LinkedIn ads and posts for healthcare companies: ad policies, lead forms, employee posts and case studies

For a company that sells to medical practices, hospitals or employers, LinkedIn is where the buyers are: practice administrators, clinic owners, revenue cycle managers, benefits leaders. Billing companies, health IT vendors, staffing agencies, labs and device makers run ads there, ask employees to share posts, and publish customer stories. Each of those moves runs into a different rulebook: LinkedIn’s own advertising and community policies, the FTC’s endorsement and review rules, and, once a patient’s story enters the picture, HIPAA.

This guide is for marketing leads and founders at health companies that market to other businesses. It covers what LinkedIn restricts in healthcare ads, why health data cannot be used for targeting, what a Lead Gen Form must disclose, how to handle employee and sponsored posts, and where customer case studies go wrong. Related topics are in our guides to staff posting on Reddit, forums and Wikipedia, writing a social media policy, trade show marketing to physicians, EHR vendor marketing claims and Open Payments and marketing. For X, see our guide to X (formerly Twitter) for medical practices. For what LinkedIn Lead Gen Forms may ask, see our guide to lead form ads in healthcare. Case study pages themselves, including disclosures and patient data, are covered in our guide to case studies and client success stories. Staffing firms recruiting on social platforms should read healthcare staffing agency marketing.

The short version

• LinkedIn reviews each ad before it runs. Its policies require factual support for claims and bar unrealistic or misleading health claims.
• Ads for prescription drugs, over-the-counter drugs, pharmacy and telehealth services, medical devices, clinical trial recruitment, and vitamins and supplements must target healthcare-related professionals, not consumers, and must not target members under 18. Prescription drug, over-the-counter drug, and pharmacy and telehealth ads also need prior authorization from LinkedIn.
• LinkedIn does not allow targeting based on data concerning health, including medical information and consumer health data.
• Each Lead Gen Form needs a privacy policy URL. Say what you will do with the information and add consent checkboxes for each extra use.
• When employees, customers or paid clinicians post about your product, the connection has to be disclosed clearly (16 CFR 255.5). The company can be liable for its endorsers’ posts (16 CFR 255.1(d)).
• Officers and managers must not post undisclosed reviews of their own company (16 CFR 465.5).
• A customer case study that tells a patient’s story needs that patient’s written authorization (45 CFR 164.508) or properly de-identified information (164.514). A vendor that is a business associate can use patient information only as its agreement allows (164.502(a)(3)).

What LinkedIn restricts in healthcare ads

LinkedIn says ads will not run until they pass its review. The Advertising Policies list prohibited content and restricted content. Two prohibited categories matter to health companies. Under Fraud and Deception, the product must match the ad, claims must have factual support, you may not imply an affiliation or endorsement you do not have, pertinent partnerships must be disclosed, and any advertised price or offer must be easy to find from the ad’s link. Under Health Matters, ads promoting unrealistic or misleading claims about health improvements are prohibited, and LinkedIn reserves the right to restrict advertising on any health matter.

The restricted list covers prescription drugs, over-the-counter drugs, pharmacy and telehealth services, and medical devices and treatments. LinkedIn’s Help page on the healthcare ads policy sets the details:

• Prescription drug ads need prior authorization, may target only the United States or Canada, and must be aimed at healthcare-related professionals, not consumers or a general audience.
• Over-the-counter drug ads need prior authorization, may target only a listed set of countries, and must also be aimed at healthcare-related professionals.
• Pharmacy and telehealth service ads need prior authorization, must come from advertisers certified by LegitScript or accredited by NABP, may target only the United States, and must be aimed at healthcare-related professionals.
• Medical device ads, clinical trial recruitment ads (United States only) and vitamin and dietary supplement ads must be aimed at healthcare-related professionals and may not target consumers.
• None of these may target members under 18, and none may promote opioids, anabolic steroids or other substances on LinkedIn’s prohibited list.
• LinkedIn says it also accepts unbranded healthcare and disease awareness ads, and asks advertisers to contact a LinkedIn representative about them.

LinkedIn defines healthcare-related professionals broadly, as anyone associated with the healthcare industry or the provision of health-related services, advocacy, research or policy. The ad must also be relevant to their work. A device maker can reach surgeons and supply chain managers. A telehealth company cannot use LinkedIn to find patients.

