Evaluation 7 min read

What AHPRA's advertising rules mean for your website

Your practice website is advertising under the National Law. What AHPRA's rules prohibit, who is responsible, and how to check your own site.

A physiotherapy practice in the suburbs has a website written by a web designer in 2021. The hero banner promises “guaranteed relief”. A widget streams in Google reviews, several of which describe recoveries in detail. The about page calls the principal a “specialist in sports injuries”. Nobody at the practice has read the site as a regulator would, because nobody at the practice thinks of the site as advertising.

The National Law does. If a website promotes a regulated health service and seeks to attract patients to it, it is advertising, and section 133 of the Health Practitioner Regulation National Law applies to every word of it. That is not an interpretation; it is how AHPRA’s own advertising guidelines define the term, and the definition explicitly includes websites and social media. This applies across every AHPRA-regulated profession, from medicine and dentistry to psychology, physiotherapy, and Chinese medicine.

The stakes changed recently. In 2022 the National Law was amended to lift the maximum penalty for an advertising offence from $5,000 to $60,000 per offence for an individual, and from $10,000 to $120,000 for a body corporate. As of July 2024 those penalties apply in every jurisdiction, including Western Australia. Each breach is a separate criminal offence, and registered practitioners can face disciplinary action on top.

The five prohibitions

Section 133 says advertising for a regulated health service must not do five things. All five figures and definitions below come from the regulator: AHPRA’s Guidelines for advertising a regulated health service, in effect since December 2020.

It must not be false, misleading or deceptive. This covers more than outright lies. Claiming a treatment is effective for a list of conditions without acceptable evidence, implying superiority over other providers, and understating risk all qualify. So does misleading by omission: partial information can breach even where every individual sentence is true.

It must not offer a gift, discount or inducement without stating the terms. A “free initial consultation” with no conditions, expiry or eligibility stated is the classic breach. AHPRA’s position is that the public reads “free” as absolutely free; if the cost is recouped elsewhere, the offer is misleading. Stating an instalment amount without the total cost fails the same test.

It must not use testimonials. More on this below, because it is the rule practices most often get wrong in both directions.

It must not create an unreasonable expectation of beneficial treatment. Words like “safe”, “pain-free”, “guaranteed” and “cure” used without acknowledging risk sit here, along with before-and-after photos presented as typical results.

It must not encourage indiscriminate or unnecessary use of health services. Urgency tied to health suffering (“don’t delay, your pain will only get worse”) and encouraging routine attendance with no clinical indication are the common forms.

Alongside section 133 sit the title rules. “Specialist” and its variants are restricted to practitioners holding specialist registration. Under recent amendments to the National Law, “surgeon” is a protected title restricted to specialists in surgery, obstetrics and gynaecology, or ophthalmology, and AHPRA expects all other references to “surgeon” removed from advertising, websites included. And a practitioner who is not a medical practitioner can use “Dr”, but the guidelines expect the profession to be made clear: “Dr Lee (Osteopath)”, not a bare “Dr Lee”.

The testimonial rule is narrower than most practices think

Practices tend to make one of two mistakes with testimonials. Some publish glowing patient stories about recoveries, which is squarely prohibited. Others, having heard about the ban, strip every review from their site, which is unnecessary.

The prohibition covers testimonials used in advertising that refer to clinical aspects of care: the symptom or reason for seeking treatment, the diagnosis or treatment provided, the outcome, or the practitioner’s skill or experience. A review that says “my sciatica was gone after three sessions” is a testimonial. A review that says “friendly reception, easy parking, always on time” is not, and AHPRA’s guidance says so explicitly.

Control is the other half of the rule. You are responsible for testimonials on platforms you control, which includes review widgets you choose to embed on your own site. You are not responsible for what patients post on independent review platforms, and you are not required to hunt those reviews down. But the moment you republish one on your website, you have used it in advertising.

Who is responsible

The advertiser is whoever controls the content: whoever publishes it, authorises it, or can modify or remove it. The guidelines are direct on this point, and it catches the situation most practices are actually in. If a marketing agency wrote your website, you are still the advertiser, and AHPRA expects you to check content produced on your behalf. “The web designer wrote it” is not a defence.

How to read your own site

The practical exercise is to read every public page the way a regulator would, asking four questions of each claim. Is there acceptable evidence for it? Does any offer state its full terms? Does any quoted patient comment touch a clinical aspect? Does any title or qualification imply more than is held? The pages where breaches concentrate are rarely the homepage: testimonial and review pages, service pages listing conditions treated, and fee pages carrying offers are where most of the risk lives.

