View project
The complete reference guide for addiction and mental health treatment center marketing compliance across all 50 states
Marketing for addiction treatment and mental health services operates under a patchwork of overlapping federal regulations, state licensing rules, patient protection statutes, and platform policies. A campaign that’s compliant in Texas might violate patient brokering laws in Florida or mislead consumers under California’s consumer protection standards.
The stakes are high. The FTC has brought dozens of enforcement actions against behavioral health providers for false claims about treatment outcomes, unsubstantiated testimonials, and deceptive advertising practices. State attorneys general regularly investigate telehealth marketing, patient lead generation schemes, and compliance with patient brokering statutes. Licensing boards can revoke credentials. Google and Meta enforce healthcare advertising policies that require specific certifications. HIPAA carries civil and criminal penalties for improper marketing disclosures.
Yet many treatment centers operate under the assumption that “national” compliance standards exist. They don’t. What matters is where your potential patients are—because that’s where regulators will look.
This guide maps the regulatory landscape state by state, highlights the highest-risk jurisdictions, and provides a practical compliance framework for treatment centers and the marketing firms that serve them.
Before diving into state-specific rules, understand the federal foundation that applies nationwide:
All behavioral health advertising must be truthful, not misleading, and backed by competent and reliable scientific evidence. The FTC has specific guidance on:
The Substance Abuse and Mental Health Services Administration (SAMHSA) provides non-binding but widely-referenced guidance:
If your treatment center handles PHI (Protected Health Information), marketing communications must comply with HIPAA:
Google, Meta, and other major platforms require LegitScript certification for behavioral health treatment advertising. LegitScript’s independent verification process examines:
Without certification, paid search and social ads are blocked. This is not optional—it’s a hard requirement.
Google Ads: Requires LegitScript certification for behavioral health, telehealth, and substance abuse ads. No claims about treatment outcomes unless backed by clinical evidence.
Meta/Facebook: Healthcare advertising requires pre-approval. Mental health and addiction treatment ads face heightened scrutiny. Testimonial-based ads often rejected if outcomes claims are present.
LinkedIn, TikTok, etc.: Behavioral health ads often restricted or prohibited entirely, depending on product type.
Medical professionals at your facility (MDs, psychologists, etc.) have individual advertising responsibilities. Marketing can implicitly endorse these professionals’ credentials, which creates liability for your organization if claims are false or unsubstantiated.
States don’t all regulate behavioral health advertising equally. Some have comprehensive patient protection statutes and aggressive enforcement records. Others rely primarily on federal standards. Here’s a practical breakdown:
| Category | Regulatory Intensity | Key Risk Areas | Example States |
|---|---|---|---|
| HIGH | Comprehensive state-specific laws; active enforcement; patient brokering restrictions; telehealth rules | Patient brokering, outcome claims, lead generation practices, telehealth scope, licensing | CA, FL, NY, MA, TX, IL |
| MODERATE | State-level patient protection laws; occasional enforcement; some telehealth restrictions | Patient brokering in some states, licensing compliance, outcome claims | OH, PA, MI, NC, VA, CO |
| STANDARD | Primarily federal FTC/HIPAA compliance; standard licensing; minimal additional advertising restrictions | Federal truth-in-advertising, HIPAA, LegitScript, basic licensing | WY, MT, ND, VT, ID, NM, AK, HI |
Important: This categorization is simplified. Even “Standard” regulation states may have specific rules around telehealth, substance abuse facilities, or insurance advertising. Always verify current state laws before launching campaigns.
Key Issues: Patient brokering statute (Health & Safety Code § 1461 et seq.), DHCS licensing, CCPA/CPRA privacy rules, strict telehealth scope limits.
Enforcement: Attorney General actively investigates behavioral health marketing. Multiple recent enforcement actions against rehab facilities for misleading claims.
Key Issues: Strict anti-kickback statute (Fla. Stat. § 409.920), patient brokering restrictions, insurance advertising rules, licensing board scrutiny.
Enforcement: High volume of treatment centers means high enforcement priority. Office of Attorney General Medicaid Fraud Control Unit regularly investigates facilities.
