Compliance guide
TGA Social Media Rules for Cannabis-Sector Businesses
Quick answer — Do TGA advertising rules apply to social media?
Fully. The TGA updated its social media advertising guidance in November 2025, and its 2026–27 compliance priorities commit the regulator to proactively monitoring social channels. Bios, posts, stories, pinned content, hashtags, influencer arrangements and even engagement with user comments can all constitute advertising — and most published cannabis enforcement actions cite social media alongside websites.
Your entire profile is the advertisement
Enforcement actions consistently cite 'websites and social media platforms' together. The unit of analysis isn't a single post — it's the profile: bio wording, profile imagery, pinned posts, highlights, link-in-bio pages and the post archive going back years. A 2022 caption from a previous marketing manager is as actionable as yesterday's story.
The synonym rule bites hardest here. 'Plant medicine, delivered' in an Instagram bio, a leaf emoji, or a green-cross logo are the kinds of indirect references the updated guidance explicitly captures.
Testimonials, endorsements and influencers
The Advertising Code restricts testimonials and endorsements in therapeutic goods advertising. Reposting a patient's story, embedding reviews, or having a practitioner front content about outcomes all engage the restriction. The 2026–27 priorities go further and specifically name influencer endorsements and AI-generated content as targets — a paid creator talking about their 'natural pathway' with your clinic tagged is squarely inside the regulator's stated focus.
Engagement is also exposure: liking, sharing or replying approvingly to user content that promotes cannabis can adopt that content into your advertising.
What a compliant profile looks like
Bio describes the clinic model in pathway-neutral terms. Imagery is clinical or brand-abstract with nothing botanical. Content discusses process, access logistics, practitioner credentials and regulatory news. Comments are moderated with outcome claims removed or left unengaged. Paid partnerships are avoided or scripted with the same discipline as owned content. Every one of these points is a check in our audit's social channel scope.
Frequently asked questions
Are old posts really a risk?
Yes. There is no limitation practice that protects an archived post that remains publicly accessible — remediation means reviewing the archive, not just future content.
Can we run a private patient community instead?
Closed groups reduce public-advertising exposure but mass communications to prospective customers are unlikely to be exempt, and screenshots travel. Treat any one-to-many channel as public.
Do hashtags matter?
Yes — hashtags are statements. Cannabis-referencing tags on a clinic post are direct references to the substance.
Who is liable for an influencer's post?
Potentially both parties. The advertiser who causes the advertising benefits from it; the TGA has fined individuals as well as companies.
Check where you stand
The breach patterns in this guide are exactly what our audit engine checks. Start with the free 10-point self-assessment, a $149 rapid scan, or the $449 full audit. Everything is delivered by email.