Direct-to-Patient Marketing Compliance in Women's Health
The FDA and FTC operate under a formal Memorandum of Understanding, sometimes called the FDA-FTC Liaison Agreement. On paper, the conceptual division looks clean: FDA owns claims made in labeling, FTC owns claims made in advertising. In practice, that line dissolves the moment you open a content calendar — like trying to separate the yolk from the egg after it's already been scrambled.
The FTC's definition of advertising is expansive in ways that still surprise brand teams. It covers social media content, influencer posts, press releases, healthcare practitioner endorsements, packaging, and digital editorial content, not just paid media. A founder posting on Instagram about what their product does for hormonal health? The FTC considers that advertising. A doctor recording a video testimonial for a supplement brand? Same analysis. The FTC's substantiation standard requires that claims be truthful, non-misleading, and backed by adequate evidence before the ad runs. Not after a complaint lands. Not after the lawyers have seen it.
The structure/function claim versus disease claim boundary is where most women's health brands create unintentional exposure, and where I've watched smart, careful companies get themselves into real trouble. "Supports hormonal balance" is a permissible structure/function claim. "Treats menopause symptoms" or "improves fertility in women with PCOS" crosses into disease claim territory. Once you've made a disease claim, you've functionally reclassified your product as an unapproved drug under FDA's framework. That's not a technicality. It's a serious enforcement trigger. The moment you call your supplement a treatment, regulators and everyone else expect a different product entirely.
The supplement disclaimer mechanics under 21 CFR 101.93 require the FDA disclaimer to appear adjacent to the claim, in bold, in type at least half the size of the claim itself. That applies to labeling, not to advertising. Here's where the split-channel liability gets brands: the ones omitting the required disclaimer from product labeling while simultaneously running digital ads that contain structure/function claims have created a compliance gap between two channels that regulators are watching simultaneously.
The FTC has brought enforcement actions specifically in women's health: weight loss claims tied to hormonal balance language, fertility claims without sufficient randomized controlled trial evidence, PCOS claims from brands that couldn't substantiate what they were saying. One campaign needs to satisfy two different evidentiary standards at once. What passes FTC's advertising review can still constitute misbranding under FDA's labeling rules. You have to run both analyses in parallel, and most teams aren't structured to do that.
The FDA Enforcement Surge Since September 2025 and What Triggered It
On September 9, 2025, HHS and FDA jointly announced a crackdown on deceptive direct-to-consumer pharmaceutical advertising, including influencer-driven social media promotion. The reversal of recent trends was stark. FDA's Office of Prescription Drug Promotion issued more than 40 untitled letters in 2025 and 2026 combined, compared to 5 in all of 2024, and just 3 in 2023. For reference, in the late 1990s, OPDP was issuing more than 130 letters annually. This is not an incremental shift. Something changed.
The content of those letters matters if you work in women's health. The overwhelming majority targeted online promotional material for compounded GLP-1 products. Given that one in five women aged 50 to 64 are now GLP-1 users, and given the telehealth platforms and wellness brands that have organized their entire acquisition strategy around that population, the enforcement is landing directly in this space. The core violations alleged were overstatement of efficacy and failure to present risk information adequately. Some of the content flagged dated back to March 2024. That signals retroactive review, not just prospective monitoring going forward.
The mechanism enabling that retroactive reach is what brands need to internalize. FDA explicitly stated that this enforcement wave used AI and other technology-enabled tools to proactively surveil and review drug advertisements. Volume of content is no longer a shield. If your brand has published hundreds of pieces of promotional content over the past two years, automated review can surface all of it. The quiet-and-at-scale strategy that many DTC brands relied on is no longer viable.
There is also a proposed rulemaking in progress, designated RIN 0910-AJ14, that would eliminate the "adequate provision" standard for broadcast DTC ads and instead require a full brief summary of all side effects and contraindications. If that rulemaking is finalized, many current broadcast ad formats become operationally unworkable. The NPRM is expected around December 2026. Brands currently building campaigns around broadcast formats need to be modeling what compliance looks like after that rule takes effect, now, not when the final rule drops.
The exposure doesn't stop at federal enforcement. The FDA's September 2025 announcement explicitly flagged state attorneys general with active consumer protection divisions as parallel enforcement actors. The administration has also shown willingness to leverage the False Claims Act and encourage qui tam relators. This is a multi-front landscape now.
HIPAA's Reach Into Digital Women's Health Marketing and Where Brands Routinely Miscalculate It
Women's health data is among the most sensitive categories HIPAA protects: menstrual cycle data, fertility status, pregnancy, contraception use, menopause treatment, mental health. Most women's health brands understand this in the abstract. Most of them underestimate what it means inside their marketing stack, specifically.
