How to Respond to Negative Reviews as a UK Dental Practice

Never confirm in a public reply that the reviewer is a patient. In the UK that can be a data breach. Health information is special category data under UK GDPR and the Data (Use and Access) Act 2025. Respond within 24 to 48 hours, stay calm, and move the detail to a private channel. A well-handled negative review can build more trust than a flawless five star profile. Do not report a review just for being negative. Report only genuine policy breaches.

When a UK dental practice responds to a negative review, the single most important rule is this: never confirm, deny, or discuss whether the reviewer is a patient, and never mention their treatment. Doing so in a public reply can breach patient confidentiality even when the reviewer named themselves and described their own treatment first.

This is the point that most online advice misses, because most of it is written for the United States. In the UK, the fact that someone is your patient is itself their personal data, and health information is treated as one of the most protected categories of all.

A dental practice can respond to negative reviews, and should. The skill is doing it in a way that is warm and professional without disclosing anything the law protects. This guide sets out the rule, the reasoning, and the wording.

Why confidentiality applies even when the patient spoke first

It feels intuitive that if a patient publicly writes "I had three fillings and it was painful", the practice can reply about those fillings. In UK law, it cannot. The patient is entitled to disclose their own information. The practice is not, because the duty of confidentiality belongs to the practice regardless of what the patient chooses to reveal.

Health information is special category personal data under UK GDPR. That status was carried forward and reinforced by the Data (Use and Access) Act 2025, which received Royal Assent on 19 June 2025 and amends the UK data protection framework while keeping the strictest controls on special category data such as health. Confirming a clinical relationship in public, or referring to treatment, processes that data without a lawful basis.

On top of the data protection duty, the General Dental Council requires registrants to maintain patient confidentiality and behave professionally at all times. Breaching confidentiality in a public reply can lead to a fitness to practice concern, quite separately from any data protection issue.

A method for responding to any negative review

The same five step approach works for almost every negative review, from a fair complaint to an unfair one.

1. Respond quickly, within 24 to 48 hours. A prompt, calm reply signals that the practice takes feedback seriously. Prospective patients reading later judge the practice on the response as much as the review.
2. Stay calm and never argue. The reply is not really written for the reviewer. It is written for the next person reading, who is deciding whether to trust the practice. A defensive or argumentative reply loses that reader instantly.
3. Acknowledge the feedback in general terms. Thank the person for taking the time, and express genuine regret that their experience fell short, without accepting a specific version of events and without admitting liability.
4. Do not disclose anything confidential. No confirmation that they are a patient, no reference to treatment, no clinical detail, no dates. This is the hard part and the non-negotiable one.
5. Move it offline. Invite the person to contact the practice manager directly, by name and with a real contact route, so the substance can be dealt with properly and privately.

Every template later in this guide is built on those five steps.

What never to put in a public reply

Some of these are legal risks, some are reputational, and several are both. None of them belong in a public response.

• Confirmation that the person is or was a patient. This is the confidentiality line, and it is crossed the moment a reply says "when you visited us" or "your appointment".
• Any clinical detail. The treatment, the diagnosis, what was recommended, what was declined. Even correcting a factual error about treatment discloses treatment.
• Dates, times, or which clinician was involved. All of it is identifying information tied to health data.
• A rebuttal of the patient’s account. Publicly disputing what happened reads as defensive and, if it involves clinical facts, breaches confidentiality at the same time.
• Anything that admits legal liability. Expressing regret that someone had a poor experience is fine. Accepting fault for a specific clinical outcome is a matter for your complaints process and your indemnifier, not a Google reply.
• Promotional language. A review response is not a marketing slot. Offers, links, or a pitch for other treatments read as tone deaf under a complaint.

GDPR-safe response templates

Each template below is confidentiality safe. None confirms a clinical relationship or mentions treatment. Replace only the bracketed contact details, and adjust the tone to sound like your practice rather than a script.

For a general negative review

"Thank you for taking the time to share your feedback. We’re sorry to hear you were not happy, and we take all concerns seriously. We’d welcome the chance to understand more and put things right. Please contact our practice manager at [email or phone] so we can look into this properly."

For a review that names a clinical complaint

"Thank you for your feedback, and we’re sorry your experience did not meet the standard we aim for. We’re not able to discuss any individual details in a public forum, but we would genuinely like to look into your concerns. Please get in touch with [name], our practice manager, on [email or phone]."

Notice this template does not engage with the clinical complaint at all. That is deliberate. Engaging would disclose treatment.

For a review you believe is unfair or inaccurate

"We’re sorry to read this, as it does not reflect the standard of care we work hard to provide. We can’t discuss specifics publicly, but we take feedback like this seriously and would like the opportunity to understand what happened. Please contact our practice manager at [email or phone]."

Resist the urge to defend. The measured tone does more for the practice with future readers than any rebuttal could.

For a review you suspect is fake

Do not accuse the reviewer publicly. Respond neutrally, in case it is genuine, and separately report the review to Google if you have grounds.

"We take all feedback seriously, but we don’t have any record that matches this experience. If you believe you have visited us, please contact our practice manager at [email or phone] so we can understand and address your concerns."

When a review is fake, and what you can do

A genuinely fake review, from someone who was never a patient, from a competitor, or from a former employee, does breach Google policy and can be reported. An honest negative review from a real patient cannot, however unfair it feels.

To report a review, flag it in your Google Business Profile, select the policy it breaches, and if you have evidence such as an inconsistency that shows the person was never a patient, keep a note of it. For the full reporting process and what Google will and will not remove, see our guide to Google review policies for dentists. Reporting is free and there is never a need to pay a removal service.

One caution rooted in the DMCC Act. Do not respond to a negative review by offering the person anything to remove or change it. An incentive to alter a review is a banned practice under the DMCC Act 2024, and pressuring a patient to take a review down can itself breach Google policy.

The best response is the one you never have to write

Most negative reviews come from a concern that went unresolved and escalated after the patient left. The practices that receive the fewest negative reviews are usually the ones that make it easy to complain privately first.

Two things help more than any reply.

• A visible, easy complaints route. When patients know how to raise a concern directly, many use it instead of posting publicly. A clear complaints procedure is also a GDC requirement.
• A proactive follow-up after significant treatment. A short check-in after surgery or complex work catches discomfort and misunderstanding before either becomes a public review.

Both work by giving an unhappy patient somewhere better to go than Google. Neither involves filtering who is asked for a public review, which would be review gating. The private route is offered to everyone, alongside the public one, not instead of it.

Summary

Responding to a negative review as a UK dental practice comes down to one discipline: be warm and professional in public, and keep every specific detail private. Never confirm that the reviewer is a patient, never mention treatment, respond within a day or two, and move the substance to a direct conversation with the practice manager. Health information is special category data under UK GDPR and the Data (Use and Access) Act 2025, and the duty of confidentiality stays with the practice even when the patient has spoken first. Handled this way, a negative review becomes a visible demonstration that the practice listens, which is often more persuasive to a prospective patient than an unbroken run of five star reviews.

Sources

• Information Commissioner’s Office, special category data guidance
• Data (Use and Access) Act 2025, Royal Assent 19 June 2025
• General Dental Council, Standards for the Dental Team, confidentiality
• Google, Report inappropriate reviews, Business Profile Help