FTC Scrutiny of Gender Care: Compliance Guide

If you’re searching for what the US Federal Trade Commission (FTC) can actually do about gender‑affirming care—and what it means for clinics, telehealth startups, influencers, and platforms—the short answer is this: the FTC does not regulate medicine, but it does regulate marketing, endorsements, and consumer data practices. If your outreach or data flows touch minors or health information, expect tighter scrutiny of claims, disclosures, and tracking.

Here’s what to do now: inventory every claim you make about benefits and risks; align it with solid evidence and clear qualifiers; fix social media endorsements; remove ad trackers from sensitive pages; and implement youth‑appropriate privacy and consent flows. The goal isn’t silence—it’s to separate advocacy from advertising and to make your marketing and data practices defensible under long‑standing FTC standards.

What changed—and why it matters

Recent reporting points to new hiring and inquiries at the FTC that appear to focus on how gender‑affirming care for minors is marketed and discussed in commercial contexts. That shift doesn’t expand the agency’s legal authority, but it signals where resources may go. Understanding the FTC’s toolbox helps you decide what to change this quarter versus what to monitor.

What the FTC can do:

Police deceptive or unfair acts and practices in commerce (Section 5 of the FTC Act)
Enforce rules carrying civil penalties (e.g., COPPA for kids’ privacy; the Health Breach Notification Rule for non‑HIPAA health apps)
Enforce the Endorsement Guides (influencers, testimonials, reviews)
Challenge dark patterns, misleading subscription or telehealth signup flows
Seek injunctions, settlements, and, for rule violations, civil penalties; coordinate with state attorneys general

What the FTC generally cannot do:

Dictate medical standards of care or prohibit specific procedures
Regulate purely noncommercial speech (e.g., editorial content or policy advocacy with no commercial call to action)
Enforce HIPAA (that’s HHS OCR), though it can act against non‑HIPAA health apps and data brokers under its own rules

The takeaway: If you’re selling services, fundraising with service claims, running ads, using influencers, or collecting sensitive data, you’re in the FTC’s lane—regardless of your clinical stance or mission.

Who this guide is for

Brick‑and‑mortar clinics and hospital systems offering youth services
Telehealth platforms, online pharmacies, and mail‑order labs
Nonprofits and advocacy groups that also market services or run paid campaigns
Influencers, clinicians, and researchers who receive compensation or free services and speak about care
Ad networks, analytics vendors, and social platforms carrying health‑related campaigns
EHRs, health apps, and data intermediaries handling gender‑related health data

Quick checklist: 12 fixes to lower enforcement risk this quarter

Claims inventory and substantiation

Map every benefit/safety/effectiveness statement across your site, social, ads, landing pages, webinars, and brochures.
Substantiate with competent and reliable scientific evidence appropriate to the claim. Avoid overbroad, absolute, or guaranteed outcomes.

Risk disclosure discipline

Present material risks, limits, and eligibility criteria clearly and proximate to claims—not in buried footnotes.

Youth‑appropriate messaging

Remove superlatives like “proven,” “risk‑free,” or “guaranteed.” Use qualified, accurate language. Avoid implying universal outcomes for minors.

Endorsements and testimonials

Disclose any material connection (payment, referral fees, free services). Ensure testimonials reflect typical results or clearly disclose what is typical.

Influencer controls

Provide scripts/briefs with compliant language and required hashtags/labels (#ad, “Paid partnership with…”). Monitor and correct noncompliant posts.

Separate advocacy from advertising

Keep policy statements and educational content clearly noncommercial. Don’t mix “book now” CTAs or pricing with issue advocacy pieces.

Youth privacy and parental involvement

For under‑13 audiences, comply with COPPA if you operate child‑directed sites/apps. For teens, implement age‑appropriate notices, choices, and heightened care with tracking.

Eliminate sensitive tracking

Remove third‑party pixels (e.g., advertising, social) and session replay tools from pages related to health conditions, appointment scheduling, portals, or intake.

Data minimization and sharing controls

Stop sending sensitive data to adtech partners. Update contracts to ban use of health or precise location data for ads; respect Global Privacy Control signals where required.

Incident response readiness

If you’re a non‑HIPAA health app or PHR vendor, confirm Health Breach Notification Rule (HBNR) triggers and timelines. Document your decision trees.