Its separate guidelines for health and weight loss ads bar idealized results, before-and-after images of weight loss or beauty results, and ads that idealize or criticize a person’s weight, complexion or other physical traits. LinkedIn’s platform approval does not replace federal rules: prescription drug and device promotion is regulated on its own terms, which our medical device marketing claims guide and online pharmacy advertising guide cover.

No targeting on health data

The Safety and Privacy section of the Advertising Policies says ads must not target based on sensitive data, and names data concerning health, including medical information and consumer health data, along with genetic and biometric data. The same section makes advertisers responsible for complying with privacy and data protection laws, requires HTTPS on any linked site that collects sensitive information, and requires the display URL’s domain to match the landing page’s domain.

For a business-to-business campaign, targeting by job title, industry, company size or seniority is the normal route, and none of it needs health data. The risk comes from contact lists. If your company is a business associate of medical practices, the patient lists it holds for clients are protected health information, and 45 CFR 164.502(a)(3) limits a business associate to the uses its business associate agreement allows. Uploading those lists to any ad platform is a use the agreement would have to permit, and marketing to the patients themselves would need their authorization under 164.508(a)(3). Keep sales prospect lists and client patient data in separate systems.

Lead Gen Forms: the privacy fields

LinkedIn’s Lead Gen Forms fill in a member’s profile details when they tap the ad, which makes them convenient for webinar sign-ups, demo requests and white paper downloads. LinkedIn’s Help pages set the privacy requirements: What goes inside the white paper itself is covered in our guide to healthcare white paper claims.

• A privacy policy URL is required for the form to be approved, and LinkedIn says that page should be dedicated to your privacy policy.
• Optional privacy text, up to 2,000 characters, appears below the form questions. LinkedIn suggests stating what you will do with the information the member submits.
• You can add up to five disclosure checkboxes, up to 500 characters each, to collect consent for each separate use, such as newsletters or sales follow-up, and mark any of them as required.
• A form can carry up to 12 profile fields, and up to three custom questions that count toward that limit.

No federal rule sets the wording of a business-to-business lead form, but the FTC Act bars deceptive practices (15 USC 45), so the form should match what you actually do with the lead. We recommend that the privacy text name the uses plainly, that each use beyond the requested download or demo get its own checkbox, and that the linked privacy policy cover lead data and who receives it, including resellers or partners.

Keep health information out of the form. A custom question asking a clinician to describe a patient case, or asking a consumer about a condition, collects data LinkedIn’s own policies treat as sensitive, and LinkedIn is not your business associate. We recommend questions about role, organization type, practice size and timeline, nothing about individual patients.

Employee posts and Thought Leader Ads

Health companies ask employees to share product news, and LinkedIn lets advertisers pay to promote an employee’s post through Thought Leader Ads. Two sets of rules apply at once.

The FTC’s Endorsement Guides say that when a connection between the endorser and the seller might materially affect how much weight the audience gives the endorsement, and the audience would not expect it, the connection must be disclosed clearly and conspicuously (16 CFR 255.5(a)). Example 8 in that section describes an employee promoting the employer’s product in an online community without saying so, and says the employee should disclose the relationship. The same example says the employer should train employees and, where it directed the posts or has reason to know about them, monitor them. Section 255.1(d) adds that an advertiser can be liable for misleading endorsements, or for undisclosed material connections, even when the endorser is not, and lists what advertisers should do: give endorsers guidance, monitor their compliance, and act on problems.

LinkedIn’s rules point the same way. Its Professional Community Policies say members should not share content or endorse something in exchange for personal benefit, including payment or free products, without a clear and conspicuous notice of that benefit. Its Help page for members says that before a post can be found for sponsorship as a Thought Leader Ad, the author must have disclosed the relationship with the company, for example by listing the role in their headline or using a hashtag such as #[Company]Employee or #SponsoredPost in a visible part of the post. The advertiser must request the member’s permission to sponsor the post, and the member can approve or decline.

A job title in the profile headline may not reach a reader who sees a promoted post out of context. We recommend that employee posts about the employer’s product say so in the post itself, in words such as “I work at [Company]”, and that paid or sponsored posts say they are sponsored.

