SEO for healthcare runs on different rules because the strongest trust signal in every generic SEO playbook, the patient testimonial, is banned in Australian health advertising under section 133 of the National Law. 84% of patients check online reviews before choosing a provider, yet a clinic that republishes one clinical review in its own marketing is committing an offence. Rankings still get built. They just get built from E-E-A-T: credentialed authors, cited sources, and original insight instead of borrowed praise.

Why is SEO for healthcare different from every other industry?

Open any SEO guide and count how fast it tells you to use social proof. Put testimonials on your landing pages. Embed a review widget. Add star ratings to your snippets. Feature your happiest customers everywhere.

That advice is written for e-commerce and SaaS. Follow it as an Australian clinic and you are not optimising. You are drafting evidence against yourself.

Section 133 of the Health Practitioner Regulation National Law prohibits testimonials in advertising a regulated health service. AHPRA's advertising guidelines apply this to your website, your Google ads, your socials, and anything else you publish to attract patients. The one lever every generic playbook reaches for first is the one lever you legally cannot pull.

Here is why that matters commercially. According to rater8's 2025 patient choice report, 84% of patients check online reviews before choosing a new provider, and 61% now put reviews ahead of recommendations from friends and family. Patients want proof. Your competitors in other industries can manufacture walls of it. You have to earn trust another way.

The good news, and the point of this guide: the other way exists, Google explicitly rewards it, and almost none of your competitors are doing it properly.

What does the testimonial ban actually cover?

AHPRA defines a testimonial as a recommendation or positive statement about the clinical aspects of care. Treatment outcomes. The quality of clinical work. Whether a procedure fixed the problem. If a statement praises the health service itself, it is a testimonial, and it cannot appear in your advertising.

The boundary runs on two questions: is the content clinical, and do you control where it appears?

I covered the ban itself in detail in my guide to AHPRA's testimonial rules. This post is about the question that follows: if the standard trust playbook is off the table, what do you rank with instead?

The substitution table: what generic SEO says vs what a clinic can do

Every banned tactic has a compliant substitute that does the same job for rankings. This table is the whole strategy in one view.

Generic SEO playbook says The problem for a clinic The compliant substitute
Put testimonials on every landing page Clinical praise in your own advertising breaches section 133 Credential blocks: registrations, qualifications, years in practice, stated as verifiable facts
Embed a live Google review widget Republishing reviews makes them advertising you control A plain link to your Google Business Profile, where reviews legally live
Add review stars to your search snippets Self-serving review markup, plus the same republishing risk Article, FAQPage and Organization schema that AI engines and Bing still parse
Post before-and-after photos for engagement Heavily restricted, with stricter rules again for cosmetic procedures Educational diagrams and process explainers that answer the same patient questions
Publish customer success stories Outcome claims and patient praise carry testimonial and misleading-claim risk Condition guides written by a named, credentialed author who cites primary sources
Win "best clinic" badges and display them Unverifiable superlatives can be misleading advertising Professional memberships and board registrations, linked to the register

Notice the pattern in the right-hand column. Every substitute is a fact a regulator can verify. That is not a coincidence. The content AHPRA is comfortable with and the content Google's quality systems reward turn out to be the same content. Which brings us to E-E-A-T.

How do you build E-E-A-T without testimonials?

Google treats health as a YMYL (Your Money or Your Life) category and holds it to its highest standards for experience, expertise, authoritativeness and trust. Reviews are one trust signal. They are nowhere near the only one. Here are the five that work for clinics, in the order I build them for clients.

1. Put a named, registered human on every page

Anonymous content is the default in healthcare marketing, and it is E-E-A-T poison. Every clinical page should name its author or reviewer, state their qualifications and registration, and link to a real bio. "Reviewed by Dr [Name], AHPRA registration [number]" does more for trust than any review carousel ever did.

2. Cite primary sources, not other blogs

Link to AHPRA, the TGA, journal articles, and official registers. Health content that cites its evidence reads as expert to both raters and language models. Content that cites a competitor's blog post reads as what it is.

3. Publish something only you know

Original observations beat recycled advice. What are the ten questions new patients actually ask about a procedure? What does recovery genuinely involve week by week? A clinician who writes from practice produces information that no content farm can copy, and information gain is what earns rankings and AI citations.

4. Show your dates and keep them honest

Display a visible last-updated date, refresh clinical pages when guidance changes, and update the modified date in your schema. Health answers age fast. Freshness is a small lever, but in YMYL it compounds with trust.

5. Answer the question before you introduce yourself

Patients search questions. Pages that open with a direct, factual answer win featured snippets and AI answers. Pages that open with "At [Clinic Name], we pride ourselves on excellence" win nothing. If your site keeps tripping compliance filters instead of ranking, my post on why healthcare websites get flagged covers the overlap.

What do you do about Google reviews you can't control?

Reviews will accumulate whether you touch them or not. The compliant posture has three rules.

Let them live where they were posted. Your Google Business Profile is the one place patient reviews can legally do their persuading, because patients put them there, not you. Keep the profile complete and current, and link to it. Do not import its contents onto your site.

Respond, but never clinically. Thank reviewers in general terms. Never confirm someone is a patient, never discuss their treatment, and never argue a bad review with clinical detail. A privacy breach in a review reply is a worse day than the bad review.

Never gate, filter, or incentivise. Asking only happy patients, offering discounts for stars, or screening feedback before it posts creates misleading-conduct risk on top of the testimonial problem. Invite feedback broadly or not at all.

One more thing worth knowing: patients increasingly meet your clinic through AI answers instead of blue links, and AI engines weigh authority signals differently. I wrote about that shift in GEO vs SEO. And if your agency has never mentioned any of this, my five-minute agency test will tell you whether they understand AHPRA at all.

This article is general information for education, not legal advice. For rulings on specific advertising, get advice from a lawyer experienced in health law or check AHPRA's advertising hub directly.


Related reading: