The Before-and-After Disclaimer California Requires and the FTC Calls Unlikely to Work

California law requires a results disclaimer on before-and-after photographs published by the licensees it covers. The Federal Trade Commission’s Endorsement Guides say disclaimers of that kind are unlikely to be effective. Both statements are current, and both apply to the same photograph.

The common advice is that a line of small type under the image is the compliance step. That gets the order backwards. The state disclaimer is a floor a licensee has to clear, and the FTC’s stated position is that clearing it does not settle whether the ad is deceptive. The document that carries the weight is not the disclaimer at all. It is a record of what your own patients generally achieve.

This post walks the four layers that govern one before-and-after image: FTC substantiation, patient authorization, state licensing board rules, and platform policy. Each section gives the section number, what the text says, and the artifact you have to be able to hand someone. Reviews and text message consent are separate subjects and are not covered here.

Every source on this page was read on 19 August 2026. We make med spa software, so we have an obvious interest in you keeping consent records and outcome data in one place. The citations below hold regardless of whose software you run them in.

Two primary sources, one photograph, opposite instructions

California Business and Professions Code section 651(b)(3)(C), as amended by Stats. 2017, Ch. 775, Sec. 6 (SB 798), effective 1 January 2018, sets out what a before-and-after pair has to carry:

Use of any photograph or other image of an actual patient that depicts or purports to depict the results of any procedure, or presents “before” and “after” views of a patient, without specifying in a prominent location in easily readable type size what procedures were performed on that patient is a violation of subdivision (a). Any “before” and “after” views (i) shall be comparable in presentation so that the results are not distorted by favorable poses, lighting, or other features of presentation, and (ii) shall contain a statement that the same “before” and “after” results may not occur for all patients.

The FTC Endorsement Guides, 16 CFR Part 255, source note 88 FR 48102, 26 July 2023, take a different view of that same statement. Section 255.2(e)(2)(i)(A) says the Commission believes disclaimers regarding the limited applicability of an endorser’s experience to what consumers may generally expect to achieve are unlikely to be effective. The same paragraph concedes the Commission would carry the burden of proof in a law enforcement action, and says an advertiser holding reliable empirical testing that its ad’s net impression is non-deceptive will avoid the risk of such an action being started at all.

These reconcile, and the reconciliation is the point. The state sets a minimum, and the federal guidance treats that minimum as insufficient on its own. A California licensee owes the disclaimer because the statute demands it, and owes substantiation of generally expected results because the disclaimer is not treated as curing a typicality claim. Running one without the other is picking the wrong half.

The four layers, and the artifact each one demands

The table sets out the four bodies of rules that reach a single image, the section number in each, and the document you would have to produce if asked.

Read the right-hand column first. Three of the four layers are satisfied by a file, not by a design decision. The disclaimer is the only requirement you can meet by editing the image, and it is the one 16 CFR 255.2(e)(2)(i)(A) calls unlikely to be effective at curing the typicality impression on its own.

The layers also differ in legal weight. 16 CFR 255.0(a) states that the Guides represent administrative interpretations of laws enforced by the Commission for the guidance of the public, and provide the basis for voluntary compliance. They sit in the CFR but they are not a rule, and inconsistent practices lead to action under Section 5 rather than to an independent violation.

Compare the FTC’s Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, source note 89 FR 68077, effective 21 October 2024. That one is a trade regulation rule, and the adopting release at 89 FR 68034 says it will let the Commission seek civil penalties against violators. Read in full on 19 August 2026, its nine sections contain no photograph, image or typicality language. The photo rules are guidance. The review rules are a rule with penalties behind them.

The FTC treats the photograph itself as a performance claim

16 CFR 255.2(a) states that an advertisement employing consumer endorsements about the performance of a product will be interpreted as representing that the product is effective for the purpose depicted, and that the advertiser must possess and rely upon adequate substantiation. It adds that consumer endorsements themselves are not competent and reliable scientific evidence. Your happiest patient is not your evidence.

