The instinct that gets healthcare companies in trouble is treating the press release as the place to make their boldest claim. It is the opposite. A press release is a public, permanent, widely distributed document, which makes it the single worst place to overstate what your product or service does. Regulators read press releases. Competitors read them and file complaints. The Federal Trade Commission has built cases on language pulled directly from announcements, because a press release is, legally, advertising, and health advertising carries a substantiation burden most companies do not appreciate until they are answering for it. A healthcare press release is not a marketing document with medical content. It is a regulated communication that happens to also be marketing.
This sounds like a reason to avoid press releases entirely, but that is the wrong lesson. Healthcare companies need visibility as much as any other, and the press release remains a workhorse for announcing approvals, funding, partnerships, and milestones. The point is to write it inside a discipline that keeps the legal exposure contained while still landing the story. That discipline starts before you write a word.
Build a claims firewall before you draft
Before drafting, separate everything you want to say into two columns: claims you can substantiate with evidence on hand, and claims you cannot. This separation is the Claims Firewall, and it is the most important step in writing a healthcare press release, because it forces the legal question to the front instead of leaving it for a panicked review the hour before distribution. A claim you can substantiate has a study, a regulatory clearance, a data set, or a documented result behind it. A claim you cannot substantiate is a hope, and hopes do not belong in a regulated document.
Once the firewall is built, the release writes itself from the substantiated column, and the unsubstantiated column becomes your list of things to soften, cut, or rephrase as something other than a claim. “Reduces recovery time by 40 percent” stays only if a study says so and you can cite it. Without that study, the line either disappears or becomes a description of mechanism rather than outcome. The firewall feels restrictive to founders who believe their product, but belief is not substantiation, and a healthcare press release built on belief is a liability waiting for a regulator to notice. Building the firewall first turns compliance from a last-minute obstacle into a structural feature of the draft.
What the FTC and FDA actually scrutinize
The two agencies care about different things, and confusing their domains is a common error. The FTC polices whether advertising claims are truthful and substantiated, which means it focuses on outcome and efficacy claims: does the product do what you say, and can you prove it. Its standard for health claims is competent and reliable scientific evidence, a high bar that vague testimonials and mechanism hand-waving do not clear. If your release implies a health benefit, the FTC’s question is simply where the proof is.
The FDA’s jurisdiction is narrower and more specific: it governs how drugs, biologics, and medical devices may be described and marketed, including the precise language permitted for an approved product. A device cleared for one use cannot be promoted for another in a press release, and an approved drug must stay within its approved indications. For supplements and wellness products, the line is sharp: you may describe general structure and function, but the moment you claim to treat, cure, or prevent a disease, you have made a drug claim the product is not approved for. Knowing which agency governs your specific claim tells you which standard your healthcare press release has to meet.
Write for the journalist, not the regulator’s worst case
Here is the balance that makes healthcare PR hard: a release written purely to satisfy regulators reads like a legal disclaimer, and no journalist covers a legal disclaimer. The skill is writing copy that is fully compliant yet still tells a story a reporter wants to run. This is possible, but it requires writing for the journalist’s actual interest rather than retreating into the safest possible language out of fear.
Journalists covering health want the significance of the news, the human stakes, and the credible evidence, in that order. You can give them all three without making an unsubstantiated claim, by leading with what is genuinely new and verifiable. An FDA clearance is news because the clearance itself is the verified fact; you do not need to inflate it. A funding round, a peer-reviewed publication, a partnership with a named institution, all of these are inherently newsworthy and inherently substantiated, because the event is the proof. The strongest healthcare press release leans on facts that are newsworthy precisely because they are documented, which is why the compliant version and the compelling version are usually the same document when written well.
Substantiate every number on the page
Numbers are the most dangerous and most powerful element of a healthcare press release. A specific statistic makes a story credible and quotable, which is why you want them, but an unsupported number is the fastest route to a substantiation problem, which is why each one needs a source attached. The rule is absolute: every number in the release must trace to a documented source you could produce if asked. If you cannot produce the source, the number does not go in, no matter how good it sounds.
