Google Reviews for Lawyers: The Bar Rules You'll Break

Every review guide written for law firms is really a review guide written for dentists, with the word 'patients' swapped for 'clients.' That swap is where firms get hurt.

A dentist who replies to a one-star review with 'we're sorry your crown didn't fit, you missed two follow-ups' has been tactless. A lawyer who replies to a one-star review with 'we're sorry, but you missed two hearings' has just confirmed that a named stranger on the internet was their client, in a matter with hearings, and may have handed the disciplinary board a completed case.

Reviews are still worth chasing. In Whitespark's 2026 Local Search Ranking Factors survey — 47 local-search experts scoring 187 factors — high numerical Google ratings and the quantity of native Google reviews with text both landed in the top nine local pack signals, and BrightLocal's 2026 Local Consumer Review Survey of 1,002 US consumers found 47% of people won't use a business with fewer than 20 reviews. You need them. You just can't get them or answer them the way every reputation-management vendor will tell you to.

This post is the compliance layer only — not a generic 'get more reviews' checklist. It is also not legal advice. ABA Formal Opinion 496 says it plainly in its own footnote: the rules, opinions, and case law of your individual jurisdiction are what control. Read your state's rule; the Model Rules are only a template.

Can lawyers ask clients for Google reviews at all?

Yes. Asking is permitted under both the bar rules and Google's policy — Google's Business Profile content policy explicitly allows merchants to 'solicit or encourage the posting of content that does represent a genuine experience, without offering incentives to do so or attempting to influence the rating or the contents of the review.' The permission is narrow, and every word in it is a limit.

You may ask. You may not pay, discount, gift, script, coach, or pressure. The moment you tell a client what to mention — the settlement figure, the practice area, the associate's name — you are 'attempting to influence the contents of the review,' and you have stepped outside the only permission Google gives you.

There is a second trap almost nobody flags: the ask itself can be a confidentiality problem. Model Rule 1.6(a) protects 'information relating to the representation of a client' — not just secrets, not just privileged material. When you export a CSV of client names, emails, and matter types into a third-party review platform, you have disclosed information relating to representations to a vendor. A spreadsheet row reading 'jane@example.com — DUI — closed' is exactly that.

So before you buy the tool, decide three things: whether your engagement letter covers vendor disclosure, whether the platform gets matter data or only a name and an email, and whether the client consented. A dental practice never has to ask that question. You do.

What can you legally say when replying to a bad review?

Almost nothing — and that is the answer, not a hedge. ABA Formal Opinion 496 (January 13, 2021) leaves a lawyer exactly three permissible moves: ask the platform to remove the post, invite the person to take the conversation private, or say that professional obligations prevent a response.

The opinion even supplies the wording. Its own example of a permissible public reply is: 'Please contact me by telephone so that we can discuss your concerns.' That is the whole reply. It confirms nothing, denies nothing, and admits nothing.

The Committee goes further than most firms realize. It advises that lawyers 'should give serious consideration to not responding to negative online reviews in all situations,' because a reply invites more posts from an already-unhappy critic, and because activity on a post tends to push it higher in search results. Silence often buries the review faster than a rebuttal does.

Here is what the temptation looks like in practice, and what each version actually costs you.

Write the two permitted sentences once, get them approved once, and have them ready. The violation almost never happens because a lawyer didn't know the rule. It happens because a partner read the review on a phone at 11pm and typed a reply from the parking lot.

Why does responding to a review risk a confidentiality violation?

Because the self-defense exception you are counting on does not open. Model Rule 1.6(b)(5) permits disclosure 'to establish a claim or defense on behalf of the lawyer in a controversy between the lawyer and the client' — and Formal Opinion 496 concluded that a negative online review, alone, 'because of its informal nature, is not a controversy between the lawyer and the client' within the meaning of that rule.

Read that twice. The exception most lawyers assume protects them is the exception the ABA says does not apply. And the opinion adds a second lock: even if a review did rise to the level of a controversy, a public online response 'would exceed any disclosure permitted under the Rule.' Self-defense might let you answer the accuser. It does not let you answer them on Google.

Three more details in that opinion do most of the damage in real cases:

• Public record is still confidential. A conviction, a docket, a filed complaint — none of it stops being 'information relating to the representation' just because a stranger could look it up.
• A general denial can be a disclosure. Opinion 496: 'Even a general disclaimer that the events are not accurately portrayed may reveal that the lawyer was involved in the events mentioned, which could disclose confidential client information.'
• Rule 1.6 reaches indirect leaks. It covers disclosures that do not themselves reveal protected information but 'could reasonably lead to the discovery of such information by a third person.'

