Attorney-led removals · No removal, no fee
← All articles
·16 min read

Consumer Review Fairness Act: Rights for Consumers and Businesses

Consumer Review Fairness Act: Rights for Consumers and Businesses

Consumer Review Fairness Act: Rights for Consumers and Businesses

Decorative title card illustration

TL;DR:

  • The Consumer Review Fairness Act voids contract clauses that restrict, penalize, or claim ownership of honest consumer reviews. The FTC can enforce these protections, and violations include prohibited review restrictions, penalties, and intellectual property transfer clauses. Businesses should audit their contracts now to remove such language and document compliance efforts.

The Consumer Review Fairness Act (Pub. L. 114–258, codified at 15 U.S.C. §45b) does one thing clearly: it voids any form-contract clause that bars, penalizes, or strips the intellectual property from an honest consumer review. If you signed a terms-of-service agreement with that kind of language buried in it, that clause is legally unenforceable from the moment you agreed to it.

The short version: Consumers have the right to post honest reviews. Businesses cannot use contract language to stop them, fine them, or claim ownership of what they write. Any clause that tries to do those things is void from inception under federal law, and the FTC can enforce against businesses that include it.

Here is what that means in practice:

  • Consumers: You can post an honest review of any product or service, even a negative one, without fear that a contract clause will expose you to a fine or lawsuit.
  • Businesses: If your terms of service, receipts, or purchase agreements contain any language restricting reviews, penalizing customers for them, or requiring IP transfer, remove it now. Dormant clauses you never enforce can still draw FTC scrutiny.
  • Three clause types are void: (1) prohibiting or restricting reviews, (2) imposing penalties or fees for reviews, and (3) requiring consumers to transfer intellectual property rights in their reviews.
  • Key exceptions: The law does not protect reviews that are defamatory, harassing, obscene, sexually explicit, unrelated to the business’s goods or services, or that contain confidential information.

Table of Contents

What does the Consumer Review Fairness Act actually cover?

The statute defines two terms that determine whether it applies to a given situation.

A “covered communication” is any written, oral, or pictorial review, performance assessment, or rating of a business’s goods, services, or conduct. That includes a Google review, a Yelp post, a social media comment, a photo with a caption, or even a verbal assessment posted online. The definition is deliberately broad.

A “form contract” is a standard contract offered on a take-it-or-leave-it basis, without a meaningful opportunity to negotiate the terms. Think of the click-through agreement you accept when you buy software, book a hotel room, or order from an e-commerce site. If the business drafted it and you had no real chance to change it, it is a form contract under the statute’s legislative history.

Who is protected? Consumers who enter into form contracts for goods or services. The statute explicitly excludes employer-employee and independent-contractor relationships, so a non-disparagement clause in an employment agreement is a different legal question entirely.

A realistic example: You buy a meal-kit subscription. The checkout page includes a terms-of-service link with a clause reading, “Customer agrees not to post negative reviews on any public platform.” You click “I agree” and move on. That clause is void from the moment you clicked. The business cannot enforce it, and including it in the contract is itself a potential FTC violation.

Which contract clauses does the CRFA void?

The statute identifies three categories of prohibited provisions. Any form contract that includes one is void on that point from inception, regardless of whether the business ever tries to enforce it.

The three void clause types:

  • Prohibition or restriction clauses: Any language that bars a consumer from posting, publishing, or sharing a review of the business’s goods or services. This includes “no negative reviews” language, blanket social media bans, and clauses requiring prior approval before posting.
  • Penalty or fee clauses: Any provision that imposes a fine, fee, or other penalty on a consumer for posting a review. A $500 “disparagement fee” buried in a rental agreement is the textbook example.
  • Intellectual property assignment clauses: Any requirement that a consumer transfer copyright or other IP rights in a review to the business. There is one narrow exception: a business may request a non-exclusive license to use the review in its own marketing, as long as it does not claim ownership or prevent the consumer from using their own words elsewhere.

How these appear in the real world:

  1. Pre-checked boxes in checkout flows that read, “I agree not to post reviews without prior written consent.”
  2. Arbitration clauses tied to review-writing, structured so that posting a review triggers mandatory arbitration.
  3. Retroactive IP assignment language that purports to transfer ownership of any content a customer posts about the company.
  4. “Reputation protection” fees listed in fine print on service contracts.

The void-from-inception rule has a practical edge. A business cannot argue, “We never actually enforced that clause, so no harm done.” The clause’s presence in the contract is itself the violation. It misleads consumers about their rights, which is exactly the kind of deceptive practice the FTC Act targets. Including a gag clause in your TOS, even as a bluff, is not a safe strategy.

What the CRFA does not protect

The statute carves out several categories of content that businesses and platforms may lawfully remove or decline to publish. Understanding these limits matters as much as knowing the core protections.

Content the CRFA does not cover:

These exceptions give businesses real moderation rights. A restaurant can remove a review that is actually about a personal dispute with the owner’s family, not the food. A medical practice can flag a post that reveals protected health information. The key word is “lawfully” — the removal has to fit one of the statutory exceptions, not just be inconvenient for the business.

