- Target the right people without mishandling their data
- Claim only what you can prove
- Price and discount so the total is visible
- Keep endorsements, testimonials and influencers honest
- Test your ads, and mind the trail of messages they leave
- When a lawyer earns their keep
- The ad you can prove is the ad that pays
You have a budget, a product and a Facebook page with a growing audience, and you have read every tip about knowing who you are selling to, testing different creatives and keeping the copy simple. Most of that advice is sound. What it leaves out is the legal layer underneath the campaign. The things that make a Facebook ad perform, bold claims, urgent discounts, familiar faces, precise targeting, are exactly the things the Australian Consumer Law and the Privacy Act 1988 (Cth) are built to police. This guide walks through the rules that attach to each stage of an ad campaign so you can scale up without becoming a regulator's example.
Target the right people without mishandling their data
Knowing your audience is the first piece of advice in every Facebook ads guide, and it is good advice. Meta Ads Manager lets you build audiences from interests, behaviours and lookalike models, and from your own customer lists. The legal obligations start the moment you feed personal information into that machine.
- Customer lists: Uploading a spreadsheet of customer emails or phone numbers to create a custom audience means disclosing personal information to Meta. If your business is bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles govern how you collect, use and disclose that data, and your privacy policy should say so.
- The Meta pixel: Placing the pixel on your website transmits information about visitors to Meta. The Office of the Australian Information Commissioner has published guidance on tracking pixels, and in 2026 found that health providers breached the Privacy Act when pixels sent sensitive health information to advertising platforms. Audit what your pixel actually sends.
- Sensitive information: Health, financial and other sensitive details should never be targeting material. Meta's own policies restrict custom audiences that suggest health conditions or financial status, and the Privacy Act gives sensitive information the highest level of protection.
- Platform rules: The old Power Editor that earlier guides mention is gone; everything runs through Ads Manager, and Meta's advertising policies are enforced there. Ads that breach them can be rejected or the account restricted, on top of any legal exposure.
Claim only what you can prove
Section 18 of the Australian Consumer Law (the ACL, Schedule 2 of the Competition and Consumer Act 2010 (Cth)) says a person must not, in trade or commerce, engage in conduct that is misleading or deceptive or is likely to mislead or deceive. Section 29 backs it with a list of specific false or misleading representations, covering standard, quality, value, benefits, newness and more. Every headline, image and caption in an ad is conduct caught by these provisions.
The High Court settled how an ad is judged in ACCC v TPG Internet Pty Ltd [2013] HCA 54, decided under the Trade Practices Act 1974 (Cth), the ACL's predecessor. TPG advertised "$29.99" broadband plans as "unlimited" with the conditions buried in fine print. The Court looked at the ad as a whole, as the ordinary reasonable reader would see it, and held it misleading. The lesson for a Facebook advertiser is direct: an asterisk cannot rescue a headline. If the first thing a reader sees is "unlimited", "guaranteed" or "free", the claim must be true in the form the reader understands it.
That is also where the advice to use simple language earns its keep. The legal test is how an ordinary reasonable reader understands the ad, not how a careful lawyer reads the fine print. Write the way you can defend.
- Substantiation: The ACCC can require a business to back up the claims it makes in advertising. Keep the evidence, test results, specifications and certifications, before you launch, not after a complaint arrives.
- Fine print: Qualifications belong in the ad itself, and they must not contradict the dominant message.
- Comparisons: If you compare your product with a competitor's, both the comparison and the basis for it need to be accurate.
Price and discount so the total is visible
The call to action is where a Facebook ad earns its keep, and the most common call to action is a price or a discount. Two provisions of the ACL apply whenever you promote consumer goods or services.
- One total price: Section 48 requires that when you advertise a price, you also specify, prominently and as a single figure, the single total price. You cannot lead with "$49" and leave delivery, booking fees or a compulsory add-on for the checkout page. An ad that shows "$49 plus delivery" needs the total in the same prominent place.