This is not theoretical. The discipline cases collected in Formal Opinion 496 include an Illinois lawyer publicly reprimanded for disclosing more than necessary while answering a client's negative Avvo reviews; a Colorado lawyer suspended six months for responding to former clients' reviews by revealing their criminal charges, a bounced check, and unrelated felonies; another Colorado lawyer suspended eighteen months for posting confidential and sensitive information in response to multiple clients' online criticism; and an Indiana lawyer disbarred for what he himself described as 'actively manipulat[ing] my Avvo reviews by monetarily incentivizing positive reviews, and punishing clients who wrote negative reviews by publicly exposing confidential information about them.'

That last one is the whole post in a sentence: he bought the good reviews and doxxed the bad ones, and both halves of the strategy were violations.

One under-discussed corollary: positive reviews carry the same risk. Replying 'Thank you for trusting us with your custody case, Sarah' to a five-star review confirms that Sarah was a client and names her matter type. Rule 1.6 does not have a good-mood exception. Thank people without describing anything.

Do client reviews and testimonials need a results disclaimer?

On your own website, yes — if the review mentions a result. The disclaimer analysis follows the review off Google and onto your site the moment you republish it, because at that point you are the one making a communication about your services, and Rule 7.1 attaches to it.

Model Rule 7.1 is short: a lawyer 'shall not make a false or misleading communication about the lawyer or the lawyer's services.' The teeth are in Comment 3 to the rule, which says a communication that truthfully reports a lawyer's achievements 'may be misleading if presented so as to lead a reasonable person to form an unjustified expectation that the same results could be obtained for other clients in similar matters without reference to the specific factual and legal circumstances of each client's case' — and that an appropriate disclaimer 'may preclude a finding' that the statement creates those unjustified expectations.

A Google review reading 'he got me $1.2M' is the client's speech on Google's platform. Pull it into the testimonial slider on your homepage and it becomes your advertising. Same words, different rulebook.

Florida spells out what that rulebook demands. Under Florida Bar Rule 4-7.13, as published in the Bar's 2025 Handbook on Lawyer Advertising and Solicitation, a testimonial is prohibited if it concerns matters the person is unqualified to evaluate, is not their actual experience, does not represent what the firm's clients generally experience, was written or drafted by the lawyer, was given in exchange for something of value, or 'does not include the disclaimer that the prospective client may not obtain the same or similar results.' The same rule bars references to past results unless the information is objectively verifiable.

And the sting in the tail, from the rule's own commentary: a lawyer who wants to advertise past results must have the affected client's informed consent — and 'the fact that some or all of the information a lawyer may wish to advertise is in the public record does not obviate the need for the client's informed consent.' Embedding a review that names a verdict may require you to go back and ask.

Practical version, and it is boring on purpose: display reviews that praise responsiveness, communication, and professionalism — the things Florida's commentary explicitly says clients are well-qualified to judge. Leave the dollar figures on Google, where the client said them, rather than adopting them as your own marketing copy. If you do republish a results review, put a plain, visible disclaimer next to it, not in six-point grey type in the footer.

Is review gating or incentivizing reviews against Google's policy?

Both are banned outright, in the same policy, in consecutive lines. Google's Business Profile content policy states that merchants may not 'offer incentives – such as payment, discounts, free goods and/or services - in exchange for posting any review or revision or removal of a negative review,' and may not 'discourage or prohibit negative reviews, or selectively solicit positive reviews from customers.'

That second clause is review gating, and it is the default feature of a large share of reputation-management software. You know the flow: an automated text asks 'how did we do, 1 to 5?' Four and five stars get routed to your Google review link. One through three get routed to a private 'tell us more' form that goes nowhere. That is selective solicitation of positive reviews. It is a policy violation, and the vendor selling it to you knows.

Google's policy also bans two things firms do without thinking: pressuring people to review 'while on the premises' (the tablet at reception), and setting staff review quotas — the policy specifically names 'merchants requesting that staff solicit a certain number of reviews.'

Then federal law stacks on top. The FTC's final Rule on the Use of Consumer Reviews and Testimonials, announced August 14, 2024, prohibits 'providing compensation or other incentives conditioned on the writing of consumer reviews expressing a particular sentiment, either positive or negative,' and bars a business from misrepresenting that the reviews shown on its site 'represent all or most of the reviews submitted when reviews have been suppressed based upon their ratings or negative sentiment.' The FTC's own framing of why the rule exists: it lets the agency 'seek civil penalties against knowing violators.'

The FTC rule also reaches insider reviews — reviews from officers, managers, employees, or their immediate relatives, without disclosure of the connection. If a name partner asks his brother-in-law to post five stars, that is not a clever growth hack. It is three violations wearing a trench coat.

