In the EU, the line between a Google Ad that runs and one that gets disapproved is usually drawn by the claim, not the keyword. European consumer-protection law is stricter than most global ad policies, and it treats marketing copy as a regulated statement of fact. This guide covers the advertising-claim rules that decide whether your EU Google Ads survive review — and how to phrase offers that convert without crossing the line.
It's written for search and performance marketers who keep hitting disapprovals or "unsubstantiated claim" flags and want to understand the rule underneath the rejection.
Two rulebooks apply at once
Google's ad policies and EU consumer-protection law overlap, but they are not the same thing. An ad can pass Google's automated review and still breach the EU Unfair Commercial Practices Directive (UCPD) — or the reverse. Every EU Google Ad answers to two systems:
- Google's advertising policies — the platform's own global rules, enforced automatically and by review.
- EU consumer-protection law — primarily the UCPD, which national regulators enforce against advertisers directly.
Google's policies are downstream of the law. When a claim gets disapproved for being misleading or unsubstantiated, the platform is enforcing a principle the UCPD already codifies: a commercial practice is unfair if it contains false information or is likely to deceive the average consumer, and causes them to make a transactional decision they otherwise wouldn't. That average-consumer test is the engine behind most EU ad-claim enforcement. For the full legal framework, see our guide to misleading advertising claims under the UCPD.
Why claim risk is different from privacy risk
GDPR governs how you handle personal data. The UCPD governs whether your marketing misleads a consumer into a decision they wouldn't otherwise make. Both can pull a campaign, but the triggers are different. A perfectly GDPR-compliant landing page can still carry a misleading headline, and that headline is the thing a regulator or a competitor complaint will cite first. For ad copy specifically, claim risk is usually the bigger exposure.
1. Unsubstantiated superlatives
"Best," "#1," "cheapest," "most trusted" are objective claims. Under the UCPD, an objective superlative needs evidence you could produce on request. "The best CRM for agencies" is a claim. "A CRM agencies love" is an opinion. The first needs proof; the second is puffery and generally fine.
There are two safe routes:
- Substantiate: "Rated #1 for support by G2 users (2025)" anchors the claim to a verifiable source.
- Reframe as opinion: clearly subjective framing ("We think it's the friendliest CRM around") is treated differently from a bald factual assertion.
Rule of thumb: if a claim can be measured and falsified, you need substantiation before it goes live. The bare superlative with nothing behind it is a claim you're inviting a regulator — or a competitor — to test.
2. Guarantees and outcome promises
Outcome guarantees are the highest-risk category, especially in regulated sectors:
| Sector | High-risk phrasing | Safer framing |
|---|---|---|
| Finance | "Guaranteed returns" | "Historical performance, capital at risk" |
| Health/supplements | "Cures anxiety" | "Supports general wellbeing" |
| Weight loss | "Lose 10kg in 2 weeks" | "Designed to support gradual weight management" |
| SEO/marketing | "Guaranteed #1 on Google" | "A proven process to improve rankings" |
Google disapproves many of these automatically. The EU framework punishes them even when Google misses them. The problem is the implied certainty — most outcomes depend on factors outside your control, so promising them is misleading by default. Replace certainty with a realistic, substantiated range: "Most customers see measurable results within 8 weeks" is defensible if you have the data; "Results guaranteed" rarely is, and the money-back offer doesn't fix it.
3. Health and "free from" claims
Health claims on food, supplements, and cosmetics are tightly regulated in the EU (Regulation 1924/2006 for nutrition and health claims). Only authorised claims from the EU register may be used, and the wording often has to match. "Boosts your immune system" is not a free-text choice — it has to map to an authorised claim and its conditions of use.
There's a second, less obvious risk here. If your copy targets a health condition and your landing page collects buyer data, you may be processing data from which health status can be inferred, which engages GDPR Article 9 special category protections. The advertising-claim risk and the privacy risk stack. Our Facebook & Meta ad copy guide covers that inference trap in detail.
4. Price and "free" claims
"Free" must be genuinely free. If the user has to buy something else, pay shipping that exceeds true cost, or enter a paid trial, "free" is misleading. The same applies to "from €9" anchors when almost no one can actually buy at that price — that edges toward bait advertising, a named unfair practice.
5. Fake urgency and scarcity
Countdown timers that reset, "only 2 left" that never changes, and "sale ends tonight" that runs every night are explicitly listed practices the UCPD treats as unfair. Automated review rarely catches them; consumer complaints and mystery-shopping do. If your scarcity is real, it's fine. If it's a perpetual prop, it's a blacklist item.
The GDPR layer on your landing experience
A Google Ad doesn't end at the click. The search ad inherits the GDPR obligations of wherever it sends traffic — usually a landing page or lead form. If the ad promises a quote and the landing page quietly enrols users in marketing and ad personalization, the transparency obligation (Articles 13–14) is breached at the destination, and the ad is part of the misleading journey. A compliant EU search campaign needs a claim that survives the UCPD, a landing page that honestly discloses what data it collects and who receives it, and a consent mechanism that isn't bundled with the conversion. Our landing page GDPR checklist is the companion piece for the destination side.
A practical pre-launch check
Before a campaign goes live, run each headline and description through three questions:
- Is it an objective claim? If yes, can you prove it today?
- Does it promise an outcome? If yes, soften to a process or a typical result with context.
- Is it a regulated sector? If yes, assume tighter rules and check the specific regime.
Responsive search ads multiply your claim risk
Responsive search ads (RSAs) are a quiet compliance hazard because Google mixes your headlines and descriptions automatically. You write 15 headlines and 4 descriptions; the system assembles combinations you never explicitly approved. A headline that's fine on its own — "Guaranteed satisfaction" — can combine with a description — "Lose weight fast" — to produce an assembled ad that makes a claim no human signed off on.
This means claim review can't stop at individual assets. Every headline and description has to be defensible in isolation, because any of them can appear with any other. The safe discipline is to treat each line as if it will run as a standalone claim, since effectively it might. If a headline only works because a specific description qualifies it, the qualification can vanish in the combination Google serves — and the unqualified claim is what the user sees.
The same applies to pinning and to dynamically inserted keywords. Keyword insertion can drop a user's search term straight into your headline, producing claims or implications you never wrote. If someone searches "guaranteed weight loss" and your insertion echoes it back, you've now made a guaranteed-outcome claim by accident. Review the asset library as a set of independently-running statements, and be especially careful with insertion in regulated sectors.
Why claim review belongs in the workflow, not after it
The riskiest claims in a high-performing account are the ones that feel normal — the punchy guarantee that lifts CTR, the bold superlative that's always been there. By the time a disapproval or a complaint surfaces them, the campaign has already run, sometimes at scale. Moving the claim check upstream, into the moment copy is written rather than after it ships, is what prevents the pattern. It also fits how account teams actually work: dozens of assets created under pressure, where a fast, consistent check is the only realistic way to catch the line that crosses the threshold before it goes live.
Scan your Google Ads copy before launch
Disapprovals cost time and momentum, and the riskiest claims are the ones that feel normal in a high-performing account. The free GDPR Ad Copy Checker reviews ad copy and landing pages for unsubstantiated superlatives, guaranteed-outcome language, health-claim risk, and the GDPR signals behind them — with safer rewrites for each flag. No login required. For the full legal framework, see the complete GDPR advertising compliance guide.
This article is general information, not legal advice. Use it as a risk signal alongside human compliance review.