Short answer: before-and-after images are permitted in Australian healthcare advertising only when they are genuinely comparable, unedited, properly consented, matched to the audience and accompanied by qualifying information. Most breaches are not deliberate — they come from photographs taken casually in a treatment room, posted to a platform that applies enhancement automatically, without a consent record anyone can produce.
Why this is the highest-risk asset in aesthetic marketing
Before-and-after imagery is persuasive precisely because it implies an outcome, and implying an outcome is what the advertising framework restricts. An image pair that flatters through lighting, angle or make-up is misleading even if nobody intended it to be, and it can create an unreasonable expectation of beneficial treatment — one of the specific prohibitions under the National Law.
The risk is also asymmetric. The commercial upside of one more image on a page is small; the downside of a complaint that lands on the treating practitioner is not. That asymmetry is the reason serious clinics run a documented protocol rather than a habit.
Photography conditions: comparability is everything
- Same lighting. Fixed position, same source, no window light that changes with the weather.
- Same angle and distance. Mark the floor and the camera position so every session repeats.
- Same framing and background. A plain, consistent backdrop, identical crop.
- Same pose and expression. Neutral in both, since a smile alone can change a facial result.
- Same presentation. No make-up in one and not the other, hair styled the same way, jewellery removed in both.
- No editing. No filters, no retouching, no smoothing, no colour grading, no cropping that changes the comparison.
- Consistent timing. A documented interval after treatment, applied the same way for every patient shown.
Take the photographs with a fixed setup rather than a phone held at whatever height the practitioner happened to be standing. It costs very little and it is the difference between images you can defend and images you cannot.
Consent that would survive scrutiny
Consent must be specific, informed, documented and revocable. A tick box in an intake form is not enough. The record should identify the images, state exactly where they may be used — website, social media, printed material, advertising — and for how long, and set out how the patient can withdraw consent and what happens when they do.
Take consent separately from the clinical consent to treatment, and do not take it while a patient is sedated, immediately post-procedure, or in circumstances where declining feels awkward. Keep a register so any published image can be traced to its consent record within minutes.
Withdrawal has to be operationally real. That means knowing every place an image was published, including social posts, ad creative and third-party directories, and being able to remove it from all of them.
Audience matching and qualifying information
Images should reflect patients whose characteristics are comparable to the audience seeing them. Showing a single unrepresentative result to a broad audience implies a typicality that does not exist.
Qualifying information belongs with the images, not buried in a footer. At minimum: that results vary between individuals, that the treatment carries risks, that recovery periods differ, and that a consultation and assessment are required to determine suitability. Where the images relate to surgery, the referral requirement and cooling-off period should also be visible — the wider framework is in the 2023 cosmetic surgery advertising rules.
Do not pair images with a patient quote. That converts a permitted image into a prohibited testimonial about a regulated health service.
Social media, filters and the platform problem
Platforms apply enhancement, compression and cropping automatically, and reels and stories are built around effects. That makes social a hostile environment for compliant before-and-after content, and it is where most breaches we review originated.
If images are used on social at all, disable beautification, upload at native resolution, avoid formats that crop differently across placements, and keep the qualifying information in the image caption where it cannot be separated. Do not allow a scheduling tool or an ad platform to auto-generate variations.
The same rules apply to third parties acting for you. A creator posting your images, a supplier resharing them, or a directory profile carrying them is still your advertising. Med spa-specific detail is in med spa advertising rules.
A pre-publication checklist
- Are lighting, angle, distance, framing, pose and presentation identical?
- Has anything been edited, filtered, retouched or cropped inconsistently?
- Is there a signed, specific, current consent record, and can you find it?
- Is the interval between images documented and consistent with your protocol?
- Is the patient's presentation representative of the audience seeing the images?
- Is qualifying information present, visible and adjacent to the images?
- Is there any accompanying quote, caption or comment that functions as a testimonial?
- Does any surrounding copy promise a result, a duration or a guarantee?
- Is a prescription medicine named anywhere near the images?
- Who approved this, and on what date?
Run the surrounding copy through the free AHPRA advertising compliance checker as the final step, and record the approval alongside the consent.
What to do if you cannot meet the conditions
Publish nothing. Clinics assume before-and-after galleries are essential, but the alternatives perform well and carry no exposure: explaining the procedure and its stages in detail, showing the clinic and the equipment, publishing practitioner credentials and registration, describing the assessment process, and being candid about risks, recovery and what a poor candidate looks like.
Patients in aesthetic and surgical categories are more anxious about safety than they are hungry for transformation imagery, and the practices that speak plainly about risk tend to attract the better enquiries. That is the positioning we build on our cosmetic surgery marketing page, alongside the paid detail in Google Ads for cosmetic surgeons, the technical foundations on medical SEO, and the standing review process on AHPRA-compliant marketing.
Building the protocol into clinic operations
A compliant imagery programme is an operational routine, not a marketing preference. Set up a fixed photography station — a marked camera position, a consistent light source, a plain backdrop and a documented camera setting — and use it for every patient, including the ones you never intend to publish. Consistency only exists if it is the default.
Assign ownership. One person maintains the consent register, one person approves publication, and both are named. Store images and consent records together, so retrieving a consent takes seconds rather than a search through email. Set a review date on every published pair, and remove images whose consent has lapsed or been withdrawn.
Train the clinical team, because the photographs are taken by them rather than by a marketing person. Five minutes covering the station, the pose, the make-up rule and the timing interval prevents almost every comparability problem we see. Add the protocol to induction so it survives staff turnover.
Finally, audit twice a year. Walk the website, the social feed, the ad accounts and any directory profiles, and check each image against the checklist above. Old galleries are where breaches live, and nobody discovers them by accident.
