Reviewing Agency Copy in Healthcare: 20 of 45 Say Compliant

Reviewing agency copy is your job as the clinic owner, because the legal risk stays with you. On 28 September 2026 I read 45 Australian healthcare marketing agency websites. Of those, 20 said their work is compliant. Only 3 of those 20 told you the practitioner carries the risk. So when a draft lands in your inbox, the sign-off is yours. This post is your checklist for that moment.

What did 45 healthcare marketing agency websites say?

They sounded very sure of themselves. They said very little about who checks the work.

I read the websites of 45 agencies that sell marketing to Australian health practices. They sell things like SEO, ads, websites and content. That came to 187 pages and 176,829 words. I looked for what each one says about the rules. I also looked for what it says about your part in the process.

On the pages I read, 20 of the 45 sites never named Ahpra at all. Ahpra is the body behind the health ad rules. That is fine for a web designer who only builds your site. It matters more when the same agency writes your words.

The gap that matters to you sits at the bottom of the chart. There were 20 agencies that say their work is compliant. Only 3 of those 20 tell you that the legal risk stays with the practitioner. The other 17 leave that part out.

Who carries the risk when agency copy breaks the rules?

You carry it. The law says so, and so does the regulator's own guidance.

The main rule is section 133 of the National Law, the law that covers health ads in Australia. It starts with these words: "A person must not advertise a regulated health service, or a business that provides a regulated health service, in a way that". Five bans follow. In plain words, the rule falls on whoever advertises the clinic. That is usually you.

Ahpra's advertising guidelines spell out who that is. The ad counts as yours if you "direct someone to publish or draft content (including a third party, staff member or marketing agency)". Then comes the line every practice owner should read twice: "Advertisers are responsible for their advertising, so they need to check any content produced by others on their behalf." Put simply, if your agency writes it for you, you still have to check it.

Three agencies in the sample told you this plainly. One wrote that "the liability for non-compliant advertising sits with the practitioner". That is honest, and it is rare.

Six agencies went the other way. Their copy tells you that you can stop worrying. Here are some of their lines, word for word:

• "you won't need to review our work nervously before it goes live".
• "TGA compliant marketing so you never have to worry about getting in trouble for your promotional content".
• "We take care of compliance end-to-end".
• "No AHPRA or TGA breaches since inception".

These agencies may mean every word. An agency can do careful work. But a promise from your agency does not move your legal duty off you. Section 133 applies to "a person", so an agency that writes a breach can carry some risk too. That does not take your risk away. I cover how that plays out in does your agency understand AHPRA?, which looks at your live site. This post is about the draft, before it goes live.

Why is an agency’s “compliant” badge not enough?

Nobody checks the badge. And the pages behind it often do not show that the agency knows the rules.

No regulator approves an agency's work. Ahpra's guidelines say it directly: "Ahpra and the National Boards cannot give advertisers legal advice about their advertising and they cannot approve advertising." So when an agency site says "AHPRA compliant", that is a claim the agency makes about itself.

I looked at what sat behind that claim. There were 20 agencies that called their work compliant. On the pages I read, 12 of them did not explain a single ad rule. They never mentioned the ban on testimonials, promised results, specialist titles or before-and-after images. The other 8 did explain at least one rule, and some explained them well.

The testimonial rule is the clearest test. Section 133 bans advertising that "uses testimonials or purported testimonials about the service or business". In plain words, you cannot use patient praise about your care in your ads. Yet 7 agencies offered or suggested patient testimonials as content for your clinic. None of the 7 mentioned the ban anywhere on the pages I read. Of those 7, 3 also said their work is compliant. Here are some of their lines, word for word:

• "a video testimonial from a patient about navigating allergy diagnosis" (suggested as a blog topic for a clinic).
• "showcasing positive patient testimonials and success stories" (advice to dentists).
• "chiropractors can use patient testimonials in their content marketing as long as they have obtained the patient's consent and are compliant with HIPAA regulations".

HIPAA is a privacy law in the United States. It has nothing to say about Australian ads. The patient's consent does not fix a testimonial either. Ahpra's testimonial guidance defines testimonials as "recommendations or positive statements about the clinical aspects of a regulated health service used in advertising". So any praise about the care itself is a testimonial. My post on AHPRA and patient testimonials shows which reviews you can still show.

So treat the badge as a sales line. Your own review of the draft is what keeps you safe.

What does the sign-off step look like at most agencies?

At most agencies, your sign-off is a check on look and timing. It is rarely a check on the rules.

Of the 45 agencies, 13 described a step where you see, review or approve the work before it goes live. That is good to see. Some said it clearly:

• "You approve messaging, creatives, landing pages, and any patient-facing content before we publish".
• "Nothing happens without your approval".
• "All content will be sent to you prior to publishing for approval".

But 12 of those 13 treated your approval as a check on design, tone or changes. Only 1 treated it as a check on the rules. That agency wrote: "A registered practitioner from the practice reads and approves the clinical substance of anything published under the practice name." It added: "The approval is recorded with a date and the version approved."