We built a free tool that does a first pass of this reading for you. Submit your practice website and it reviews up to five pages against the advertising guidelines, quotes the exact wording it flags, cites the relevant section, and emails you the report. It is general information rather than legal advice, and a clean result is not a compliance guarantee; for advice on your obligations, your indemnity insurer or lawyer is the right door. But it will tell you in a few minutes whether your site has the obvious problems, which is more than most practices currently know. Check your website here.

This sits alongside the confidential AI work we do for professional services practices: the same discipline of building AI that respects the rules a regulated profession actually operates under. If your practice is weighing up AI more broadly, start with a conversation.

Published 15 July 2026

Perth AI Consulting delivers AI opportunity analysis for small and medium businesses. Start with a conversation.

Prepared by Claude, directed and approved by PAC.

More from Thinking

Adoption 14 min read

How AI capability actually moves through a business

The decisive variable in SME AI adoption is the human absorption sequence, not the tooling. A working framework from observation across WA businesses.

Evaluation 7 min read

AHPRA advertising rules for psychologist websites

Recovery stories, 'specialist', 'clinical psychologist', and endorsement titles are where psychology sites breach the National Law. A practical read-through.

Adoption 6 min read

Customer service AI has finally grown up

Chatbots and AI receptionists earned their bad reputation. What changed, why the trick is in the data, and how the mature version answers every call without replacing anyone.

Evaluation 6 min read

Who can use the titles 'Dr', 'Specialist', and 'Surgeon'?

AHPRA restricts 'specialist' and 'surgeon' to specific registrations, and 'Dr' has its own rule. What health practice websites can and cannot claim.

Adoption 5 min read

Your best people hate writing reports

The operators you promote are brilliant at the work and allergic to reporting. A scheduled AI call interviews them, drafts the briefing, and they approve it. No ego, no politics, no blank page.

Building 6 min read

Your website isn't just for humans anymore

How to build a chatbot that keeps itself up to date, can't leak client information, and won't answer beyond what you've published. The answer was sitting in plain sight.

Evaluation 7 min read

Can you show Google reviews on your health practice website?

AHPRA bans clinical testimonials, even true ones, but service reviews are fine. What that means for the Google reviews widget on your practice site.

Evaluation 8 min read

Is it safe to paste client data into ChatGPT?

What ChatGPT, Claude, and Copilot promise about your data, what the Privacy Act requires, and the honest answer for professionals handling client files.

Evaluation 6 min read

What a good AI audit actually delivers

An audit is not the report. It is the report plus a working system a client actually keeps, shown through one real engagement, generalised.

Evaluation 7 min read

AI and video, Mid-2026: the models can watch now, not just listen

AI could always transcribe video. It can now read the frames as well, and every hour of footage a business owns becomes something it can question.

Technical 5 min read

Why the privacy case against cloud AI memory isn't paranoia

An AI knowledge base concentrates everything sensitive a business holds. Dated 2026 incidents show what cloud custody means once legal process gets involved.

Technical 5 min read

Your AI knowledge base is an attack surface

A knowledge base an AI agent can read and write is a productivity tool, and dated 2026 incidents show it is also somewhere an attacker can plant instructions.

Adoption 5 min read

The real asset in an AI knowledge base isn't the notes

In every AI-maintained knowledge base, one file carries the owner's judgement and compounds. The wiki pages are the least valuable part.

Evaluation 5 min read

The missing measurement in the AI second-brain boom

Every claim about AI knowledge bases saving time is self-reported. The one controlled experiment measured token economics, not benefit.

Building 11 min read

From evidence base to delivery: a production AI methodology

How we delivered 34 evidence-anchored AI briefings to a WA peer-advisory chapter: fact-checked literature review, multi-agent verification, one method.

Technical 9 min read

The six functions of a working AI system

A working AI system is six functions doing six jobs. When all six connect, hallucinations get caught, outputs hold steady, and models become swappable.

Technical 7 min read

Supervised autonomy: the middle path for AI architecture

Between drafts you approve and agents you hope about sits the middle path: an envelope of authorised routine work, supervised, audited, and yours to widen.

Evaluation 5 min read

The state of applied AI in Mid-2026

Our literature review of applied AI in mid-2026: ten capability categories, three fact-check passes, written for operational leaders.

Evaluation 8 min read

AI in building inspections, Mid-2026

AI defect detection is strong on obvious defects and weak on the subtle ones where liability lives. Which capabilities fit inspection work in 2026.

Evaluation 8 min read

AI in property valuation, Mid-2026

AVMs are reliable enough for triage, not for the final word on contested property. What has shifted in valuation work by mid-2026, and what has not.

Evaluation 8 min read

AI in family law, Mid-2026

Federal Court practice note GPN-AI makes AI verification a professional obligation. What the courts now require, and what the evidence says about legal AI.

