Yes, a lawyer can respond to a Google review. No rule forbids posting a reply. The trap is content: confidentiality duties under rules like ABA Model Rule 1.6 can cover even the fact that someone was a client, and they do not evaporate because the client posted first. The safe pattern is a generic, non-confirming response that discloses nothing. And the better first move is often not a response at all: many law-firm reviews come from opposing parties or people who were never clients, and those may violate Google's policies and be reportable through Google's official process.
This guide is not legal advice, and none of it substitutes for your own reading of your state's rules or a call to your bar's ethics line. What it does cover: why the obvious replies are the dangerous ones, what the restrained playbook looks like, response templates that never confirm a client relationship, and the flag-first alternative that most firms skip.
The confidentiality bind, in plain terms
A doctor, a plumber, or a restaurant owner can reply to a one-star review with "I'm sorry your visit went badly, here's what happened on our end." A lawyer often cannot, because the duty of confidentiality is broader than attorney-client privilege. Depending on your jurisdiction's version of Rule 1.6, protected information can include the identity of the client and the bare fact that a representation existed.
That produces the bind:
- If you reply "I'm sorry your case did not go the way you hoped," you have just confirmed the reviewer was a client.
- If you reply "this person was never our client," you have implied that everyone you do not say that about was a client, and you have started down the road of confirming or denying relationships on demand.
- If you correct the facts ("we advised against that settlement"), you are discussing a client matter in public, which is the clearest breach of the three.
A negative review generally does not count as the kind of controversy that permits a lawyer to reveal client information in self-defense. Whether a specific exception applies in a specific situation is a judgment call for you as counsel, not something a marketing guide can settle.
What ABA Formal Opinion 496 says (at a high level)
The ABA addressed this exact scenario in Formal Opinion 496 (2021), on responding to online criticism. Without quoting it, the shape of the guidance is restraint. The options it discusses include not responding at all, asking the platform to take the post down, requesting that the poster take the conversation offline, and responding in a way that does not confirm any professional relationship or disclose any information relating to a representation.
Two cautions before you act on that summary. First, it is a summary: read the opinion itself. Second, ABA opinions interpret the Model Rules, and your state may have adopted different language for Rule 1.6 and for the advertising and solicitation rules in the 7.1 to 7.3 range. Confirm the approach with your own bar before making it firm policy.
Non-confirming response templates
These templates share one property: they read identically whether the reviewer was a ten-year client or a total stranger. That symmetry is the point. If your replies to clients and non-clients look different, the difference itself discloses who your clients are.
Template 1: the standard non-confirming reply
"Thank you for taking the time to share this. Professional confidentiality obligations prevent us from discussing whether any person is or was a client, or any details of any matter. We take feedback seriously and would welcome the chance to talk directly: please contact our office at [phone or email]."
Template 2: when the review contains factual claims you cannot rebut publicly
"We are sorry to read this. Because we owe strict confidentiality to anyone who consults or retains our firm, we cannot confirm any relationship or respond to specifics here, even where we believe a full picture would look different. Anyone with a concern about our firm is invited to contact [name] directly at [contact]."
Template 3: the minimal version
"Thank you for the feedback. Confidentiality rules prevent us from commenting on any individual or matter in a public forum. We invite you to contact our office directly so we can listen and respond properly."
Keep replies to this length. Longer responses drift toward specifics, and specifics are where breaches live. Post the same style of reply on every review you answer, positive ones included, so no pattern emerges.
The move most firms skip: check whether the review belongs there at all
Law is an adversarial business, and law-firm review profiles reflect it. A meaningful share of negative reviews on legal profiles come from opposing parties, the other side's relatives, prospects the firm declined, or people who confused one firm with another. Those are not protected client feedback. Reviews from people with no genuine client experience, conflict-of-interest reviews from adverse parties, fake-profile reviews, and harassing or off-topic content can all be reported to Google under its content policies, of which there are eight relevant violation categories.
The scale of this is measurable. In ReviewTactic's removal-scan study across 15,954 business profiles and 369,688 negative reviews, 24.3% of negative reviews broke at least one Google policy, and 81.8% of businesses had at least one policy-violating review on their profile. Google itself removed more than 292 million reviews and tightened its policies in April 2026, so policy-based reporting is not a long shot; it is the designed mechanism.
Flagging also sidesteps the confidentiality bind entirely. Reporting a review to Google through the official dispute process is a private submission, not a public statement, so you are not confirming or denying anything in front of an audience. If the review is removed, no response is needed. If it stays, you fall back to a non-confirming reply.
One boundary to be clear about: this only works for reviews that actually violate a policy or are demonstrably false. A genuine negative review from a real client is not removable, and no one can promise otherwise. Services that claim they can are running a documented con; see how the "guaranteed removal" scam works before paying anyone who leads with certainty.
What not to do
| Tempting move | Why it backfires |
|---|---|
| Confirm or deny that the reviewer was a client | Either answer can disclose protected information, and doing it once creates pressure to do it every time |
| Correct the record with case details | Discussing a matter publicly is the clearest form of breach, and a review is generally not a self-defense trigger |
| Reply angrily or threaten a defamation suit in the comments | It reads badly to prospects, hardens the reviewer, and litigation threats belong in a demand letter, not a review reply. Whether a review is actionable at all is a separate question; see when a negative review may be defamation |
| Have staff or friends post counter-reviews | Fake engagement violates Google's policies and puts your own profile at risk |
| Ignore the profile entirely | Unanswered and unmonitored reviews accumulate, and reportable ones sit there for years when a policy flag might have resolved them |
Where this fits in a firm's broader reputation work
Responding is one lane. The others are monitoring your profile so nothing sits unread, analyzing which negative reviews are reportable, flagging those through Google's official process, and building genuine review volume from satisfied clients within the advertising rules. The full picture, including intake timing and bar-safe review requests, is in our reputation management guide for lawyers.
To be precise about what a service like ours does and does not do: ReviewTactic analyzes your reviews against Google's policies, flags the ones that violate them or are demonstrably false through Google's official reporting process, and helps you monitor and respond. It does not remove genuine negative reviews, and no one can guarantee that Google will remove any particular review. Pricing is $99 per removed review, paid only on success; if your situation has edge cases, the free scan and a conversation come first.