Law firm reputation management: claims, reviews, and risk

What to take away

Law firm reputation management starts with the statements a firm can defend. That includes the bio page, the directory listing, the review response, the podcast appearance, and the quote in a trade publication. It also includes claims the firm never made but hosts: an outdated Avvo profile, a superseded Chambers band, a former associate still listed as a partner.

The work is not removal of criticism. It is keeping public understanding close to what the firm can prove, and knowing which authority governs each gap.

Claim classes specific to law firms

Legal marketing carries claim types that other industries do not. An admission is a fact with a date and a jurisdiction. A matter result is a fact with a context that usually disappears when it travels.

Two failure modes recur. A real result becomes misleading when the amount travels without the jurisdiction, the procedural posture, or the disclaimer the state bar requires. A correct credential becomes false the day it lapses, and nobody notices because the page was accurate when it was written.

Set an expiry date on every claim at the moment you approve it. A claim with no expiry is a claim nobody owns.

The FTC review rule is a floor, not the program

The Federal Trade Commission's consumer review rule, the Rule on the Use of Consumer Reviews and Testimonials, is codified at 16 C.F.R. Part 465 and took effect October 21, 2024. It covers several topics related to reviews:

The federal rule does not replace state bar advertising rules, platform terms, or the professional conduct rules that govern attorney communications. ABA Model Rules 7.1, 7.2, and 7.3 address truthful communications, advertising, and solicitation, but are models; the rules adopted in the lawyer's jurisdiction control. State examples are the California Rules of Professional Conduct 7.1–7.5; Rules Regulating The Florida Bar, Chapter 4, Subchapter 4-7; and Texas Disciplinary Rules of Professional Conduct 7.01–7.07. A review practice can clear the federal floor and still violate a state rule on testimonials or client solicitation.

Do not read a prohibited-conduct list as permission for everything it omits. Preserve the version of each authority you applied and the name of the person who applied it. When the rule changes, you need to know which responses were written under the old text.

Route impersonation, regulatory, and court events

Most reputation playbooks stop at reviews. The events that carry real legal exposure route differently.

Impersonation. A fake profile, a cloned website, a spoofed phone number, or an account posting as a named attorney. Preserve the URL, the account, the timestamp, and the screenshot with metadata intact.

Route to security and brand owners, then use the named platform channel rather than a review-report button. For a deceptive Google Business Profile, submit Google's Business Redressal Complaint Form; for Facebook or Instagram impersonation, use Meta's impersonation-reporting process. For trademark misuse, use the platform's intellectual-property complaint process, such as Meta's trademark reporting process or Yelp's intellectual-property complaint process. Keep the URL, timestamps, submission receipt, and correspondence.

Maintain a register of firm listings and reviews on Google Business Profile, Yelp, Avvo, and Justia, with an owner and a record of each platform's reporting channel. Review-management platforms such as Birdeye, Podium, and Reputation.com can centralize monitoring; verify coverage, firm ownership, access controls, and data exports before relying on one.

If the impersonation is used to solicit clients, that is a bar matter as well as a platform matter.

Regulatory contact. A bar grievance, an advertising committee inquiry, or a state attorney general letter. The primary record controls. If staff need to direct someone to file a lawyer-conduct grievance, use the jurisdiction's official channel—for example, the State Bar of California's Attorney Complaint Form, The Florida Bar's Attorney Consumer Assistance Program (ACAP), or the State Bar of Texas's Attorney Grievance Form. Route an incoming notice to the matter attorney and to bar counsel or a licensed ethics attorney in that jurisdiction. Do not draft a public statement from a press summary of a filing you have not read.

Court events. An indictment, a civil complaint, a sanctions order, a high-profile verdict. The docket is the record. Public comment should track what the docket says and nothing more.

Media inquiry about a client matter. Confirm what is on the record, what is confidential, and who is authorized to speak before any reply. A reporter's deadline is not a reason to confirm a client relationship.

