2026 Search Advertising Rules for Health Brands: Policy Guide for Google Ads & Microsoft

• Share

For healthcare brands, it’s essential to take advantage of all that digital marketing can offer them—but they can’t operate in this space the same way that eCommerce brands can. Because patient privacy and comfort is paramount, marketing platforms have developed a number of restrictions specific to health and wellness advertisers.

Search engine marketing (SEM) platforms like Google Ads and Microsoft Ads regulate the data that health brands can collect and utilize; the tracking and personalization mechanisms they can access; and the types of messaging that they are allowed to deploy. As technology and laws evolve, so do these platform policies. Failure to keep up can result in ad disapprovals and even account suspensions.

Leading into 2026, Google Ads made a number of targeted updates to its health advertising policies, including:

• The reintroduction of limited healthcare professional (HCP) targeting for eligible advertisers, expanding compliant B2B options within the healthcare category.
• New standards and enforcement around Google Shopping eligibility for healthcare products, particularly for subscription-based offerings

In this guidance, we’ll highlight the newest SEM health advertising restrictions for 2026 while reiterating the core policies that all brands in this space must adhere to.

Google and Microsoft are two separate rulebooks. This guide covers what each one requires, what certification costs, where the two diverge, and what compliant accounts produce. For paid social, see our guide to social media health ad restrictions.

Jump to Section:

• What’s New in SEM Healthcare Advertising Policy for 2026?
• Google Ads Health Advertising Policies
  • Personal Advertising Policy/Health in Personalized Advertising
  • Healthcare and Medicines Policy
    • Certifications
    • Clinical Trial Advertising, Experimental Treatments, and Gene Therapies
    • Prescription Drug Terms
  • Sexual Health and Wellness Policy
• What Certification Costs and How Long It Takes
• Google vs. Microsoft at a Glance
• Microsoft Ads Health Policies
  • What the July 1, 2026 Restructure Changed
  • Restricted Content: Pharmacy and healthcare products and services
  • “It Passed Google” Is Not a Microsoft Preflight
  • Asset-Level Review Changes Where You Look
• Where the Rules Change by Country
• Tracking Is Part of the Policy Layer
• Three Disapproval Patterns and How to Fix Them
  • Pre-launch checklist
• What Compliant Growth Actually Produces
• Platform-Compliant Healthcare Advertising

What’s New in SEM Healthcare Advertising Policy for 2026?

The first big change for 2026 is a rare instance where restrictions were loosened. Google Ads reintroduced limited healthcare professional (HCP) targeting for eligible healthcare advertisers. This change allows certain B2B health brands—such as medical device manufacturers or professional service providers—to more directly reach clinical audiences, while consumer health targeting remains highly restricted.

But there’s always give-and-take, and for other brands, marketing became more regulated. Late in 2025, Google began to ramp up enforcement around Google Shopping eligibility for healthcare advertisers. While many physical, non-prescription health products remain eligible, subscription-based healthcare offerings face additional scrutiny, and prescription drugs continue to be excluded. Eligibility now depends not only on the product itself, but also on how it is sold and fulfilled.

Google Ads Health Advertising Policies

Personal Advertising Policy/Health in Personalized Advertising

Google’s Personalized Advertising policy is a major consideration for health brands that use Google Ads. This rule is intended to prevent brands from advertising sensitive topics to specific users in ways that feel invasive and diminish user experience. 

This rule addresses health specifically in the Health in Personalized Advertising section, which forbids advertisers from using Google Ads to deliver personalized content related to:

• Physical or mental health conditions
• Products, services, or treatments intended to manage chronic health conditions
• Health problems “associated with intimate body parts or functions, which includes genital, bowel, or urinary health”
• Invasive procedures including cosmetic surgery
• Disabilities

It’s important to note that, even though it’s called the “Personalized” advertising policy, these rules also apply to targeting potential caretakers who may be responsible for someone with a covered health issue. 

The Personalized Advertising Policy, outside of its Health subsection, also forbids advertising that:

• Highlights personal trauma or abuse 
• Creates feelings of negativity through things like body shaming or suggested negative outcomes if a user doesn’t take a certain action

These last two are also key for health providers. Even brands that offer counseling services to address past trauma—or deal in weight-management solutions meant to make people healthier—must find ways to advertise these services without violating the stated policy.