The pixel problem is the most widely litigated expression of this, and it's also the one I've seen marketing teams treat as an IT issue until it isn't. Standard marketing pixels, Meta Pixel, Google tags, and comparable tools, can inadvertently capture PHI when placed on appointment booking pages, symptom checkers, or patient portals. The user's browser sends data to the platform's servers. If that data includes information about a medical condition, a prescription, or a clinical interaction, the brand has transmitted PHI to a third party without a Business Associate Agreement and without the patient's HIPAA-compliant authorization. This has been actively litigated since 2022.
Meta's January 2025 policy shift made the stakes concrete. Meta began categorizing health and wellness advertisers as sensitive, restricting key event tracking. Conversion events like "appointment signup" or "prescription ordered" were flagged as too sensitive to pair with Meta's user data. "Purchase" and "Add to Cart" events were restricted for health and wellness brands from that same date. LinkedIn moved to block its tag from collecting health-related signals on consumer domains. Google cautiously reintroduced personalization for professional audiences only, with added certification requirements.
Post-Dobbs, the data sensitivity issue extends beyond HIPAA into state-level legal risk. Reproductive health data, location signals, search queries, app usage tied to fertility or pregnancy, now carries legal exposure in states with abortion restrictions that goes beyond what HIPAA covers. Telehealth platforms operating across state lines have to model this geographically.
The practical consequence is that the analytics infrastructure women's health marketers rely on to measure campaign performance is itself a compliance surface. Compliant measurement looks like server-side tagging to avoid browser-level data leakage, HIPAA-compliant analytics alternatives to standard GA4 configurations, and Business Associate Agreements with any martech vendor that touches PHI. These are not IT decisions. They are marketing architecture decisions, and they have to be made before the campaign launches.
Platform Ad Policies as a De Facto Regulatory Layer — and the Documented Double Standard in Women's Health
In 2025, the Center for Intimacy Justice reported that 84% of businesses had ads rejected on Meta, 66% on Google, and 64% had product listings removed on Amazon. In a separate survey of 95 brands, creators, medical professionals, and others, 95% reported at least one incident of censorship affecting women's health or sexual wellbeing content. Seventeen percent reported up to 10 such incidents.
The double standard is documented, not anecdotal. Meta routinely approves erectile dysfunction advertising while blocking comparable women's health content. Automated filters flag terms like "menstrual," "PMS," "menopause," and "sexual health," even when the content is evidence-based, clinically accurate, and educational. HerMD has documented rejections of menopause care and sexual wellness advertising that would have cleared review if the condition being addressed were male. That asymmetry is baked into the enforcement infrastructure, and complaining about it to a platform's support channel will not change it.
This creates a specific structural problem for compliance strategy. Platform policy is not static law. It changes faster than regulation, it is enforced inconsistently by algorithm, and it cannot be challenged through formal legal channels the way regulatory decisions can. A brand produces an advertisement that is fully FDA- and FTC-compliant, with proper substantiation, adequate risk disclosure, and documented evidentiary support, and still gets it blocked because an automated system flagged a word.
The resulting pressure is real and genuinely dangerous. When a compliant ad gets blocked, the temptation is to alter the language to get it through the filter. Sometimes that altered language reduces regulatory clarity, obscures what the product is for, or softens risk information in ways that create new FTC exposure. Platform restriction and regulatory compliance are pulling in opposite directions, and the brand gets compressed between them.
There's also a proportionality problem worth naming plainly. Platform restrictions do not scale with actual harm. They disproportionately burden legitimate women's health brands operating with clinical rigor, while compounded medication advertisements and influencer promotions, the actual targets of FDA's September 2025 enforcement wave, have historically passed through those same filters without comparable friction.
Language and Creative Strategies That Satisfy Platform Filters Without Compromising Regulatory Accuracy
The goal is not to sanitize the message. The goal is to carry the same clinical meaning through language that automated systems will not suppress. That distinction matters, because one approach protects patients and the brand, and the other creates a new category of liability under the cover of solving a distribution problem.
Substitution patterns that experienced brands are using: "period support" in place of "menstrual pain relief" preserves the consumer's understanding of what the product does while avoiding a term that frequently triggers filter rejection. "Hormonal wellness" framing for content about PMS or cycle irregularity communicates the same audience signal with less algorithmic friction. Symptom-led copy, "fatigue, mood changes, sleep disruption," outperforms condition-led copy that names a diagnosis, both in terms of platform approval rates and in terms of reaching patients who don't yet have a formal diagnosis to anchor their search behavior. Think of it as speaking the patient's language before she has a doctor's vocabulary to describe what she's experiencing.
The hard constraint is that language substitution cannot cross into the FDA/FTC violation of being misleading by omission. If a product is marketed for a specific condition, softening the language to avoid platform rejection cannot simultaneously obscure what the product actually is or what condition it is intended to address. That is not a compliance workaround. That is a new claim problem layered on top of a distribution problem.
On the creative side, lifestyle and community-oriented visuals pass automated review more reliably than clinical imagery. Educational content framed around questions, "What happens to hormones after 40?" rather than "Treat your menopause symptoms," outperforms product-forward formats in restricted categories and generates the kind of engagement that performs in organic distribution.
