Colorado Medical Board advertising rules — the marketing compliance guide
A working guide to advertising rules for physicians and medspa operators licensed in Colorado — the Colorado Medical Board (CMB), C.R.S. Title 12 Article 240 (Medical Practice Act), and the Colorado Consumer Protection Act overlay. Written for Denver, Colorado Springs, Boulder, Fort Collins and Aurora practice owners, in-house marketing leads and agencies serving Colorado-licensed physicians and Front Range aesthetic operators.
- The controlling statute for Colorado physician advertising is Colorado Revised Statutes Title 12, Article 240 — the Colorado Medical Practice Act — which defines unprofessional conduct to include false, deceptive or misleading advertising. The Colorado Medical Board operates under the Colorado Department of Regulatory Agencies (DORA).
- The Colorado Consumer Protection Act (C.R.S. Section 6-1-101 et seq.) provides parallel civil enforcement exposure. Actual damages, treble damages for bad-faith conduct, attorneys fees, and Attorney General remedies are all available.
- The Denver-Front Range aesthetic corridor is one of the fastest-growing medspa advertising markets in the country. Board attention concentrates on non-physician-owned brand structures, delegate scope, and imagery-based claims. Colorado Springs, Boulder, Fort Collins and Aurora share the pattern.
- The federal baseline — HIPAA, TCPA, CAN-SPAM, ADA, FTC endorsement guides, FDA off-label prohibitions — layers on top of the Colorado framework and applies to every campaign.
- The corporate practice of medicine doctrine in Colorado is nuanced. Physicians may be employed by professional corporations and, under specific statutory permissions, by certain non-physician entities including registered corporate medical entities. Advertising must accurately identify the responsible professional entity.
- Dallas, Texas LLC
- US client team · Central Time (CST)
- 25+ US healthcare clients
- BAA signed with every client
- HIPAA compliance training across client and delivery teams
- Contracts and invoices in USD
-
Primary Care · North Dallas, TXCase study →
-
MedSpa · North Dallas, TX
-
Skin Care · Beverly Hills, CA
-
Dental · Christiansburg, VACase study →
-
Pediatrics · Blacksburg, VACase study →
-
Pediatric Dentistry · Blacksburg, VACase study →
-
Dental · Roanoke, VACase study →
-
Functional Medicine · Telehealth · USACase study →
“They were able to get all my ideas and work with me over a period of three to four months and create this amazing website. It's super customized, very modern, and it incorporates all the elements that I had wanted — the patient portal, nice pictures, a very interactive website, patient reviews. I would highly recommend their company to anyone who wants to make an excellent website.”
Table of contents
- Which boards actually regulate Colorado advertising
- C.R.S. Title 12 Article 240 — the Medical Practice Act
- Colorado Consumer Protection Act overlay
- Practical creative rules — allowed / prohibited / requires disclosure
- Common Colorado violation patterns
- Penalty structure and typical enforcement pattern
- Denver-Front Range medspa specifics
- How Ichelon Consulting US structures Colorado campaigns
- FAQ & state cross-links
Which boards actually regulate Colorado advertising
Colorado consolidates most licensing under the Department of Regulatory Agencies (DORA), with the Colorado Medical Board regulating MDs and DOs under a single unified board — a simpler structure than the two-board split in Arizona or Nevada. Physician licensure sits under C.R.S. Title 12, Article 240, the Colorado Medical Practice Act. Physician assistants also sit under Article 240 through the Board.
The Colorado Dental Board handles dental advertising under C.R.S. Article 220 with a substantively parallel prohibition. Chiropractic sits under C.R.S. Article 215 through the Colorado Board of Chiropractic Examiners. Optometry, nursing, pharmacy and the other licensed disciplines each have their own boards under DORA, and each board's advertising standard is parallel — false, deceptive or misleading advertising is prohibited across the board landscape.
The Colorado Consumer Protection Act (CCPA, C.R.S. Section 6-1-101 et seq.) sits over the top. C.R.S. Section 6-1-105 enumerates specific deceptive trade practices, several of which apply directly to healthcare advertising. C.R.S. Section 6-1-113 creates a private right of action with actual damages or USD 500 (whichever is greater), trebled for bad-faith conduct, plus attorneys fees. C.R.S. Section 6-1-110 authorizes Attorney General enforcement including civil penalties up to USD 20,000 per violation for willful, knowing conduct and higher penalties for violations against elderly consumers.
