BLOG POST
The notification comes in on a Tuesday afternoon. A new Google review on your firm's profile. One star. You read it, and your stomach drops.
The reviewer claims you were unprepared. They say you didn't return calls. They mention specific details about their case — details that are wrong, or distorted, or missing crucial context that would make you look completely different. Your first instinct is to set the record straight. Reply right now, explain what really happened, and let everyone reading see the truth.
Don't.
Of all the ways attorneys get into ethical trouble online, responding emotionally to a negative review is the most common. The instinct to defend yourself is human. But for lawyers, that response can violate attorney-client confidentiality, trigger bar complaints, generate viral negative attention, and make a small problem into a much bigger one — sometimes career-defining.
This post walks through what to do when you get a bad review: the rules that constrain your response, what you can and can't say, the templates that work, when to escalate, and how to think about negative reviews strategically rather than reactively.
Most local businesses can fire back at unfair reviews. A restaurant owner can correct factual claims about service. A contractor can dispute the customer's account of the work. A retailer can describe what actually happened on the return.
Lawyers can't. The rules that govern your profession exist regardless of whether the client posted publicly first.
ABA Model Rule 1.6 — the confidentiality rule — prohibits revealing information related to the representation of a client without informed consent. The rule applies to former clients just as much as current ones. It doesn't expire when the matter ends.
The critical part most attorneys miss: confidentiality is broader than attorney-client privilege. Privilege protects communications. Confidentiality protects all information related to the representation, regardless of source. That includes the fact that the person was your client, what kind of matter you handled for them, what advice you gave, what they paid, what the outcome was, and any background facts you learned during the representation.
When a former client posts a review claiming you mishandled their case, your instinct is to clarify. The problem: almost any clarification reveals confidential information. Even confirming that the person was your client at all may be a violation in some jurisdictions.
The "self-defense" exception is narrower than you think. Rule 1.6(b)(5) does permit attorneys to reveal confidential information to defend themselves against accusations involving their representation. But the exception is generally read to apply to formal proceedings — bar complaints, malpractice suits, fee disputes — not to informal public criticism on Google. Several state bars have explicitly stated that responding to a negative online review does not fall within the self-defense exception.
The cases that have generated bar discipline involved attorneys who shared client information in review responses believing they were protected by the self-defense rule. They weren't. The discipline ranged from private reprimands to public censure.
A short list of things that have generated actual bar complaints when attorneys included them in review responses:
Confirming or denying that the reviewer was your client. "When you came to us about your divorce…" — even this opening is risky in many jurisdictions. The safer approach is to stay agnostic about whether the reviewer was a client.
Describing the matter type. "We worked very hard on your DUI case" reveals what kind of legal trouble the reviewer was in.
Sharing facts of the case. "What you're not mentioning is that you didn't follow our advice to settle." This is a confidentiality violation regardless of whether the facts are true.
Discussing fees, payments, or financial details. "You still owe us $4,200, which is why we withdrew." This reveals confidential information about the representation.
Disputing the outcome. "Actually, we got you a better result than you would have gotten with another firm." Discussion of case results in response to identifying information violates confidentiality.
Citing specific dates, court appearances, or filings. Anything that ties the public response to the actual matter creates exposure.
Describing the client's behavior. "You missed three appointments and refused to provide the documents we requested." Even if true, this reveals confidential aspects of the representation.
The pattern is clear: anything that engages with the substance of the reviewer's claim is likely to involve confidential information. The cleaner you stay from substance, the safer you are.
The space for a safe response is narrower than most attorneys realize, but it exists. A safe response generally:
Here's a template that works for most situations:
"Thank you for taking the time to share your feedback. Our firm is committed to providing high-quality representation to all of our clients, and we take all concerns seriously. If you would like to discuss your experience further, please contact our office directly at [phone number]."
That response does several things at once. It demonstrates to future readers that the firm is professional and responsive. It doesn't admit or deny anything. It moves the conversation to a private channel where actual resolution can happen. And it stays entirely on the right side of every state's confidentiality rule.
A slightly warmer version:
"We appreciate all client feedback, and we're sorry to hear that this experience didn't meet expectations. Our firm takes pride in our representation and would welcome the opportunity to address any concerns directly. Please reach out to [name or office] at [phone] so we can speak with you."
Notice what these templates avoid. They don't say "we're sorry for what happened" — that implies an admission that something happened. They don't say "we did our best for you" — that confirms the relationship. They don't reference any specific claim. They're general by design, because generality is what keeps you safe.
Not every negative review requires the same response. Categorize before you respond.
The reviewer was your client, the experience was less than ideal, and the review reflects something real even if the framing is unfair. This is the most common type.
The right move: Respond using the safe template above. Make it clear you'd welcome a private conversation. Then actually have that conversation if they reach out — sometimes a real conversation resolves things, and sometimes the client will update or remove the review on their own. Most won't, and that's fine. Your goal isn't to remove the review. It's to show every future reader that you handle criticism with grace.
