A harsh review stings, and the instinct to fight back — with a contract clause, a lawyer letter, or a detailed public rebuttal — is strong. Each of those instincts carries legal risk of its own. Federal and California law protect consumers' right to review, anti-SLAPP statutes punish weak defamation suits, and confidentiality duties follow professionals onto Yelp and Google. Here is how to respond without turning one bad review into a legal problem.
You cannot contract reviews away
The federal Consumer Review Fairness Act, 15 U.S.C. § 45b, voids any form-contract provision that restricts a customer's ability to review your products, services, or conduct, imposes penalties for doing so, or claims ownership of the review's intellectual property. Using such clauses is an unfair trade practice enforceable by the FTC and state attorneys general. California got there first: Civil Code § 1670.8 prohibits contracts for the sale or lease of consumer goods or services from waiving a consumer's right to make statements about a seller and — importantly — prohibits threatening to enforce such a clause, with a civil penalty of up to $2,500 for a first violation. Audit your terms of service, intake forms, and settlement templates for prohibited non-disparagement language aimed at ordinary consumers.
Suing the reviewer: the anti-SLAPP problem
Defamation requires a false statement of fact. Most negative reviews are pure opinion ("rude staff," "not worth the money"), and pure opinion is constitutionally protected no matter how unfair it feels. A review is potentially actionable when it asserts specific false facts — "they billed me for work never performed," "they operate without a license" — and you can prove falsity and the other elements of a defamation claim.
California raises the stakes with its anti-SLAPP statute, Code of Civil Procedure § 425.16. A consumer review on a public platform may constitute protected speech on an issue of public interest, allowing a sued reviewer to file a special motion to strike at the outset. If the reviewer shows that the claim arises from protected activity, you must show a probability of prevailing with admissible evidence; otherwise, the claim is dismissed and you pay the reviewer's attorney fees — a common and expensive ending for reflexive defamation suits. Aggressive cease-and-desist letters can also backfire because they increasingly end up posted publicly. Litigation is the right tool only for provably false factual claims causing real damage, while fake reviews from competitors may raise separate claims under unfair competition law — territory covered by our business litigation practice.
Confidentiality does not stop at the review page
A reviewer can say almost anything about you; you cannot necessarily say anything about them. Health care providers responding to patient reviews have violated HIPAA merely by confirming the reviewer was a patient, and enforcement actions have followed — the same caution applies to therapists, dentists, and medical spas. Attorneys owe duties of confidentiality that outlast the engagement, and accountants, financial advisors, and other professionals operate under similar rules. Even outside licensed professions, publicly disclosing a customer's personal details, private communications, or transaction history in a rebuttal can create privacy and contract claims. The safe pattern: respond generally, never confirm or deny a specific relationship where confidentiality applies, and move specifics offline.
The response playbook that works
- Wait before writing. Draft nothing while angry; have a second person review anything you post.
- Keep it short, factual, and professional. Thank the reviewer, state your general practices, and offer a direct contact to resolve the issue. Prospective customers read your response as a sample of doing business with you.
- Never disclose customer specifics. No account details, no health or legal information, no "what really happened" narratives naming the customer.
- Use platform removal tools for policy violations. Reviews containing threats, hate speech, or content about a different business often violate platform guidelines, and a documented takedown request is free.
- Document suspected fake reviews. Screenshots, timestamps, and evidence the poster was never a customer support both platform removal and, where warranted, legal claims.
- Never post fake positive reviews in response. Fabricated reviews and undisclosed insider reviews violate FTC rules and California's unfair competition and false advertising laws — buying good reviews creates far more liability than any bad review.
Build the compliance layer once
Review risk is manageable with a little infrastructure: contract templates scrubbed of gag clauses, a written response policy identifying who replies and what they may say, confidentiality training for anyone with posting access, and a standing rule that legal threats go through counsel first. Our regulatory compliance practice folds these items into a broader consumer-facing checkup — usually in less time than one bad review thread consumes.
Talk to a California business attorney
Whether you are staring at a damaging review, a suspicious competitor posting, or a contract clause you are no longer sure is legal, a free consultation can sort the real options from the risky ones. Schedule a free consultation or call (949) 418-2113.
This article is attorney advertising and provides general information only. It is not legal advice and does not create an attorney–client relationship. The law changes, and this article reflects the law as of its publication date. Every situation is different — contact us to discuss how the law applies to your exact circumstances. See our full disclaimer.
