New York State OPMC Marketing Rules · 2026 Playbook for NY Physicians and Clinic Marketers

By Santosh Reddy · Director, Ichelon Consulting US

Reviewed by Hanuman Sihag, Head of Innovation Chamber — SEO & AIO

LinkedIn

The NYS OPMC framework — Education Law section 6530

New York regulates physician professional conduct through Title VIII of the New York Education Law. Section 6530 defines professional misconduct for physicians, physician assistants, and specialist assistants and includes advertising-related grounds. Section 6530(2) covers advertising misconduct: false, fraudulent, deceptive, or misleading advertising; use of "specialist" or "specialty" without qualifying certification; testimonial or endorsement misuse; and any advertising that violates the truthful-advertising standard. OPMC investigates complaints, and the State Board for Professional Medical Conduct hears disciplinary cases.

OPMC enforcement can impose sanctions ranging from confidential warnings through practice restrictions, licence suspension, and licence revocation. Disciplinary action is public and searchable through the NYS Health Department's Physician Profile system, and hospitals and health plans consider OPMC action in privileging and credentialing decisions.

Advertising rules — truthful, not misleading, no professional-title misuse

The operating rule under section 6530(2) is that physician advertising must be truthful and not misleading. Professional-title misuse — using "specialist," "specialty," "board certified," or similar language without qualifying certification from an ABMS member board, an AOA member board, or a comparable recognised body — is a specific enforcement priority. The NY-safe pattern is to disclose the specific certifying body by name at every credential mention and to avoid superlative claims that cannot be substantiated.

Testimonial rules and material-connection disclosure

Testimonials must reflect actual patient experience, have signed HIPAA marketing authorisation, and include material-connection disclosure under parallel FTC endorsement rules where compensation or in-kind benefit was involved. Fabricated testimonials and testimonials that create unjustified expectations sit inside section 6530(2) risk. OPMC has taken action against practices that ran solicited-testimonial campaigns without adequate FTC-style material-connection disclosure.

Credential and board-certification disclosure

Physicians using "specialist" or "specialty" language in NY advertising must hold qualifying certification from an ABMS member board, an AOA member board, or a comparable recognised body. Non-ABMS-and-non-AOA certifications require disclosure that the certifying body is not ABMS-recognised where the audience might infer such recognition. The NY-safe pattern is explicit certifying-body disclosure at every mention.

SHIELD Act and healthcare data-privacy interplay with HIPAA

The New York SHIELD Act (2019) applies to any person or business that owns or licenses computerized data including private information of a NY resident. Private information under the SHIELD Act includes name plus personal identifier (SSN, driver's license, financial account, biometric data) or username-and-password combinations. For healthcare marketers, marketing-stack data containing NY-resident private information falls inside SHIELD Act scope.

HIPAA-covered PHI is generally exempted where the entity is HIPAA-compliant, avoiding duplicative regulation. Marketing-funnel data that is not PHI (form submissions without clinical content, communication logs, marketing analytics data) can fall inside SHIELD Act scope requiring specific data-security safeguards — administrative safeguards (security officer designation, workforce training), technical safeguards (access controls, encryption where reasonable), and physical safeguards. Ichelon Consulting US's NY engagement scopes marketing-stack data handling to both HIPAA and SHIELD Act rules.

Corporate practice and Article 28 facility marketing

New York regulates ambulatory surgery centers, diagnostic and treatment centers, and other outpatient facilities under Article 28 of the Public Health Law. Article 28 facilities must be licensed by the Department of Health and must meet specific structural, operational, and quality standards. Marketing for Article 28 facilities must accurately reflect licensure status and facility scope. Multi-clinic practices operating both Article 28 facilities and non-Article 28 practices need to scope marketing to accurately represent the distinction where relevant.

New York's corporate-practice-of-medicine framework is more permissive than California's or Texas's — non-physicians may own and operate certain healthcare businesses through licensed structures, and Article 28 facilities can be owned by non-physician entities under specific conditions. Marketing for MSO or PE-backed practices in NY should still accurately represent professional-entity ownership and physician clinical control where required.

Telehealth marketing rules

Telehealth practice in NY is regulated under Public Health Law and Education Law provisions. A NY resident cannot receive telehealth care from a physician not licensed in NY (with limited exceptions). Cross-state telehealth marketing that targets NY residents from a non-NY-licensed practice is practice-of-medicine risk. Multi-state telehealth practices marketing to NY residents must maintain NY licensure or scope NY-targeted advertising to services that do not require NY licensure.

OPMC disciplinary action patterns

OPMC disciplinary actions related to advertising cluster in several patterns: specialty-title misuse without qualifying certification, testimonial-related violations (fabricated testimonials, undisclosed material-connection endorsements), fraudulent or deceptive advertising in aesthetic and elective-service categories, credential misrepresentation, and — as SHIELD Act enforcement has grown — data-security failures adjacent to advertising and marketing operations. NY practices should audit marketing against each of these enforcement patterns.

Related insights

Adjacent compliance pillars: HIPAA Marketing Compliance for US Clinics 2026 for the federal privacy rule set, and Healthcare Marketing Agency in New York State for statewide delivery framing. Metro-specific playbooks at Dental Marketing Agency in New York.