One carve-out is worth knowing. Since May 2025, these restrictions do not apply to campaigns targeting licensed healthcare professionals in their professional capacity. It is narrower than it sounds: restricted drug terms, including GLP-1s and prescription weight-loss aids, still require separate certification plus formal authorization from the advertiser’s healthcare organization. HCP eligibility is not a key to consumer health audiences.

Healthcare and Medicines Policy

Google’s Healthcare and Medicines policy dictates what health and drug information can and can’t be advertised and what certifications a brand needs in order to advertise certain products and services. It covers a number of relevant areas, like:

Certifications

• Google requires online pharmacies, telemedicine providers, and addiction treatment services to apply for and receive LegitScript certification in order to advertise on the platform
• Google requires insurers to be certified with G2 Risk Solutions (G2RS) in order to run Google Ads
• Google also recognizes NABP for US pharmacy accreditation, including Digital Pharmacy Accreditation and the `.pharmacy` domain program, plus country-specific registries. G2 Risk Solutions also handles ACA health plan keyword certification. See what certification costs and how long it takes.

Clinical Trial Advertising, Experimental Treatments, and Gene Therapies

• Google forbids clinical trial recruitment ads in most countries, but the US, UK, and Canada are not among them.
• Google forbids promotion of “speculative and/or experimental medical treatments” as well as cell or gene therapies, with limited exceptions

Prescription Drug Terms

• Google again limits the advertising of prescription drugs in most countries, but not the US, Canada, and others provided they have proper certifications
• Businesses can use the drug terms in their ads and landing pages without certification, but may not bid on the terms if they don’t have it
• The list of monitored drug terms can be found here
• Google also provides a list of unapproved substances, most of which would not be a concern for legitimate health providers 

It’s important to note that, in late 2023, Google updated the language in its Healthcare and Medicines policy to better clarify what types of online health providers would be subject to these rules

Sexual Health and Wellness Policy

Google Ads also has distinct policies regarding the promotion of sexual health products on YouTube and the Google Display Network. It relates to other Google Ads content policies and applies to everything from traditionally over-the-counter products like lubricants up to prescription medications.

Sexual health products must be:

• Targeted only to users 18 years of age or older
• Not promoted based on themes of sexual pleasure or enhancement
• Not be advertised in sexually suggestive ways
• Advertised in accordance with local and country-specific laws

This policy also includes rules against advertising certain products outside of the United States and Canada.

What Certification Costs and How Long It Takes

Both platforms lean hardest on LegitScript, so its published terms are your fixed cost of entry.

What it costs. LegitScript’s Healthcare Merchant Certification carries a nonrefundable $975 per website application fee plus $2,150 per website annually (LegitScript’s FAQ). Note the per-website structure: a brand site plus a separate telehealth booking domain is two applications, not one.

How long it takes. LegitScript does not publish a review timeline. Each application is reviewed individually: “Because each application review is unique, we are unable to give time estimates.” So apply before creative is finished, and never commit a launch date that assumes certification arrives on schedule.

What it buys. Eligibility to apply within a platform’s healthcare advertiser program — not blanket approval, and no exemption from editorial review. A certified pharmacy can still lose an ad over its copy. The process itself is covered in our LegitScript certification breakdown.

Google vs. Microsoft at a Glance

Health advertisers get into trouble by treating these as one rulebook with two logos. Where a platform publishes no rule, the cell says so.

Category	Google	Microsoft
Online pharmacy	LegitScript or NABP (US, Canada); prohibited outright in some markets	LegitScript or NABP
Telemedicine	LegitScript telemedicine certification; market-specific conditions	No distinct track
Addiction treatment	LegitScript addiction treatment certification	Not specified separately
Pharma manufacturer (Rx)	Certification required, varying by market	NABP VIPPS or Vet-VIPPS (codes 14, 40, 109)
Clinical trial recruitment	Forbidden in most countries; permitted in the US, UK, Canada	Not allowed
Health insurance	G2 Risk Solutions; separate ACA keyword certification	Not specified separately
Weight loss, supplements	Restricted drug terms certification for Rx weight-loss aids including GLP-1s	Claims heavily restricted; disapproved products list
Sexual health	18+, no pleasure framing, restrictions outside the US and Canada	Prophylactic advertising widely forbidden

Clinical trial recruitment is the cleanest asymmetry there: a US campaign that is legal on Google has no Microsoft equivalent.

