Why this matters in 2025
New Zealand has long maintained a conservative approach to consumer-facing promotion of prescription medicines. In 2025, that posture tightened further for medical cannabis access providers after Medsafe/Manatū Hauora (Ministry of Health) published updated Advertising Guidance: Medicinal Cannabis (July 2025) clarifying how existing law is being interpreted and enforced across websites, social media, brochures, and other patient-facing channels.
The net effect, as several industry groups and news reports have observed, is that many of the marketing practices that clinics adopted in recent years—especially product mentions, pricing talk, condition targeting, testimonials, and “THC/CBD” messaging—are now likely to be treated as prohibited advertising.
This article explains what the guidance is, why it’s being applied so broadly, what clinics and telehealth providers can still say online, and how to rebuild your digital funnel to stay compliant—without losing legitimate patient education.
Focus keyword: New Zealand medical cannabis advertising 2025 ban
Informational only. This is not legal advice. If you’re uncertain about a specific message, campaign, or landing page, obtain New Zealand legal/compliance advice.
The regulatory foundation: why “almost everything” can become “advertising”
New Zealand’s rules come from overlapping regimes:
- Medicines Act 1981 restrictions on the advertising of medicines (including prescription medicines and unapproved medicines) and the concept of “advertising” as broadly interpreted by regulators.
- Medsafe compliance position and guidance for medicinal cannabis communications.
- ASA (Advertising Standards Authority) codes for therapeutic and health advertising, which apply to “advertisements” and impose additional requirements around claims, substantiation, testimonials, vulnerable audiences, and implied therapeutic benefit.
The Ministry of Health’s Advertising medicinal cannabis products page links to the formal guidance and signals that regulators expect organizations to align to it in practice.
External references:
What changed in 2025: the guidance (not new law) changed the risk
A key point for providers: the July 2025 document is guidance—but guidance is how enforcement reality is set. It provides examples of what Medsafe considers acceptable vs unacceptable, and it frames many routine clinic communications as “advertising” when they are accessible to the public.
Reporting (industry and international press) described the guidance as effectively prohibiting most public marketing by clinics.
Industry/news context:
Practical takeaway: If your content is public (indexable web pages, paid ads, organic social posts, downloadable brochures, public webinars), assume the regulator may treat it as advertising—even if your intention is “education.”
The heart of the “ban”: what clinics should treat as prohibited
While every fact pattern matters, the 2025 guidance strongly signals risk for the following categories of content when presented publicly.
Public-facing references that could be read as promoting specific products, “THC” or “CBD” products, strengths, formats, or “what we stock” can be interpreted as advertising a medicine—especially where those products are prescription-only or unapproved medicines.
This includes:
- “We offer THC oils / CBD flower” style statements
- Highlighting specific brands, SKUs, strengths, or dosing ranges
- “Dispensary menus,” “available products,” or inventory pages
- “New product drop” posts on social
Condition-led marketing and implied therapeutic benefit
Condition targeting can quickly become a therapeutic claim. Examples that are likely to be problematic include:
- “Treat anxiety/insomnia/pain with…”
- “Works for ADHD/PTSD”
- Before-and-after narratives
- “Clinically proven” framing in a patient acquisition context
Even without explicit claims, implication matters. Words like relief, effective, fast-acting, safe alternative, or no side effects can be interpreted as therapeutic representations.
Testimonials, reviews, and influencer content
If testimonials imply therapeutic benefit, they can breach ASA rules and may also be viewed as advertising medicines.
High-risk examples:
- “This oil cured my migraines”
- “Finally sleeping through the night thanks to…”
- Influencer discount codes and tracked links to booking pages
Even “patient story” content can be treated as advertising if it’s used as promotional material.
Pricing, discounts, “specials,” and booking inducements
Anything that looks like a retail promotion (specials, bundles, limited-time offers, referral bonuses) may increase the likelihood that regulators interpret your activity as advertising medicines rather than providing health services.
“Access clinic” funnels that pre-qualify for a product outcome
Be cautious about funnels that promise an outcome like:
- “Get approved today”
- “Guaranteed prescription”
- “Instant eligibility check”
Those messages can be construed as promotional and inconsistent with clinical decision-making.