Verdict: the last row is the entire compliant playbook. Everything above it trades a short-term rating bump for removed reviews, civil penalties, or a disciplinary file. And the reviews get removed anyway — you lose the asset and keep the liability. If a vendor's demo includes a gating toggle, that is your answer about the vendor. We cover how to evaluate them in our breakdown of review management software for service businesses.

How do you handle a review from someone who was never a client?

You may say so — that specific reply is expressly permitted. Formal Opinion 496 states that if the poster is not a client or former client, 'the lawyer may respond simply by stating that the person posting is not a client or former client, as the lawyer owes no ethical duties to the person posting in that circumstance.' You may also tell Google that the post came from someone pretending to be a client.

But there is a category of non-client where that reply is a trap. If the reviewer is an opposing party, opposing counsel, or a former client's friend or family member, and the review relates to a real representation, you still may not disclose anything relating to that client's matter — and, per the opinion, even a general denial 'may reveal that the lawyer was involved in the events mentioned.' A one-star review from the husband in a custody case you handled is not a free shot. Saying 'this person was never my client' is technically true and functionally confirms you were on the other side of his divorce.

For those, do not litigate in the reply box. Report the review instead. Google's policy gives you real grounds: content based on a conflict of interest (which the policy defines to include professional or personal affiliations, and names industry competitors), off-topic content ('only post content that is based on your experience or questions about experiences at a specific location'), impersonation, and misrepresentation.

What will not work: asking Google to remove a review because it names the attorney. Google's personal-information policy specifically allows naming 'doctors, lawyers, realtors, financial planners, contractors and others professionals doing business under their names.' Being named is not a violation.

Removal requests are slow and often fail, which is the argument for volume: a single bad review from an opposing party is a rounding error on a profile with sixty real ones and is catastrophic on a profile with four. Steady, compliant review flow is the only durable defense — the same logic that drives everything in our guide to winning the law firm map pack.

What does a compliant review program look like month to month?

It is keyed to matter close, not to a monthly quota — and it is sized for velocity, because BrightLocal's 2026 Local Consumer Review Survey found 74% of consumers only care about reviews written in the last three months. A firm with 80 lifetime reviews and none since spring looks worse than a firm with 25 that are all recent. Manage the flow, not the trophy count.

The program that survives all four rulebooks is unglamorous:

• Trigger on matter close. The ask goes out when the file closes or the final invoice clears — one request, one reminder, then stop. Never a staff quota; Google bans those by name.
• One approved sentence, no coaching. 'If you were happy with how we handled things, a Google review helps other people find us.' Do not suggest what to mention. Do not mention the outcome. Do not send it from a tablet at the front desk.
• Kill the gate. Open your review tool's settings and find the sentiment filter or star threshold. Turn it off. If it cannot be turned off, the tool is a liability — replace it.
• Treat the send list as confidential. Names and emails only. No matter type, no outcome, no case notes in the vendor's system unless your engagement letter and your client's consent actually cover it.
• Two pre-approved replies, used every time. One thank-you that describes nothing, and one version of 'please contact me by telephone so that we can discuss your concerns.' No partner writes a bespoke reply at 11pm.
• Escalate, don't argue. Negative review → screenshot, removal request, private outreach if the person is a former client. Never a public rebuttal.
• Measure reviews per closed matter. Track the rate, not the trophy count — total reviews tell you nothing about whether the process is still running this month, and recency is what consumers actually check.

Be honest about the ceiling, too. Reviews are a strong signal, not the strongest one. In Whitespark's 2026 survey the highest-scoring local pack factors were primary GBP category, proximity of the business address to the searcher, and keywords in the business title — reviews came after all of those. A firm with 200 reviews and the wrong primary category will still lose to a firm with 30 and the right one. Fix the profile first; the review program compounds on top of it, and our Google Business Profile optimization guide covers that order of operations.

And do the boring math before you spend anything. Reviews only pay if the calls they generate get answered and converted. If your intake lets a Tuesday-afternoon call go to voicemail, review velocity is the wrong project.

Where does this leave your firm?

Reviews stay on the roadmap. The reply box comes off it. Ask everyone at matter close, with no incentive and no script, and let the reviews say whatever they say. When a bad one lands, use the two sentences the ABA already wrote for you, and route the fight to a removal request instead of a public argument. That is less satisfying than defending yourself, and it is the version that keeps your license.

If you want an outside read on whether your profile, your review flow, and your intake are actually working together — or whether your current vendor is quietly gating — that is what our law firm SEO work starts with. No lock-in, no ranking guarantees, and you own everything we build. Get my free audit.