Colorado law has been amended repeatedly in recent years to strengthen consumer protection, and the CCPA now provides one of the stronger civil-enforcement overlays among Rocky Mountain states. Practical consequences: healthcare advertising in Colorado is reviewed simultaneously against the CMB standard and the CCPA deceptive-trade-practices list.
The federal baseline still applies. HIPAA on privacy. TCPA on outbound telephony and SMS. CAN-SPAM on commercial email. FTC Act and FTC Endorsement Guides on truthful advertising and testimonial disclosure. ADA and Section 508 on website accessibility. FDA off-label promotion rules on pharmaceutical and device advertising. A Colorado-specific review clears the federal floor and then addresses the state ceiling.
C.R.S. Title 12 Article 240 — the Medical Practice Act
Article 240 is Colorado's comprehensive physician-practice statute. Advertising provisions are integrated with the broader unprofessional-conduct standards, and the Colorado Medical Board has issued policy statements interpreting the statute for specific advertising practices. A Colorado advertising review works across statute, board policy and CCPA in parallel.
Definition of unprofessional conduct
The statute defines unprofessional conduct to include a range of specific practices, including false, deceptive or misleading advertising. The three adjectives track the standard state pattern — literal untruth, tendency to mislead, and misleading-by-omission-or-implication. Colorado's interpretation of "misleading" is broad and reaches implication and juxtaposition claims that a narrower state might not act on.
Specialty designation
A Colorado-licensed physician may advertise board certification only in an ABMS-recognized specialty, an AOA-BOS recognized specialty, or a certifying body meeting the Colorado Medical Board's equivalency standard. Non-recognized certifications require a clear qualifying disclosure. Practice-focus language ("primary focus on cosmetic surgery") is a distinct construction and generally permitted; the word "specialist" itself is regulated.
Testimonials and endorsements
Testimonials must be genuine. Atypical outcomes require a clear-and-conspicuous "results not typical" or "individual results vary" disclosure. Material connections between endorser and practice must be disclosed under the CMB standard and the parallel FTC Endorsement Guide standard. Composite testimonials are per se prohibited.
Colorado Medical Board Policy 40-27
Board Policy 40-27 addresses office-based procedures and the operating standards for office-based surgery and cosmetic procedure environments. The Policy's advertising touch points are on entity structure, supervising-physician identification, and delegation scope in aesthetic settings. Practices operating in the medspa segment should track the Policy alongside Article 240.
Delegation
Article 240 and CMB rules govern delegation of tasks to unlicensed personnel and to other licensed staff under physician supervision. Advertising that misrepresents delegate scope, or that fails to identify the supervising physician where required, creates both a delegation-rule violation and an advertising violation.
Colorado Consumer Protection Act overlay
The Colorado Consumer Protection Act (CCPA) — not to be confused with the California Consumer Privacy Act — is one of the stronger consumer-protection statutes in the Rocky Mountain region. Working the CCPA into pre-publication review is what distinguishes serious Colorado compliance from a surface-level board check.
C.R.S. 6-1-105 — deceptive trade practices
Section 105 enumerates a long list of deceptive trade practices, several of which apply directly to healthcare advertising. Knowingly making a false representation about the characteristics or quality of goods or services; knowingly making a false representation about affiliations or approvals; using deceptive practices in connection with the sale of goods or services; failing to disclose a material fact known at the time of an advertisement or sale; representing that goods or services are of a particular standard when they are of another. Each captures common categories of non-compliant healthcare advertising.
C.R.S. 6-1-113 — private right of action
A consumer or a person acting on behalf of consumers may bring a private action. Recovery includes actual damages, or USD 500 (whichever is greater), plus attorneys fees and costs. For a bad-faith violation, the court may award three times actual damages up to USD 500,000 for a repeat violator. The fee-shift and treble-damages structure makes CCPA a genuinely differentiating civil-litigation risk profile.
C.R.S. 6-1-110 — Attorney General enforcement
The Colorado Attorney General may bring an action for injunctive relief, civil penalties (up to USD 20,000 per violation for willful, knowing conduct, and up to USD 50,000 per violation against an elderly person or a person with a disability), and restitution. The AG's Consumer Protection Section has been active in the healthcare-adjacent space.