255.2(b) handles typicality. An endorsement relating a consumer’s experience on a central or key attribute will likely be read as representing that the experience is representative of what consumers will generally achieve. Without substantiation for that, the ad should clearly and conspicuously disclose the generally expected performance in the depicted circumstances, and, in the Guides’ words, to be effective the disclosure must alter the net impression of the advertisement so that it is not misleading.

The Guides contain a worked example built on before-and-after pictures. 255.2(e)(4)(ii) describes an ad that simply features before and after pictures of a woman who says she lost 50 pounds in six months, and concludes it is likely to convey that her experience is representative, so if consumers cannot generally expect such results the ad would be deceptive. 255.2(e)(4)(iv) adds a statistics instruction worth applying to your own numbers: if the mean weight loss is 15 pounds but the median is 8 pounds, it would be misleading to call the average 15 pounds. A separate example at 255.1(d), example (ii), covers showing someone who is not the actual endorser.

Staff guidance agrees. The FTC’s Health Products Compliance Guidance, December 2022, sets two principles: advertising must be truthful and not misleading, and advertisers must have adequate substantiation for all objective claims before dissemination. It carries its own caveat that it does not have the force or effect of law, and says the same principles apply to any health-related product.

Where “results not typical” actually stands, and since when

The change is usually dated to 2023. It is older by fourteen years. The FTC’s 2009 revision of the Endorsement Guides, 74 FR 53124, published 15 October 2009 and effective 1 December 2009, reported at footnote 105 that the Commission tested advertisements disclosing either “Results not typical” or the stronger “These testimonials are based on the experiences of a few people and you are not likely to have similar results”, and that neither disclosure adequately reduced the communication that the experiences depicted are generally representative. The same release says the revisions would eliminate the safe harbor the 1980 Guides extended to non-typical testimonials carrying results not typical disclaimers. The 2023 revision carried the finding forward from a footnote into the body of the Guides at 255.2(e)(2)(i)(A).

The disclaimer was not prohibited then and is not prohibited now. The 2009 release states that the revisions would not prohibit the use of disclaimers of typicality. What went is the safe harbor, which is a different thing. You may still run the line. You may no longer treat it as the answer.

The escape hatch in 255.2(e)(2)(i)(A) is empirical copy testing, which is a research commission rather than a marketing task. Outcome data is the achievable version of the same defence, and it is also what 255.2(b) asks you to disclose.

What California and New York actually require

Section 651 sits in Division 2 of the California Business and Professions Code, the Healing Arts division, and binds persons licensed under that division. 651(b)(3)(A) reaches any image that does not accurately depict the results of the procedure advertised or that has been altered in any manner from the image of the actual subject. 651(b)(3)(B) makes use of a model image without clearly stating in a prominent location in easily readable type that it is a model a violation of subdivision (a). 651(b)(7) requires that scientific claims rest on reliable, peer reviewed, published scientific studies.

The requirement at 651(b)(3)(C)(i) is the auditable one. Views must be comparable in presentation so results are not distorted by favorable poses, lighting, or other features of presentation. Same distance, same angle, same light, same background. The section also carries consequences the marketing conversation skips: 651(f) makes a violation by a licensee a misdemeanor, with bona fide mistake of fact a defence to that subdivision only, 651(g) makes it good cause for revocation or suspension of a licence, and 651(k) allows a physician and surgeon or doctor of podiatric medicine who knowingly and intentionally violates the section to be assessed an administrative fine not to exceed ten thousand dollars per event.

New York reaches portrayals of professional practice at 8 NYCRR 29.1(b)(12)(v), which permits testimonials, demonstrations and other portrayals provided the patient expressly authorizes the portrayal in writing, disclosure prevents misleading imagery as to identity, reasonable disclaimers cover results achieved, and no fictional client testimonials are used. Cite the sub-item, since 29.1(b)(12) alone is the general heading for advertising not in the public interest. There is also a scope problem: the opening of 29.1(b) excludes cases involving professions licensed under Article 131 or 131-B of the Education Law where charges were not served on or before 26 July 1991. Article 131 is medicine. We could not retrieve Education Law 6530 on 19 August 2026, so we make no claim about what its advertising provision says.

