Attorney Solicitation Rules and Ad Targeting Limits

Most attorney-advertising guides stop at copy. Do not promise results, do not call yourself a specialist, put the disclaimer on the page. That is Rule 7.1 and Rule 7.2 territory — what you say.

Rule 7.3 is the one that should scare you, because it governs who you aim the message at and how you reach them. That is not a copywriting problem. It is an ad-targeting problem, and every ad platform on earth is built to help you do the exact thing the rule was written to stop.

This post maps the targeting mechanics — geofencing, Customer Match uploads, retargeting, lookalikes, SMS follow-up, cold DMs — against the actual line the rules draw. We build and run these campaigns for personal injury firms, so we care about the line in operational terms. We are not your ethics counsel, your state rule is the one that binds you, and a bar staff opinion costs a lot less than a grievance.

What counts as solicitation versus advertising for a lawyer?

Under ABA Model Rule 7.3, solicitation is 'a communication initiated by or on behalf of a lawyer or law firm that is directed to a specific person the lawyer knows or reasonably should know needs legal services in a particular matter and that offers to provide, or reasonably can be understood as offering to provide, legal services for that matter.' Everything else you run is advertising.

Three phrases in that sentence do all the work, and each one has a targeting consequence:

• 'On behalf of' — your agency, your lead vendor, and your call center are all inside the rule. Outsourcing the send does not outsource the exposure.
• 'Directed to a specific person' — a billboard is not directed at a person. A list of named individuals uploaded as an ad audience arguably is.
• 'Knows or reasonably should know needs legal services in a particular matter' — this is the trigger. The more precisely your targeting proves you knew, the more it looks like solicitation.

Then Model Rule 7.3(b) draws the hard prohibition: a lawyer 'shall not solicit professional employment by live person-to-person contact' when a significant motive is pecuniary gain — unless the contact is with a lawyer, a person with a family, close personal, or prior business or professional relationship, or a person who 'routinely uses for business purposes the type of legal services offered.'

The official comment defines the banned channel narrowly: live person-to-person contact 'means in-person, face-to-face, live telephone and other real-time visual or auditory person-to-person communications where the person is subject to a direct personal encounter without time for reflection. Such person-to-person contact does not include chat rooms, text messages or other written communications that recipients may easily disregard.'

Read that twice. Under the Model Rule, a text message is not the banned channel. Under Florida's and California's rules, texting a targeted prospect drags in a pile of extra obligations anyway. This is why 'the ABA says it's fine' is worth nothing in a grievance file.

Why is targeted lawyer solicitation restricted at all?

Because the Supreme Court split the difference twice, and the split lands exactly on the advertising-versus-targeting line. Lawyer advertising is protected commercial speech — the Court restated in Shapero that 'Lawyer advertising is in the category of constitutionally protected commercial speech,' citing Bates v. State Bar of Arizona (1977). What states may still regulate is the manner of direct contact.

In Shapero v. Kentucky Bar Association (1988), the Court held that a state 'may not, consistent with the First and Fourteenth Amendments, categorically prohibit lawyers from soliciting business for pecuniary gain by sending truthful and nondeceptive letters to potential clients known to face particular legal problems.' A targeted letter to homeowners in foreclosure is protected. Why? Because a letter 'can readily be put in a drawer to be considered later, ignored, or discarded' — no coercive presence of a trained advocate, no pressure for an immediate yes-or-no.

Then in Florida Bar v. Went For It (1995), the Court upheld Florida's 30-day ban on targeted direct-mail solicitation of accident victims. The Bar's evidence included a 1987 random sampling in which 45% of people who had received lawyer direct mail believed it is 'designed to take advantage of gullible or unstable people,' 34% found it 'annoying or irritating,' and 26% called it 'an invasion of your privacy.'

So the operating rule you actually have to plan around: advertising to the public is protected; real-time contact with a specific person you know needs a lawyer is not; and targeted contact in between is protected but heavily regulable on timing, labeling, and disclosure. Your media plan lives in that middle zone.

Is geofencing a hospital or jail with ads solicitation?

A geofence is a display buy, not a communication directed to a specific person — but the tighter the fence, the harder it gets to argue you did not know who was inside it. A polygon around an emergency room at 2 a.m. or a county jail's visitation lot is functionally a list of people you know need legal services in a particular matter, delivered on a screen they are holding in a hospital bed.