What providers can still say online: the “permitted communications” lane
The good news is that the guidance does not prohibit all communications. It draws a practical line around factual, non-promotional information, and recognizes that certain communications belong in professional or private clinical settings.
Below are the main categories that remain generally workable if you execute carefully.
You can usually publish factual information about your clinic as a health service, such as:
- Who you are, where you operate, and clinician credentials
- Appointment types (in-person/telehealth), hours, service areas
- Transparent consultation fees and refund/cancellation policies
- High-level description of clinical assessment process
How to keep it non-promotional:
- Avoid product lists and brand references
- Avoid promises of prescriptions or approvals
- Avoid condition-targeted landing pages that read like treatment claims
General educational content that avoids product promotion or claims
Education is still possible, but it must be structured to avoid becoming an ad.
Safer formats include:
- Explaining how the Medicinal Cannabis Scheme works at a high level
- The difference between approved vs unapproved medicines (neutral tone)
- What a consultation involves and what questions to expect
- Patient rights, safe storage, travel considerations, and follow-up expectations
What to avoid in educational content:
- Calls-to-action that convert the piece into a promotional landing page
- “Best product for X” framing
- Dosing suggestions presented as general advice to the public
In-consultation communications
The guidance recognizes that information provided as part of a clinician–patient consultation is not the same as public advertising.
This supports a compliant model where:
- Public site provides neutral service information and education
- Product-specific discussions happen after intake and clinical assessment
Health-care-professional to health-care-professional (HCP-to-HCP) channels
The guidance describes limited circumstances where manufacturers/suppliers can communicate product education to HCPs (often on request and in controlled contexts). For clinics, the key lesson is to segregate professional materials:
- Use gated HCP portals where appropriate
- Avoid repurposing professional slide decks for public social content
- Ensure invite-only webinars are actually controlled and not widely promoted with product claims
Patient education materials (already a patient, not a prospect)
Patient-facing materials can be permissible when they are clearly part of ongoing care:
- How to use a prescribed product safely (as directed)
- Side effect monitoring instructions
- Follow-up schedules and safe storage
Important nuance: If these materials are publicly downloadable and used as marketing collateral, they can be treated as advertising. Consider hosting them inside a patient portal or providing them after appointment booking.
How to redesign your website and appointment funnel for compliance
Clinics that previously relied on SEO “condition pages” and product-driven CTAs should plan a rebuild that separates:
1) Public acquisition content (non-promotional, service-oriented)2) Private clinical content (patient-specific, consult-based)
Step 1: Rework public pages into “service + process” pages
Recommended page architecture:
- “How consultations work” (what to bring, how long, what clinicians consider)
- “Fees” (consult fees, follow-up fees, admin fees)
- “Eligibility and clinical decision-making” (avoid guaranteeing outcomes)
- “What to expect after your appointment” (prescription pathway explained neutrally)
Language swaps that help:
- Replace “Get prescribed” with “Book a clinical consultation”
- Replace “approved” with “clinician assessment and treatment planning”
If you had a product list:
- Remove public access
- Move to patient portal or clinician-provided documents
- If you operate an associated pharmacy, be careful: pharmacy pages should not become a product catalogue for controlled drugs or prescription medicines
Step 3: Clean up SEO strategy
SEO can remain valuable, but shift from “product/condition conversion pages” to:
- Regulatory explainers (how the scheme works)
- Safety and patient rights resources
- Neutral health-system navigation (“talk to your GP,” “what questions to ask”)
Keep calls-to-action factual:
- “Request an appointment”
- “Contact the clinic”
Social can be used for:
- Clinic updates (hours, new clinician joins, location changes)
- Health literacy content that avoids product claims
- Links to neutral regulatory resources
Avoid:
- Patient success stories that imply a therapeutic outcome
- “THC/CBD education” that reads like product benefit marketing
- Influencer partnerships that use tracked links, promo codes, or “ask me how to get X” scripts
Step 5: Audit affiliate, influencer, and referral arrangements
If you use third parties:
- Ensure they do not publish claims you cannot publish
- Provide a written “do-not-say” list
- Prohibit promo codes that look like inducements
- Require pre-approval of scripts and posts
Marketing compliance is now intertwined with privacy compliance—especially for clinics collecting health information through booking and intake tools.
A. Website disclosures (minimum expectations)
- Privacy statement that explains what personal information you collect, why, how it’s used, who it’s shared with, and how users can access/correct it.
