Watch (2 min): Nishu Sharma breaks down the new NMC rules — AI, patient privacy and promotion — and why ethical digital marketing is still allowed.
What exactly did the NMC announce on 6 October 2026?
India's National Medical Commission — the statutory body that regulates medical education and practice — issued a public notice through its Ethics and Medical Registration Board (EMRB) setting out how doctors and hospitals may communicate with the public. The document is widely reported as Public Notice No. R-13014/01/2024-Ethics, titled Guidelines on Ethical Advertising and Public Communication, dated 6 October 2026.
Unlike earlier, narrower rules that mostly addressed print and hoardings, these guidelines are built for the world doctors actually market in today: websites, Google listings, Instagram and YouTube, WhatsApp broadcasts, podcasts, influencer collaborations and — notably — AI-generated promotion. They apply to every Registered Medical Practitioner (RMP) on the National Medical Register or a State Medical Register, and to the hospitals and institutions they work within.
At a glance
- Issued by
- NMC — Ethics & Medical Registration Board (EMRB)
- Notice
- Public Notice No. R-13014/01/2024-Ethics (as reported)
- Date
- 6 October 2026
- Status
- Reported to be in force with immediate effect
- Applies to
- Hospitals, medical institutions & all Registered Medical Practitioners
- Covers
- Advertising, websites, social media, podcasts, influencer content & AI-generated promotion
- Read alongside
- The existing medical ethics code (IMC Professional Conduct Regulations, 2002) & the DPDP Act, 2023
One important clarification before we go further: the guidelines supplement, rather than replace, the profession's existing code of conduct. By most expert accounts the operative ethics code remains the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002, and the new guidelines are read together with it. So this is less a revolution than a long-overdue modernisation — the principles that always governed doctors are now spelled out for the digital and AI age.
Why now? The problem these guidelines are solving
For years, the gap between what medical ethics required and what medical marketing actually did kept widening. A quiet arms race took hold: one clinic buys a few hundred five-star reviews, so the clinic next door feels it has to. One hospital runs a "90% success, guaranteed results" campaign, and honest practices down the road start losing patients to a claim they would never make. Social media rewarded the loudest, not the most trustworthy. And then generative AI arrived and made the dishonest version effortless — a hundred fake patient testimonials, a synthetic "happy patient" video, a fabricated before-and-after, all in minutes.
The casualty in all of this was never really the competition. It was the patient — the person who has to decide, while frightened, which of these claims to believe. The NMC guidelines are, at heart, an attempt to protect that person: to make sure that when a patient reads a review, sees a result, or watches a doctor on Instagram, what they're seeing is real. For anyone who has argued that healthcare's core problem is not attention but trust, this is a welcome, overdue correction.
What is now restricted
The guidelines draw clear lines around the tactics that spend patient trust to buy attention. The categories below reflect the strong consensus across early expert analysis; for the precise wording and any clause references, read the official notice itself.
Restricted for promotional use
- Superlative and absolute claims — "best doctor", "No. 1 specialist", "100% success rate", "guaranteed cure", and any statement that sets unrealistic expectations or promotes unproven therapies.
- Patient testimonials & success stories used to promote a practice, including written reviews solicited as marketing.
- Before-and-after photographs presented promotionally to advertise outcomes.
- Celebrity endorsements and famous-patient associations used for promotion.
- Fake or manipulated engagement — buying or inflating reviews, ratings, followers, likes or search rankings; platforms are also expected to avoid paid ranking of doctors and keep listings transparent.
- Solicitation & self-promotion — directly or indirectly canvassing for patients, and engaging a third party to market medical services on your behalf.
- Deceptive AI-generated content — fabricated testimonials, synthetic endorsements, and manipulated images, voices, qualifications or clinical outcomes (covered in detail below).
Read that list again and a pattern jumps out: none of it is about information. Every restricted item is a way of manufacturing a feeling — of success, popularity, certainty — that the patient hasn't actually earned the right to feel. That is the real spirit of the guidelines, and it's the test you can apply to anything not explicitly listed: is this communicating something true, or manufacturing something that isn't?
How the guidelines treat AI
The guidelines target deceptive AI — not honest, human-overseen AI used for genuine education and communication.
This is the part of the guidelines that matters most for the years ahead, and the part most commonly misread. Early coverage sometimes frames it as "AI is banned for doctors." That is not what the guidelines say. What they prohibit is the deceptive use of AI — and the distinction is everything.
Specifically, the guidelines are reported to bar using AI to fabricate or manipulate patient testimonials, generate synthetic endorsements, or alter images, voices, qualifications or clinical outcomes. In other words, AI may not be used to fake trust: to invent a patient who doesn't exist, a result that didn't happen, or a credential you don't hold.