Microsoft Ads Health Policies

Though not nearly as prominent of a paid search platform as Google Ads, Microsoft Ads is still an excellent SEM service that many health brands may be interested in using to reach their unique audience. Like Google Ads, however, Microsoft Ads also has specific policy guidance for health brands.

What the July 1, 2026 Restructure Changed

On July 1, 2026, Microsoft reorganized its Restricted Pharmacy and Healthcare policy. No rule was tightened or loosened — the filing system changed. The online-pharmacy section was relabeled, European cross-border rules were consolidated, and a Market Specific Policies section now spans more than 130 markets. Weight-loss and supplement rules survived intact; they simply live somewhere else. (Microsoft policy; restructure detail reported by PPC News Feed.)

That costs you an afternoon, not a strategy change: if your compliance checklist deep-links Microsoft policy anchors, some now point at nothing.

Restricted Content: Pharmacy and healthcare products and services

Microsoft has an overarching health advertising page that lays out specific restrictions for each country around the world. Its rules are not a stricter copy of Google’s — the two diverge category by category, and in both directions. For instance, while Google will allow advertisers in some countries (including the US) to advertise for clinical trial recruitment, that’s entirely outlawed on Microsoft Ads. 

Likewise, the language is broad elsewhere. Microsoft’s policy states simply that “Ads related to sensitive health conditions targeting consumers are not allowed.”

As of the July 1, 2026 policy restructure, other noteworthy Microsoft Ads health policy takeaways include:

• Like Google, Microsoft requires pharmaceutical sellers must receive LegitScript certification, although they will also accept accreditation from the National Association Boards of Pharmacy (NABP) 
• Also like Google, brands are not allowed to advertise in ways that create the impression of direct health targeting—using language like “your condition” or “your symptoms.”
• Claims and content of weight loss products and services are heavily restricted
• Prophylactic advertising is widely forbidden
• Like Google, Microsoft also has a list of disapproved healthcare products and supplements.

For a full understanding of how Microsoft’s health advertising policies differ from Google’s, it is important to review this policy on the Microsoft Ads site. 

“It Passed Google” Is Not a Microsoft Preflight

Approval on Google carries zero weight in Microsoft’s editorial review. Most healthcare advertisers find this out by importing a Google campaign and watching part of it get disapproved for reasons Google never raised.

It is not only the healthcare rules. Microsoft enforces its own text and ad style guidelines through failure codes with no Google equivalent, covering capitalization, punctuation, spelling, repetition, and unsupported claims. That last one catches health advertisers — codes 92 and 93 — because a substantiation standard applied to a medical claim is a different animal than a retail one.

Budget a separate Microsoft copy review. The import is not a preflight.

Asset-Level Review Changes Where You Look

Since November 18, 2025, Microsoft reviews responsive assets individually (Microsoft Advertising). Headlines, descriptions, and images each carry their own policy status, and the ad keeps serving while it holds the minimum requirement of approved assets. Three statuses tell you how much trouble you are in: “Some assets disapproved” — delivering on a reduced pool; “Most assets disapproved” — degraded, treat as urgent; “Essential assets disapproved” — the ad cannot serve.

So find the asset, not the ad. If you appeal in bulk, the appeals documentation carries the API’s limits.

Where the Rules Change by Country

Google layers country- and region-specific restrictions on top of its global rules; Microsoft’s Market Specific Policies section spans more than 130 markets. We are not reproducing either matrix here, because country rules change without announcement and a stale compliance table is worse than none. The full country-by-country rules live at the source: Google’s policy and Microsoft’s.

What this page can tell you is how wide the spread is. From Google’s policy: Poland does not permit promotion of online pharmacies at all, “regardless of whether they offer prescription collection and delivery services.” Spain permits telemedicine under LegitScript’s Healthcare Merchant Certification Program if advertisers avoid promoting prescription drugs. Germany permits online pharmacies on that same basis. Three markets, three answers.

A compliant US campaign is not a compliant EU campaign. Expansion is a re-certification event, not a geo-targeting change.

Tracking Is Part of the Policy Layer

You can write compliant copy, get certified, clear editorial review, and still be non-compliant because of what a form field ships into an ad platform. Policy and measurement are one surface now.

