Client reviews sit at the intersection of two sets of rules most firms never think about together: confidentiality obligations that apply to attorneys specifically, and consumer-protection rules that apply to any business soliciting or managing reviews. Getting this wrong is rarely intentional, and the most common mistake, responding to a negative review with case details meant to set the record straight, is also the one most likely to create real professional-responsibility exposure. This guide covers both sets of rules together, since most firms encounter them as a single practical problem rather than two separate compliance categories.
Can a Law Firm Ask Clients for Reviews?
Yes, and asking is standard, expected practice. What matters is how the request is made. Inviting every client to leave an honest review, whether positive or negative, is a legitimate practice. Selectively inviting only clients you expect to be happy, while quietly skipping ones you suspect might leave a critical review, is a different practice entirely, and it is the specific pattern regulators have targeted directly. The distinction is not about whether a firm hopes for positive reviews, every business does, but about whether the invitation itself is applied evenly regardless of the expected outcome, which is a much simpler standard to design a process around than it might first appear.
What Is Review Gating, and Why Is It Prohibited?
Review gating means soliciting reviews only from customers likely to leave positive feedback while filtering out or simply not asking dissatisfied ones. The FTC's own rule on consumer reviews addresses this directly: a business that invites only its most positive-feedback customers to post public reviews, while thanking less satisfied customers privately and not inviting them to post, may be engaging in an unfair or deceptive practice if the result is a review pool substantially more positive than it would otherwise be (FTC, Consumer Reviews and Testimonials Rule, Questions and Answers). Critically, the same guidance clarifies that inviting all recent clients to leave a review, even while hoping for positive feedback, is not itself a problem. The issue is the selective invitation, not the hope for a good outcome.
This distinction matters practically for how a firm should structure its review request process. A system that asks every client the same way at the same point, such as case closing, avoids the problem entirely. A system where staff use judgment to decide who gets asked is the one that creates real exposure, even when no one involved intended anything deceptive. A well-intentioned paralegal quietly deciding not to bother asking a client who seemed frustrated during the case is, in effect, engaging in the exact pattern the rule targets, even though the decision felt like ordinary tact rather than anything resembling deception.
What Confidentiality Risk Does a Client Review Create?
A client leaving a public review controls their own words, and a client is generally free to discuss their own experience. The risk sits on the firm's side of the interaction, not the client's. A firm that responds to a review, especially a negative one, with specific case details is a different matter entirely, since that information may be protected by the same confidentiality obligations that apply to everything else in the representation. This same principle underlies how we think about legal intake more broadly: information a firm receives in connection with a representation, or a prospective one, carries confidentiality weight from the very first contact, and a review response is simply a later point in that same continuum, not a separate category with its own looser rules. Treating a review response as somehow outside the ordinary confidentiality framework is the exact assumption that leads firms into trouble.
It is worth being precise about where the risk actually sits. The client's review itself is the client's own speech, and a firm generally has no ability to control what a former client chooses to say publicly about their own experience. What a firm controls, and what it is fully responsible for, is its own response.
Can You Respond to a Negative Review?
This is the single highest-risk moment in the entire review process, and it deserves direct treatment, more than any other single decision covered in this guide. Under the ABA Model Rules, a lawyer generally may not reveal information relating to the representation of a client without informed consent, and this obligation does not have an exception for correcting the public record after a negative review (ABA Model Rule 1.6). A former client posting a critical, even inaccurate, review does not waive the firm's confidentiality obligations, and responding with case specifics meant to defend the firm's handling of the matter can itself become the professional-responsibility problem, regardless of how the underlying review was handled.
A safe response acknowledges the review without confirming or denying any detail of the representation, invites the reviewer to contact the firm directly to discuss their concerns, and stops there. This can feel unsatisfying when a review contains something the firm believes is inaccurate, but the alternative, disclosing case details to correct the record publicly, trades a reputational problem for a genuine ethics exposure. Some state bars have published specific guidance on this exact scenario, and checking your own jurisdiction's rules before responding to any negative review naming case specifics is worth the extra step. A short, neutral response, held to the same wording every time, is easier for staff to apply consistently than a case-by-case judgment call made under the pressure of a fresh, frustrating review.
The instinct to correct the record publicly is understandable and almost always counterproductive twice over. It rarely persuades anyone reading the exchange, since an outside reader has no way to verify either side's account, and it creates exactly the kind of disclosure the confidentiality rule exists to prevent. A firm that trains staff, including anyone with access to the firm's review platforms, on this specific scenario in advance avoids the situation where someone reacts to a frustrating review in the moment without thinking through the consequence. Training after the fact, once a problematic response is already public, is a considerably harder position to recover from.