The table shows what each state provision we could read says about before-and-after images, and where its scope stops.

Two rows are absences rather than requirements, and they are printed that way deliberately. A comparison chart with every cell filled is usually a chart that guessed. If you operate in Florida, the Board of Medicine advertising rule is the document to obtain in full before you publish a photo library, and the Florida statute usually quoted at med spas is not about photographs at all.

Florida’s capitalized 72-hour statement, and what triggers it

Florida Statutes section 456.062 requires that in any advertisement for a free, discounted fee, or reduced fee service, examination, or treatment by a health care practitioner licensed under the chapters it lists, a statement appear in capital letters clearly distinguishable from the rest of the text. It gives the patient and anyone else responsible for payment the right to refuse to pay, cancel payment, or be reimbursed for any other service, examination, or treatment performed as a result of and within 72 hours of responding to the advertisement. History: s. 81, ch. 97-261; s. 85, ch. 99-397; s. 82, ch. 2000-160; s. 1, ch. 2006-215, former s. 455.664.

The claim that every free consultation ad triggers it is too broad on three counts. The section binds practitioners licensed under sixteen enumerated chapters, including 458 medicine, 459 osteopathy, 464 nursing and 478 electrolysis, and chapter 477, which covers cosmetology and licenses Florida estheticians, is not among them. The trigger is an ad for a free or reduced fee service, examination or treatment, and whether a bare consultation is one of those is a question the statute does not answer. There is also an express exemption where the ad runs in a classified directory whose primary purpose is providing products and services at free, reduced or discounted prices and in which the statement prominently appears at least once.

The operational read: if your ad pairs a before-and-after image with a free or discounted offer and the treating practitioner holds an enumerated Florida licence, the statement belongs in the creative, in capitals.

HIPAA reaches some med spas and not others

45 CFR 160.103 defines a covered entity as a health plan, a health care clearinghouse, or a health care provider who transmits any health information in electronic form in connection with a transaction covered by the subchapter. A cash-pay clinic that never transmits a covered electronic transaction does not meet the third limb, and the marketing authorization requirement does not reach it on that basis.

Where it applies, the requirement is specific. 45 CFR 164.508(a)(3)(i) requires an authorization for any use or disclosure of protected health information for marketing, excepting only face-to-face communications and promotional gifts of nominal value. 164.501 defines marketing as a communication about a product or service that encourages recipients to purchase or use it. 164.508(a)(3)(ii) requires the authorization to state when third-party financial remuneration is involved. Content sits at 164.508(c)(1), the core elements, and (c)(2), the required statements on revocation, conditioning and redisclosure, with (c)(3) requiring plain language and (c)(4) a copy to the individual. 164.508(b)(4) restricts conditioning treatment on signing an authorization, which is worth reading before you attach a photo release to a discounted package. One detail people cite loosely: full face photographic images and any comparable images appear at 45 CFR 164.514(b)(2)(i)(Q). It is (Q), not the catch-all at (R).

When HIPAA does not reach a clinic, the other layers stay. State board rules, state privacy and right-of-publicity law, and Section 5 of the FTC Act all still apply to the same image. Whatever system holds your client records has to do four things here: store the signed authorization against the individual client, record the date and scope of what was authorized, capture a revocation when one arrives, and keep the advertisement retrievable. Our med spa client management software is built around a single client record, which is the level at which these documents have to live to be findable a year later.

The photo is permitted. The caption is where clinics lose.

Meta’s Health and Wellness advertising standard permits advertisers targeting people 18 years or older to run general cosmetic products, procedures and surgeries depicting before and after transformation, and names breast augmentation, rhinoplasty and dermal fillers among permitted 18-plus categories. The same standard prohibits ads containing statements of inferiority about physical appearance, meaning terms, descriptions or questions that are negative and attack an individual’s appearance, specific body parts or hygiene. It also bars close-up depictions of a body area by pinching fat, clickbait tactics using sensational language with exaggerated or extreme claims, and unqualified cure claims for named incurable conditions. Two retrievals of that page on 19 August 2026 reported different last-updated dates, so we print none.