C.R.S. 6-1-701 to 6-1-716 — additional protections
Colorado has enacted additional consumer-protection provisions covering specific market practices — including elderly-consumer protections in Section 6-1-717, and privacy protections under the Colorado Privacy Act (C.R.S. Section 6-1-1301 et seq.) that interact with health-related advertising data.
The practical consequence for a Colorado marketing program is that every campaign is reviewed against both the CMB standard and the CCPA deceptive-trade-practices list. A campaign that clears the board but not the CCPA is high-risk and should be rewritten before publication.
Allowed / prohibited / requires disclosure — the Colorado working table
The table below is the working reference Ichelon Consulting US uses on Colorado pre-publication reviews. It is calibrated to the dual-track reality — everything that clears the CMB standard also has to clear the CCPA deceptive-trade-practices test.
| Creative element | Status | Practical rule |
|---|---|---|
| Board-certified specialist claim | Allowed with condition | ABMS or AOA-BOS recognized specialty only. Non-recognized certifications require qualifying disclosure. |
| "Denver's best" superlative | Requires substantiation | Dated, defensible substantiation file. Absent that, treat as prohibited under both Article 240 and the CCPA. |
| Before-and-after cosmetic imagery | Requires disclosure | "Individual results vary" clear-and-conspicuous same-face; signed HIPAA authorization on file. |
| Patient testimonial (unpaid) | Requires disclosure | Genuine patient; substantiated outcome; typicality disclosure if atypical; HIPAA authorization. |
| Paid or comped endorsement | Requires disclosure | Clear disclosure of material connection under FTC Part 255 and Article 240. |
| Outcome guarantee | Prohibited | Per se prohibited for procedures within the practice of medicine. |
| Advertised price without conditions | Requires disclosure | All material conditions disclosed on the same face — CCPA exposure is amplified here. |
| Medspa brand without physician name | Requires disclosure | Professional entity and supervising physician identifiable in the ad or linked landing surface. |
| Comparative pricing | Requires substantiation | Dated defensible survey. Absent that, treat as prohibited under CCPA. |
| Non-ABMS certification mention | Requires disclosure | Explicit statement that the certification is not ABMS-recognized. |
| Composite testimonial | Prohibited | Per se prohibited under Article 240; also a CCPA misrepresentation. |
| Stock photograph as patient | Prohibited | Per se prohibited. Compounding CCPA exposure. |
| Elderly-targeted advertising | Requires elevated care | CCPA elevated-penalty provision for elderly consumers (up to USD 50,000 per violation). |
| Health-adjacent retargeting data | Requires disclosure | Colorado Privacy Act obligations attach to Colorado-resident interest signals. |
Common Colorado violation patterns
Complaint volume in Colorado clusters into a recognizable pattern shaped by the Denver-Front Range aesthetic corridor and the increasingly active CCPA plaintiff bar.
- Superlative language without substantiation. "Denver's best", "Colorado Springs' leading", "top-rated on the Front Range". Consistently draws CCPA demand letters, particularly for widely distributed campaigns.
- Non-ABMS certification framed as specialty. A membership society or short-course certificate described as an ABMS-recognized specialty. Correction is a qualifying disclosure or removal of specialty language.
- Undisclosed medspa medical direction. Non-physician-owned medspa brands that do not identify the supervising physician on the ad or immediately linked landing page.
- Guaranteed outcome language. "Guaranteed results", "money-back if not satisfied" tied to clinical outcome rather than service quality.
- Undisclosed material connection on endorsement. Influencer content on Instagram, TikTok, YouTube that appears organic but is actually compensated.
- Bait-and-switch pricing. Advertised prices requiring unadvertised additional purchases; especially high-exposure under CCPA given the treble-damages structure.
- Elderly-targeted advertising failures. Advertising campaigns targeting older Colorado consumers that fail the elevated CCPA standard. AG attention on this pattern has been sustained.
- Colorado Privacy Act shortfalls. Health-adjacent interest signals captured for retargeting without meeting the CPA transparency and opt-out requirements. The CPA is enforced by the Colorado Attorney General and creates a distinct enforcement layer.
- Stale credential pages. Directory pages continuing to display credentials, hospital affiliations or certifications that have lapsed. Monthly credential reconciliation prevents this.
Penalty structure and typical enforcement pattern
Colorado's dual-track structure means every risk assessment accounts for both the Board and the CCPA civil-and-AG ladder.