Key Issues: Strong consumer protection laws, licensed facility requirements, insurance coverage disclosures, mental health parity compliance.
Enforcement: New York Attorney General’s consumer protection bureau targets healthcare marketing. Patient testimonials face heightened scrutiny.
Key Issues: Comprehensive mental health parity law, insurance marketing rules, patient consent requirements, licensing board oversight.
Enforcement: Massachusetts Board of Registration in Medicine actively reviews advertising by licensed professionals.
Key Issues: Large uninsured population; advertising restrictions around “free assessments” and cost representations; telehealth rules.
Enforcement: Texas Medical Board oversees advertising by MDs/LPCs. Attorney General investigates consumer complaints.
Key Issues: Patient brokering restrictions (similar to California), insurance advertising requirements, telehealth scope limits.
Enforcement: Illinois Department of Financial and Professional Regulation actively enforces licensing and advertising rules.
What is patient brokering? Paying individuals to refer patients (especially without disclosure), operating undisclosed referral networks, or compensating employees beyond market rate to drive admissions.
California (Health & Safety Code § 1461): Explicitly prohibits knowing or willful participation in any arrangement where compensation depends on referring patients. Some exceptions for licensed professionals, but they must be on your payroll, not independent contractors.
Florida (Fla. Stat. § 409.920): Anti-kickback statute with broad language. Payment to anyone for referrals violates the law, with limited safe harbors for bona fide employees and service contracts.
Federal Anti-Kickback Statute (42 U.S.C. § 1320a-7b): Applies to any federal healthcare programs (Medicare, Medicaid). Criminalizes knowingly paying remuneration to induce referrals.
Other high-risk states: New York, Massachusetts, Illinois, Pennsylvania.
Compliance strategy: Do not pay independent contractors for referrals. Do not use “lead generation” agencies that profit on a per-referral basis. Marketing spend is generally safe; admission-contingent compensation is not.
Telehealth is heavily regulated. Advertising claims about telehealth services must comply with state scope-of-practice laws, licensing reciprocity rules, and insurance coverage limitations.
| State | Telehealth Advertising Rules |
|---|---|
| California | Cannot advertise telehealth prescribing without clear disclosure of in-person evaluation requirements; strict telemedicine licensing rules |
| Florida | Telehealth psychotherapy has specific requirements; advertising must state prescriber credentials and location |
| New York | Telehealth psychiatric prescribing limited to patients with established therapeutic relationship; advertising must be clear about these limits |
| Texas | Telehealth counseling allowed; must comply with HIPAA and state counselor licensing rules |
| Most other states | Telehealth generally allowed; verify state medical board rules and insurance coverage before advertising specific services |
DEA Regulations (21 CFR § 1300.04): Advertising opioid treatment programs (methadone clinics, buprenorphine-waivered programs) has federal restrictions. Cannot use sensationalized language. Must include accurate information about treatment.
State-level restrictions: Some states (especially states with high opioid epidemic impact) have additional substance abuse marketing restrictions. For example:
Mental Health Parity and Addiction Equity Act (MHPAEA) doesn’t directly regulate advertising, but creates compliance obligations around insurance coverage. Your ads cannot misrepresent insurance coverage benefits:
“Body brokers” are individuals or entities that profit by placing individuals in treatment facilities, often without regard for treatment appropriateness or patient welfare. California and Florida have explicit restrictions:
California: Facilities cannot knowingly accept referrals from unregistered body brokers. Marketing materials should not indirectly encourage body broker arrangements.
Florida: Stricter. Using body brokers constitutes patient brokering under state law.
Compliance: Do not structure compensation arrangements with any intermediary that profits on a per-patient basis. This includes crisis stabilization centers, sober living homes, and peer support networks.
| State | Advertising Disclosure Requirements |
|---|---|
| California | Must disclose licensing/accreditation status; patient brokering disclosures in some contexts; CCPA privacy policy link |
| Florida | Must disclose facility licensure; financial disclosures for any pre-need funding arrangements |
| New York | Insurance coverage disclosures; patient rights disclosures; clear identification as licensed facility |
| Massachusetts | Mental health parity disclosures; insurance coverage clarity; facility licensing status |
| Texas | Telehealth provider credential disclosures; insurance network status |
California has the most comprehensive behavioral health advertising regulations in the country. Humbear’s location in California and operation of four treatment centers in-state make this critical.