Technical 9 min read

How to design a PHI redaction system for clinical AI

PHI redaction is part of a clinical AI tool's architecture, not a feature you add. What the literature says it should look like, and how we built it.

Building 9 min read

How we built on-device de-identification so AI never sees real names

Most AI privacy is a policy. Ours is architecture: an NER model runs in the browser and strips names before anything leaves the device.

Technical 7 min read

Your agency's clients are about to ask why this costs so much

A solo consultant built in three weeks what your agency quoted twelve for. The client doesn't know why yet. The agencies that survive change what they sell.

Adoption 6 min read

What do you love doing? What do you hate doing?

Ask people what they love doing and what they hate doing, then show them AI is coming for the second list. Why the reframe works, and how it fails.

Technical 7 min read

Why I don't use n8n (and what I do instead)

n8n demos well. But a compelling demo and a reliable production system are different things, and the distance between them is where businesses get hurt.

Technical 10 min read

Your codebase was not built for AI. That's the actual problem.

Amazon's mandatory meeting about AI breaking production is an architecture story: codebases built for human maintainers only, now maintained by AI.

Adoption 4 min read

Your team has AI licences. You don't have an AI system.

Fifteen people, fifteen separate AI accounts, no shared context. The problem isn't the tool; it's the architecture around it. Here's the fix.

Building 7 min read

Your $2,000 day starts the night before: our system keeps you on the tools, not on the phone

Optimised routes overnight, automatic customer notifications, and promises the system keeps or corrects. A scheduling system that protects your daily rate.

Evaluation 4 min read

The fastest way for an executive to get across AI

AI moves faster than any executive can track. One focused conversation, one written report, and a decision you can act on: your time stays on the business.

Building 6 min read

Your IT department will take 18 months. You need this working by next quarter.

Senior leaders know what they need built; the gap is time. A prototype gets the tool working now and hands IT a validated blueprint for later.

Adoption 4 min read

What if you had perfect memory across every client?

Every practice captures more than it can recall. AI gives practitioners perfect memory across every client, so preparation becomes thinking time.

Building 8 min read

We built an AI invoice verifier. Here's where it hits a wall.

We built an AI invoice verifier and watched a fake beat a real invoice. Why document analysis alone cannot stop fraud, and the five layers that can.

Building 5 min read

How to build an AI chatbot that doesn't lie to your customers

Woolworths scripted its AI to talk about its mother. The business fix is honesty; the technical fix is architecture that prevents fabrication by design.

Technical 9 min read

Why AI safety features are load-bearing architecture, not political decoration

The 'woke AI' label came from real failures, but they were engineering failures, not safety failures. The difference matters wherever errors have consequences.

Adoption 3 min read

Woolworths' AI told a customer it had a mother. That's a problem.

Woolworths' AI assistant Olive was scripted to talk about its mother and uncle. When callers realised, trust broke instantly. The fix is honesty.

Evaluation 5 min read

Google is no longer the only way your customers find you

Customers now find businesses through ChatGPT, Perplexity, and Gemini. The sites AI cites are structured differently to the sites Google ranks.

Evaluation 4 min read

Two types of AI audit: and how to know which one you need

Where do we start with AI? It depends on whether you need to find the opportunities or reclaim the time. Two audits, two perspectives, one goal.

Evaluation 4 min read

The personal workflow analysis: what watching a real workday reveals about automation

People describe the work they value, not the work that eats their time. Recording a real workday reveals the automation opportunities interviews miss.

Evaluation 4 min read

AI audit that starts with your business

An operations-first AI audit starts with how your business actually runs, and only recommends AI where the evidence says it will work.

Building 6 min read

What production AI teaches you that demos never will

The gap between a demo and a working system is where the useful lessons live. Architecture, framing, privacy, adoption: the patterns repeat every time.

Adoption 6 min read

The psychology of why your team won't use AI

You buy the tool, run the demo, and three months later nobody is using it. Five predictable psychological barriers, each with a strategy that works.

Technical 4 min read

Stop telling AI what NOT to do (and what to say instead)

Instructions built on prohibitions make AI cautious and generic. Describing what you want instead transforms the output, and the reason comes from psychology.

Building 5 min read

How we turned generic AI into a specialist: and what that means for your business

Mediocre AI output is rarely the model's fault. Three structural changes that turn the same model from generic to specialist-grade.

Evaluation 5 min read

Your business has 9 customer touchpoints. AI can fix the 6 you're dropping.

You pay to get customers to your door, then lose them to missed follow-up. AI can handle the six touchpoints most businesses drop.

Technical 5 min read

What happens to your data when you press 'Send' on an AI tool

Businesses send customer data to AI tools without knowing what happens during processing. The spectrum of AI privacy is wider than you think.