Customers, clinicians and paid voices

A practice administrator who praises your billing service in a post, a physician who speaks in your sponsored video, a consultant paid to write about your product: each is an endorser under 16 CFR 255. If you paid them, gave them free or discounted service, offered a referral credit, or have a business relationship the audience would not expect, the connection must be disclosed (255.5(a)). Endorsements must reflect the endorser’s honest views and may not make a claim that would be deceptive if you made it yourself (255.1(a)).

When the endorser is a physician who can order or refer for your product, payment adds two more questions. The federal anti-kickback statute makes it a crime to pay anyone to induce referrals or orders of items or services paid for by federal health care programs (42 USC 1320a-7b(b)). And if your company is an applicable manufacturer of drugs, devices, biologicals or medical supplies, payments and other transfers of value to physicians are reported each year under Open Payments (42 USC 1320a-7h(a)), where anyone can look them up. Our guides to Open Payments and marketing and gifts and meals for referring physicians go into both.

Reviews from inside the company

LinkedIn posts are not consumer reviews in the sense of the FTC’s review rule, but product pages, app stores and software review sites are, and a LinkedIn campaign can point readers to them. Under 16 CFR 465.5(a), an officer or manager of a business may not write a consumer review of the business or its products without clearly disclosing their relationship. Officers include owners and executives (465.1). Section 465.5(b) bars a business from disseminating a testimonial by its own officers, managers, employees or agents without disclosing the relationship when it is not otherwise clear. Section 465.5(c) reaches officers and managers who solicit reviews from employees or relatives and then fail to tell them to disclose, or encourage them not to.

We recommend a written rule that no employee, executive, investor or family member reviews the company’s own products, and that any customer review request goes to customers through a general invitation, with no reward tied to a positive rating.

Customer case studies and patient stories

Case studies sell well on LinkedIn, and they are where a health company can slip into patient information. A billing company’s before-and-after numbers, a device maker’s procedure story, a software vendor’s screenshot of a real chart: each may carry protected health information that belongs to the client practice’s patients.

• A business associate may use or disclose protected health information only as its business associate agreement allows (45 CFR 164.502(a)(3)). If the agreement does not permit use for the vendor’s own marketing, that use is not allowed.
• A patient’s name, photo, face, voice, condition or treatment used to promote a product is marketing under 45 CFR 164.501, and it needs the patient’s written authorization under 164.508(a)(3), with the required elements in 164.508(c).
• Information that meets the de-identification standard in 164.514(a) and (b) is not protected health information (164.502(d)(2)). Aggregate results across a client’s patients, with identifiers removed under that standard, can support a case study without an authorization.
• Screenshots of software in use should show test data, not a live record. Blurring a name does not remove dates, record numbers or other identifiers that 164.514(b) lists.
• The client practice’s own consent to be named is a separate matter from its patients’ authorization. Get the practice’s approval in writing, and check what your contract with it says about using its name.

Results claims in a case study are your claims. Under the FTC Act and the Endorsement Guides, the numbers need support, and a quote from a happy client does not substantiate a result you could not prove yourself (16 CFR 255.1(a)). LinkedIn’s Advertising Policies require the same factual support for any ad that promotes the case study.

Health information in posts and comments

LinkedIn’s Professional Community Policies say not to share content that directly contradicts guidance from leading global health organizations and public health authorities, including false information about the safety or efficacy of vaccines or medical treatments. Company posts that comment on clinical topics should cite the guidance they rely on.

Comments bring their own risk. A clinician may reply to your post with details of a patient case, or a patient may comment on a provider’s post. No federal rule addresses vendor comment moderation as such. We recommend that your community manager hide or remove comments that identify patients, never reply with patient details, and move any support question that involves a patient to a private channel your company controls.

Questions to ask before a LinkedIn campaign

• Does the product fall in a LinkedIn healthcare category that needs prior authorization, and do we have it?
• Is the audience healthcare-related professionals, and is the ad relevant to their work?
• Does any targeting, list upload or retargeting rely on health data or client patient lists?
• Does the Lead Gen Form link to a privacy policy, name each use of the lead, and offer a checkbox for each extra use?
• Does each employee, customer or paid voice in the campaign disclose the connection in the post itself?
• Do we pay or give anything of value to any physician in the campaign, and has counsel reviewed it for anti-kickback and Open Payments?
• Does any case study, screenshot or quote contain patient information, and if so, do we have written authorization or properly de-identified data?
• Can we document each number and result the campaign claims?

