Online Reputation for Law Firms: The Complete 2026 Ethics-Compliant Guide

July 6, 2026 Pierre MADI 10 min read

Summarize this article with AI:

ChatGPTPerplexityClaudeGrok

Quiz: Is your firm's online reputation bar-compliant?

Why Google reviews are now make-or-break for law firms

In 2026, word of mouth has a new form. It's called Google.

84% of clients check online reviews before choosing a provider — and that includes lawyers. Before they verify your bar admission, before they read your bio, before they even check whether you handle their type of case, potential clients are reading what your former clients say about you.

The numbers are stark:

• 70% of U.S. consumers consult online content before engaging an attorney (Martindale-Avvo Legal Consumer Research). Reviews, testimonials, directory profiles — your digital footprint is your first impression.
• 49% of consumers won't consider a business rated below 4 stars (LocalImpact). With fewer than 10 reviews, your profile is effectively invisible in competitive legal markets.
• 78% of consumers won't consider a business with scant reviews at any rating. Volume AND rating matter. A single 5-star review looks less credible than 40 reviews at 4.3.

Yet most law firms are dramatically under-invested in their online presence. They have fewer than 10 reviews. They've never asked a client for one. They're not sure what the bar allows. Meanwhile, competitors — some ethical, some less so — are pulling ahead.

On your own: you hope potential clients don't check Google. You're unsure what the ethics rules actually say. You worry about bar complaints. Result: an empty profile, invisible to the clients who need you.

With a strategy: you build a fully bar-compliant reputation system. Every review request is ethical. Every response is pre-vetted. Your Google profile becomes a client acquisition asset — without ever exposing you to disciplinary risk.

The ethics framework: what bar rules allow (and prohibit)

Contrary to what many attorneys believe, the ethics rules don't prohibit everything. They provide a framework. Here's what you need to know.

What bar rules ALLOW

• Having a Google Business Profile. No jurisdiction prohibits it. You must ensure the information is accurate and not misleading (ABA Model Rule 7.1).
• Receiving Google reviews. Google is a third-party platform over which you have no editorial control. Reviews are unsolicited. This is universally accepted.
• Asking clients for reviews. Permitted in virtually all U.S. jurisdictions, provided the request is made after the matter concludes, uses neutral language, and involves no compensation. ABA Model Rule 7.3 generally permits written communication with former clients.
• Responding to reviews. The ABA explicitly confirms there's "no federal law or regulation prohibiting physicians or practices from responding to online patient reviews" — and the same principle applies to attorneys. You're free to respond — as long as you don't disclose client confidences.
• Linking to your Google profile from your website. A simple text link is universally accepted.

What bar rules PROHIBIT

• Publishing client testimonials on your own website. Most jurisdictions treat your website as a communication you control, subject to ethics rules. Testimonials, being subjective and unverifiable, don't meet the standard of "truthful, non-misleading communication."
• Paying for reviews. This is the trifecta of violations: it breaches Google's terms, most state bar advertising rules, and the FTC's 2024 Fake Reviews Rule (16 CFR Part 465), carrying penalties up to $51,744 per violation.
• Offering incentives for reviews. No discounts, no gift cards, no "thank-you" conditioned on the review being posted. A genuine, unconditional thank-you after a review is received is different from conditioning any benefit on the review.
• Disclosing client confidences in your response. ABA Model Rule 1.6(a) prohibits revealing information related to a client's representation. Even a general disclaimer that "the events are not accurately portrayed" may reveal that you were involved — and thus violate confidentiality.

Key takeaway: bar rules distinguish between what you control (your website) and what you don't (Google). You are responsible for the former, not the latter.

Google is fine, your website is not: the platform distinction

This is the rule most lawyers miss — and it's the most important one.

Google is a third-party platform. You don't control what gets posted. You can't selectively display reviews. Google's algorithm decides what appears, not you. That's precisely why bar associations tolerate Google reviews: you're not the publisher.

Your website is under your editorial control. Everything on it is considered a communication from your firm, fully subject to ethics rules. If you publish client testimonials there — even authentic ones — you become responsible for their content. Since a testimonial is inherently subjective and unverifiable, it rarely meets the "truthful and non-misleading" standard.

What about review widgets? Even automated widgets that pull Google reviews onto your site are treated as firm communications. Many bar associations specifically ask for their removal. The logic is consistent: your website = your responsibility.

What you can do instead: a simple text link. "See what our clients say on Google." That's it. It's compliant, it's clean, and it directs prospects exactly where you want them.

How to respond to reviews without breaking confidentiality

This is the most sensitive issue — and simpler than it seems, once you internalize one golden rule.

The golden rule: never confirm anything

You do not confirm that the reviewer is or was your client. You do not confirm the contents of their matter. You do not provide any detail, date, or context. Your response addresses the public audience reading it — not the reviewer.