Nothing in Model Rule 7.3 names geofencing. That is the problem — the rule was written for envelopes and doorsteps, so bar counsel reason by analogy, and the analogy they reach for is the one that fits the facts you handed them. Some states have taken direct swings at it. Others rely on Rule 7.3(c)(2), which bars solicitation involving 'coercion, duress or harassment,' and on the comment's warning that live person-to-person contact 'of individuals who may be especially vulnerable to coercion or duress is ordinarily not appropriate.'

Our practical rule for paid media on legal accounts: a geofence should be sized to a market, not to a moment of trauma. City, DMA, a five-mile radius around your office, the courthouse district — those are advertising. A 100-meter polygon on the trauma bay is a compliance conversation you have to have with your ethics counsel before you launch, not after a screenshot of your ad lands in a grievance.

• Geofence a city, county, or DMA — ordinary advertising, no different from a billboard.
• Geofence a courthouse or your own office block — defensible; the audience is not defined by a fresh injury.
• Geofence an ER, urgent care, trauma center, jail intake, or a crash site — this is where the 'you knew' argument writes itself.
• Geofence a competitor's law office — a different fight (Rule 7.1/7.2 and platform policy), but it draws attention you do not want.

Can you upload an accident or arrest list as an ad audience?

This is the single riskiest thing in modern legal paid media, because a Customer Match or Advantage+ audience built from accident reports or arrest records is a list of named, identified individuals you know need legal services in a particular matter — which is the exact definition of solicitation in Rule 7.3(a), just delivered by an ad server instead of the USPS.

Florida makes this concrete rather than theoretical. Per The Florida Bar's 2025 Handbook on Lawyer Advertising and Solicitation, if an unsolicited direct mail, email, text message, or targeted social media communication 'concerns an action for personal injury or wrongful death or otherwise relates to an accident or disaster involving the intended recipient or a relative of that person, the lawyer must wait at least 30 days' after the event. The channel changed. The clock did not.

And the Florida Board of Governors has already ruled on paid social targeting specifically: a social media post is 'a form of targeted electronic solicitation' that must comply with Rule 4-7.18(b) when the lawyer pays 'to have a specific social media post appear in the social media feed of specific individuals who self-identified through their social media as containing specified characteristics' of a prospective class. If you were waiting for a regulator to say the quiet part about audience targeting, they said it.

Florida stacks three more obligations on a targeted communication that most agencies have never heard of: the word 'Advertisement' must be the first word of an email subject line, text message, or targeted social post; the communication must state how the lawyer obtained the information about the prospective client's legal matter; and unsolicited direct mail, email, text, and targeted social ads 'must be filed for review at least 20 days before their planned use.' Try putting a 20-day pre-clearance and a source-of-information disclosure inside a Meta ad.

That is the honest answer: in a state with Florida-style rules, a crash-list Customer Match audience is not a clever targeting hack. It is a filing you did not make.

Is retargeting people who visited your practice-area page allowed?

Retargeting is the safest targeted mechanic you have, because the prospect initiated the contact — they came to your site — and the ad that follows them is a pixel-based impression, not a communication 'initiated by or on behalf of' you and directed to a person you identified. That is the opposite fact pattern from an uploaded accident list.

The distinction that matters is who moved first. Someone who read your DUI page and left is an anonymous site visitor in an audience bucket. Someone whose name you pulled off an arrest blotter is a specific person you sought out. Rule 7.3 hangs on that difference, and so should your media plan.

Two things still bite. First, creative on a retargeting ad is still governed by Rule 7.1 — no result promises, no implied guarantees, and the required disclaimers apply the same as on a billboard. Second, hyper-narrow retargeting can leak: a single-user audience segment, or ad copy written as if you know the person's specific case ('Still dealing with that rear-end collision on I-95?'), rebuilds the 'you knew' problem out of pixels. Keep retargeting creative at practice-area level, never at incident level.

Lookalikes seeded from a client list are ordinary advertising — the seed is your own book of business, and the delivered audience is strangers who resemble it. Lookalikes seeded from a purchased crash-lead list inherit the problem of the seed. Ask where the seed came from before you ask what the CPA is.

Where does the TCPA apply on top of the bar rules?

