​
  • Home
  • Resources
  • Dental Website Must-Haves: What Patients, Google and the Rules Expect

DentalArticle

Dental Website Must-Haves: What Patients, Google and the Rules Expect

The must-have list for a dental website: procedure pages, booking, speed, accessibility, the HIPAA privacy notice and good faith estimate information, with what each rule says and when it applies.

On this page

A good dental website answers a patient's questions about each treatment, makes booking easy, and meets the rules that apply to a health care provider's site. In practice that means a page per procedure, named dentists, clear insurance and payment details, fast and accessible pages, a posted HIPAA privacy notice and information about good faith estimates. Patients notice: in Tebra's 2025 survey of 3,964 US adults about healthcare providers, 44% said a practice's website influences their decision [1].

The short answer: the must-have list

Direct answer

A dental website needs a page for each procedure, each dentist's name and credentials, insurance and payment details, online booking or a request form, fast pages that work on a phone, accessible design, a prominently posted HIPAA privacy notice and information about good faith estimates. Tracking tools on booking pages need the most care. Everything else is polish.

Checklist: dental website must-haves

Procedure pages that answer patient questions

Direct answer

Give every procedure its own page: implants, crowns, whitening, emergency care and anything else you offer. In Whitespark's 2026 survey of 47 local search experts, a dedicated page for each service ranked as the leading factor for local organic rankings and second for AI search visibility [2]. Each page should say what happens, how long it takes, what it costs and who does it.

Write each page for the patient first. Google's own advice is to "use words that people would use to look for your content, and place those words in prominent locations on the page, such as the title and main heading of a page" [3].

Match the pages to your Google Business Profile. Google says a profile may let you add services with a description and a price [4]. Giving each of those services a matching page on your site is our practice, not a Google rule, but it keeps the profile and the site telling one story.

Say what treatment costs and which plans you take. Cost holds back more people from dental care than from other care: in 2023, 13% of the US population reported cost barriers to dental care, against 4-5% for other health services, and 62% of adults had private dental insurance in 2022, according to the ADA Health Policy Institute [5].

Keep every claim provable. The ADA's Code of Professional Conduct, 2025 edition, binds ADA members. It says dentists have an ethical obligation to keep their websites truthful, and that SEO techniques should comport with the Code (section 5.F.6) [6]. It lists statements "likely to create an unjustified expectation about results the dentist can achieve" among misleading ones (5.F.2), and asks general dentists to "avoid any communications that express or imply specialization" (5.I) [6].

Booking, forms and tracking

Direct answer

Put online booking or a short request form on every procedure page, and treat those pages as sensitive. HHS guidance says tracking tools on pages where people schedule appointments without logging in may have access to protected health information in certain circumstances. When they do, HHS says, the tracking vendor is a business associate and a business associate agreement is required [7].

That guidance is the HHS Office for Civil Rights bulletin on online tracking by HIPAA covered entities and business associates, first issued in December 2022 and revised on March 18, 2024 [7]. On June 20, 2024, a federal court in Texas vacated one position in it: that HIPAA obligations are triggered when a tool connects a visitor's IP address with a visit to an unauthenticated public page about specific health conditions or providers [7][8]. The court said the vacatur should not be construed as limiting "the legal operability of other guidance" in the HHS document [8].

The guidance on booking pages, business associates and cookie banners still stands. HHS says a website banner asking visitors to accept or reject tracking does "not constitute a valid HIPAA authorization" [7]. The simplest setup keeps ad pixels and analytics tags off booking and form pages until counsel has reviewed the arrangement. Our guide to HIPAA marketing rules covers the ruling in full.

Speed, mobile and accessibility

Direct answer

Google uses Core Web Vitals in ranking and calls a page "good" when its LCP (main content loaded) occurs within 2.5 seconds, its INP (response to input) is under 200 milliseconds and its CLS (layout shift) is under 0.1 [9][10]. Accessibility has its own law: under Title III of the Americans with Disabilities Act, a health care provider's professional office is a public accommodation [11].

Keep speed in proportion. Google says "Core Web Vitals are used by our ranking systems," but also that "Google Search always seeks to show the most relevant content, even if the page experience is sub-par" [9]. It adds that other page experience aspects beyond Core Web Vitals "don't directly help your website rank higher in search results" [9]. Test every template on a phone, not just a desktop.

The accessibility rules are uneven. The statute lists the "professional office of a health care provider" as a public accommodation [11]. The Justice Department's guidance of March 18, 2022 says it "does not have a regulation setting out detailed standards" for web accessibility, and that businesses can currently choose how they ensure it [12].

HHS's Section 504 rule is more specific for the organizations it covers: it requires WCAG 2.1 of recipients of HHS funding. On May 11, 2026, HHS extended its compliance dates. Recipients with 15 or more employees now have until May 11, 2027, and those with fewer than 15 until May 10, 2028 [13]. Whether a practice counts as a recipient is a question for your counsel. Either way, WCAG 2.1 gives your designer one published standard to build and test against.

