1. Reputation Partners
  2. Journal
  3. Playbooks

17 min readView as Markdown

Lawyer vs Reputation Management Company: Who First

Lawyer vs reputation management company: which one to hire first for defamation, privacy, suppression or AI answers, and how to make them work together.

If the harm is a false statement of fact, a privacy breach, a court order or a regulator's letter, hire a lawyer first, because only a legal process can compel a removal or set a deadline. If the harm is what search engines and AI assistants show about you, and the content is accurate or cannot be removed, hire a reputation management company first, because ranking, authority and monitoring are not legal remedies.

Most real cases need both, in a deliberate order. The costliest mistake is acting on the public side before the legal side has decided what can be said, or waiting on a legal process while the page one results harden.

This guide sets out the dividing line, the situations that belong to each side or to both, a coordination timeline, how jurisdiction changes the order, and the questions to ask before you sign. It is information, not legal advice. Your own counsel decides what applies to your facts.

The short version
  • Lawyer first when you need a legal outcome: a retraction, an injunction, a court order, a response to a regulator, or a decision on whether a statement is actionable at all.
  • Reputation firm first when you need a visibility outcome: moving accurate results down, building the pages that should own your name, correcting AI answers, and monitoring.
  • Both when the content is partly false, partly true, or when a legal step will create news of its own.
  • Time limits for defamation are short in some places, so a lawyer's early read of the clock matters even when you expect to use a ranking route.
  • Keep one shared evidence file, one decision-maker and one rule: nothing public goes out until counsel has seen it.

The question that sorts every case is what a successful result looks like. If success is that a specific page is gone, a statement is withdrawn, a person is identified or a duty is enforced, you need a legal route. If success is that people who search your name find better, accurate material first, you need a visibility route.

A legal route acts on the source or the person behind it, through a letter, a statutory notice, a regulator complaint or a court. A visibility route acts on what is found, through owned pages, authoritative profiles, structured data, corrections to the sources AI assistants quote, and monitoring.

Related readReputation Management RFP and Vendor Scorecard

The two overlap in one place: search engine removal requests. Search engines accept some requests on legal grounds, such as defamation, and some on privacy grounds. Either professional can file them, but the legal grounds are only as strong as the legal analysis behind them, which is why the lawyer usually owns the decision to file.

Four situations belong to counsel first. In each, an early wrong move can reduce your options.

False statements of fact: defamation and related claims

If a statement is false, identifies you, and has caused or is likely to cause damage, you may have a claim in defamation. The first job is a legal read: is it a statement of fact or opinion, is it provably false, who published it, and does it meet the threshold in your jurisdiction.

In England and Wales, section 1 of the Defamation Act 2013 says a statement is not defamatory unless its publication has caused or is likely to cause serious harm to the claimant's reputation. For a body that trades for profit, serious harm means serious financial loss. Whether a statement meets that test is a legal judgment a reputation firm cannot make for you.

Counsel also decides what to send and to whom. England and Wales has a Pre-Action Protocol for Media and Communications Claims that covers defamation, misuse of private information, data protection and harassment by publication. It sets out what a letter of claim should contain, expects a response, and treats court proceedings as a last resort. The protocol says that refusing to engage with alternative dispute resolution can lead to extra costs. A badly drafted letter can end up in the public domain.

Related readHow long does reputation management take?

Privacy and data protection claims

Where the problem is personal information rather than falsehood, the route is a privacy claim, a data protection request or both. Under the EU General Data Protection Regulation, Article 17 gives a right to erasure on stated grounds, such as the data no longer being necessary for its purpose or having been processed unlawfully. Article 17(3) lists exceptions, including processing necessary for exercising freedom of expression and information, and for establishing, exercising or defending legal claims.

Those exceptions are why a privacy request against a news publisher is a legal question, not a form to fill in. Whether the expression exception applies depends on the content, its age, your public role and the publisher's purpose. A lawyer can argue it. A reputation firm can prepare the evidence, but should not decide that the exception does not apply.

Court orders and platform liability

Some outcomes only a court gives: an injunction, an order to take down, an order to identify an anonymous poster. Google's legal help page for defamation says it applies the laws of the location where the request is made and weighs the public interest in the information. It says it is not well placed to decide whether claims are true, because it cannot call witnesses or take sworn evidence, so reliable evidence carries weight, and a court ruling in your favor would be taken into account.