What remains perfectly acceptable is using AI honestly, with human oversight and no fabrication — to help draft a genuine patient-education article (that you verify), to translate instructions into a patient's language, to answer routine questions faster, or to lighten administrative work. The guidelines don't punish the tool; they punish the lie. This is exactly the line we have long argued doctors should hold, and it runs through our guides to using ChatGPT ethically, choosing AI tools, and how doctors actually use AI. If your AI use would survive a patient seeing exactly how it was made, you are on the right side of this rule.
What is still allowed
It's easy to read a list of restrictions and conclude you can no longer have any online presence. The opposite is true. The guidelines protect a clear lane for honest, useful communication — and arguably make it more valuable, because the noise around it is being cleared away.
Still permitted
- Genuine educational content in your own name — explaining conditions, treatments and prevention, as long as it educates rather than promotes, doesn't solicit patients, and isn't dressed-up advertising.
- Factual, verifiable information about your practice — who you are, your qualifications, what you treat, where you are, timings and fees presented plainly.
- Formal announcements — starting or relocating a practice, a change of address, joining an institution.
- Participation in health-awareness programmes and public-interest education.
- Legitimate scientific & educational use of patient information — subject to consent, anonymisation and privacy safeguards (see the DPDP Act, 2023).
- Proper disclosure — identifying yourself with your name, qualifications, registration status and registration number on public professional posts.
The disclosure requirement
One practical change deserves its own note. Reports indicate that when a doctor shares professional or educational content publicly, the post should clearly identify them — typically with name, qualifications, registration status and the NMR/SMR registration number. The logic is simple and patient-friendly: if a doctor is going to speak with professional authority online, the public should be able to verify that they are a real, registered practitioner. Build a small standard "signature block" with these details and append it to your professional posts, and you've handled this requirement with almost no effort.
What the guidelines mean, channel by channel
The principles are consistent, but the question doctors ask most is how they land on each specific platform. Here is the practical translation.
Your website. This is where most practices carry the highest risk, because old marketing copy lingers for years. Strip out superlatives ("best", "leading", "No. 1"), remove testimonial walls and before-and-after galleries used to sell outcomes, and delete any "guaranteed" or "100%" language. Keep — and even strengthen — the factual, genuinely useful material: who you are, your qualifications and registration, the conditions you treat, honest explanations, timings and fees. A clear, educational website is not just compliant; it converts better anyway.
Google Business Profile. Keep it complete, accurate and active — that's encouraged. What's out is gaming it: never buy, incentivise or solicit reviews as a campaign, never cherry-pick only happy patients for review requests, and never pay for ranking. Respond to the reviews you do receive professionally. Genuine, unsolicited patient feedback is not the target; manufactured feedback is.
Instagram, YouTube and Facebook. Educational content in your own name is welcome, carrying your disclosure block. What crosses the line is the promotional layer: "best in the city" captions, patient success-story reels used as ads, celebrity-patient tags, and any AI-generated faces, voices or testimonials. Awareness content, myth-busting and honest explainers are exactly what these platforms should carry from a doctor.
WhatsApp. Consent-based patient communication — appointment reminders, genuine follow-up, answering questions — is care, and it's fine. What's not fine is turning WhatsApp into a promotional broadcast channel or messaging people who never consented. The line is the same one that has always governed solicitation.
Influencers and third-party marketers. This is the riskiest grey zone. Engaging a third party to market your services, or paying influencers to promote you, sits squarely within what the guidelines restrict — and using an agency does not create a loophole, because responsibility still rests with the practitioner. Genuine public-health collaboration that educates, without promoting a specific practice, is a different thing; tread carefully and keep it honest.
Questions doctors are asking
"Do I have to delete all my reviews?" Honest reviews a patient chose to leave are different from purchased, incentivised or fabricated ones. The restriction targets fake or paid engagement and the promotional use of testimonials — not the existence of genuine feedback on a public platform. So: stop soliciting reviews as a marketing campaign, never buy or incentivise them, and don't repackage testimonials into advertising. When unsure, choose restraint and verify against the official notice.
"What about aesthetic, cosmetic and wellness clinics?" The before-and-after format is most common in these fields, and promotional before-and-after imagery is precisely what's restricted. The guidelines apply to Registered Medical Practitioners across specialties, so cosmetic and aesthetic practices need to be especially deliberate about reworking their marketing around education and factual information rather than transformation galleries.
"Does this apply to my hospital's marketing department?" Yes. The guidelines cover hospitals and medical institutions as well as individual practitioners, and a dedicated marketing team or external agency doesn't exempt the doctors involved. Hospital campaigns built on "90% success" claims, patient success stories or paid rankings need the same review as a solo clinic's.