Use and avoid

• Use: targeting by job title, industry, organization type and size.
• Avoid: targeting or list uploads based on health conditions or client patient data.
• Use: “I work at [Company], and here is what our team launched this month.”
• Avoid: an employee post that reads like an independent customer’s opinion.
• Use: aggregate, de-identified results with the method stated.
• Avoid: a patient’s story, photo or chart without written authorization.
• Use: a Lead Gen Form with plain privacy text and a checkbox for newsletters or sales follow-up.
• Avoid: custom questions that ask about patients or conditions.
• Use: “Sponsored” or “Paid partnership” on posts by clinicians you compensate.
• Avoid: reviews by executives, staff or their relatives on software review sites.

An illustration

This example is invented. [Company name] sells billing software to independent practices and plans a LinkedIn campaign for a new feature. The first draft has a promoted post by the sales director, with no mention of their role in the text, a case study video in which a client’s office manager walks through a real patient account on screen, and a Lead Gen Form that asks “What is your biggest denial problem? Describe a recent case.”

The revised campaign looks different. The sales director’s post opens with “At [Company name] we just shipped…”, and the company sends them a one-page posting guide. The case study video uses a test account, the office manager’s practice signs a written release to be named, and the results shown are totals across the practice’s claims for a quarter, with the method stated on screen. The Lead Gen Form asks for role, practice size and billing system, links to a privacy policy that covers lead data, and has one checkbox for the newsletter and one for a sales call. Targeting uses job titles and medical practice industries, with no list uploads.

Checklist

• Read the LinkedIn Advertising Policies and the healthcare ads Help page before building the campaign, and note the dates.
• Confirm whether the product needs LinkedIn’s prior authorization, and get it before launch.
• Target healthcare-related professionals by role and industry; exclude members under 18 where a healthcare category applies.
• Use no health data and no client patient lists in targeting or uploads.
• Link each Lead Gen Form to a dedicated privacy policy page; write privacy text; add a checkbox for each extra use.
• Give employees a written posting guide that requires disclosure in the post itself, and monitor promoted posts (16 CFR 255.1(d)).
• Disclose payment, free service or other connections for each customer or clinician who endorses the product (255.5).
• Keep executives, staff and relatives off review sites for your own product (465.5).
• Use only authorized or de-identified patient information in case studies (164.508, 164.514).
• Have counsel review any payment to a physician who can refer or order (42 USC 1320a-7b(b)) and its Open Payments reporting.
• Keep documentation for each result the campaign claims.

How we help

We build websites, local and organic search, Google Ads and lead generation and an AI front desk for independent practices, and the same work applies to companies that sell to them. For a health company running LinkedIn campaigns, that means landing pages and privacy pages that match what the ads and lead forms say, case study pages built on results you can document, and lead tracking that records which organizations responded without holding patient information. Our tools are built with HIPAA in mind. We confirm in writing what a BAA covers before any patient information flows through a tool, and if it is not covered, we do not route patient information through it. We are not a healthcare provider and we do not give legal or medical advice. For the wider rules, see our healthcare marketing rules guide.

Sources

• LinkedIn Advertising Policies (last revised November 18, 2025)
• LinkedIn Help: Healthcare ads policy
• LinkedIn Help: Guidelines for health and weight loss ads
• LinkedIn Professional Community Policies
• LinkedIn Help: Lead Gen Forms privacy policy
• LinkedIn Help: Lead Gen Form specifications
• LinkedIn Help: Create Thought Leader Ads in Campaign Manager
• LinkedIn Help: Manage requests to sponsor your profile posts as thought leader ads
• 16 CFR 255.1: Endorsements, general considerations
• 16 CFR 255.5: Disclosure of material connections
• 16 CFR 465.1: Consumer reviews rule, definitions
• 16 CFR 465.5: Insider consumer reviews and consumer testimonials
• 15 USC 45: Unfair or deceptive acts or practices
• 45 CFR 164.501: Definitions (marketing)
• 45 CFR 164.502: Uses and disclosures of protected health information, general rules
• 45 CFR 164.508: Uses and disclosures for which an authorization is required
• 45 CFR 164.514: De-identification of protected health information
• 42 USC 1320a-7b: Criminal penalties for acts involving federal health care programs (anti-kickback)
• 42 USC 1320a-7h: Transparency reports (Open Payments)

More in Health companies, vendors and employers