Google’s position is not what the agency decks say. We read the full Google Ads healthcare and medicines policy on 19 August 2026. Its published sections cover prescription drug services, restricted drug terms, pharmaceutical manufacturers, unauthorized pharmacies, unapproved substances, opioid painkillers, speculative and experimental medical treatment, clinical trials, addiction services, abortion, birth control, HIV home tests, health insurance and ad formats. The policy contains no reference to cosmetic or aesthetic procedures, injectables, lasers or before-and-after imagery, and certification under it attaches to prescription drug services, pharmaceutical manufacturers and, in the United States, health insurance. The clause that plausibly reaches a med spa is the prohibition on promotion of speculative or experimental medical treatments, which matters if you sell exosome, stem cell or similar offerings.

The targeting row is where the money is. Google’s restricted targeting in personalized advertising policy lists Health among its sensitive interest categories and states that advertisers promoting in those categories are unable to use advertiser-curated audiences. The blocked list is named: customer match, your data segments, audience expansion, lookalike segments and custom segments. Predefined Google audiences stay available to everyone, including in-market segments, affinity, demographics, life events and location targeting, because the sensitive signals are excluded from them by construction.

That is a restriction on which lists you may use, not a ban on advertising. The precise loss is your own client file, uploaded. Clinics built on re-marketing to existing patients find the cheapest audience they own is the one the policy closes off, which shifts the arithmetic toward retention work inside your own client base and channels you control outright. We have written separately on how med spa retention compares with acquisition spend.

TikTok is the platform where a global policy summary transfers worst to a US clinic. Its May 2026 update to the weight management and body image policy expanded allowances for weight loss surgical procedures, supplements and meal replacement products to named markets including Australia, Indonesia, Malaysia, New Zealand, Singapore, Thailand, Vietnam, Bahrain, Egypt, Kenya, Morocco, Nigeria, Pakistan, Qatar, South Africa, Türkiye and the UAE, each subject to sales representative approval and age targeting. The United States does not appear in those market lists. That is an absence, not a stated US prohibition, and it is why a summary written against the global document does not transfer.

How to audit your own photo library this month

Work through this in order. An afternoon is enough for a single location.

1. Pull every published before-and-after pair from your site, Instagram, ad accounts and printed material into one list. New York licensees covered by Part 29 already owe this: 8 NYCRR 29.1(b)(12)(iii) requires keeping an exact copy of each advertisement for one year after its last appearance, available for inspection on demand.

2. Check each pair against Cal. Bus. and Prof. Code 651(b)(3)(C)(i) even outside California. Same pose, same lighting, same distance, same background. A failure there is a retake, not a caption fix.

3. Confirm each pair names the procedures performed in readable type, and that no model image runs without a model label under 651(b)(3)(B).

4. Match every image to a signed authorization. Where HIPAA applies, check for the core elements at 45 CFR 164.508(c)(1) and the required statements at (c)(2), and that the patient got a copy.

5. Build the substantiation file 16 CFR 255.2(b) asks for. Pull your own outcomes for the procedure from your charts, and report the median alongside the mean where outliers pull the average, as 255.2(e)(4)(iv) describes.

6. Rewrite the captions before the disclaimers. Read Meta’s prohibition on statements of inferiority about physical appearance and TikTok’s rule against suggesting an ideal body type, then read your last twenty captions against both.

7. Check your Google audience configuration for customer match, your data segments, lookalikes and custom segments, since the sensitive interest category names those specifically.

One case to calibrate expectations. In the Matter of Vanilla Chip LLC, also doing business as TruHeight, FTC Matter 242 3093, Docket C-4837, is a Part 2 administrative consent proceeding, finalised 15 July 2026. The FTC’s press release states the final order imposes a 4 million dollar judgment which will be partially suspended after the respondents pay 750,000 dollars based on their inability to pay the full amount. The conduct concerned unsubstantiated height-growth claims for a children’s supplement, so it is not a before-and-after photo case. What transfers is the order’s requirement that health benefit, performance, efficacy and safety claims be supported by competent and reliable scientific evidence.

