Guide

Review gating: the FTC line and the platforms' own bans

Summary

No. Selecting who gets asked for a review based on how satisfied they seemed — sending the survey only to patients you expect to praise you, or routing dissatisfied patients away from the public review link — is the practice the FTC's 2024 rule defines as review gating and bans outright, with civil penalties. Ask every patient the same way, or skip solicitation entirely.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

What Counts as Review Gating

Review gating means sorting patients before they ever reach a public review site — asking only the ones you expect to praise you, or routing anyone who reports a bad visit to a private feedback form instead of Google or Yelp. The FTC's endorsement guidance treats that selective filtering as a form of manufactured social proof, not a customer-service courtesy 1.

The test isn't whether a review is ever suppressed — it's whether the decision to ask (or not ask) depends on how the patient is expected to feel. Common patterns and where they land:

PatternGating?Why
Same review-request card handed to every discharged patientNoNo filtering on expected sentiment
Pre-survey routes 4–5 star answers to Google, 1–3 star answers to a private formYesClassic review gating — routes by predicted sentiment
Front-desk staff "uses judgment" about who gets askedYesFiltering is still filtering, even without a formal survey
Review request sent only to patients whose chart notes a good outcomeYes, and a HIPAA problem tooUses clinical data to select recipients — see below

None of these require an intent to deceive to violate the rule. The filtering itself is the violation 1.

The 2024 FTC Rule: What's Now Enforceable

The FTC's 2024 rule turned review gating from guidance into a binding rule that carries civil penalties per violation, so the agency no longer needs to prove intent to deceive case by case 2. The rule reaches four practices: paying for positive reviews, reviewing your own business without disclosing the connection, suppressing negative reviews you know are genuine, and — the one that catches gating — soliciting reviews only from people likely to respond favorably 2.

As of July 2026 the rule is in force, and a solo practice faces the same per-violation exposure as a large health system — the rule doesn't scale penalties to practice size. The four prohibited patterns above are the whole list; anything outside them (a genuinely uniform ask, a genuine reply, a genuine negative review left standing) is not what the rule reaches.

Where HIPAA Layers On Top

If your filter for who gets a review request draws on anything in the clinical record — a good outcome note, a clean no-show history, "this one went well" — you've used protected health information to decide who receives a marketing communication, and HIPAA requires the patient's authorization before you can do that 3. A front-desk read of the patient's mood in the waiting room doesn't touch PHI; a filter built from chart data does.

The safer design sidesteps this entirely: ask every discharged patient, using nothing from the clinical record to decide who's on the list. That keeps the HIPAA marketing-authorization question from ever arising, because the criterion for asking ("you were seen here") isn't itself PHI-derived selection — it's a fact about scheduling, not treatment content 3.

A Compliant Ask-For-Reviews Workflow

The workflow that avoids gating is the one that removes the human decision point: every patient who completes a visit gets the same review-request touch, sent the same way, on the same schedule — never triggered by how the visit went. Build the ask into checkout or discharge paperwork rather than a staff member's judgment call, and you've engineered the rule into the process instead of relying on remembering it.

  • Send the same request to every patient, on the same schedule, with no branching before it reaches the public platform.
  • If you also want private feedback, run it as a separate loop, clearly labeled as internal — never folded into the public review ask so that unhappy patients get quietly diverted.
  • Keep a simple log of who received the request and when, so you can show a uniform process if a platform or the FTC ever asks.
  • Never offer anything of value — a discount, a gift card, a raffle entry — for a review; that collides with the fake-review rule's ban on incentivized reviews 2.

Platform Rules Stack on Top of Federal Law

Google, Yelp, and Healthgrades ban review gating in their own terms of service, independent of the FTC, and enforce it with profile suspension or review removal rather than a fine — a faster, more common consequence for most solo practices than federal action ever is. A profile flagged for filtered solicitation can lose its accumulated review history entirely, which does more damage to local seo standing than a scattering of honest negative reviews ever would.

The companion piece on asking for reviews covers the incentive rules — gift cards, discounts, review-for-a-freebie — that platforms police even more aggressively than the FTC does, and walks through a request process that clears both bars at once. Treat review solicitation as one line item in your marketing plan governed by the same rule as everything else in it: ask honestly, ask everyone, and let the reviews land where they land.

Common questions

No — filtering who gets asked based on expected sentiment is the FTC's definition of review gating, whether the filter is a formal pre-survey or a front-desk hunch. Ask every discharged patient the same way, or don't build a solicitation program at all. The problem is the selection, not the asking; a uniform request to everyone carries no gating risk.

It's the textbook gating pattern the FTC's rules reach: routing positive responses to a public review link and negative ones to a private form filters recipients by expected sentiment before the public platform ever sees them. Running a genuinely separate internal feedback loop is fine; funneling unhappy patients away from the public ask through the same tool is not.

Yes if the text is automated. The TCPA requires prior express consent before an autodialed or prerecorded review-request message reaches a patient, captured before you send it — being on your patient list isn't consent by itself. A manually sent individual text or a paper handout doesn't carry the same requirement.

Only with authorization. Selecting recipients based on anything from the clinical record — a good outcome, a clean attendance history — uses protected health information to target a marketing communication, which HIPAA requires the patient to authorize first. Asking everyone who was seen, without a clinical filter, avoids the question entirely.

Usually a platform consequence before a federal one: Google, Yelp, and similar sites ban gating in their own terms and respond with review removal or profile suspension, which is faster and more common for a solo practice than FTC enforcement. Either way, the fix is the same — ask every patient uniformly and stop routing by expected sentiment.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.Federal Trade Commission (2023). FTC's Endorsement Guides: What People Are Asking. Federal Trade Commission (FTC). linkThat soliciting reviews only from patients expected to respond favorably — review gating — violates FTC endorsement policy regardless of intent to deceive.
  2. 2.Federal Trade Commission (2024). Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials. Federal Trade Commission (FTC) press release. linkThe FTC's 2024 rule making review gating, purchased reviews, and review suppression subject to civil penalties, in force as of July 2026.
  3. 3.HHS Office for Civil Rights (2026). Marketing. U.S. Department of Health and Human Services. linkThat selecting review-request recipients using protected health information (e.g., chart-noted outcomes) is a use of PHI for marketing requiring patient authorization.
  4. 4.Federal Communications Commission (2026). Telemarketing and robocalls. Federal Communications Commission. linkThat automated review-request texts or calls require prior express consent under the TCPA before they can be sent to a patient.

https://www.gale.care/for-providers/mro-review-gating-ftc · 4 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)