The notices the rules put on your website

Direct answer

Two federal rules name the website directly. HIPAA says a covered entity whose website provides information about its customer services or benefits must prominently post its privacy notice there. The No Surprises Act rule says information about good faith estimates must be prominently displayed, and easily searchable, on the convening provider's website. ADA News reports CMS's position that the rule reaches dental providers, with exceptions for some dental plans.

The privacy notice rule is 45 CFR 164.520(c)(3)(i): a covered entity that maintains a web site that provides information about its customer services or benefits "must prominently post its notice on the web site" [14]. Link it from the footer and from every form.

The good faith estimate rule is 45 CFR 149.610. Paragraph (b)(1)(iii)(A) says the information must be "prominently displayed (and easily searchable from a public search engine)" on the convening provider's or convening facility's website [15]. In a clarification the ADA received from CMS, reported by ADA News on February 28, 2023, dental providers are "generally not required to provide a good faith estimate" to someone enrolled in an excepted benefit plan such as a limited-scope dental plan [16]. Ask your counsel how that applies to your patients.

Trust: dentists, reviews and patient photos

Direct answer

Show who treats patients: each dentist's name, photo, degree and training, and a byline on clinical articles. Google says its systems give even more weight to content with strong experience, expertise, authoritativeness and trust on health topics, and that this is easier to see when it's clear who created the content [17]. Treat reviews, testimonials and patient photos as regulated content.

Google also encourages "adding accurate authorship information, such as bylines to content where readers might expect it" [17].

Under the FTC's Endorsement Guides, updated June 29, 2023, a testimonial "will likely be interpreted as representing that the endorser's experience is representative" of what others will achieve [18][19]. Choose stories that reflect typical results, in line with the ADA Code's limit on unjustified expectations [6].

Treat patient photos as patient information. HIPAA lists "full face photographic images and any comparable images" among its identifiers [20], and its marketing rule requires a covered entity to obtain authorization for any use or disclosure of protected health information for marketing, with narrow exceptions [21]. We found no HHS statement on marketing photos specifically, so ask counsel before a patient's face goes on your site.

Write down how the practice replies to reviews. The ADA advises replying in very broad "all patient" terms and says: "Never reference a specific person or incident." [22] See how patients choose a dentist for what reviews do to the decision.

Local SEO basics on the site

Direct answer

Make the website and the Google Business Profile tell the same story. Put the practice's name, address and phone number on the site as crawlable text that matches the profile exactly. Whitespark's 2026 expert survey lists a website without a crawlable name, address and phone number among the negative factors for map rankings, and HTML that matches the profile among the positive ones [2].

Link the profile to the page that best matches it. Whitespark's experts rank keywords in the title tag of that landing page fourth among local organic factors [2]. The map side of the work is in our guides to the Google Business Profile for dentists and to dental local SEO.

Frequently asked questions

What should a dental website include?

A page for each procedure, the dentists and their credentials, insurance and payment details, online booking or a request form, fast mobile pages, accessible design, a prominently posted HIPAA privacy notice and information about good faith estimates where that rule applies. Add real reviews handled within the FTC's and Google's rules, and a name, address and phone number that match your Google Business Profile exactly.

Does a dental website need online booking?

Booking or a short request form is the most direct path from a procedure page to an appointment, so put one on every procedure page. Set those pages up carefully: HHS guidance says tracking tools on pages where people schedule appointments may have access to protected health information in certain circumstances, and that a tracking vendor with that access is a business associate that needs an agreement [7].

Do dental websites need to meet accessibility standards?

Title III of the Americans with Disabilities Act lists a health care provider's professional office as a public accommodation [11], and the Justice Department says it has no regulation setting detailed web standards [12]. HHS's Section 504 rule requires WCAG 2.1 of HHS-funded recipients, from May 11, 2027 for those with 15 or more employees and May 10, 2028 for smaller ones [13]. Ask counsel which rules reach your practice; WCAG 2.1 is a sound standard to build to.

How fast should a dental website load?

Aim for Google's "good" Core Web Vitals thresholds: LCP within 2.5 seconds, INP under 200 milliseconds and CLS under 0.1 [10]. Google uses Core Web Vitals in ranking, but it says it still shows the most relevant content even when page experience is sub-par [9]. Speed supports a strong, relevant page. It does not replace one, so fix the content first.

Is Google Analytics on a dental website a HIPAA problem?

No tracking tool carries a HIPAA approval; HHS's guidance is about what a tool can see. It says trackers on user-authenticated pages generally have access to protected health information and booking pages may too; where they do, the vendor is a business associate and an agreement is required [7]. In July 2023 the FTC and HHS named Google Analytics in a letter to about 130 hospital systems and telehealth providers, not dentists [23]. Ask counsel to review your setup.