Telehealth and sign‑up flows

Show credentialing/licensure and state availability accurately. Avoid dark patterns; clearly disclose auto‑renewals and refund terms.

Governance

Assign an owner for marketing‑legal reviews. Train staff and influencers quarterly; audit creatives before launch.

How the FTC builds a case

Deception and Unfairness (Section 5)

Deception: A representation, omission, or practice is deceptive if it’s likely to mislead a reasonable consumer and is material. In health, the bar for substantiation is higher.
Unfairness: A practice that causes substantial injury not reasonably avoidable and not outweighed by benefits. For minors and health contexts, the FTC often views harm as more likely.

Practical implications:

Avoid absolute claims (“proven safe,” “reversible with no lasting effects,” “life‑saving for all youth”).
Match the breadth of your claim to the strength of evidence and the target audience.
Present risks, alternatives, and eligibility prominently.

Endorsements and Testimonials

Influencer speech tied to compensation is commercial. Disclosures must be clear, conspicuous, and in the same language and format as the content.
Testimonials cannot imply typical outcomes unless that’s true; otherwise disclose what most people can expect and the factors that affect results.

Children’s Online Privacy (COPPA)

Applies to sites/apps directed to kids under 13 or that knowingly collect personal information from them.
Requires verifiable parental consent, limited data collection, and strict sharing limitations.

Even if COPPA does not apply (e.g., you target teens), the FTC can still challenge unfair tracking or manipulative designs in youth contexts.

Health data and tracking technologies

Health Breach Notification Rule (HBNR): Applies to many non‑HIPAA health apps and PHR‑related services. Sharing health info with analytics or ad platforms without consent may trigger breach duties.
Recent cases (e.g., involving sharing health data with ad platforms) show that pixels on appointment or condition pages can be treated as unauthorized disclosures.

Dark patterns and subscriptions

Auto‑renewals, trial‑to‑paid transitions, and paywalls around consultations must present key terms clearly and obtain express informed consent.

High‑risk statements—and safer alternatives

The examples below don’t opine on clinical standards; they illustrate compliance framing. Tailor to your evidence and jurisdiction.

High risk: “Puberty blockers are 100% safe and reversible.”
Safer: “Puberty‑suppressing medications can be appropriate for some youth after individualized evaluation. They have potential benefits and risks; decisions are made case‑by‑case with clinicians and guardians as required.”
High risk: “Our program prevents suicide.”
Safer: “Our program aims to improve well‑being. Outcomes vary. We offer evidence‑informed care and crisis resources; we cannot guarantee specific results.”
High risk: “No serious side effects.”
Safer: “Potential side effects include [categories]. Your clinician will discuss risks, benefits, and alternatives.”
High risk: “Clinically proven to be the best for teens.”
Safer: “Some studies suggest benefits for certain patients. Evidence is evolving. We follow current professional guidelines and update practices as research advances.”

Channel‑by‑channel playbook

Clinic and telehealth websites

Claims: Keep a single, approved claims library. Use consistent language across pages.
Disclosures: Put risk and eligibility info near the claims, not only in FAQs.
Tracking: Remove pixels from appointment, portal, intake, and condition pages. Consider first‑party analytics only.
Accessibility: Use clear language; avoid pressure tactics; provide contact for questions.

Search ads and landing pages

Alignment: Ad copy must match the landing page claim and disclosure depth.
Targeting: Avoid targeting segments labeled as sensitive health interests. Use contextual targeting instead.
Geofencing: Do not geofence around healthcare facilities in states where prohibited; avoid sensitive‑site targeting.

Social media and influencers

Disclosures: “Ad,” “Paid partnership,” or “I receive referral fees from X”—early in captions and visible on screen in videos.
Scripts: Provide do‑not‑say lists (no guarantees; no absolute safety claims).
Monitoring: Require pre‑approval for sponsored posts; document corrections.

Email, SMS, and portals

Consent: Obtain express consent for SMS; honor opt‑outs.
Content: Avoid sensitive details in subject lines or previews; use secure portals for health specifics.

Events, webinars, and fundraising

Separation: Keep educational events free of sales CTAs. If you are soliciting patients or donors with service claims, those statements must be substantiated and balanced.

