45 CFR 164.508
You cannot answer a false review by proving the person was never a patient
Confirming that someone was or was not treated, in public, is a disclosure of protected health information under the HIPAA Privacy Rule. A practice can post a neutral invitation to talk privately and nothing more, so the accusation stands on the profile until the platform acts on a policy report.