Server-side tagging is the control point most healthcare accounts end up building, because it puts a filtering stage between your systems and the ad platform. Suppression belongs at the form field and in URL parameters, upstream of any reporting layer. Treat that as a design pattern, not as compliance: what governs the implementation is data minimization, consent and vendor contracts, and legal review of the finished design.

One ruling is widely misread. In American Hospital Association v. Becerra (N.D. Tex., June 20, 2024), the court vacated the portion of HHS OCR’s online-tracking guidance treating an IP address combined with a visit to an unauthenticated public webpage as individually identifiable health information (opinion and order; HHS withdrew its appeal). The scope is narrow: it did not repeal HIPAA, does not reach authenticated patient portals, and has no effect on platform policy, which Google and Microsoft enforce independently. A tracking setup can be lawful under HIPAA and still get your account suspended.

If you need this built rather than explained, that is what our marketing analytics compliance and policy and ad tracking implementation practices do.

Three Disapproval Patterns and How to Fix Them

Three patterns stop healthcare accounts more often than the rest combined.

1. Overclaiming outcomes. Guarantee, cure, or treat language in ad copy or on the landing page. Fix: trade outcome promises for process and access. “Licensed clinicians, first appointment in 48 hours” is supportable. “Cure your OCD” is not.

2. Restricted drug terms used without certification. Google permits drug terms in ads and landing pages without certification, but bidding on them requires it — so the copy passes while the keyword fails. Fix: audit keywords against Google’s monitored drug terms list and gate the restricted set. Microsoft additionally requires NABP VIPPS or Vet-VIPPS accreditation.

3. Landing pages that contradict the ad. Microsoft names it directly — code 51, “Your website does not contain the offer indicated in the ad text.” Fix: review ad and page as one unit, and again after any page change. This is the most common cause of repeat disapproval on an already-approved ad: the ad did not change, the page did.

Pre-launch checklist

#	Check
1	Certification applied for, per domain
2	Restricted drug terms gated in the keyword set
3	Every claim traceable to something you can substantiate
4	Landing pages reviewed as a unit with their ads
5	Audience lists free of condition-derived segmentation
6	Form fields and URL parameters audited for PHI leakage
7	Separate Microsoft copy review
8	Target markets checked against both policies

What Compliant Growth Actually Produces

Compliance is not a tax on healthcare performance. It is the precondition for scaling it.

Eden — a 302% increase in spend with CAC held inside target. The brief was to scale Google Ads from the ground up “while remaining compliant with all legal and platform requirements for health advertising.” Landing-page work and Performance Max structured with audience signals delivered 181% more purchases and 222% more revenue QoQ. Read the case study.

Juno Medical — 95% more bookings at 24% better CPA. Rebuilding campaigns by care line, market, and match type produced 95% more appointment bookings and a 24% CPA improvement on 50% more spend. Read the case study.

NURX — 222% growth on insurance terms. Sorting telehealth keywords by insurance intent, then building a landing page per buyer type, delivered 46% more conversions on cash-only lines year over year. Read the case study.

nOCD — 123% more offline conversions. Reorganizing campaigns by funnel placement, with a distinct CAC target per stage, also produced a 26% decrease in CAC and a 44% increase in conversion rate. Read the case study.

A leading digital health provider — 51% more purchases through a regulatory shock. The FDA removed semaglutide from the shortage list mid-quarter. Consolidating campaigns to match intent and restructuring Shopping and Performance Max returned 33% more revenue and a 6% decrease in CAC QoQ. Read the case study.

Platform-Compliant Healthcare Advertising

With so many legal and platform-based regulations in place for health advertisers, it’s vital to do your diligence and ensure you are not creating ad content that is liable to be disapproved. Remember, this is not a comprehensive list, and it’s important to review all available policies before launching your digital ads program. 

Take four things into the launch plan. Your certification path, applied for at planning, per domain. Copy and landing-page review, treated as one unit and run separately per platform. Your tracking architecture, built so PHI is suppressed before data reaches an ad platform. Your market scope, checked against both platforms’ policies before anyone promises an expansion date.

For Meta, TikTok, X, LinkedIn, and Pinterest, our guide to social media health ad restrictions is the companion to this one.

For help building a vibrant and effective health advertising strategy for your brand, consider partnering with an expert healthcare marketing agency that knows the ins and outs of these policies and can resolve errant disapprovals that occasionally occur in this nuanced field.