Counsel also tells you whether the platform can be reached at all. In the United States, 47 U.S.C. 230(c)(1) says that a provider or user of an interactive computer service is not treated as the publisher or speaker of information supplied by another content provider. The statute has exceptions, including federal criminal law and intellectual property law, and states cannot impose liability that conflicts with it. In practice, a defamation claim against the site that hosts a user's post is therefore usually not available there, and the lawyer's advice is about the original speaker, not the platform.

Related readReputation management brief: a template for agencies

In England and Wales, section 5 of the Defamation Act 2013 gives website operators a defense for statements posted by others. The defense is defeated if you cannot identify the poster, you sent a notice of complaint, and the operator did not respond as the regulations require, or if the operator acted with malice. A notice of complaint must give your name, set out the statement and why it is defamatory, and say where it appears. It has legal consequences, so it is best drafted by counsel.

Regulators, investigations and anything with a deadline

If a regulator, court, tax authority or opposing counsel has written to you, the letter sets its own deadline and its own consequences. Read the date on it. Call a lawyer before anyone drafts a public line or a statement to a journalist. A public statement made without counsel may be used against you in the proceeding.

A reputation firm comes first when the problem is visibility, not liability

Four situations belong first to a reputation firm. In each, a lawyer adds little at the start.

Accurate but damaging results you cannot remove. An accurate news report, a court listing or a regulatory notice is not a legal wrong, and most routes to remove it fail. The work is suppression: building better, accurate, authoritative pages so that they outrank the damaging ones in searches for your name. It takes time, so starting early matters. Our suppression service is built for this case. Suppression does not hide anything: the original page stays where it is.

An empty or weak page one. If a search for your name returns thin or confused results, there is no legal claim and nothing to remove. The task is to build the pages that should own your name: a personal or company site, verified profiles, a biography, press material and structured data.

Related readHow to document online defamation evidence

What AI assistants say about you. ChatGPT, Gemini, Perplexity and AI Overviews assemble answers from sources they retrieve and from their training. When an answer is wrong or thin, the cause is usually the sources, and the fix is to correct or strengthen them and to report errors through the provider's channels. If an answer is false and damaging in a way that could be a legal wrong, a lawyer comes in alongside. An outdated fact or a mix-up with someone who shares your name is a sources job. Our AI search reputation work covers this.

Monitoring. Watching search results, review sites and AI answers for new items needs no legal step, and it gives a lawyer early warning when something actionable appears. A monitoring program asks little of you and shortens the time between a new item and a legal read.

Three patterns call for both from the start.

Partly false, partly true. An article with one false claim inside accurate reporting. Counsel decides whether the false part is actionable and drafts the correction request. The reputation team plans for the case where the correction is refused or only partial, and begins strengthening the results around it. The results do not have to wait for the correction.

A legal step that will create its own coverage. Filing a claim, or sending a letter that is likely to be published, can create a new article about the dispute. That second article can rank for your name too. Counsel decides whether to proceed. The reputation team needs to know before the filing date, so that owned pages, profiles and monitoring are in place when it appears.

Related readOnline reputation checklist for individuals

A fast-moving event with a legal tail. A viral allegation, a leak, an arrest or a public accusation. In the first hours, the public question is what to say and where, and the legal question is what not to say. Both run at once.

Decision table by situation

The table sorts the situations that come up most often. "First" means who starts the work, not who finishes it. Your lawyer confirms the legal side.

SituationWho firstWhyThe other joins when
False statement of fact about you in an article or postLawyerThreshold, notice step and clock are legalResults need protecting while the claim runs
Accurate negative news articleReputation firmNo claim; the route is suppression and contextA lawyer joins only if a specific part is inaccurate or unlawful
Anonymous review or post you believe is falseLawyerIdentifying the poster and the platform's duties are legal questionsThe profile page needs strengthening in parallel
Home address or private data publishedBoth at onceSearch engine and broker requests are a quick first step; legal claims decide the stubborn casesImmediately
Letter from a regulator, court or opposing counselLawyerThe letter sets a deadline and consequencesMonitoring begins; public work waits for clearance
Leaked intimate imagesBoth at oncePlatform and search-engine removal tools act fast; criminal and civil routes vary by countryImmediately
Thin or confused page one, no negative contentReputation firmNothing to claim or removeRarely
AI answer that is wrong or outdatedReputation firmThe cause is sources; correction goes through providersThe error is defamatory or the provider refuses
Viral allegation with legal exposureBoth at onceWhat to say and what not to say are decided togetherImmediately
Old record, resolved case or expunged matterLawyer, then firmEligibility for legal relief or delisting is a legal readIf relief is partial or refused

A coordination timeline keeps the two sides from undoing each other

Treat the first month as a sequence with fixed hand-offs. The days are typical for a straightforward file, not promises; a contested matter takes longer.