Frequently asked questions

Do I need written consent to use a patient photo in an ad?

Two separate obligations can require it. If your clinic is a covered entity under 45 CFR 160.103, then 45 CFR 164.508(a)(3)(i) requires an authorization before protected health information is used for marketing, excepting only face-to-face communications and promotional gifts of nominal value. Independently, 8 NYCRR 29.1(b)(12)(v) requires the patient to expressly authorize the portrayal in writing, for the New York licensees Part 29 covers. A cash-pay clinic outside HIPAA still faces state board rules and right-of-publicity law, so written consent is the sensible default.

Can I post before-and-after photos on Instagram?

Meta’s Health and Wellness advertising standard permits advertisers targeting people 18 years or older to run general cosmetic products, procedures and surgeries depicting before and after transformation, and names dermal fillers, breast augmentation and rhinoplasty among permitted 18-plus categories. The permission in that standard attaches to the image. The prohibitions in the same standard attach to the words around it: no statements of inferiority about physical appearance, no close-up depictions pinching fat, and no clickbait using sensational or exaggerated language. Read your caption against that list before you read your photograph against the permission.

Does “individual results may vary” protect me?

Not on its own. The FTC removed the safe harbor for non-typical testimonials carrying such disclaimers in its 2009 revision of the Endorsement Guides, 74 FR 53124, effective 1 December 2009, after copy testing found the disclosure did not adequately reduce the impression that depicted experiences were generally representative. 16 CFR 255.2(e)(2)(i)(A) now says such disclaimers are unlikely to be effective. The line is not prohibited, and California 651(b)(3)(C)(ii) requires a version of it. It is simply not the substantiation.

What does California require on a before-and-after photo?

Cal. Bus. and Prof. Code 651(b)(3)(C) requires an actual-patient results image to specify, in a prominent location in easily readable type size, what procedures were performed on that patient. The before and after views must be comparable in presentation so results are not distorted by favorable poses, lighting or other features of presentation, and must carry a statement that the same results may not occur for all patients. 651(b)(3)(B) separately requires model images to be labelled as models.

Why was my Botox ad disapproved on Google?

The healthcare and medicines policy is probably not the reason. Read in full on 19 August 2026, it contains no reference to Botox, fillers, lasers, or cosmetic and aesthetic procedures. Its sections cover prescription drug services, restricted drug terms, pharmaceutical manufacturers, unapproved substances, speculative and experimental treatments and health insurance, among others. Certification under that policy, as published on the page we read that day, attaches to prescription drug services, pharmaceutical manufacturers and, in the United States, health insurance, and not to cosmetic injectables. Check the specific policy named in the disapproval notice rather than assuming a treatment ban.

Can I run remarketing ads to people who visited my injectables page?

Google’s restricted targeting in personalized advertising policy lists Health among its sensitive interest categories and states that advertisers promoting in those categories are unable to use advertiser-curated audiences. The named list is customer match, your data segments, audience expansion, lookalike segments and custom segments. Predefined Google audiences remain available to every advertiser, including in-market segments, affinity, demographics, life events and location targeting. The restriction lands on the lists you build, not on audience targeting as a whole.

Is a photo with no caption still an advertising claim?

Yes, under the FTC Endorsement Guides. 16 CFR 255.2(e)(4)(ii) works through an ad that simply features before and after pictures with one line from the endorser, and concludes it is likely to convey that her experience is representative of what consumers will generally achieve. If consumers cannot generally expect that result, the ad would be deceptive. The image carries the claim, and 255.2(a) says a consumer endorsement is not itself competent and reliable scientific evidence.

Do I have to keep a copy of every ad I run?

In New York, licensees covered by Part 29 do. 8 NYCRR 29.1(b)(12)(iii) requires a licensee who places advertisements to keep an exact copy of each one, in a form appropriate to the medium, for one year after its last appearance, available for inspection on demand of the Education Department. No equivalent retention period appears in the California or Florida provisions quoted here. Keep the creative alongside the matching authorization anyway, since the two are only useful together.