Colorado Medical Board track
- Letter of admonition. Non-disciplinary; communicates concern; often the outcome where prompt corrective action is documented.
- Reprimand. Formal disciplinary action; public record.
- Fine. Monetary penalty. Per-violation basis; each publication may be treated as a separate violation.
- Probation. Continued practice subject to conditions, often including pre-publication advertising review for a defined period.
- Suspension. Practice paused; reinstatement subject to conditions.
- Revocation. License surrendered or cancelled.
- Cease-and-desist order. Directed at unlicensed activity or a specific advertising practice.
Colorado Consumer Protection Act track
- Private civil action under C.R.S. 6-1-113. Actual damages or USD 500 (whichever is greater); trebled for bad-faith conduct up to USD 500,000 for a repeat violator; plus attorneys fees.
- Attorney General action under C.R.S. 6-1-110. Civil penalties up to USD 20,000 per violation for willful conduct, USD 50,000 per violation for elderly-consumer or disability violations, plus injunctive relief and restitution.
- Class action. CCPA claims are aggregable; a widely distributed non-compliant campaign creates class-exposure risk.
- Colorado Privacy Act enforcement (C.R.S. 6-1-1301 et seq.). A distinct enforcement layer for health-adjacent marketing data covering Colorado residents.
The typical Colorado enforcement pattern for a non-compliant campaign is a Board complaint followed within four to eight weeks by a CCPA demand letter. Board investigations resolve more slowly than CCPA private actions. Practices that respond to CCPA demand letters well can substantially reduce civil exposure while the Board matter is still pending.
Denver-Front Range medspa specifics
The Denver-Front Range aesthetic corridor — Denver, Cherry Creek, Boulder, Fort Collins, Colorado Springs, Aurora, Highlands Ranch — is one of the fastest-growing medspa advertising markets in the Rocky Mountain region. Board attention has increased in parallel with the segment's growth.
Physician direction and supervising physician
Every Colorado medspa performing procedures within the practice of medicine must be under the direction of a Colorado-licensed physician. Advertising that omits the supervising physician, that identifies the medspa entity as if it were the licensee, or that suggests non-physician staff perform procedures outside the delegated scope will attract board attention.
Delegate scope and roster
Registered nurses, nurse practitioners, physician assistants and certified aesthetician staff perform much of the visible aesthetic work in a Colorado medspa. Advertising that describes what each delegate performs must accurately reflect scope. Colorado Medical Board Policy 40-27 addresses office-based procedure operating standards and interacts with advertising review through the delegation dimension.
Front Range cross-jurisdiction advertising
Front Range advertising frequently reaches Wyoming, Nebraska and New Mexico residents through paid social and OTT campaigns. Advertising directed at residents of another state must clear that state's rules on top of Colorado's. Cross-state reviewing catches most conflicts early.
Cannabis-adjacent aesthetic advertising
Colorado's mature cannabis market has produced a small but growing set of cannabis-adjacent aesthetic services — CBD topicals, cannabis-integrated wellness protocols. Advertising for such services must clear a distinct additional layer: FDA restrictions on cannabinoid claims, Colorado Marijuana Enforcement Division advertising rules for licensed operators, and the CMB standard for the underlying medical direction. Cross-checking against all three is essential.
How Ichelon Consulting US structures Colorado campaigns
Dual-track pre-publication review
Every campaign passes a two-lens review — Article 240 and CMB Policy 40-27 for board risk, CCPA for civil-litigation and AG-enforcement risk. The stricter standard governs the final creative.
Substantiation register
Every factual claim anchored to a dated substantiation row. Superlatives without substantiation are rewritten before publication given CCPA treble-damages exposure.
Colorado Privacy Act overlay
Transparency, opt-out and data-minimization obligations for Colorado residents on marketing-attribution data. Consent signaling downstream to every ad and analytics vendor.
HIPAA authorization vault
Signed authorizations for every patient image, quote and reference. Media-specific and revocable. Retained on encrypted storage for the six-year retention window.
Elderly-consumer review overlay
Where a campaign targets or reaches a materially elderly audience, additional review against the elevated CCPA penalty standard, with heightened substantiation and disclosure.
Retention and archive
Six-year retention on ad files, substantiation, authorizations and platform disclosure records. Retrievable in under 48 hours if the Colorado Medical Board, Attorney General, or a CCPA plaintiff serves a request.
