Google Reviews for Doctors Under the NMC Guidelines (2026): What's Allowed

Author: Rohit Gupta · Co-Founder, ICG · July 2026 (updated October 2026)

Under the NMC's advertising guidelines of 6 October 2026, a hospital or clinic may ask its patients for genuine feedback on Google. What it may not do is buy, fake, incentivise, filter or manipulate reviews, and an individual doctor may not request or share reviews on social media to promote their practice (para 3.2, Explanation V; para 8.1(xii)). This page explains where that line sits for Google reviews and how a clinic can run a review programme that stays on the right side of it.

In our own accounts, a better Google rating does move enquiries: across 20+ clinic accounts tracked over 12 months in ICG Agency OS, a one-star improvement went with 18-25% more new-patient enquiries from organic search. That is exactly why the rules matter. If you want the deeper operating playbook, read our Google review strategy for Indian clinics; for reply wording, see the review response templates. The full rulebook is in our complete guide to the NMC advertising guidelines 2026.

Updated 8 October 2026 to the National Medical Commission's Guidelines on Ethical Advertising and Public Communication by Hospitals/Medical Institutions and Registered Medical Practitioners (public notice No. R-13014/01/2024-Ethics, dated 6 October 2026, in force immediately). Paragraph numbers in this article refer to those guidelines. General information, not legal advice.

What the NMC guidelines say about reviews

Three provisions decide almost every Google review question.

Replies to reviews are a separate risk. A reply that confirms someone was a patient, mentions their condition, or claims a result runs into the patient-information rules (paras 6.1-6.4 and 7.4) and the bar on superiority and outcome claims (para 8.1(iii)). We cover that in detail in our guide on how doctors and clinics should reply to online reviews.

What a compliant review request looks like

The owner of the request should be the hospital or clinic, not an individual doctor. The request should go to every patient, not a hand-picked set. And it should ask for an honest account, not a rating.

The review request system we now run for clinics

We rewrote our review programme in October 2026 to match the guidelines. It is institution-only and non-incentivised: the hospital or clinic asks all patients for genuine feedback, there are no incentives, nobody filters who is asked, and nothing is sent by or for an individual doctor on social media.

Timing protocol:

The request message:

"Hello [Name], thank you for visiting [Clinic name]. We would value your honest feedback about your experience, whatever it was. If you would like to share it on Google, here is the link: [Google review link]. You can also reply to this message if you would prefer to tell us directly. — [Clinic name] team"

The message is sent by the clinic, names no doctor, asks for no rating, offers nothing in return, and gives the patient a private route for feedback as well as a public one. It goes to every patient who visited in the period, whatever their experience was.

ICG's Beacon platform sends this message on the timing above from the clinic's CRM, to every eligible patient, so nobody in the clinic has to choose who receives it.

Responding to reviews: the privacy-first protocol

For positive reviews: Respond within 24-48 hours, from the clinic's account. Keep it short and genuine. Do not confirm that the reviewer was a patient, and do not repeat any clinical detail, even one the reviewer mentioned (paras 6.1 and 7.4). No outcome claims and no "best care in the city" style lines (para 8.1(iii)).

"Thank you for taking the time to share your feedback. We pass every comment on to the team."

For negative reviews, a 3-step protocol:

Step 1: Wait several hours before responding. Replies written in the moment tend to be defensive.

Step 2: Write a reply that acknowledges, does not argue, and discloses nothing.

Template: "We are sorry to read this. We take all feedback seriously and would like to understand your concerns directly. Please contact us at [clinic phone/email] and someone from our team will get back to you."

This reply acknowledges the feedback, does not admit liability, does not confirm a patient relationship or reveal any clinical information (DPDP Act 2023 applies even if the reviewer disclosed details themselves), and moves the conversation to a private channel.

Step 3: Follow up privately through the clinic's normal patient-contact channel, if the person is a patient and you hold their contact details.

More reply patterns by specialty are in our review response templates, and you can download 30+ reply templates as a free PDF.

For fake or bad-faith reviews: Use Google's "Report a review" function. Explain to Google that the review appears to come from someone who is not a patient, and ask for removal. Post the neutral public reply above while the report is processed. Do not dispute the review's authenticity in public; that draws more attention to it.

How ratings build when the programme is honest

Asking every patient, consistently, is what builds a credible review profile. More genuine reviews give Google more data, the rating stabilises, and the profile becomes more useful to the next patient. The patients you ask, not the ones you pick, decide the average.

For a typical single-location clinic, what we see once the clinic starts asking every patient:

• Month 1: 8-14 new reviews
• Month 2: 12-18 new reviews
• Month 3: 14-22 new reviews, with some arriving unprompted

These are ICG operational observations, not guarantees. Review volume depends on patient volume, specialty and how consistently the clinic sends the request. The rating that follows is whatever patients genuinely give.

Clinic Google review benchmarks we use

Many Indian clinics we onboard sit at a 4.1-4.3 Google rating with 30-70 reviews per location. At that level a single 1-star review can pull the visible average down for weeks. These are the benchmarks we use inside our Client Elevation Programme when we first look at a clinic's listings. They describe review activity and responsiveness; none of them are reached by filtering who is asked.

Six common review mistakes

1. Asking only happy patients. Choosing who gets the link based on how the visit went is review gating. It distorts the rating and runs against para 8.1(xii). Ask everyone or no one.
2. Offering anything for a review. A discount, a free test or a lucky-draw entry turns a review into a paid one (Explanation V). It also breaks Google's review policies.
3. Doctors asking on their own social media. An RMP may not request or share reviews for professional promotion on social media (Explanation V). Requests belong to the clinic, sent privately to patients.
4. Bulk-requesting reviews after billing. Google's spam filters can catch timestamp clusters and suppress reviews. Send requests on the timing above instead; Angryturtle handles the pacing.
5. Replies that disclose. Naming the treating doctor, confirming the procedure, or even confirming that the reviewer is a patient is a disclosure. Keep replies neutral.
6. Buying reviews. Fake and paid reviews are barred by Explanation V and para 8.1(xii), and Google removes them in sweeps. There is no compliant version of this.

If you want your current listings and review process checked against the guidelines, use our free NMC compliance check or chat with our senior leadership on WhatsApp. For patient stories and testimonials, which are a different question from reviews, see NMC rules on patient testimonials and before-after photos.

Sources: NMC Guidelines on Ethical Advertising and Public Communication (6 October 2026), DPDP Act 2023, Google review policies.