This applies to the soft numbers too, the ones that feel like marketing rather than claims. “Trusted by thousands of clinicians” is a quantitative claim that someone could ask you to prove. “Industry-leading accuracy” implies a comparison you would need data to support. Regulators and competitors both read these phrases as claims, not flourishes. The safe practice is to attach a source to every figure or cut the figure, and to treat comparative and superlative language as claims requiring the same substantiation as a hard statistic. A healthcare press release with five well-sourced numbers is far stronger than one with twenty unsupported ones, because the sourced numbers survive scrutiny and the unsupported ones invite it.
Why the quote is where claims sneak back in
The body of a healthcare press release usually gets careful scrutiny, and then the executive quote slips an unsubstantiated claim back in through the side door. Quotes feel like opinion, so writers relax the standard, but a regulator does not distinguish between a claim made in your prose and the same claim made inside quotation marks attributed to your CEO. “We believe this is the most effective treatment available” is a claim, whether or not a person said it, and attributing it to a named executive does not insulate it from the substantiation requirement. The quote is simply another place the claim appears in your public document.
This is why the Claims Firewall has to extend to the quotes, not just the body copy. Review every quote against the same evidence standard as every other sentence, and rewrite quotes that smuggle in efficacy or superiority claims you cannot prove. A good quote in a healthcare press release adds human voice and context without making a new claim: it can express enthusiasm, explain significance, or describe the company’s intent, all without asserting an unsubstantiated medical outcome. The discipline feels excessive until you realize that quotes are exactly where companies get caught, precisely because everyone treats them as exempt. They are not exempt, and the firewall is incomplete until it covers them.
Vet the data before the headline writes itself
Clinical or study data is the strongest material a healthcare press release can carry and the easiest to misrepresent through an eager headline. A study showing a modest effect in a narrow population becomes, in the hands of a marketing team, a sweeping claim of broad efficacy, and the gap between what the data shows and what the headline says is exactly the gap a regulator or a skeptical journalist will exploit. The headline has to be true to the actual finding, including its limitations, not to the most flattering possible reading of it.
The safe practice is to write the headline from the data’s real conclusion, statistical significance, population, effect size and all, rather than from the conclusion you wish the data supported. If the study was small or preliminary, the release should say so, because disclosing the limitation is both more honest and more durable than hoping no one reads the methods section. Journalists covering health are increasingly sophisticated about overstated study claims, and a release that oversells its data damages your credibility with the exact reporters you are trying to reach. A healthcare press release that represents its data accurately, limitations included, earns more trust and survives more scrutiny than one that stretches a thin finding into a bold headline.
There is a competitive argument for this restraint, not just a defensive one. In a field crowded with overstated claims, the company that consistently represents its evidence accurately becomes the one journalists trust to call for a credible quote, because they know your numbers will hold up when they check them. Reporters cover health carefully because their own credibility is on the line, and they gravitate toward sources who do not make them look foolish. Accuracy in your healthcare press release is therefore not only the safe choice with regulators; it is the choice that builds the long-term media relationships that produce coverage. The companies that overstate get a bigger headline once and a quieter phone forever after.
The patient privacy line you cannot cross
Patient stories are the most persuasive content a healthcare company can publish and the most legally fraught. A real patient describing a real outcome carries emotional weight no statistic matches, which is exactly why companies reach for them. But patient information is protected under HIPAA, and using it without proper written authorization is a privacy violation regardless of how positive the story is or how willing the patient seemed in conversation. Verbal permission is not authorization. A signed consent that meets the legal standard is.
The sequence matters: get the authorization signed before the story is written and distributed, never after. A press release that has already gone out with identifiable patient information cannot be un-sent, and the violation is complete the moment it publishes. The disciplined practice is to treat any patient detail, even an anonymized one that could be traced back, as off-limits until the paperwork is done. The persuasive power of a patient story is real, but it is not worth a privacy breach, and the only version worth running is the one with consent secured in advance. Handle that line correctly and your healthcare press release keeps its most compelling tool without becoming its biggest risk.