How should a clinic reply to a negative review?

What can you actually say in a reply?

Less than most practices assume, and the constraint is not about tone. It is about disclosure.

The rule that governs everything else is that you cannot confirm the person was a patient. Not by naming their treatment, not by referring to their appointment, and not by thanking them for coming in. A reply as ordinary as thanking someone for visiting confirms that they attended, and that confirmation is itself the disclosure.

This holds even when the reviewer has already described their own treatment in detail. What a patient chooses to disclose about themselves does not give a provider permission to confirm it. That asymmetry is the single most common way practices get this wrong.

What remains available to you is a short, generic reply that acknowledges the feedback, says nothing about any individual, and moves the conversation off the public page.

Why does replying create legal risk at all?

Because a public reply is a disclosure to everyone who reads it, and the rules that protect patient information do not carve out an exception for a provider who feels unfairly criticised.

In the United States, civil penalties range from $145 to $2,190,294 per violation as of 28 January 2026, following the annual inflation adjustment. The published enforcement actions in this area all share the same origin: a practice replied to an online review and included information it should not have. Penalties in those cases ran from $10,000 to $50,000, and several carried a two-year corrective action plan on top.

One of those investigations is worth understanding for a reason beyond its size. After a complaint about a single reply, the regulator examined the practice's other responses and found information belonging to three further patients had also been exposed. A reply is rarely examined in isolation.

Outside the United States the specific statute changes but the exposure does not. Australia and New Zealand both regulate the handling of health information, and in Dubai a facility carries responsibility for content published about it. No regulator anywhere treats a public reply as private. The separate question of whether you may quote a review in your own marketing is covered in can health clinics use Google reviews in marketing.

When should you report a review instead of replying to it?

When it breaks one of Google's content rules. Google does not remove reviews for being unfair, inaccurate or commercially damaging, which is what most clinics are actually complaining about. It removes them for named policy violations.

The categories below are the ones a clinic is most likely to have grounds under. Check the review against the actual wording before reporting, because a report that does not fit a category is unlikely to succeed and you have limited attempts.

How does the Google review appeal process work?

There are two routes to report a review. From your Business Profile, open the reviews list and use the report icon beside the review. Or use the Reviews Management Tool and select the option to report a new review for removal. Evaluation typically takes several days.

If the decision comes back as no policy violation, you may submit one appeal. In the Reviews Management Tool this appears as the option to appeal eligible reviews, and you can include up to 10 reviews in a single submission, which is useful if you have been hit with several at once.

The limit that matters: there is only one appeal per review. If the appeal fails, the review stays. That makes the quality of the first submission decisive, so name the specific policy you believe applies and provide whatever evidence you have. Appeals that argue a review is generally unfair rarely succeed. Appeals that demonstrate the reviewer was never a patient, or that a competitor left it, do considerably better.

If the appeal succeeds the review is removed. If it does not, the review remains live and the status shows as escalated, with any further update arriving by email.

What if the review is defamatory rather than against policy?

Google runs a separate legal removal pathway for content that is defamatory, that publishes personal information such as a home address, or that threatens physical safety. That route is distinct from the content-policy report and is assessed differently.

Treat it as a genuinely separate decision rather than a second attempt at the same argument. Defamation is a legal claim with a specific meaning in each jurisdiction, and pursuing it usually warrants advice before you file rather than after.

What changed for review spam in April 2026?

Google added automated detection for sudden spikes in spam reviews. When its systems identify one, it removes the fake content, temporarily pauses new reviews on the affected profile, alerts the business owner, and displays a banner telling visitors why reviews are unavailable.

Two practical consequences. If you are the target of a coordinated attack, some of the response may now happen without you filing anything. And if you ever see reviews paused on your own profile with a public banner, that is the system working rather than a penalty against you, though it is worth checking what triggered it.

What does a safe response process look like?

Reviews arrive at inconvenient moments, and the replies that cause problems are almost always the ones written immediately.

• Decide first whether this is a reply or a report. They are different actions and doing both badly is worse than doing one well.
• Never draft a reply while annoyed. Write it, leave it, and have someone who was not involved in the care read it before it goes live.
• Keep a single approved reply template that confirms nothing and moves the conversation to a phone number or email address.
• Never reference the clinical record, the appointment, the clinician, or the outcome. Not even to correct something the reviewer got wrong.
• If you report, name the specific policy category and attach evidence. You have one appeal, so treat the first submission as the real one.
• Keep collecting new reviews throughout. A single negative review matters far less against a steady recent flow than it does against silence, and collecting reviews is permitted in every market covered here.