks
Patients can withdraw consent at any time and the practice has to comply
Images cannot be stored on personal devices — they live on a secure clinic system

Each of these has practical implications for how the gallery is built, captured, and maintained. Let's go through them.

The consent paperwork

The single most common failure mode I see: clinics using a general consent form that lumps together consent for the procedure, consent for medical record imagery, and consent for marketing imagery into one signature. AHPRA's position is that marketing consent must be separately captured, with specific information about the proposed use.

A proper imagery consent form has to specify:

The purpose of the images (marketing, education, internal training, medical record only)
How the images will be used (website, social media, printed material, before-and-after gallery, in-clinic display)
Where they will be stored
Who will have access
The patient's right to withdraw consent at any time
The practical consequence of withdrawal (images removed from active marketing where possible)

If the patient agrees to website use but not social media, that has to be honoured. If they agree to before-and-after gallery use but not standalone marketing, that has to be honoured. Granular consent. Tracked per image, per use.

The build implication: your CMS has to track consent status per asset. When a patient withdraws consent, the marketing team needs a fast path to take that image down across the website, social media, and any cached versions. We typically build a small admin tool that lists assets with their consent status, links to the consent file, and gives a one-click "withdraw and remove" workflow. Cheap to build. Expensive to not have when it's needed.

Cliniko, Halaxy, and Nookal all have practice management features that can store consent documents linked to patient records — useful for the clinical side but usually not connected to the marketing asset library. Bridging the two systems is part of the work.

The "after the final result" point

This catches a lot of practices out. Consent for marketing use of imagery must be obtained after the final result is achieved — not at the time of the procedure when the patient is still anaesthetised, recently recovering, or otherwise not in a position to make a meaningful decision.

Practical consequence: at the procedure visit, the patient signs the standard procedure consent and the medical record imagery consent. At the post-treatment review visit (typically 8–12 weeks for facial work, 6–12 months for surgical), the patient is shown the before and after images and asked whether they consent to marketing use, specifically. That's the form that goes on file and triggers the marketing team's ability to use the imagery.

Practices that capture marketing consent at the procedure visit are technically in breach. Practices that have a separate post-result consent process are compliant. The audit trail matters.

Consistent photo conditions

The imagery itself has to be apples-to-apples. The "before" photo and the "after" photo have to be taken in the same conditions:

Same lighting setup (ideally a calibrated clinical photography lighting kit, not a phone in the consult room with whatever ambient light)
Same camera position and distance from the patient
Same lens focal length
Same background (a fixed clinic backdrop, not "outside the consult room window")
Same patient posture and expression (neutral, not smiling in the after, frowning in the before)
Same patient state — no makeup in either, hair pulled back the same way in both

Practices that do this seriously have a dedicated photography setup — usually a small alcove or dedicated room with a calibrated lighting rig, a marked floor position for the patient to stand on, and a camera mounted on a fixed tripod. Cost to set up: $3,000–$8,000 for a serious clinical photography kit. Cost of not having it: every gallery image is debatable evidence under the consistency rule.

No editing, no filters

This means what it says. No skin smoothing, no colour grading, no lighting adjustments in post-processing beyond standard RAW-to-JPEG conversion. The instinct to "make the after look better" is exactly what the rule exists to prevent.

For website delivery, this also means:

No filters in the image editor of your CMS
No CSS effects (blur, contrast, brightness, saturation) applied to gallery images
No platform-side "auto-enhance" features enabled
The image the visitor sees is the same image the patient saw and consented to

The practical build: image processing pipeline does only resizing and format conversion (typically WebP and AVIF for modern browsers, JPEG fallback). No enhancement steps. Audit your existing image pipeline if you're not sure.

The disclaimer and procedure disclosure

Every before-and-after pair has to be accompanied by:

A clear statement that individual results vary
Disclosure of the procedure performed
Disclosure of the risks of the procedure

This typically lives as a caption beneath the pair, plus a more prominent disclaimer at the top of the gallery page. The caption should specify what was done, when it was done, what the timeframe between the photos is, and what risks the procedure carries.