- Cookie/analytics disclosure explaining tracking technologies and purposes.
- Marketing consent language for newsletters/SMS (separate from appointment communications).
Primary sources:
B. Cookies, pixels, and retargeting (risk management)
If you use Meta Pixel, Google Ads tags, retargeting, or conversion APIs, treat this as high sensitivity because clinic traffic can imply health status.
Checklist:
- Document trackers: maintain an internal register of cookies/pixels, purpose, vendor, and data shared.
- Consent where appropriate: present a clear cookie banner with choices (e.g., necessary vs analytics vs marketing).
- Disable marketing pixels by default until consent is given (best practice for sensitive contexts).
- Avoid sensitive event parameters: do not pass symptom/condition fields, appointment reasons, or other health data into ad platforms.
- Limit retargeting audiences: consider disabling retargeting entirely for intake/booking pages, or at minimum exclude URL paths that reveal health-related intent.
Health information is regulated under the Health Information Privacy Code 2020 and the Privacy Act 2020.
Checklist:
- Data minimisation: only collect information needed for clinical assessment and booking.
- Purpose clarity: each intake question should map to a legitimate clinical or administrative purpose.
- Collection notice: before submission, explain what you collect and why, who will see it, and how it’s stored.
- Role-based access: restrict who can access intake answers (admin vs clinician).
- Retention schedule: define how long you keep leads who do not become patients.
- Cross-border storage: if using overseas SaaS (CRM, scheduling, form tools), confirm security and contractual protections.
- Breach response: have an internal plan for privacy breach triage and notification.
D. Email and SMS marketing: consent and unsubscribe (anti-spam)
New Zealand’s anti-spam regime (UEMA) requires consent and functional unsubscribe mechanisms for commercial electronic messages.
Checklist:
- Separate consent: appointment reminders are not the same as marketing; don’t treat patient admin consent as promotional consent.
- Identify the sender clearly in every message.
- Unsubscribe must be easy and processed promptly.
Primary source:
Enforcement risk: what triggers complaints and regulator attention
In practice, enforcement is often complaint-driven. The most common triggers in this category tend to be:
- Competitor complaints about aggressive digital ads
- Consumer complaints about therapeutic promises or “guaranteed outcomes”
- Public posts featuring product names, prices, or “what we can prescribe” claims
- Influencers who overstate benefits or appear to sell medicines directly
Also consider that the ASA process can be fast-moving, public, and reputationally costly even before a regulator takes action.
If you’re a clinic operator, compliance lead, or agency supporting clinics, a structured sprint helps.
Days 1–7: Triage and takedowns
- Remove product menus, price-per-gram style content, and brand references from public pages
- Pause paid ads that reference THC/CBD, conditions, or outcomes
- Freeze influencer content until reviewed
Days 8–15: Rewrite the public site
- Convert “condition pages” into neutral patient education pages (or remove them)
- Rebuild appointment CTAs around “clinical consultation” not “prescription access”
- Implement cookie consent and update privacy notices
Days 16–30: Governance and training
- Create an internal communications policy (what is allowed, what is prohibited)
- Train front-desk staff and social media managers (DMs count as communications)
- Add pre-publication review for posts, landing pages, brochures, and PR
Key takeaways for providers and compliance teams
- The New Zealand medical cannabis advertising 2025 ban is best understood as a shift in enforcement posture driven by Medsafe/Ministry of Health guidance—not a single new statute.
- Assume public-facing content about prescription products, THC/CBD, pricing, and patient outcomes can be treated as advertising.
- Keep public communications factual and non-promotional; move product-specific conversations into the clinical consultation and patient portal.
- Treat cookies/retargeting and intake forms as a privacy compliance priority under the Privacy Act 2020 and Health Information Privacy Code 2020.
- Audit third parties (influencers, affiliates, agencies): you can inherit their compliance problems.
Keep your clinic compliant as guidance evolves
Regulatory guidance and advertising standards can shift quickly, especially as regulators respond to new marketing tactics.
If you need help tracking rule changes, translating guidance into website-safe copy, and operationalizing privacy and marketing controls, use https://cannabisregulations.ai/ to support your cannabis compliance program—so your clinic can focus on patient care while staying aligned with licensing and advertising regulations.