Pro Tip: Document every moderation decision. When you remove a review, note the date, the specific exception that applies (e.g., “contains personally identifying information of a third party”), and the platform action taken. That paper trail is your defense if a consumer or regulator later claims you suppressed a legitimate review.

One line businesses often miss: aggressive legal threats sent to consumers who post negative reviews can themselves trigger enforcement action, even when the underlying review might be removable. Sending a cease-and-desist letter without a genuine legal basis for defamation is the kind of conduct the FTC’s 2024 rule now targets directly. The threat, not just the contract clause, can be the violation.

How is the CRFA enforced, and what are the penalties?

The FTC is the primary enforcement authority. Under the FTC’s guidance, violations of the CRFA are treated as unfair or deceptive acts or practices under Section 5 of the FTC Act. State attorneys general also have authority to bring civil actions on behalf of their residents, which means enforcement can come from multiple directions simultaneously.

What enforcement looks like:

  • The FTC investigates complaints, issues civil investigative demands, and can seek injunctive relief and civil penalties.
  • State AGs can file suit independently, often moving faster than federal agencies on local business violations.
  • The FTC’s 2024 final rule (codified at 16 C.F.R. Part 465) strengthened civil-penalty authority for knowing violations involving fake reviews, paid reviews conditioned on sentiment, and review suppression. That rule works alongside the CRFA, not instead of it.

The Roca Labs precedent is worth knowing. The FTC cited Roca Labs in enforcement guidance as an example of a company that used contract provisions to silence negative reviews, treating that conduct as an unfair or deceptive practice. The CFPB bulletin on review suppression references similar reasoning, showing that concern about gag clauses extends well beyond the FTC.

Filing a complaint:

  1. Go to ReportFraud.ftc.gov and select “Business practices.”
  2. Describe the clause or conduct, name the business, and attach any evidence (screenshots, contract text, emails).
  3. To contact your state AG, visit your state’s official attorney general website and look for a consumer protection complaint portal.
  4. Keep copies of everything you submit.

The typical enforcement sequence runs from complaint intake to investigation to a potential consent order or lawsuit, a process that can take months to years. Individual consumers rarely see direct monetary recovery from FTC actions, but complaints build the evidentiary record that drives enforcement.

What should consumers do if they encounter a gag clause?

If you find a review-restriction clause in a contract you signed, or if a business threatens you over a review you posted, here is a practical sequence.

  1. Screenshot everything. Capture the full contract or TOS page, including the URL and the date. Use your browser’s print-to-PDF function or a tool like the Wayback Machine at archive.org to preserve a timestamped copy.
  2. Save all communications. Emails, letters, or messages threatening legal action over a review should be preserved with full headers and timestamps.
  3. Note the specifics. Record the business name, platform, account names involved, and the exact language of the offending clause.
  4. File an FTC complaint at ReportFraud.ftc.gov. Attach your screenshots and describe the clause or threat clearly.
  5. Contact your state attorney general. Many state AG offices have dedicated consumer protection units that move quickly on local business complaints.
  6. Consider legal help if the business has sent formal legal threats, filed a lawsuit, or persistently removed your reviews without a lawful basis. An attorney familiar with consumer protection law can assess whether the CRFA’s void-from-inception rule gives you a direct defense.

Evidence that strengthens a complaint:

  • The full text of the offending clause, not just a paraphrase
  • Platform URLs showing removed reviews or suppressed ratings
  • Any platform response or notification you received
  • A record of when you originally posted the review and when it disappeared

What should businesses do to comply?

Compliance is not complicated, but it does require a deliberate audit. The FTC’s guidance makes clear that dormant gag clauses, ones you drafted years ago and never enforced, can still be evidence of deceptive practices. That means the audit has to be thorough.

Compliance checklist:

  • Identify every form contract your business uses: website TOS, purchase agreements, service contracts, receipts, and app end-user agreements.
  • Search each document for language related to reviews, ratings, testimonials, social media posts, and disparagement.
  • Remove or rewrite any clause that prohibits reviews, imposes penalties, or requires IP transfer.
  • If you want to use customer reviews in your marketing, replace assignment language with a non-exclusive license request.
  • Document the date of each change and retain version history. If the FTC ever investigates, showing a clear remediation timeline helps.

Red flags to avoid going forward:

  1. Sending legal threats to consumers without a genuine, documented legal basis (defamation, confidential data, etc.)
  2. Offering refunds, discounts, or other benefits in exchange for removing or changing a negative review
  3. Hiding negative reviews on a business-owned “review” page while displaying only positive ones
  4. Buying reviews or directing employees to post reviews without disclosure

For professional services firms, the intersection of confidentiality obligations and review responses adds a layer of complexity. Repvive’s guidance on confidentiality risk in review responses walks through how to respond to reviews without inadvertently disclosing protected client information, which is a real compliance gap for law firms, medical practices, and financial advisors.

When a review genuinely falls within one of the CRFA’s exceptions, such as defamatory content or a post containing confidential information, the right approach is to document the specific legal basis and pursue removal through the platform’s official process. Repvive’s Google review removal service uses attorney-crafted claims tied to those statutory exceptions, which is precisely the kind of documented, legally grounded approach that keeps businesses on the right side of the CRFA.