Channel diversification is a structural hedge that more brands should be treating as a first-order priority. Email to consented lists, owned content, and organic search are not subject to real-time platform policy enforcement. Building these channels reduces dependence on ad approval algorithms and creates a distribution foundation that doesn't collapse when Meta changes its sensitive-category definitions, which it will.
Some brands run creative through informal pre-review before committing budget: submitting ad creative manually to a platform's review process before scaling spend. It adds a step, but it's substantially cheaper than discovering at launch that the campaign has been rejected.
The line is clear. Any language change that causes the average reader to misunderstand what the product does, who it is for, or what its risks are is not a creative strategy. It is a new liability.
How State Telehealth Laws Add a Geographic Dimension to What a Compliant Women's Health Campaign Can Say
Telehealth expanded dramatically during the pandemic. The rollback of many federal flexibilities has returned authority to individual states, and the resulting patchwork is something women's health brands operating across state lines have to manage actively at the campaign level. The states where an ad runs determine what that ad is permitted to say. Most campaign teams are not thinking about it that way.
The variables that matter for marketing content are specific. Whether a state permits prescribing via telehealth without a prior in-person visit directly determines whether a campaign can promise a specific clinical outcome, like "get your prescription today." Compounding pharmacy laws vary by state, which is materially relevant for brands marketing compounded hormones, GLP-1 alternatives, or custom formulations. Reproductive health data privacy laws differ significantly post-Dobbs; some states have enacted restrictions on the collection or sharing of data related to abortion-seeking, contraception, or pregnancy that affect not just clinical operations but the marketing analytics layer sitting underneath them.
A campaign landing page that is legally accurate in California implies a promise that cannot be delivered in Texas or Arkansas. Geographic targeting is not merely a media efficiency tool. It is a compliance tool.
State AG risk is no longer theoretical. The FDA's September 2025 announcement explicitly identified state attorneys general as potential parallel enforcement actors. Women's health is politically and legally active in most states right now, in ways that make it a plausible target for consumer protection enforcement even when federal action isn't the initiating force.
The influencer and affiliate dimension adds another layer that brands consistently underestimate. When a creator based in one state promotes a telehealth service available in another, the campaign simultaneously implicates the FTC's endorsement rules and the telehealth marketing restrictions of any state where the content reaches patients. The compliance chain extends to third-party promoters. Brands that treat influencer programs as lower-risk than direct advertising are reading that wrong.
The practical solution is more complex to build but substantially reduces geographic enforcement risk: geo-targeted ad sets with state-specific landing pages that tailor claims to what is actually clinically and legally deliverable in each jurisdiction. A campaign making the same promise in every state is almost certainly overpromising somewhere.
Building a Campaign Review Process That Holds Across All Four Compliance Layers Simultaneously
The central problem with how most women's health brands handle compliance is that they handle it in silos. FDA and FTC review goes through legal counsel. Platform policy goes through the media agency. HIPAA sits with the IT or privacy team. State law goes to outside counsel when something comes up. No single review process catches the interactions between those layers, and the interactions are where the exposure lives.
A compliant women's health campaign needs to pass four tests, and the tests don't run sequentially. Is the claim substantiated and properly categorized under FDA and FTC rules? Does the measurement and tracking setup avoid inadvertent PHI capture under HIPAA? Will platform filters approve the creative, and does any language substitution used to achieve that approval remain accurate and non-misleading? Are the promises made in the campaign actually deliverable in the states where the ad will run? These questions have to be asked together, by people who are aware of each other's answers.
Documentation functions as a compliance asset in this environment, not an administrative burden. The FTC's substantiation standard requires evidence to exist before the ad runs. A campaign brief that records what claims are being made, what evidence supports each claim, and what legal review concluded creates a defensible record if enforcement arrives. Given that FDA's AI surveillance can surface content retroactively, brands cannot treat older published material as grandfathered. A content audit of existing DTC materials is now a compliance necessity.
Speed and quality are not in conflict when the workflow is designed correctly. A review process that routes claims through structured evaluation before production begins is faster in aggregate than producing content and revising it under legal pressure. The compounding cost of late-stage legal revisions, delayed launches, and platform rejections that force creative rework exceeds the cost of a front-end review workflow by a meaningful margin. I've watched brands learn this the hard way.
Purpose-built content operations platforms that embed editorial standards and compliance checkpoints into the production workflow, rather than treating compliance as a post-production gate, reduce cycle time and generate the documentation trail that regulators expect to see. That kind of tooling is not a luxury for large enterprise brands. It is the operational infrastructure that makes defensible content production sustainable at scale for any brand with meaningful DTC volume.
The defensible campaign is not a minimalist one. It is not a campaign that says as little as possible to avoid triggering review. It is a campaign where every claim has a documented evidentiary basis, every tracking decision has a privacy rationale, every creative choice has a platform-policy logic, and every geographic promise is tied to what is actually available and legally permissible in that state. That is what compliance looks like when it is built in, not bolted on.
