Skip to main content
The Blog

Clinic website rules, in plain English.

What changed, what it costs you, and what to do this week. No recycled advice, no padding.

Featured Compliance • 14 min read

TGA Fined a Company $59,400 in March 2026, Not for Advertising

In March 2026 the TGA issued three infringement notices totalling $59,400 to Canngea Pty Ltd, a Queensland medicinal cannabis wholesaler, over an alleged failure to answer a request for information about its supply of therapeutic vaping goods. The case has nothing to do with advertising copy, and that gap between what most clinics prepare for and what the TGA actually fined is the reason it belongs in your compliance file.

Vikas Thakur
TGA Fined a Company $59,400 in March 2026, Not for Advertising
Google Reviews and AHPRA: A Reply Can Cost You $120K

Marketing • 8 min

Google Reviews and AHPRA: A Reply Can Cost You $120K

A five-star Google review is not an AHPRA problem on its own. Liking, sharing, or replying to one with outcome language can turn it into a breach worth up to $120,000 for a clinic, under AHPRA's own testimonial guidance.

Vikas Thakur
6 GA4 Events Every Clinic Site Needs (2 Create Risk)

Privacy • 12 min

6 GA4 Events Every Clinic Site Needs (2 Create Risk)

Google Analytics 4 fires some events automatically and needs others built by hand, and one of the six a clinic booking funnel depends on can echo a treatment name straight into a tracking parameter. Here is which six to set up, and which two need a second look before they ship.

Vikas Thakur
AHPRA's 7 Risk-Disclosure Rules for Cosmetic Ads Explained

Marketing • 8 min

AHPRA's 7 Risk-Disclosure Rules for Cosmetic Ads Explained

AHPRA's guidelines for advertising higher risk non-surgical cosmetic procedures set seven specific rules for how a clinic must present risk, effective since September 2, 2025. Breaching them is a National Law advertising offence carrying a penalty of up to $120,000 per breach.

Vikas Thakur
GA4 on a Clinic Website: The Six Settings That Reduce Exposure

Privacy • 13 min

GA4 on a Clinic Website: The Six Settings That Reduce Exposure

Google Analytics 4 does not log or store IP addresses by default, but Enhanced Measurement still sends the full page URL on every event, and a URL like /book/dermal-fillers carries the same kind of health inference the OAIC targeted in its June 2026 tracking-pixel determinations. Six settings, checked in the right order, change how much of that leaves your property.

Vikas Thakur
48 AHPRA Rules Apply to Every Cosmetic Clinic Facebook Ad in 2026

Marketing • 9 min

48 AHPRA Rules Apply to Every Cosmetic Clinic Facebook Ad in 2026

AHPRA's Guidelines for advertising higher risk non-surgical cosmetic procedures set out 48 numbered rules across 9 categories, effective 2 September 2025, and every one applies to a Facebook or Instagram ad. Thirteen of those 48 rules name social media, hashtags, or algorithm boosting directly.

Vikas Thakur
225 Health Breaches in 2025: The Website Causes

Privacy • 10 min

225 Health Breaches in 2025: The Website Causes

Health service providers reported 225 data breach notifications in 2025, more than any other sector, according to the OAIC. Here is where a clinic or dental practice website creates that exposure and what to fix in the build.

Vikas Thakur