What has changed recently with FTC enforcement?

The CRFA set the floor in 2016. The FTC’s 2024 rulemaking raised it considerably.

The FTC’s final rule on consumer reviews and testimonials, published in August 2024 and codified at 16 C.F.R. Part 465, targets conduct the CRFA did not directly address. The rule prohibits creating or buying fake reviews, paying for reviews conditioned on positive sentiment, posting insider reviews without clear disclosure, and suppressing negative reviews through legal threats or other pressure. Civil penalties are now available for knowing violations, which is a significant escalation from the pre-rule enforcement environment.

Development What it covers Practical impact
CRFA (2016) Voids gag clauses in form contracts Clause removal, void-from-inception defense
FTC 2024 Rule (16 C.F.R. Part 465) Fake reviews, paid sentiment, insider reviews, suppression Civil penalties for knowing violations
CFPB Bulletin (2022) Review restrictions as UDAP violations under CFPA Multi-agency scrutiny for financial-services firms

The FTC’s Q&A on the 2024 rule clarifies one point that surprises many business owners: ordinary consumers who post truthful reviews are generally not liable under the rule. Liability falls on businesses that buy, manufacture, or suppress reviews, not on the people writing them honestly.

The Roca Labs case, cited in CFPB guidance and FTC enforcement materials, remains the clearest precedent for how aggressively agencies will treat review suppression. Roca Labs used contract provisions to prevent customers from sharing negative experiences with a weight-loss product. The FTC treated that as an unfair practice, not just a contract dispute. That framing, conduct-centered rather than clause-centered, is exactly what the 2024 rule codifies at scale.

For businesses that collect reviews as part of a marketing program, the documentation standard has risen. If you offer any incentive for reviews, even a small discount, you need records showing the incentive was not conditioned on a positive outcome and that reviewers disclosed the relationship.

Key Takeaways

The Consumer Review Fairness Act voids any form-contract clause that restricts, penalizes, or strips IP from honest consumer reviews, and the FTC’s 2024 rule extends civil-penalty authority to fake reviews and suppression tactics.

Point Details
Three void clause types Prohibiting reviews, imposing penalties, and requiring IP transfer are all void from inception under the CRFA.
Exceptions are real Defamatory, harassing, obscene, or off-topic reviews are not protected; businesses may remove them with documented legal basis.
FTC and state AGs enforce Consumers can file complaints at ReportFraud.ftc.gov; state attorneys general can also sue on residents’ behalf.
2024 rule raises the stakes Civil penalties now apply to knowing violations involving fake reviews, paid sentiment, and review suppression under 16 C.F.R. Part 465.
Businesses must audit now Dormant gag clauses in TOS can still draw FTC scrutiny; remove offending language and document the remediation date.

Why the CRFA matters more now than it did in 2016

The statute passed with relatively little fanfare, and for the first few years, enforcement was sparse. What has changed is the scale of the problem it was designed to address. Online reviews now function as a primary trust signal for consumers making purchasing decisions, which means suppressing them is not just a legal violation, it is a market distortion.

What most businesses still underestimate is the dormant-clause risk. A terms-of-service document drafted in 2015 and never updated may contain review-restriction language that nobody on the current team even knows about. The FTC’s position, backed by its guidance, is that the clause’s presence is itself deceptive, regardless of intent. That is a meaningful shift from “we’ll only act if you enforce it” to “the clause alone is the problem.”

The 2024 rule compounds this. Businesses that have been quietly managing their review profiles through legal pressure, selective display, or incentivized positive reviews now face civil-penalty exposure, not just injunctive relief. The combination of the CRFA and the 2024 rule creates a compliance environment where review practices need the same legal scrutiny as advertising claims.

For consumers, the practical takeaway is simpler: your honest review is protected, the clause trying to stop you is void, and there is a clear federal reporting channel when a business crosses the line.

Useful sources

For readers who want to go deeper or verify specific points, these are the primary sources:

FAQ

Does the CRFA let me get my money back from a business?

The CRFA is not a damages statute for consumers. It voids illegal contract clauses and gives the FTC and state AGs authority to pursue civil penalties, but individual consumers generally do not receive direct monetary recovery through FTC enforcement actions.

Are you protected if a business removes your review?

If your review was honest and on-topic, removing it may violate the CRFA or the FTC’s 2024 rule on review suppression. You can file a complaint with the FTC at ReportFraud.ftc.gov and document the removal with screenshots and timestamps.

Is it illegal for a business to delete bad reviews?

Deleting a legitimate negative review can violate the CRFA and the FTC’s 2024 rule, particularly when done through legal threats or platform manipulation. Businesses may lawfully remove reviews that are defamatory, obscene, harassing, or unrelated to their goods or services, but must have a documented legal basis for doing so.

What does the Consumer Protection Act cover?

The CRFA specifically protects consumers’ rights to post honest reviews and voids contract clauses that restrict, penalize, or claim IP ownership over those reviews. Broader consumer protection under the FTC Act covers unfair or deceptive business practices across a wide range of commercial conduct.