The clause in your own contract that bans bad reviews is almost certainly illegal

Go and read your own service agreement. Specifically the paragraph near the bottom, the one your lawyer did not write and you have never read closely, that says something like: Client agrees not to publish disparaging statements regarding the Company on any public forum.

If your customers sign that on a take-it-or-leave-it basis, it has been unenforceable since 2016 and using it is itself the violation. Not the enforcing of it. The having of it.

That is the Consumer Review Fairness Act, and in nine years of writing about review management I have watched it stay almost completely unknown among exactly the businesses it was written to stop.

What the law actually does

The CRFA passed in 2016 and targets what the FTC calls form contracts: terms used in selling or leasing goods and services that are imposed on the customer without a meaningful opportunity to negotiate them. Your standard service agreement, your intake paperwork, your online terms, the thing on the clipboard. If the customer cannot realistically redline it, it is a form contract.

In those contracts, three kinds of term are void:

• Terms that prohibit or restrict a customer from reviewing your goods, services or conduct.
• Terms that impose a penalty or fee on a customer for doing so. Liquidated damages, a charge per post, liability for your legal costs.
• Terms that require the customer to hand you the intellectual property rights in their review, which is the clever route to the same destination: own the copyright, demand the takedown.

Enforcement sits with the FTC and with state attorneys general, and a CRFA violation is treated the way a violation of an FTC rule on unfair or deceptive practices is treated. For knowing violations that means civil penalties per violation. A 2019 analysis put the figure at $42,530; it is adjusted for inflation and has moved since, so if the number matters to a decision you are making, get the current one rather than quoting that one.

The businesses that got caught were not villains

This is the part worth sitting with. When the FTC brought its first wave of actions aimed purely at the CRFA in 2019, the defendants were not reputation-laundering operations. They were five ordinary service businesses: an HVAC company, a flooring retailer, a horseback trail riding operation, a vacation rental company, and a property manager.

Two of those five sit squarely in verticals we have written full guides for, which is not a coincidence. Businesses that take deposits, schedule work in people’s homes and get judged publicly on outcomes are exactly the businesses that end up with defensive contract language. If you run an HVAC, plumbing or electrical shop or you are managing property, the FTC has already told you which paragraph of your paperwork it looks at first.

The FTC’s complaints also reached terms that went past reviews into barring customers from complaining to government agencies or to the Better Business Bureau. Which is how these clauses usually get written: not by someone deciding to suppress criticism, but by someone copying a template that was already too broad, from a business that copied it from somewhere else.

The remedy is the part that should scare you

Most compliance problems end with “stop doing that.” This one does not.

The 2019 settlements barred the companies from using the clauses, and then required them to notify the customers who had already signed that the prohibited language is not enforceable.

Read that as an operator rather than as a lawyer. You are compelled to contact every customer who signed your old agreement and tell them, in writing, that the clause stopping them reviewing you does not work. There is no version of that email that does not read as an invitation. Every unhappy customer you have ever quieted with that paragraph gets a personal note explaining that they are free to go.

Which inverts the ordinary incentive to sit tight and hope. The cost of this problem compounds with every contract you sign while the clause is still in the file. A business that fixes it this quarter notifies nobody. A business that gets there in three years has a much longer list.

What to actually do

The fix is small and the diagnosis is a text search. Open every document a customer signs, and search for: disparage, defame, negative, review, public statement, social media, non-disparagement.

What you are hunting for is any sentence that restricts what they may say, penalises them for saying it, or claims ownership of what they write. Then have counsel strike it. This is a five-minute conversation with a lawyer and they will not need to research it.

What the CRFA does not touch, and where the template language is usually trying to go:

• Confidentiality of your actual trade secrets. You can still protect the things that genuinely need protecting. You cannot wrap a review ban inside a confidentiality clause and call it a different animal.
• Reviews that are defamatory. The CRFA voids the clause, not your rights. False statements of fact remain false statements of fact, which is a separate and much harder road that we walked through in whether you can sue over a false negative review.
• A negotiated settlement after a dispute. A mutual agreement reached with a specific customer, with actual negotiation and consideration, is a different instrument from a clause buried in your standard terms. This is the distinction most worth getting professional advice on rather than a blog’s word for.

One boundary I will not guess at: whether your business-to-business agreements are covered. The statute is aimed at consumer form contracts, and a genuinely negotiated commercial agreement looks like it sits outside that definition, but I could not find a source that says so plainly and it is not a question to settle from a blog post. If your commercial contracts carry the clause, ask your lawyer specifically about scope.

The thing the clause was protecting you from does not exist

Here is what I have never once seen: a business whose reputation was saved by a non-disparagement clause.

The clause is a deterrent against a customer who reads their contract before posting, and that customer is approximately nobody. People do not consult their paperwork before leaving a review, they leave a review because something happened to them an hour ago. The clause does not stop the review. It sits in the file doing nothing until the day it becomes the most expensive paragraph you own.

And the legitimate goal underneath it, fewer bad reviews, has a route that is both legal and considerably more effective: ask every customer, earlier, and give the unhappy ones a direct way to reach you at the same moment, so problems get fixed before they harden into reviews. Not by showing the review link only to the happy ones: Google calls that gating and bans it outright. That is the entire subject of getting more reviews legally, and the compliance line there has its own traps, particularly around incentives, which we covered separately in whether you can offer a discount for a positive review. If what you need is a way to answer the reviews you are getting rather than a way to prevent them, there is a set of response templates for negative reviews that will do more for you this quarter than the clause ever did.

Delete the paragraph. It was never protecting you, it has been illegal since 2016, and the longer it stays the more people you will eventually have to write to about it.

This is a description of how a federal statute has been enforced, not legal advice about your contract. The text of your agreement and the law of your state both matter, and a lawyer reading your actual paperwork is worth more than any of the above.