Where Colorado rules sit in the wider compliance stack
Every Colorado-licensed practice clears an overlapping set of rules on every campaign — HIPAA, TCPA, CAN-SPAM, FTC endorsement rules, ADA accessibility, FDA off-label prohibitions, platform policies, plus the Colorado-specific C.R.S. 12-240, CCPA, and Colorado Privacy Act overlays.
Colorado Medical Board advertising — common questions
What does C.R.S. Title 12 Article 240 actually prohibit?
Article 240 is the Colorado Medical Practice Act. It defines unprofessional conduct for Colorado-licensed physicians to include false, deceptive or misleading advertising. Specific conduct — credential misrepresentation, unsubstantiated superiority, undisclosed material connections and outcome guarantees — is captured.
How does the CCPA change the risk profile in Colorado?
The Colorado Consumer Protection Act creates a private right of action with treble damages available for bad-faith conduct, plus attorneys fees. Attorney General enforcement includes civil penalties up to USD 20,000 per violation for willful conduct and USD 50,000 for elderly-consumer or disability violations. CCPA exposure sits alongside any Board finding.
Can a Colorado physician advertise as a specialist?
Only in an ABMS-recognized specialty, an AOA-BOS recognized specialty, or a certifying body meeting the Board equivalency standard. Non-recognized certifications require a clear qualifying disclosure.
How does the Colorado Medical Board enforce advertising rules?
Through complaint-driven investigations, letters of admonition, reprimands, fines, probation, suspension, revocation and cease-and-desist orders. Formal disciplinary actions proceed under DORA rules with Attorney General prosecution where appropriate.
Are there separate Colorado rules for medspa advertising?
Aesthetic advertising sits under Article 240 with CMB Policy 40-27 governing office-based procedures. Non-physician-owned medspa brands that do not identify the supervising physician on the ad or immediately linked landing page are the highest-risk pattern in the segment.
What is the Colorado Privacy Act obligation on marketing data?
The Colorado Privacy Act (C.R.S. Section 6-1-1301 et seq.) creates transparency, opt-out and data-minimization obligations for Colorado residents. Health-adjacent interest signals captured for retargeting are within scope. Non-compliance is enforced by the Colorado Attorney General.
Does dental advertising sit under the same rules?
Dental advertising sits under the Colorado Dental Board with substantively parallel prohibitions on false, deceptive and misleading advertising. Specialty designation must correspond to an ADA-recognized specialty.
How long should Colorado practices retain advertising files?
Six years, aligned to HIPAA record-keeping and the CCPA statute of limitations. Retention covers the ad file, dated substantiation, HIPAA authorizations, platform disclosure records, and any CCPA correspondence.
Is this legal advice for our Colorado practice?
No. This is marketing guidance reviewed against current Colorado Medical Board rules. Consult a healthcare-marketing attorney licensed in Colorado and confirm any specific claim with the relevant board before publication.
Continue the state-board stack
Scope a Colorado-specific marketing compliance review
Book a 30-minute call with the ICG Global leadership, email the US practice lead in Dallas, or WhatsApp us. Retainers are custom-scoped per engagement · from $499/month for entry advisory work, scaling to full agency-of-record engagements for multi-location Colorado brands and Denver-Front Range aesthetic operators.
More questions answered
What does Colorado Revised Statutes Title 12 Article 240 actually prohibit?
C.R.S. Title 12 Article 240 is the Colorado Medical Practice Act. It defines "unprofessional conduct" for Colorado-licensed physicians to include false, deceptive or misleading advertising and lists the grounds on which the Colorado Medical Board may impose discipline. Specific advertising conduct — misrepresenting credentials, unsubstantiated superiority, undisclosed material connections and outcome guarantees — is captured.
Does Colorado require a disclaimer on before-and-after photos?
Yes, in practical effect. Before-and-after imagery on Colorado medspa and cosmetic surgery advertising should carry a clear "results not typical" or "individual results vary" disclosure when the outcome is atypical, and every image must be supported by a signed HIPAA marketing authorization.
How does the Colorado Consumer Protection Act interact with a Board finding?
The Colorado Consumer Protection Act (C.R.S. Section 6-1-101 et seq.) creates parallel civil enforcement exposure for advertising that constitutes a "deceptive trade practice". Actual damages, treble damages for bad-faith conduct, attorneys fees and Attorney General remedies are available. CCPA exposure sits alongside any Colorado Medical Board finding.