Build the site against what already ranks

Every item on this list can be measured, and so can your competitors. Before we build a practice's site, we measure the pages and profiles already on page one for your treatments, then match and exceed them: see our web design services and dental SEO work. Our first page guarantee is offered after an assessment, for a phrase list agreed in writing, and its written terms measure the share on page one separately in each of the three places: the map results, the organic results and Google's AI answers. A free SEO audit shows where your site stands today.

This is general information, not legal advice.

Sources

  1. Tebra, "Top 5 takeaways about what patients really want in 2025", updated October 14, 2025 www.tebra.com/theintake/patient-experience/tips-and-trends/patient-survey-questions-preferences-habits
  2. Whitespark (Darren Shaw), "2026 Local Search Ranking Factors", 2025-11-06 whitespark.ca/local-search-ranking-factors/
  3. Google Search Central, "Google Search Essentials", updated 2025-12-10 developers.google.com/search/docs/essentials
  4. Google Business Profile Help, "Manage your services on your Business Profile", n.d. (as served 2026-09-27) support.google.com/business/answer/9455399?hl=en
  5. ADA Health Policy Institute, "National Trends in Dental Care Use, Dental Insurance Coverage, and Cost Barriers", September 2024 www.ada.org/-/media/project/ada-organization/ada/ada-org/files/resources/research/hpi/national_trends_dental_use_benefits_barriers_2024.pdf
  6. American Dental Association, "Principles of Ethics & Code of Professional Conduct" (2025 edition, advisory opinions revised to October 2024), announced February 24, 2025 www.ada.org/-/media/project/ada-organization/ada/ada-org/files/about/2025_code_of_ethics_full.pdf
  7. US Department of Health and Human Services, Office for Civil Rights, "Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates", December 2022, revised March 18, 2024 (Internet Archive capture of 2026-09-04) www.hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking/index.html
  8. US District Court for the Northern District of Texas (Judge Pittman), "American Hospital Association v. Becerra", No. 4:23-cv-1110, June 20, 2024 caselaw.findlaw.com/court/us-dis-crt-n-d-tex-for-wor-div/116301785.html
  9. Google Search Central, "Understanding page experience in Google Search results", updated 2026-09-22 developers.google.com/search/docs/appearance/page-experience
  10. Google Search Central, "Understanding Core Web Vitals and Google search results", updated 2025-12-10 developers.google.com/search/docs/appearance/core-web-vitals
  11. 42 U.S.C. §12181(7)(F), via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/uscode/text/42/12181
  12. US Department of Justice, "Guidance on Web Accessibility and the ADA", March 18, 2022 www.ada.gov/resources/web-guidance/
  13. US Department of Health and Human Services, Federal Register notice extending the Section 504 web accessibility compliance dates (91 FR 25496), May 11, 2026 www.federalregister.gov/documents/2026/05/11/2026-09266/extension-of-compliance-dates-for-nondiscrimination-on-the-basis-of-disability-accessibility-of-web
  14. 45 CFR 164.520, via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/cfr/text/45/164.520
  15. 45 CFR 149.610, via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/cfr/text/45/149.610
  16. ADA News, "ADA receives clarification on No Surprises Act", February 28, 2023 adanews.ada.org/ada-news/2023/february/ada-receives-clarification-on-no-surprises-act/
  17. Google Search Central, "Creating helpful, reliable, people-first content", updated 2025-12-10 developers.google.com/search/docs/fundamentals/creating-helpful-content
  18. US FTC, press release announcing the updated Endorsement Guides (16 CFR Part 255), June 29, 2023 www.ftc.gov/news-events/news/press-releases/2023/06/federal-trade-commission-announces-updated-advertising-guides-combat-deceptive-reviews-endorsements
  19. 16 CFR 255.2, via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/cfr/text/16/255.2
  20. 45 CFR 164.514, via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/cfr/text/45/164.514
  21. 45 CFR 164.508, via Cornell Legal Information Institute, accessed 2026-09-27 www.law.cornell.edu/cfr/text/45/164.508
  22. American Dental Association, "Negative Online Reviews", undated www.ada.org/resources/practice/practice-management/35_socialmedia_negativereviews
  23. US FTC, "FTC and HHS Warn Hospital Systems and Telehealth Providers about Privacy and Security Risks from Online Tracking Technologies", July 20, 2023 www.ftc.gov/news-events/news/press-releases/2023/07/ftc-hhs-warn-hospital-systems-telehealth-providers-about-privacy-security-risks-online-tracking
Start Here

Ready to rank on page one?

Answer a few short questions, and we reply the same business day and tell you where your business stands.

Step 1

Answer to the best of your ability.

Do you currently have a website?⁠