- Bait advertising: Section 35 says you must not advertise goods at a specified price if there are reasonable grounds to believe you cannot offer them at that price for a reasonable period and in reasonable quantities. Once you advertise, you must in fact supply at that price for a reasonable period and in reasonable quantities. A "50% off everything" sale with ten units in stock is bait.
- Reference pricing: A "was $X, now $Y" comparison needs a genuine reference price. If the "was" price was never really charged, the discount claim is a false representation, not a marketing technique.
Keep endorsements, testimonials and influencers honest
A familiar face is one of the strongest selling tools an ad has. The ACCC's proceedings against Meta show how badly that can go wrong when the face has not agreed. In March 2022 the ACCC sued Meta over scam cryptocurrency ads on Facebook that used the images of Dick Smith, David Koch and Mike Baird, who had never approved or endorsed the schemes. The ACCC alleged the ads were false and misleading and that Meta aided and abetted the advertisers. The proceedings are the regulator's clearest signal that an implied endorsement you do not have is a false representation.
For your own ads:
- Testimonials: Section 29 prohibits making a false or misleading representation that purports to be a testimonial, and a parallel offence provision covers the same conduct. A review that was never given, or was written by the business, is exactly that.
- Celebrity and customer images: Using a person's image to imply they endorse your product can be misleading under the ACL and may also breach their other rights. Get permission, and keep the record of it.
- Influencer content: If you pay an influencer, the content is advertising. Under the AANA Code of Ethics, administered by Ad Standards, advertising must be clearly distinguishable as such, which in practice means a clear label such as #ad at the start. The ACCC swept influencer posts in 2023 and continues to scrutinise undisclosed endorsements, and it holds advertisers responsible for what influencers publish on their behalf.
- Multi-product and carousel ads: Showing several products in one ad is good practice and changes nothing legally. Every panel is part of the one ad, assessed as a whole.
Test your ads, and mind the trail of messages they leave
Testing different creatives is the right instinct, and the data you collect while testing is where legal exposure quietly builds.
- Pixel and retargeting data: Every view, click and purchase event is personal information in most cases. The privacy obligations from the first section apply to everything your testing generates.
- Messenger and email follow-ups: A Facebook ad itself is not a commercial electronic message, but the moment your funnel sends an automated Messenger message or an email sequence, the Spam Act 2003 (Cth) applies. Section 16 prohibits unsolicited commercial electronic messages that have an Australian link unless the recipient consented, and section 7 sets out when a message has an Australian link. Collect consent at the point of the ad, and make sure every message identifies you and offers a way out.
- Keep the record: Log each ad version, its claims and its results. If a complaint lands, a clean substantiation and testing file is the difference between a short correspondence and a full investigation.
When a lawyer earns their keep
Most of this article is about staying out of trouble, and a well-run campaign may never need a lawyer. The judgement calls are where one earns the fee:
- Claim review before launch: Whether "best", "guaranteed" or a comparison can be defended is a judgement call a lawyer can make against the case law.
- Substantiation files: Building a system for holding the evidence behind every claim.
- Influencer and creator agreements: Contracts that set the disclosure obligations, approval rights and liability between you and the person posting.
- Privacy compliance: Privacy policies, pixel assessments and APP compliance for customer list targeting.
- Regulator contact: If the ACCC, ASIC or Ad Standards comes knocking, or if your product is a financial product where the ASIC Act rather than the ACL applies, as the Meta proceedings showed, an early review beats a late defence.
The ad you can prove is the ad that pays
The sharpest lesson from all of this is that the algorithm and the regulator read the same ad. Meta optimises toward the headline that gets the click, while the ACCC and the courts read that headline the way the ordinary reasonable reader would. The most expensive Facebook ad is not the one with a high cost per click. It is the one that converts brilliantly and then has to be defended, because the ad itself, fine print and all, is the regulator's opening exhibit.
In short: target with data the Privacy Act lets you use, claim only what you can substantiate, show the total price, keep testimonials and endorsements genuine and visibly disclosed, and get consent before your funnel follows up by message. Do that, and you can test, scale and optimise to your heart's content.