Legal do’s & don’ts when posting client stories on social media

There’s nothing more powerful than a real client story. For law firms, a genuine testimonial - whether it’s on your website, LinkedIn, or in a client newsletter - can often say more about your expertise than any advertising campaign ever could. That’s why so many firms are sharing client success stories as a way to build credibility, trust, and stronger connections with prospective clients.

But here’s the catch: one innocent post can cause big headaches if it accidentally breaches privacy laws, misrepresents your services, or shares something your client didn’t want made public.

Think about it: imagine a law firm publishes a client case study online, but accidentally includes sensitive details in a document screenshot. Even if the client was happy with the outcome, they may not have wanted their information shared publicly. Small oversights like this can quickly snowball into reputational damage - or worse, legal trouble.

The good news? It’s completely possible to share authentic, powerful client stories while protecting privacy. Let’s walk through some simple principles to get this right.

Start with consent, not assumptions

A glowing review in your inbox doesn’t mean you’re free to splash it across your socials. Clients often don’t realise how far and wide a post can travel. What feels like “just a Facebook update” to you might feel like a major invasion of privacy to them.

The safest move is always to get written consent - and it doesn’t have to be complicated. A short, friendly email works just fine:

“Hey Sarah, thanks for the kind words! Would you mind if we share your testimonial and first name on our Instagram and website?”

If you’re running bigger campaigns with photos, videos, or names attached, a simple one-page consent form can save you future drama. It should explain exactly where the story will appear, how long it will be used, and give your client the option to opt out later.

Getting consent isn’t just about covering yourself legally; it’s also about respecting your clients. They’ll appreciate your professionalism and are often more comfortable sharing their story when they feel informed.

Respect privacy and keep it human

We live in a world where oversharing is the norm, but a client’s privacy is sacred. Even details that feel small to you - like a case reference number in a screenshot or a client’s full name in a testimonial - can make them identifiable.

For example, imagine a law firm shares a glowing testimonial from a client involved in a sensitive dispute, but forgets to remove the company name or case details. What seems like harmless context could unintentionally expose confidential information and create serious trust or compliance issues.

To avoid this, always double-check testimonials, case studies, and screenshots for hidden identifiers. Use first names only (or anonymise completely), blur out any identifying details, and keep examples general where possible. A strong story doesn’t need to reveal every detail - in fact, leaving some mystery often makes your firm appear more professional and trustworthy.

Tell the story without the spin

Authenticity is everything when you’re promoting your firm. Overhyping a client’s results or making sweeping claims can do more harm than good - and could even land you in hot water with regulators.

For example, imagine a law firm posts a case study saying they “won every case for their client in just three months.” While it sounds impressive, it’s misleading and unrealistic. A more accurate (and defensible) way to frame it would be something like:

“By providing clear advice and negotiating early, we helped our client resolve their dispute quickly and avoid going to court.”

The second version is still compelling, but it’s honest, specific, and easier for prospective clients to trust.

Disclaimers aren’t boring, they’re smart

Most firms think disclaimers are just dry legalese, but in reality, they can be short, simple, and build confidence. Adding a quick line like “Outcomes vary depending on individual circumstances” or “This testimonial reflects one client’s personal experience” shows that you’re being honest and transparent.

For example, if a law firm shares a testimonial saying they “resolved a client’s dispute in two weeks,” without a disclaimer, it could look like a promise that every matter will be resolved just as quickly. That’s unrealistic and potentially misleading. A small, tasteful disclaimer at the bottom of the post protects your firm legally and reassures prospective clients that you operate with integrity. 

The payoff of doing it right

Taking these precautions doesn’t just protect you legally - it makes your marketing stronger. Clients are more likely to share their stories when they know you respect their privacy. Prospective customers see you as a business that values integrity over hype.

The brands that thrive on social media are the ones that tell great stories and build trust. By getting written consent, being mindful of details, and using disclaimers, you create a safer and more authentic space for your audience.

If you would like a consultation on the legal do’s and don’ts of running your small business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.

About our guest author, Sprintlaw

Sprintlaw is an online law firm making quality legal services easier, faster, and more affordable for small businesses and startups. With their fixed-fee pricing and all-in-one legal platform, Sprintlaw have helped 60,000+ businesses across ANZ and the UK.

Disclaimer: All content contained in this publication is intended to provide general information in summary form on legal and other topics, current at the time of first publication. The content does not constitute legal (or other) advice and should not be relied upon as such. You should obtain specific legal or other professional advice before relying on any content contained on this website.