That is the model to copy, whoever your agency is. Think back to the 20 agencies that said their work is compliant. Of those, 12 never described your approval step and never said the risk is yours. If your agency is one of them, the step still exists. You just have to run it yourself.

Five agencies did describe their own rules check as a named step. One said every campaign, website and piece of content "is checked against current AHPRA and TGA requirements before it goes live". A check inside the agency is worth having. It adds to your sign-off. It cannot replace it, because the guidelines put the duty to check on you.

What should you check before you sign off on a draft?

Check these 9 things, and each one ties to a rule. Read the draft once for each row.

Two habits make this faster. First, read the draft the way a patient would, from start to finish. The ACCC is the consumer watchdog. Its guidance notes that "It makes no difference whether a business intends to mislead or not." What counts is the picture your words leave in a patient's mind. Second, highlight every line that makes a claim. Those are the lines that need a source or a rewrite.

Here is what a fix can look like. You can use each line on the right as it stands, once the facts are true for your clinic.

This is the draft version of a wider check. For your whole live site, use my AHPRA self-audit checklist. To keep your site up to date each quarter, see the healthcare marketing review template.

What should the agency send with every draft?

Ask your agency for a claim list, with a source for each claim.

Most of the work in a sign-off is finding the claims. A good agency can do that part for you. Ask for these 3 things with every draft:

• A list of every claim in the copy, one per line.
• The source for each claim, or a note that it came from you.
• A short note on any line the writer was unsure about.

This matters most when your copy names a product. The TGA looks after medicines and devices, and its Advertising Code covers ads for them. It says an ad about these goods must "only contain information that is substantiated by the advertiser prior to publication or dissemination". In plain words, you need proof before the ad goes out. Your sign-off comes before the page goes live, so that is the moment to hold the proof. A claim list makes that easy.

Then keep a record. No rule tells you what it must look like. A simple note of the draft version, the date and who approved it will do. Only 1 agency in the sample described doing this, but your practice can do it too.

The easiest fix happens before anyone writes a word. If your brief asks for sources at the start, the draft arrives with them. My post on the healthcare copywriting brief shows the field most brief templates leave out.

Can an agency promise results when your clinic cannot?

Yes, an agency can promise marketing results. That is why its sales voice can leak into your copy.

Of the 45 agencies, 7 promised a marketing result, such as more patients, more leads or rankings. Here are two, word for word:

• "We guarantee results and if we don't deliver, you don't pay".
• "we guarantee patient growth numbers within defined timeframes".

An agency sells a business service. What it says about itself does not count as a health ad under section 133. Consumer law still applies to it, though. Two of the 7 even warned clinics, on the same site, against writing "guaranteed results".

The same goes for big boasts like "best". Of the 45 agencies, 18 called themselves #1, best or leading, as in "Australia's #1 Rated Healthcare Marketing Agency". An agency can take that risk for itself. Your clinic cannot. So watch for that sales voice in your draft. It is the most common way a promise or a "best" ends up on a clinic page.

How did I measure this, and what can it not tell you?

The method is short. I kept every page I read so anyone can check my work.

Method. 59 first-party agency websites found through neutral searches such as "healthcare marketing agency Sydney", "dental marketing agency Brisbane" and "allied health marketing agency Australia", on 28 September 2026. No compliance or claim words were used in the searches. Only Australian (.au) domains were kept. Directories, listicles, social media and NDIS-only agencies were left out. For each site I read the entry page and up to five linked pages chosen by the same keyword rule, such as about, process, FAQ and compliance pages. 45 sites could be read: 187 pages and 176,829 words. 14 could not, because they blocked or failed to load and had no usable 2026 archive copy. For three sites that blocked me, I read their 2026 Internet Archive copy instead. Scripts found candidate sentences, and every flag was then read by hand in context and recorded with a verbatim quote. No agency is named here.

Here is what this study cannot tell you.

• This is 45 sites on one day. A site can change tomorrow.
• I read up to six pages per site. An agency may explain its process or the rules on a page I did not read, or in a contract.
• What an agency writes on its website may differ from how it works. Some agencies with no process page may run a careful review.
• A flag is my reading of the law and the regulators' guidance. A regulator has not made that finding.
• Claims an agency makes about itself do not count as health ads. I counted them to show the sales voice. I do not say they break a rule.
• This is general information about ad rules. Please do not treat it as legal advice for your practice.

You might want a second reader on a draft, or on your whole live site. That is what the All Clear Audit does. It quotes each flagged line, names the rule, and writes the new line for you. Agencies can also hand the writing to me through white label healthcare copywriting. If you would rather talk first, book a call.

If you want the short version, the findings are in an eight-slide web story.

Related reading:

• Does your agency understand AHPRA?
• Healthcare copywriting brief: the missing field
• AHPRA self-audit checklist
• Healthcare marketing review template
• AHPRA and patient testimonials
• Freelance copywriter vs health writing agency
• View all services →