ABA Formal Opinion 496 is explicit: "a negative online review, because of its informal nature, is not a 'controversy between the lawyer and the client' within the meaning of Rule 1.6(b)(5), and therefore does not allow disclosure of confidential information relating to a client's matter." Even the seemingly harmless phrase "the events are not accurately portrayed" could reveal that you were involved — which itself may constitute a confidentiality breach.

The compliant response template

For positive reviews: "Thank you for taking the time to share your experience. We strive to provide every person who seeks our counsel with rigorous and professional representation."

For negative reviews: "Thank you for your feedback. We take every client experience seriously and are continuously working to improve. If you would like to discuss your concerns directly, our office is reachable at [phone number]."

For reviews that are clearly false or defamatory: "Our professional obligations require strict confidentiality. We are therefore unable to comment publicly on this matter. Our office remains available for any direct discussion."

This last template is directly adapted from the ABA's own recommendation: "Professional obligations do not allow me to respond as I would wish."

What to NEVER write

• "You were our client..." → Confirms representation = confidentiality breach
• "In your case, the facts showed..." → Discloses matter details
• "The court ruled in your favor..." → Confirms representation + matter outcome
• "These allegations are false — here's what actually happened..." → Even denying the claim implicitly confirms the relationship

The ABA's bottom line: "Lawyers should give serious consideration to not responding to negative online reviews in all situations." Sometimes, silence is the strongest response.

How to get more reviews (the compliant way)

This is the question every firm asks. The answer is straightforward, ethical, and dramatically underused.

The compliant 4-step process

Step 1 — Wait until the matter is fully closed. Never ask during representation. The client must have zero concern that their review could affect the handling of their case. The matter must be resolved, the bill paid, the file closed.

Step 2 — Send a personalized email. Not an automated drip sequence. An email signed by the attorney, within two weeks of closure. Professional, understated. Example: "Your matter is now fully resolved. If you were satisfied with our representation, a Google review can help others in your situation find the right counsel. Here's the link: [link]. Of course, there is no obligation whatsoever."

Step 3 — Never ask on the same day as the final invoice. This is common-sense ethics: the bill and the review request should never coincide. Give it a few days.

Step 4 — No incentives, no gifts, no pressure. No fee discounts. No gift cards. No "if you leave a review, I'll..." This violates Google's terms, bar advertising rules, and the FTC's Fake Reviews Rule — simultaneously.

The pre-screening technique (legal and recommended)

After matter closure, send an email with two links: "How would you rate your experience? Satisfied / Unsatisfied." Satisfied clients are directed to your Google review link. Unsatisfied clients go to a private feedback form.

This is legal, ethical, and prevents the occasional disgruntled client from disproportionately impacting your rating. You're not gating anyone — you're simply offering unhappy clients a private channel first.

What velocity to target

In a competitive legal market (major metro, personal injury, criminal defense, family law), aim for 3-5 new Google reviews per month. This is enough to maintain positioning against competitors — most of whom have no review program at all. Consistency matters more than volume: 3 reviews per month for a year beats 30 reviews in one burst followed by silence.

What to do about negative or fake reviews

A negative review will come. Sometimes legitimate, sometimes not. Here's the playbook.

If the review appears legitimate

Don't panic. A profile with nothing but 5-star reviews looks less credible than one at 4.3 with a few well-handled critiques. Authenticity builds trust.

Apply the neutral response template above. Thank them for the feedback. Offer a direct conversation. Don't publicly defend yourself.

If the review is fraudulent or defamatory

Option 1 — Flag it to Google. Use Google Business Profile's flagging system. Be specific: identify the policy violation (conflict of interest, spam, off-topic, impersonation). Documented flags have approximately a 40% success rate — and that rate improves significantly when you specify the exact policy violation rather than just checking "this review is not about my business."

Option 2 — Seek removal through legal channels. Some jurisdictions recognize that professionals bound by strict confidentiality have grounds to request delisting when they cannot fairly respond. Consult your bar association or legal counsel for jurisdiction-specific guidance.

Option 3 — Don't respond. Often the best option. The ABA explicitly recommends considering non-response. A reply can trigger escalation, draw more attention to the negative review, and create ethical risk for uncertain reputational benefit.

Beyond Google: Avvo, Martindale, and legal platforms

Google isn't the only platform where your reputation is built — or lost.

Priority for a U.S. firm: Google + Avvo + Martindale. These three cover the vast majority of client discovery paths. Complete your profiles on each: professional headshot, practice area descriptions, bar admissions, contact details. NAP consistency (Name, Address, Phone) across all platforms is a direct Google ranking factor.

FAQ — Law firm online reputation

Pierre MADI

Founder & Online Reputation Expert, Saphek

Pierre MADI is the founder of Saphek, an online reputation agency. For over 5 years, he has helped hundreds of regulated professionals — lawyers, doctors, accountants — manage their online reputation in full compliance with their ethical obligations. Every strategy is bar-compliant, every response is pre-vetted.

Discuss my firm's reputation with Pierre