The TCPA is a separate gate, and clearing the bar rules does not clear it. Per the FCC's own consumer guidance, FCC rules 'ban text messages sent to a mobile phone using an autodialer unless the phone owner previously gave consent to receive the message,' and 'commercial texts require written consent.' The FCC also requires 'oral or written consent before making an autodialed or prerecorded call or text to your wireless number.'

Read that against how legal lead-gen actually works. You buy a shared lead. Your intake CRM fires an automated SMS within 60 seconds. Nobody at your firm ever collected consent — the vendor did, on a page you have never seen, for a disclosure that may or may not have named you. The bar rules may be silent on that text. Federal telemarketing law is not.

Two more federal-side constraints most firms trip over: the FCC states telemarketing calls to a home 'are prohibited before 8 a.m. and after 9 p.m.,' and a consumer 'may opt out of any robocall or robotext at any time and in any reasonable manner, even if you previously gave consent.' Your intake sequence needs a real suppression list, not a marketing-automation tag.

Bar Rule 7.3(c)(1) says the same thing from the other direction: a lawyer shall not solicit if 'the target of the solicitation has made known to the lawyer a desire not to be solicited.' One suppression list, honored across every channel and every vendor, satisfies both gates. Build it before you buy a single lead — we cover the intake side in lead generation for personal injury law firms.

Which targeting tactics are safe, and which get you a grievance?

Here is the verdict table. 'Usually fine' means the tactic looks like advertising to the public in most states; 'exposure' means a bar counsel can build a Rule 7.3 theory out of it without straining. Your state's rule controls, and Florida and California are meaningfully stricter than the Model Rule.

The honest verdict: intent-based channels win on compliance and on economics. Search, local, and content targeting put the prospect's hand up first, which is why they sit on the safe side of Rule 7.3 and why they convert better than interruption. That is the whole argument for building organic visibility for a personal injury practice instead of renting a crash list — and it is the same argument for criminal defense firms, where the arrest-record list is the tempting, dangerous shortcut.

How do you keep an agency from creating your compliance problem?

You cannot delegate the exposure — Rule 7.3(a) reaches communications 'initiated by or on behalf of a lawyer or law firm,' and Florida's handbook is blunter still: 'A lawyer is responsible for making sure that advertisements for qualifying providers comply with lawyer advertising rules if the lawyer participates with the qualifying provider.' The grievance has your bar number on it, not your agency's.

So make the vendor answer these before the contract, and get the answers in writing:

• Where does every seed list and audience upload come from, by name and source?
• Which state's advertising rules are you building to, and who reviewed the creative?
• Who holds the TCPA consent record for every phone number in the CRM, and can you produce it?
• Is there one suppression list, honored across ads, email, SMS, and every lead vendor?
• Does the firm own the ad account, the pixel, the audiences, and the content? (If not, walk.)

Any agency that answers 'we handle compliance' without naming a rule number is telling you they have not read one. That is also the tell for the 12-month contract — lock-in exists so nobody has to answer questions like these in month three. We run month-to-month for that reason, and we cover how to vet the rest of the pitch in how to choose a law firm SEO company.

What should a compliant legal ad program actually look like?

Roughly 80% of budget into intent channels where the prospect moves first, and 20% into brand-level advertising that is aimed at a market rather than a matter. That is not a compliance compromise — it is what the unit economics say anyway, because a person searching 'DUI lawyer near me' at 7 a.m. is worth more than an impression served to someone who has not decided they need you.

The build order we would use: fix the practice-area pages and the map pack presence first, because that is where the hand-raisers are. Layer branded and non-branded search ads. Add retargeting at practice-area level. Keep display and paid social aimed at a geography, not at a list. Never let a purchased list touch an ad platform or an SMS queue without a documented consent trail and a state-specific review.

And write down which state's rule each campaign was built to. When a bar inquiry lands eighteen months later, the firm that can produce the targeting spec, the consent records, and the review date closes it in a week. The firm that cannot spends the year explaining an ad account it never owned.

If you want a second set of eyes on what your current agency is actually targeting — the audience uploads, the geofences, the lead-vendor consent trail — that is exactly what our teardown of a legal account covers. Start with SEO for personal injury law firms, or Get my free audit and we will show you the risky targeting before your bar does.