Data privacy moves you should make now

Turn off ad pixels on sensitive pages and in portals; use consent‑based analytics with strict configuration.
Update privacy notices to explain what you collect, why, and with whom you share it—plainly and in youth‑appropriate language when relevant.
Contract controls: Ban secondary use of any health‑related or precise location data by vendors; audit SDKs in your app.
State laws: Washington’s My Health My Data Act and Nevada’s health data law impose strict consent and geofencing limits around consumer health data (including gender‑related care) and can apply beyond HIPAA. Map where your users reside and comply with the most protective regime that applies.
Respect Global Privacy Control (GPC) and local privacy rights where required; minimize retention.

Telehealth and cross‑state realities

Licensure and availability: Display state coverage accurately; don’t imply universal availability for minors.
Intake and parental involvement: Build flows that reflect state consent rules for minors without nudging around guardianship requirements.
Pricing and renewals: Show full costs, subscription terms, and cancellation paths clearly before signup.
Shipping and labs: Avoid claims that imply guaranteed access where restrictions exist; state processing times and constraints plainly.

If the FTC knocks: how to respond

Don’t panic, don’t delete: Preserve documents and data; implement a litigation hold immediately.
Centralize communication: Route all inquiries through counsel; limit internal chatter.
Audit fast: Pull the content, claims, traffic, and data flows referenced. Snapshot creatives and configurations at issue dates.
Remediate in parallel: You can correct disclosures, pause ads, and pull pixels while you respond—document changes and timing.
Consider settlement posture: Many FTC matters resolve via consent orders that set forward‑looking requirements. Know your priorities.

Pros and cons of public engagement now

Pros: Education and policy advocacy can support patients, providers, and families; noncommercial speech is generally outside FTC scope.
Cons: Mixing advocacy with direct calls to purchase services or donate tied to service claims can bring you back under FTC rules.
Practical tip: Keep advocacy pages free of pricing, appointment CTAs, and lead‑gen trackers; host paid promotions separately with full compliance.

Key takeaways

The FTC’s focus is on commerce: advertising claims, endorsements, and data handling—not medical standards.
Youth contexts heighten risk. Use cautious, accurate, and qualified language with clear risk disclosures.
Clean up data flows on sensitive pages; many enforcement actions center on pixels and sharing with ad platforms.
Align influencers and testimonials with the Endorsement Guides; monitor, correct, and document.
Separate policy speech from marketing, and keep your compliance muscle memory fresh through quarterly audits.

FAQ

Q: Can the FTC ban or mandate specific medical treatments?
A: No. It regulates marketing and data practices. Medical standards are set elsewhere.

Q: Could individual clinicians or influencers be investigated?
A: Yes, if they engage in commercial speech (paid endorsements, lead generation, or advertising) that is deceptive or unfair.

Q: Is scientific debate or policy advocacy at risk?
A: Generally no, if it’s noncommercial speech. Adding sales CTAs, pricing, or referral links can convert it into advertising.

Q: What level of evidence do I need for benefit claims?
A: Claims must be supported by competent and reliable scientific evidence appropriate to the claim’s specificity and prominence. Avoid over‑promising.

Q: We’re a hospital. Doesn’t HIPAA cover us?
A: HIPAA governs PHI for covered entities, but pixels or sharing with ad platforms can still create risk under the FTC Act and state consumer health data laws. Don’t rely on HIPAA alone.

Q: Do we need parental consent online?
A: Under COPPA, yes for kids under 13 on child‑directed sites/apps. For teens, COPPA may not apply, but the FTC still expects heightened privacy and fair design.

Q: Are third‑party reviews my problem?
A: If you solicit, incentivize, filter, or republish them, the Endorsement Guides likely apply. Don’t suppress negatives; disclose incentives.

Q: Can we use geofencing to reach likely patients?
A: Avoid geofencing around healthcare facilities and sensitive locations; some state laws prohibit it, and it can be viewed as unfair.

Disclaimer: This explainer is for general information and is not legal advice. Consult qualified counsel for your specific situation.

Source & original reading: https://www.wired.com/story/the-federal-agency-coming-for-gender-affirming-care/

FTC Scrutiny of Gender‑Affirming Care: A Practical Compliance Guide for Clinics, Telehealth, and Advocates