"Before and after rhinoplasty performed June 2025, photographed at consultation and 9 months post-op. Results vary between patients. Rhinoplasty carries risks including bleeding, infection, asymmetry, breathing changes, and the need for revision surgery. See full procedure page for detailed information."

Boring. Compliant. Acceptable.

The design pattern that actually converts

The compliance rules don't mean the gallery has to be ugly or unconvincing. The clinics doing this well present galleries that are simultaneously compliant and high-converting. Here's the pattern.

Category-organised, not chronological

Visitors don't want to scroll through every case ever. They want to find cases relevant to them. Organise galleries by:

Procedure (rhinoplasty, blepharoplasty, breast augmentation, lip filler)
Concern (volume loss, asymmetry, scarring, ageing)
Patient profile (broad age bracket, broad demographic — "results in patients aged 40-55" rather than naming individuals)

Each category is a separate gallery page. Internal search and filters let visitors find their case.

Side-by-side, not slider

The "slider" pattern — drag a slider left to right to morph between before and after — is overused and slightly suspect. It implies a continuous transformation, which isn't what surgery is. Side-by-side photos, clearly labelled "before" and "after," with consistent dimensions, are more honest and convert at least as well.

Multiple angles, not a single shot

For surgical procedures especially, a single front-facing shot doesn't tell the story. Provide 3-4 angles for each case (frontal, three-quarter left, three-quarter right, profile). The patient can assess the result from the angles that matter to them.

Real timeframes captioned

Visitors discount results they suspect are immediate-post-op or specially lit. Captioning each pair with the timeframe ("9 months post-op," "2 years post-op") increases credibility because it's the kind of detail a manipulative gallery wouldn't bother with.

A consent indicator

Some clinics now include a small "consent on file" indicator on each image, linking to a brief statement about how the practice handles consent. This is reassurance to the visitor that the imagery is properly authorised. It's also a signal to AHPRA, in the event of a complaint, that consent is being treated seriously.

What this costs to build

For a clinic with a working photography setup and consent process, the website side of this is:

$6,000–$12,000 for a custom-coded gallery system with category filtering, multi-image cases, and per-asset consent tracking
$2,000–$4,000 for integration with your practice management system if you want consent records to sync
$1,500–$3,000 for the consent withdrawal admin tool

Plus the ongoing operational discipline of capturing post-result consent properly and uploading new cases with the right metadata.

For a clinic that doesn't yet have a working photography setup, add $3,000–$8,000 for the equipment, $1,000–$2,000 for the consent form drafting (legal review recommended), and a few weeks of process design to make it routine.

The honest counter

Some practices solve all of this by simply not running a before-and-after gallery on the public website at all. They keep the images in the consultation room, show them to qualified consultation patients, and rely on word-of-mouth and the practitioner's professional reputation for top-of-funnel.

This is a legitimate position, especially for older established practices where the brand is the practitioner. It cedes some conversion to competitors who do run galleries, but it eliminates the entire regulatory exposure and the operational burden.

For newer practices, growing practices, or practices in heavy paid-search competition, the gallery is a meaningful conversion asset and it's worth building properly. For mature practices with a strong referral base, the cost-benefit may not justify it.

The takeaway

The before-and-after gallery is one of the highest-value pieces of content on a regulated health service website. It's also one of the most legally exposed. The rules — written post-result consent, consistent photography conditions, no editing, clear disclaimers, granular consent tracking, no personal device storage — are specific and they're enforced. AHPRA's penalty regime can go to $60,000 per offence for individuals.

Done properly, the gallery converts well, builds trust, and signals to visitors that the practice operates carefully. Done badly, it's an enforcement risk and a brand liability.

The investment to do it properly is modest — typically $10,000–$20,000 of website build work plus the operational discipline to capture consent at the right moment. The cost of not doing it properly is large.

If you'd like a compliance-focused audit of your current before-and-after gallery — looking at consent records, imagery consistency, captioning, and the technical handling of consent withdrawal — book a free audit. We'll look at what's currently published, what consent paperwork supports it, and where the predictable problems sit.

Before-After Galleries: AHPRA Rules + Real Fix (2026)