Reviews: request, respond, and stay inside the rules

Decide who may ask, of whom, when, in what words, and on which platform. A neutral request does not condition anything on sentiment, does not target only likely praise, does not script the opinion, and does not hide a material connection.

Keep review hosting, solicitation, testimonial use, and lawyer advertising as separate decisions. A review that lives on a platform changes character when the firm selects it for an advertisement. Permission, context, verification, and disclosure requirements all shift at that point.

Response carries its own risk. A reviewer may disclose matter details or accuse the firm of misconduct. That does not authorize the firm to confirm the relationship, quote the file, or name opposing parties. The most restrictive applicable rule governs. Sometimes the correct response is none, because any acknowledgment causes the harm the firm is trying to avoid.

Name the authority rather than paraphrase it. California, Florida, and Texas have distinct adopted rules; the Texas rules are not a national standard. The Texas State Bar Advertising Review Committee reviews advertising under Texas rules, and The Florida Bar's Standing Committee on Advertising provides Florida-specific review and guidance. Check the relevant regulator's current rules and guidance, or consult a licensed ethics attorney in that jurisdiction, before publishing a response template.

Social accounts, email lists, and who holds the keys

Reputation work fails at the handoff between marketing and the firm's own assets. Two places it fails most.

Social accounts. A law firm social media program needs firm ownership of every profile, admin access tied to firm-controlled email, and a documented approval path for posts that make a claim. When a marketing employee leaves, the accounts should not leave with them. Audit admin lists quarterly.

Email. A legal email marketing list is a consent record, not a contact file. Keep the source of each address, the date and wording of consent, and the unsubscribe trail. CAN-SPAM sets the federal floor; state rules and bar rules on solicitation sit on top of it. A purchased list is a liability with a delivery rate.

Both assets belong to the firm. Write that into every vendor agreement.

Measure correction time, not star averages

Star averages move for reasons outside the firm's control. Platforms change scoring, remove content, delay updates, and alter visibility. A rating can rise while serious complaints recur.

Report raw counts, distribution, source, collection method, and platform actions alongside any average. An average without its denominator is a number nobody can check.

Verify the program before you rely on it

For method, the GAO evaluation design guide explains how evaluation questions, evidence needs, and design choices fit together. It is written for federal program evaluation. Use its discipline to check whether your measurement can support the conclusion you are drawing, not as proof that a marketing result is causal.

The W3C Privacy Principles statement gives designers shared vocabulary for privacy and warns against shifting privacy work onto individuals. Apply that to the data flow behind monitoring and review management. It does not replace the law, a contract, or a review of the actual configuration.

The GOV.UK technology selection guidance recommends choices that can change over time, preserve data control, address security risk, and include ownership cost. Those become useful buying questions for monitoring and review platforms. They are not private-sector mandates.

Record the tested data, roles, product versions, exceptions, and approval date. Repeat after any material change to a source, a vendor, an access list, or a rule.

Common questions

Should a law firm answer every negative review?

No. Evaluate identity, jurisdiction, confidentiality, and the facts.
Then evaluate platform policy.
Also ask whether any public response helps the reader. A response that confirms a client relationship can breach a duty the review itself did not.

Can a firm ask clients for reviews?

Often yes, but all of these factors apply:

What should be measured first?

Start with factual accuracy, days to correction, issue severity, recurrence, and confidentiality events. Also include evidence completeness. Ratings and mention volume come later, and only with their source and collection method attached.

Can an agency guarantee removal of criticism?

Treat that promise as a warning sign. Lawful opinion and policy-compliant content may stay up, and coercive or deceptive removal methods create regulatory and bar exposure that outlasts the review.

Who owns the firm's social accounts and email list?

The firm does, and the vendor agreement should say so. Keep admin access on firm-controlled email, audit the admin list quarterly, and hold the consent record for every address on the list.