Google Ads for Medical Practices: What Compliance Changes in 2026

A medical practice can run a clean Google Ads account for a year and still get a disapproval, a restricted ad, or a privacy question from its attorney. The usual reaction is to rewrite everything after each policy headline. Most of the 2026 changes are narrower than that. This post covers what Google changed, what did not change, and how to audit your account against each rule.

The short answer: only one thing is new for 2026. Telemedicine advertisers now have a new certification option through NABP. The rules that still catch practices are older: no targeting by sensitive health conditions, and consent before health data is collected or shared. Audit your services first, then your audiences, then your tags.

If you want a second set of eyes on an account before you change anything, talk to us.

Google Ads for Medical Practices: What Changed in 2026

In November 2026, Google updated the Canada, United Kingdom, and United States country-specifics of its Healthcare and medicines policy. The update adds a telemedicine certification option: advertisers accredited by the National Association of Boards of Pharmacy's Healthcare Merchant Accreditation Program can apply for Google Ads telemedicine certification (Google Ads policy update, November 4, 2026).

That is an addition to an existing rule, not a replacement. Google's Healthcare and medicines policy lists online pharmacies and telemedicine for U.S. prescription drug services as "Allowed with limitations." Telemedicine providers there must be accredited by LegitScript's Healthcare Merchant Certification Program or, for certain U.S. country-specifics, meet other listed requirements and also be certified with Google (Google Ads Healthcare and medicines policy).

Two practical points:

• Accreditation is not approval. The NABP route lets you apply for Google's certification. It does not turn your ads on by itself.
• The rule sits under prescription drug services. A telehealth offer that does not involve prescribing may be treated differently. Read the policy section that matches each service you advertise, and do not assume one answer covers the whole practice.

Telehealth is still common in practice. The CDC's National Center for Health Statistics reported that 80.0% of U.S. office-based physicians used telemedicine in 2024, down from 86.5% in 2021. Among primary care physicians the figures were 86.2% in 2024 and 91.4% in 2021 (CDC NCHS, June 2026). If your practice offers virtual visits, the certification question probably applies to you or soon will.

What Did Not Change: Sensitive Health Targeting

Google's May 2025 update to its Personalized advertising policy says it "does not change the existing policy prohibiting targeting users based on sensitive health conditions." The same update clarified exclusions for content directed to healthcare professionals acting in their professional capacity (Google Ads policy update, May 2025).

That clarification is about ads aimed at professionals. It does not loosen anything for ads aimed at patients. For a practice, the safe reading is that nothing about patient-facing targeting got easier.

Our working rule, which is a recommendation and not Google's wording: do not build audiences or remarketing lists around visits to condition-specific pages, and do not write ads that imply you know a person's diagnosis. Target by service, location, and search intent instead. Someone searching "urgent care near me" has told you what they want. You do not need to infer their health.

Consent Rules Shape Your Tracking, Not Just Your Ads

Washington's My Health My Data Act requires consent before the collection or sharing of consumer health data. The consent request must disclose the categories of data collected or shared, the purpose, the categories of entities receiving the data, and how the consumer can withdraw consent (RCW 19.373.030).

Why this belongs in a Google Ads post: ad platforms run on tags. Conversion tags, remarketing tags, and form-tracking scripts all send data about what a visitor did on your site to a third party. Whether a specific tag counts as collecting or sharing consumer health data is a legal question for your counsel, not something we can answer for you. What we can say is that you cannot answer it without knowing what every tag on your site collects and where it goes.

Want a second opinion on your paid search setup?

How to Audit a Medical Practice Google Ads Account

Work through these in order. Each step feeds the next.

1. Sort every advertised service into a policy bucket. Routine visits, telehealth, prescription-related services, procedures, and anything with a product attached. Read the matching section of Google's Healthcare and medicines policy for each. Note which services need certification before ads can run.
2. Check certification status for telemedicine or prescription services. If you are not certified, decide whether the new NABP route or the LegitScript route fits. Do this before you spend on those campaigns, not after a disapproval.
3. Audit your audiences and remarketing lists. Remove anything built from condition-specific page visits. Keep lists tied to service categories or general site visits, and confirm with counsel.
4. Map every tag. List each tag on the site, what it collects, who receives it, and what the visitor was told. Gaps between those columns are your compliance risk.
5. Review the consent flow. Check that the notice and the request match what the tags do. Confirm there is a way to withdraw consent.
6. Match keyword, ad, and landing page. Ad copy should promise only what the page delivers. Avoid outcome promises and anything that implies you know the visitor's condition.
7. Track the conversion, not the patient. Count calls and form submissions as events. Do not pass health details typed into a form back to the ad platform.

Common Mistakes Practices Make

• Treating the whole practice as one policy category. A family medicine page and a telehealth prescribing page can fall under different rules. Review them separately.
• Building remarketing around conditions. It feels efficient, but it runs straight into the targeting prohibition.
• Adding tags without a data map. Someone installs a pixel for a campaign, and nobody remembers it a year later.
• Putting health questions on the first form. Asking for symptoms before trust exists lowers form completions and raises your data exposure. Collect the minimum to book the call or visit.
• Rewriting everything after a headline. Read the actual policy text, find the change, and fix only what it touches.

Where Ads Fit With Organic for a Practice

Paid search gets a new service in front of patients quickly. Organic search takes longer and compounds. Most practices need both, and the compliance work above mostly applies to the paid side. For the organic side, our guide to SEO for doctors covers how to earn patient visibility without ad spend. If you are comparing paid management options, see our Google Ads management services. What it costs depends on the scope of the work.

What We Have Run in Healthcare

These results are about efficiency, not compliance, and each links to the full write-up.

• Sunridge Medical Center: "Cut cost per qualified lead by 50%+ while reducing annual ad spend from up to $1M down to under $600K".
• Community Healthcare Network (CHN / CHNNYC): "22.65% conversion rate sustained across a 13-month Google Ads campaign (Oct 2022 – Nov 2023)".

When to Bring in Help

Bring in help if you advertise telehealth or prescription-related services, if you have never mapped your tags, or if an account has had repeated disapprovals. A review costs less than a suspended account in your busiest month. Our healthcare digital marketing team works on HIPAA-aware SEO and ads, and we will tell you plainly if your setup needs your attorney more than it needs us.

Next Step

This is for practice owners and administrators who run, or plan to run, Google Ads for patient acquisition. Contact Logic Inbound and tell us which services you advertise. We will review the account against the policy sections above and tell you what to fix first.