Hospital Advertising Compliance Checklist 2026: NMC, AI and Data

What this checklist is—and is not

It helps administrators, RMPs, clinical reviewers and agency staff identify the right questions before publishing or correcting a healthcare communication. It does not make a campaign lawful by checking boxes. A regulation may prohibit a communication regardless of whether the hospital stores impressive paperwork.

Step 1 — Identify the publisher and responsibility

Record whether the publication is by an individual RMP, a hospital, an agency, an influencer or another platform. Write down the account owner, approver and commercial sponsor. Apply the relevant professional and establishment framework, rather than treating every category alike. S1

Step 2 — Classify the material

Is it genuine health education, a specified formal practice announcement, objective institutional information, clinical research, paid promotion or patient acquisition? The same video can change character when boosted with a booking CTA or republished through a paid influencer.

Step 3 — Check the express red flags

Review fear-based demand; doctor superiority; guarantees; product endorsements; patient-success stories and before/after images; synthetic patients; unverified rankings; scarcity discounts; patient-procurement fees; and fake reviews. The point is not to use a simplistic 'banned words' scanner, but to identify the claim and the real transaction. S1

Step 4 — Verify institutional facts and medical accuracy

Who certifies that the department, equipment, hours, accreditation or charge is current? Who reviewed clinical statements and risks? Retain the relevant sources, location scope and review dates. Facts should be verified for the facility actually advertised.

Step 5 — Review patient information and consent

Identify whether the content exposes identifiable patient records, photographs, diagnoses or outcomes. Confirm the intended use, consent where applicable, patient dignity and whether the proposed use is substantively allowed. Clause 6.2 is particularly important: consent alone cannot permit a prohibited testimonial. S1

Step 6 — Review AI and influencer arrangements

Document generation or editing tools; clinical fact-checking; whether simulated content could be mistaken for a real patient or outcome; material commercial arrangements; qualifications for technical health advice; and public disclosures. Review NMC, consumer guidance and ASCI separately. S6 S7

Step 7 — Check the complete acquisition funnel

Inspect the post, caption, hashtag, targeting, landing page, lead form, WhatsApp follow-up, CRM transfer, analytics event and agency invoice. Record which personal data leaves the hospital environment. A campaign cannot be declared compliant by examining only the square image.

Step 8 — Approve, archive and monitor

Designate a clinical claim reviewer, ethics/legal reviewer where needed, privacy/IT owner and publication owner. Store version numbers and sign-offs; set expiry dates for time-dependent facility facts; monitor complaints and corrections. An internal approval is an operational control, not regulatory immunity.

Illustrative 30-day implementation plan

Days 1–7: Inventory published assets, prioritise current ads and preserve the relevant evidence.

Days 8–14: Triage testimonial, AI, outcome guarantee, paid referral and patient-data risks; document the legal question for each.

Days 15–21: Rewrite content into verified institutional information or legitimate education where permissible; correct factual inaccuracies; review vendor access.

Days 22–30: Train publishing teams, adopt an approval register, inspect existing agency contracts and schedule periodic review of changing law.

Useful publication standard

The final reader should be able to answer: What is this hospital actually offering? How do I verify it? What qualifications or facilities are accurately described? Are outcomes presented with their limitations? Is the communication trying to manufacture unnecessary demand? Those questions are more meaningful than a marketing badge proclaiming '100% compliant'.