Two layers of rules
A clinic website answers to the health profession's regulator, which governs what registrants may say and show, and to general law on privacy, consumer protection and accessibility. Both change with the country, and a site template designed in one place can quietly break the rules in another. This is the shape of the differences for physiotherapy, chiropractic, osteopathy and allied health. It is orientation, not legal advice; the regulator's current guidance applies.
United Kingdom
Regulators: HCPC (physiotherapists, podiatrists, dietitians, occupational therapists), General Osteopathic Council, General Chiropractic Council; professional bodies (CSP, BOA, BCA); the ASA and CAP Code for all advertising.
Titles: protected titles for registered professions; "Dr" for chiropractors and osteopaths permitted with clarity that they are not medical doctors (GCC and GOsC guidance); registration numbers displayed.
Claims: the ASA has ruled repeatedly on condition claims by chiropractors and osteopaths; claims should be within the evidence base the ASA accepts. No "cure" or guaranteed outcomes.
Testimonials: permitted if genuine, not misleading and not making unsubstantiated clinical claims.
Prices: no mandate to publish; any published price must be accurate; the CMA expects transparency.
Privacy: UK GDPR; health data special category; privacy notice, DPAs, ICO registration; PECR cookie consent.
Accessibility: Equality Act; WCAG 2.1 AA the practical standard.
United States
Regulators: state licensing boards per profession (physical therapy, chiropractic, occupational therapy, and so on); the FTC on deceptive advertising; HIPAA for covered entities.
Titles: state-specific; chiropractors use "Dr" widely; physical therapists with a DPT may use "Dr" in most states with the profession stated; "specialist" tied to board certification.
Claims: no false or misleading statements; some state boards restrict specific phrases and require disclaimers on outcome-related content.
Testimonials: generally permitted if truthful and not misleading; some states require disclaimers about typicality; FTC endorsement guides apply.
Prices: no federal mandate; accuracy and clear terms required; some states have price transparency rules for healthcare services.
Privacy: HIPAA where the clinic bills insurance electronically, with Business Associate Agreements for vendors handling PHI; state privacy laws (CCPA/CPRA and others); enforcement attention on tracking pixels on health-related pages; state breach laws.
Accessibility: ADA applied to websites through litigation; WCAG 2.1 AA the defensible standard; healthcare providers have been frequent targets.
Cookies: no federal consent requirement; state opt-out rights for sale or sharing.
Canada
Regulators: provincial colleges per profession (for example, College of Physiotherapists of Ontario, College of Chiropractors of Ontario, College of Physical Therapists of BC, Ordre professionnel de la physiothérapie du Québec).
Titles: provincial; "Dr" for chiropractors permitted with profession stated in most provinces; protected titles enforced.
Claims: colleges require verifiable, non-misleading advertising; comparative and superiority claims restricted.
Testimonials: restricted or prohibited by several colleges; Quebec strict; check the specific college.
Prices: disclosure before treatment required; publication permitted.
Privacy: PIPEDA federally; provincial health information legislation (PHIPA in Ontario, HIA in Alberta, and so on) where the clinic is a custodian; Quebec's Law 25 with consent and privacy officer requirements.
Accessibility: AODA in Ontario requires WCAG 2.0 AA for many organisations; Accessible Canada Act federally; other provinces variously.
Cookies: Quebec's Law 25 requires consent for tracking; meaningful consent under PIPEDA elsewhere.
Australia
Regulator: AHPRA and the relevant National Boards (Physiotherapy, Chiropractic, Osteopathy, Podiatry, Chinese Medicine, and so on) under the National Law; the ACCC under the Australian Consumer Law. Massage therapists are not AHPRA-registered but consumer law applies.
Titles: protected titles; "Dr" for chiropractors and osteopaths with the profession stated; specialist titles protected.
Claims: the National Law prohibits advertising that is false or misleading, offers inducements without terms, creates unreasonable expectations, or encourages indiscriminate use.
Testimonials: prohibited on channels the practitioner controls for clinical aspects of a regulated health service. This is the rule most often broken by imported templates.
Prices: informed financial consent; publication permitted; accuracy under consumer law.
Privacy: the Privacy Act and Australian Privacy Principles; health information is sensitive; privacy policy mandatory; Notifiable Data Breaches scheme.
Accessibility: Disability Discrimination Act; WCAG 2.1 AA the reference.
European Union
Regulators: national health ministries and professional chambers; the profession's regulatory status itself varies (osteopathy and chiropractic are regulated professions in some member states and not others).
Titles: national.
Claims: national health advertising rules, from restrictive to permissive; the Unfair Commercial Practices Directive everywhere.
Testimonials: national; check before publishing.
Prices: national; published prices accurate and VAT-inclusive where applicable.
Privacy: GDPR with health data as special category; national authorities; DPAs; ePrivacy cookie consent as implemented nationally.
Accessibility: the European Accessibility Act from June 2025 for many private digital services above the micro-enterprise threshold, WCAG-aligned; national transposition.
What is the same everywhere
- Do not mislead. State what you treat and how you work; do not promise results.
- Display registration and use titles as the regulator permits.
- Check the testimonial rule before publishing any.
- Keep health intake out of general forms and behind a compliant system.
- Have a privacy notice that matches what the site does.
- Build to WCAG 2.1 AA.
Where this sits
Every clinic website we build runs through a country profile at the content stage that sets title options, testimonial handling, privacy notice, cookie behaviour and regulator links for the clinic's jurisdiction. The same structure serves clinics in all five regions; the profile is what changes.