This is the foundation of California’s behavioral health advertising compliance framework:
Key exception: Payments to licensed healthcare professionals (MDs, psychologists, counselors) on your facility’s payroll are generally permitted, provided compensation is not contingent on referrals and is at market rate for non-referral work.
Practical implications:
DHCS regulates behavioral health treatment facilities in California. Marketing claims about your facility’s capabilities must align with your actual licensed scope:
California’s consumer protection laws are aggressive:
Practical implication: Claims about treatment effectiveness, cost, insurance coverage, or facility capabilities must be bulletproof. Patient testimonials are scrutinized heavily.
CCPA/CPRA applies to behavioral health marketing:
California’s telemedicine law (Bus. & Prof. Code § 2290.5) is one of the strictest in the country:
California courts have held that certain claims about treatment are presumed misleading unless specifically substantiated:
What’s wrong: Outcome claims require peer-reviewed clinical data or internal studies conducted according to scientific standards. Anecdote is not evidence.
Fix: Make process claims instead: “Our program includes individual therapy, group counseling, and medication-assisted treatment” or “We employ evidence-based CBT and motivational interviewing.”
What’s wrong: Patient brokering statutes and FTC standards require disclosure if anyone involved in referrals has financial incentive.
Fix: Structure internal marketing. Use staff for referrals (on salary, not commission). If using affiliates, ensure no per-referral compensation.
What’s wrong: MHPAEA compliance, FTC truth-in-advertising, and state consumer protection laws all require clear, upfront cost disclosures.
Fix: “Most insurance plans are accepted. Actual coverage depends on your plan. We’ll verify benefits before admission.” Provide clear pricing and out-of-pocket cost estimates.
What’s wrong: State medical boards and licensing authorities scrutinize credential claims. False credentials are grounds for enforcement against both the individual and the facility.
Fix: Verify every credential before publishing. List only active licenses. Avoid inflated or outdated credentials. Update regularly.
What’s wrong: FTC endorsement guides and SAMHSA guidelines require clear disclaimers that testimonials don’t guarantee outcomes.
Fix: Include prominent disclaimer: “Results represent individual experiences and are not indicative of typical outcomes. Your results may vary.”
What’s wrong: Telehealth scope varies dramatically by state and specialty. Overstating what you can deliver exposes you to licensing board enforcement.
Fix: Know your state’s telehealth rules. Disclose licensing status of each practitioner. Be specific: “Initial psychiatric evaluation requires in-person visit” or “Counseling available via secure video conference.”
What’s wrong: HIPAA, CCPA (if California-based), and FTC regulations all require clear privacy disclosures. Marketing also creates data collection obligations.
Fix: Implement comprehensive privacy policy covering (a) how patient health information is handled (HIPAA), (b) how marketing data is collected and used (CCPA/FTC), (c) third-party vendor data processing, (d) patient rights (access, deletion, etc.).
What’s wrong: This constitutes patient brokering in California, Florida, and many other states. The intermediary’s profit motive creates kickback liability.
Fix: vet all referral sources. Ensure no per-referral compensation. If receiving referrals from third parties, disclose the arrangement in marketing materials and ensure the third party is not a “body broker.”
Before publishing any behavioral health marketing campaign, use this checklist to catch compliance issues:
Is your facility LegitScript-certified? Have you renewed? (Required for Google/Meta ads)
Every claim about outcomes, effectiveness, specialization, or capabilities: Do you have peer-reviewed data, clinical evidence, or valid internal studies? If not, reword as process claims.
Check state medical boards, licensing databases, and professional registries. Confirm active licenses for all advertised practitioners. Update quarterly.
Does each include a clear disclaimer that results represent individual experience and don’t guarantee outcomes? Have you obtained written consent from the individual featured?
Are cost ranges, insurance coverage limits, and out-of-pocket estimates clearly disclosed? Did you avoid guarantees about insurance coverage?