"Can I still announce a new clinic or a new service?" Yes — factual announcements (a new practice, a relocation, a new department, a change of address) are permitted. The difference, as always, is informing versus hyping: "Dr. X is now consulting at [address], Mon–Sat" is information; "The city's best new super-speciality centre" is not.
What has not changed
Amid the headlines, it's worth stating plainly what stayed the same, because it prevents overreaction. Doctors can still have a website, a social presence and a Google listing. They can still educate the public, build a genuine reputation, and communicate with their own patients. The underlying ethical duties — honesty, no solicitation, patient welfare first — are the same duties the 2002 code already imposed. What changed is clarity and reach: the rules now name the digital and AI tactics explicitly, so there is far less room to claim a grey area. If your instinct was already "would my patient trust me more or less if they saw how this was made?", you have effectively been following these guidelines for years.
Penalties and enforcement
Enforcement of professional conduct sits with the State Medical Councils, working within the NMC framework. Early analysis describes a graded approach: a first or minor violation may attract a warning and a direction to take corrective steps (for example, removing the offending content), with escalating action for repeated or serious breaches. Because the exact penalty structure and procedure are the kind of detail that varies and can be misreported, treat specifics cautiously and rely on the official notice and your State Medical Council for the authoritative position. The safer mindset is not "what's the fine?" but "am I communicating honestly?" — get that right and penalties never become your problem.
How this fits with the rules you already follow
These guidelines don't exist in isolation. They sit within a framework doctors should already know:
- The medical ethics code — the IMC (Professional Conduct, Etiquette and Ethics) Regulations, 2002, which by most accounts remains the operative code and already restricted solicitation and self-advertisement. The 2026 guidelines translate those principles into specific, modern rules.
- The Digital Personal Data Protection Act, 2023 — governs how patient data (including anything identifiable in a testimonial, photo or case study) is collected, stored and used. Consent and anonymisation are not optional.
- Consumer-protection and advertising standards — misleading advertising has independent consequences beyond medical regulation.
Seen together, the message is consistent: inform, don't manipulate; protect patient data; be who you say you are. A practice built on those three commitments has very little to re-engineer.
Your practical compliance checklist
If you want to act on this today, here is a concrete audit. Work through it across your website, Google Business Profile, and every social channel.
Do this now
- Remove superlative and absolute claims — "best", "No. 1", "top", "100% success", "guaranteed" — everywhere they appear.
- Take down promotional patient testimonials, success stories and before-and-after galleries used to advertise outcomes.
- Stop all purchased or incentivised reviews and follower/engagement inflation — immediately and permanently.
- Audit any AI-generated marketing material for fabricated testimonials, synthetic faces/voices, or altered results, and remove it.
- Add a clear disclosure block (name, qualifications, registration status, NMR/SMR number) to your professional and educational posts.
- Confirm any use of patient information has documented consent and is anonymised, per the DPDP Act.
- Shift your content toward genuine patient education — the lane that is explicitly protected and still works.
- Read the official NMC notice (and check with your State Medical Council) for the exact, authoritative provisions.
The bigger picture: compliance and growth are the same direction now
Here is the part most "compliance alerts" miss. These guidelines don't just tell you what to stop — they quietly confirm what the most successful practices were already learning: the manipulative tactics were on borrowed time anyway. Search engines and AI assistants have been moving in exactly this direction, rewarding verifiable information and genuine reviews and penalising fabricated proof. The NMC has now made that same standard a professional obligation. The practices that built their growth on honesty — real education, real responsiveness, real reviews — wake up to find the rules have moved toward them, while competitors who leaned on fake proof are suddenly exposed on two fronts at once.
So the honest read is almost optimistic. If you've been doing it right, you are now ahead by regulation. If you haven't, the path forward is clear and it's the same path that was always going to win: stop manufacturing trust, and start earning it. Nothing about ethical marketing makes a practice grow slower — it just makes the growth real, and now, defensible.
Where to start
Run the checklist above this week — it's a few hours that removes real regulatory risk. Then rebuild on the lane that's protected and effective: education-first content, fast and honest patient communication, and genuine reviews. Our deeper playbooks walk you through it: what's ethical and what's not in AI marketing, attracting patients ethically, and the complete AI for Doctors in India guide. The guided version — growing a practice patient-first, fully inside the rules — is what we teach: start with the free live masterclass, walk the Patient-First Growth Framework, and if your practice already lives this standard, apply for the Ethical Practices Badge — the mark that now aligns with what the NMC itself expects.