Sometimes reviewers post on the wrong profile. They confuse your firm with another firm with a similar name, or they were a client of a former partner who has since left. These show up more often than you'd think.
The right move: Respond noting that you don't have a record of the experience described and would like to investigate. Don't accuse the reviewer of lying. Something like:
"Thank you for your feedback. We don't immediately recognize the situation you've described and would like to ensure any concerns are addressed. Please contact our office at [phone] so we can look into this."
Then flag the review to Google for being potentially misplaced. Google's review removal process is slow and inconsistent, but mistaken-identity reviews are among the most likely to be removed.
A small percentage of negative reviews are clearly false — written by competitors, by people who were never your clients, by ex-spouses of clients posting in retaliation, or by individuals with grudges unrelated to legal services. These are the most frustrating because the temptation to respond aggressively is highest.
The right move: Respond briefly and neutrally to demonstrate professionalism for future readers, then pursue removal through proper channels. The response itself shouldn't accuse the reviewer of lying or defaming you — that escalates the public conflict and can itself create legal exposure.
A response like this works:
"We do not have a record of representing the individual described in this review. We've reported this review to Google for investigation."
Then submit a removal request to Google, document the false nature of the review, and consult with counsel about whether a formal cease-and-desist or defamation action is appropriate. We'll cover that escalation path in detail below.
Whatever response you ultimately send, don't send it within 24 hours of seeing the review.
The reasons aren't subtle. Anger compromises judgment. The first draft of a response written immediately after reading a one-star review is almost always something the attorney later wishes they hadn't sent. Bar discipline cases involving review responses overwhelmingly involve responses written in the first hour.
A practical workflow:
Most negative reviews don't actually need a response within a day. The marginal cost of waiting 48 hours is essentially zero. The marginal cost of responding badly can be enormous.
The conventional wisdom is to respond to every review. For most local businesses, that's right. For lawyers, the calculation is different.
Respond when:
Don't respond when:
For obviously defamatory reviews, sometimes the right move is to skip the public response and go directly to removal channels. A measured one-line response works ("We've reported this review for investigation as it appears to involve someone who was never our client"), but for the most extreme cases, silence plus a removal request is often more effective than engagement.
Google's review removal process exists but is narrow. Reviews are removed when they violate Google's content policies, not when you disagree with them.
The grounds Google will actually consider:
Grounds that Google will not remove on:
The practical path: flag the review through your Google Business Profile, write a short explanation focused on the policy violation, and wait. Removal rates are low — somewhere between 10-30% of flagged reviews — and the process can take weeks. Don't count on it.
For genuinely defamatory reviews — provably false statements of fact (not opinion) about your firm — you have additional options. Sending a cease-and-desist letter sometimes works, especially if you can identify the reviewer. A formal subpoena to Google to identify an anonymous reviewer is possible but expensive and slow. Defamation suits are a last resort and have a high bar.
The honest framing: most bad reviews stay up. The right strategy isn't to remove them. It's to bury them under enough good reviews that they don't matter. A 4.8-star firm with 150 reviews and one bad review reads as legitimate. A 4.8-star firm with 12 reviews and one bad review reads as a problem. Volume is the best defense.
Every law firm gets bad reviews eventually. The firms that handle them well don't handle them better in the moment — they make sure the bad ones don't matter by stacking enough good ones around them.
A firm with 200 reviews and a 4.7 rating can absorb a one-star review without any meaningful impact on conversion. A firm with 15 reviews and a 4.8 rating sees its rating drop to 4.5 from a single one-star, and prospects notice.
The math is straightforward. If you're consistently asking every closed-matter client for a review (ethically, using the principles in our guide on ethical review requests), and you're doing it through an automated system that runs without you remembering, you'll generate dozens of legitimate reviews per year. That base of authentic, recent positive reviews is what protects you when the inevitable negative one shows up.
It's also what gives you the confidence to respond calmly. When you have 12 reviews, every new one feels existential. When you have 200, you have perspective.
Your firm's response to negative reviews shouldn't depend on which attorney saw the notification first. Build a process:
TrueReview handles the monitoring side automatically — alerts when new reviews come in, low-rating filtering that catches problems before they become public, and integrations with the practice management software your firm already uses.
Negative reviews aren't a crisis. They're a normal part of running a law firm in the public-internet era. The attorneys who get hurt by them aren't the ones who get bad reviews — every firm does — they're the ones who respond badly.
If you take three things from this post:
The firms that handle this well treat reviews as an ongoing operational discipline, not a series of one-off crises. Set up the system, follow the process, and trust the math. Over time, the negative reviews become noise around a strong signal.
For more on how to consistently grow your legitimate review count, see our pillar guide on online reviews for law firms and our post on ethically asking clients for Google reviews.
Want to monitor and respond to reviews across every platform from one dashboard? Start a free 14-day trial of TrueReview — automated review request workflows, low-rating filtering, and real-time alerts when new reviews come in.
This article provides general information about attorney ethics rules and online review responses. It is not legal advice. Bar rules vary by state and ethics opinions evolve — consult your state bar's current rules and recent ethics opinions before responding to any specific review.