What Do Truthful-Advertising Rules Mean for Client Testimonials?
Beyond confidentiality, a testimonial or review used in marketing still needs to avoid implying a guaranteed outcome, consistent with the truthful-advertising standard covered elsewhere on this site. A glowing review that states or implies a specific result, framed by the firm as evidence of what a future client should expect, risks the same kind of misleading-advertising concern as any other unsubstantiated claim about outcomes, regardless of the practice area involved. Reviews are client-authored, which limits how much control a firm has over their content, but how a firm chooses to feature, quote, or respond to a review is squarely within its own control and its own responsibility.
This distinction, between a client's own words and a firm's choice to amplify them, matters most when a firm decides which reviews to feature prominently on its own website rather than simply letting them appear on a third-party platform like Google. Selecting only the reviews that describe a specific favorable outcome, and displaying them as evidence of what a prospective client should expect, moves the firm from passively hosting a client's honest opinion to actively making an implied promise about results, which is a meaningfully different and riskier position than simply linking to an unedited third-party review profile.
How Should a Firm Actually Build an Ethical Review Habit?
The practical answer is simpler than the risks above might suggest: ask everyone, the same way, every time, and never negotiate the content of a response with case-specific details. We cover the broader mechanics of building a consistent review habit, timing, cadence, and profile completeness, in our Google Business Profile checklist for law firms. This post focuses specifically on the ethical and legal boundaries that habit needs to operate inside.
A firm handling a practice area where case details are especially sensitive, family law or criminal defense, for instance, benefits from being even more conservative in how staff are trained to respond to reviews, since the risk of an inadvertent confidentiality slip is higher when the underlying subject matter is inherently more private. A single written policy, shared with everyone who has access to the firm's review platforms, describing exactly what a response can and cannot say, removes the need for anyone to make that judgment call in the moment a frustrating review actually appears, which is precisely when a rushed, poorly considered response is most likely.
(Assumptions, not statistics)
Scenario Ethical approach The risk of getting it wrong Asking clients for reviews Invite every client the same way, regardless of expected sentiment Review gating may violate FTC rules even without bad intent A negative review naming case details Acknowledge generally, invite a private conversation, disclose nothing Confirming or denying case specifics may violate confidentiality obligations Featuring a positive testimonial in marketing Use the client's own words, avoid implying a guaranteed outcome Implied outcome guarantees risk misleading-advertising exposure A negative review the firm believes is inaccurate Respond without case specifics, correct only in a private conversation Public correction with details compounds rather than resolves the problem This table illustrates general patterns worth following, not a scoring system or a measured statistic from any specific study, and does not replace independent legal judgment about your own jurisdiction's specific rules.
If you want help building a review process that is both effective and genuinely compliant, you can talk to us about your firm's review strategy. We cover how this fits into a broader plan in our complete law firm marketing plan guide. None of the guidance above is a substitute for advice from your own jurisdiction's bar counsel on a specific situation; it is a starting framework for building a process that avoids the most common, avoidable mistakes.
Frequently Asked Questions
Can a law firm ask clients to leave a Google review?
Yes. Inviting every client to leave an honest review is standard practice. The ethical and legal risk comes from selectively inviting only clients expected to leave positive feedback, a practice known as review gating, not from asking in general. The safest approach applies the exact same invitation, in the same way, to every client regardless of how the matter concluded.
Can a lawyer respond to a negative client review?
Carefully, and without confirming or denying case-specific details. Confidentiality obligations generally survive the end of representation and are not waived by a client's public review, so a response should acknowledge the review and invite a private conversation rather than disclosing anything about the underlying matter, even in an attempt to correct a claim the firm believes is inaccurate.
What is review gating, and is it illegal?
Review gating means soliciting reviews only from customers likely to leave positive feedback while filtering out dissatisfied ones. The FTC's consumer review rules treat this as a potentially unfair or deceptive practice, separate from any state bar rule that might also apply to a law firm specifically, which means a firm can face exposure on two fronts from the same underlying behavior.
Can a law firm offer an incentive for leaving a review?
This carries real risk under both FTC rules and platform policies, which generally treat incentivized reviews as a problem regardless of whether the review turns out to be positive or negative. The safer, standard practice is inviting honest feedback without any incentive attached, and letting the review process run entirely on its own without any conditional reward.
Does a client waive confidentiality by leaving a public review?
No. A client's own choice to discuss their experience publicly does not waive the firm's independent confidentiality obligations. The firm still cannot confirm or disclose case-specific details in response, even if the client's own review already described the matter in detail, since the obligation belongs to the firm and is not transferred or released by what the client chooses to say.