If advertising telehealth: Have you verified state scope-of-practice rules? Do your ad disclosures accurately describe limitations (e.g., “initial evaluation requires in-person visit”)?
Who is referring patients to you? Are any third-party referral sources compensated on a per-referral basis? If yes, do not advertise that arrangement and consider restructuring it.
If you use patient information in marketing or testimonials, do you have written authorization? Are you handling PHI securely?
Is your privacy policy accessible from your website? Does it cover HIPAA, CCPA (if applicable), and marketing data collection practices?
If operating in California, Florida, New York, or another high-regulation state, have you reviewed state-specific advertising rules? (See state-specific sections above)
Is your facility’s licensing status and any accreditation (CARF, JCAHO, etc.) clearly disclosed where required?
If using Google Ads, Meta, LinkedIn, etc., have you reviewed that platform’s healthcare advertising policy? Do your ads comply?
Have you had a healthcare attorney licensed in your state(s) review this campaign before launch? This is critical for behavioral health.
Technically yes, but with significant caveats. The FTC and state attorneys general require outcome claims to be substantiated by competent and reliable scientific evidence. For behavioral health treatment, “competent and reliable” typically means peer-reviewed published data, not internal facility records. Even then, disclaimers stating that results may vary and are not typical are nearly always required. The safest approach is to make process-based claims (“We use evidence-based CBT”) rather than outcome claims (“90% recovery rate”).
Patient brokering is paying someone (or an entity) specifically for referring patients to your facility. Legitimate marketing is paying for advertising, brand awareness, or brand education that may eventually result in patient referrals, but where compensation is not contingent on actual referrals. The key distinction: Is payment tied to the admission/referral, or is it for marketing effort? If the former, it’s likely illegal. Internal marketing and staff compensation for non-referral work are generally safe. Lead generation agencies that are paid per click or per impression (not per admission) are generally safer than agencies paid per referral.
All of them. This is important: If your ad appears in California (even if you’re not based there), you must comply with California laws. If it appears nationally on Google or Meta, you must comply with the most restrictive state’s rules to be safe. In practice, this means complying with California, Florida, New York, and Massachusetts rules nationwide, since those states have the most comprehensive regulations and largest enforcement activity. It’s more practical to establish a single national standard that meets the highest-regulation states rather than creating state-specific ad variants.
Yes. Absolutely yes. FTC endorsement guides require truthful representation and consumer consent. More importantly, HIPAA requires patient authorization if you’re using any protected health information (which a testimonial about mental health or addiction treatment essentially is). Get a written consent form, ideally reviewed by a healthcare attorney, before publishing any patient testimonial. The form should clearly state how the testimonial will be used, that results may vary, and that it represents the individual’s opinion. Store it securely as part of your compliance record.
Private lawsuits under state consumer protection laws (especially California’s Unfair Competition Law, New York’s consumer protection statute, etc.) are increasingly common. A patient or their family who believes marketing claims were false can sue for actual damages, sometimes punitive damages, and attorney’s fees. State attorneys general can bring civil enforcement actions seeking restitution and civil penalties. Federal agencies (FTC, HHS/HIPAA) can issue consent orders, fines, and referrals for criminal prosecution in egregious cases. This underscores why substantiation of claims and clear disclaimers are essential—they’re your primary defense against liability.
At minimum, annually. But better practice is quarterly. State laws, platform policies, and licensing requirements change regularly. Staff credentials may lapse. Clinical evidence supporting your claims may be published or debunked. Create a calendar reminder to review (a) state laws in your jurisdiction quarterly, (b) staff licenses monthly, (c) platform policies whenever you launch a new campaign, (d) FTC enforcement actions in your industry quarterly. Document these reviews. This creates a paper trail showing good-faith compliance efforts, which is helpful if you’re ever investigated.
Author: Jeff Evans, Humbear Media
Published: 2026
Purpose: Educational reference for behavioral health marketing compliance
This guide reflects regulatory standards as of early 2026. Behavioral health regulations evolve regularly. Before launching any campaign, consult a healthcare attorney licensed in your state(s) to ensure compliance with current law. Humbear Media makes no representation as to the completeness or accuracy of this information for your specific circumstances.