Coordination timeline for a case that needs both
  1. Day 0 to 2: freeze and captureSave full-page captures with dates, URLs and the search results for your name as they stand. Nobody posts, replies or contacts the publisher. One person is named as decision-maker.
  2. Day 2 to 5: legal readCounsel reviews the material and answers three questions: is any of it actionable, what is the time limit, and what may be said publicly. The reputation team gets the answers in writing.
  3. Day 3 to 7: visibility auditThe reputation team maps what ranks for your name, what AI assistants say, which pages you own and which source drives each damaging result. It flags which items counsel might act on.
  4. Day 7 to 14: choose the routesCounsel proposes the legal route, if any. The reputation team proposes the visibility route. Both are agreed together, with the sequence and the dates the legal step will become visible.
  5. Day 14 to 45: run both in parallelLegal correspondence goes out under counsel's control. Owned pages, profiles and structured data are built and published once counsel has cleared them. Search engine requests are filed by whoever counsel designates.
  6. Day 45 onward: review and monitorA joint review checks what moved, what did not and whether the legal position has changed. Monitoring continues for new items, and anything actionable goes back to counsel the same day.

Three rules make the sequence hold. Counsel sees every public draft before it is published. Each side warns the other before a filing or a letter goes out. Both work from the same evidence file, with the same dates.

How jurisdiction changes the order

The dividing line is the same everywhere. What changes is the legal test, the notice step and the time limit, and these decide how quickly a lawyer needs to be involved. The points below come from the statutes and official pages named, and they change, so ask counsel to confirm the text in force.

England and Wales

Section 1 of the Defamation Act 2013 sets the serious harm threshold. Section 4A of the Limitation Act 1980 sets a one-year limit for libel and slander, and the protocol says time is often critical for that reason. Section 8 of the 2013 Act is the single publication rule: a later publication of the same or substantially the same statement is treated as accruing on the date of the first, unless its manner is materially different. Section 32A of the Limitation Act 1980 lets a court disapply the section 4A limit where it considers it equitable, weighing the prejudice to each side and the length of and reasons for the delay, and section 8 leaves that discretion in place. The discretion is not a right, so a missed deadline is a question for a lawyer, not a reason to give up or to assume the claim survives.

Related readWhat to do about negative content about me: triage

Australia

Each Australian state and territory has its own defamation Act. For New South Wales, the Defamation Act 2005 makes serious harm an element of the cause of action in section 10A, with serious financial loss for excluded corporations. Section 12A says a concerns notice must be in writing and state where the matter can be accessed, such as a web address, the imputations of concern, and the serious harm caused or likely. Section 12B says proceedings cannot start until a concerns notice has been given, the imputations were particularised in it, and the period for an offer to make amends has elapsed; the court can grant leave in limited cases. Section 14(2)(b) sets that period at 28 days from the concerns notice in the ordinary case. Section 14B of the Limitation Act 1969 sets a one-year period from publication, extended where a concerns notice is given within the last 56 days of it, and a court can extend it to up to three years where just and reasonable (section 56A). Other states and territories have their own Acts.

United States

There is no single federal defamation law. Each state has its own, including its own limitation period, which is why a US matter starts with finding which state's law applies. Section 230 limits claims against platforms for user content, so the target of a claim is usually the original speaker. The SPEECH Act, 28 U.S.C. 4102, bars US courts from recognizing a foreign defamation judgment unless the foreign law gave speech protection comparable to the First Amendment or the defendant would be liable under US law anyway, and unless the foreign court's jurisdiction met US due process standards.

Related readManage your online reputation yourself: a DIY plan

European Union, privacy route

For privacy-based removal, the GDPR Article 17 right to erasure and its Article 17(3) exceptions apply in the EU. Google's request process for European data protection law asks for the URLs, how the content relates to you and the search name used. It weighs public interest against your data protection rights, looking at your role in public life, the source, the age and currency of the information, whether searchers have a legitimate interest, any criminal conviction, truth or falsehood, and sensitivity. Delisting applies only to searches related to your name, and the content may still appear for other queries. The page read does not describe UK requests, so UK readers should check the UK position with counsel. A privacy request is a legal argument made to a search engine, and a lawyer strengthens it most when the content is journalistic or the public interest is contested.

Questions to put to each side before you hire

Put these in writing and keep the answers.

To the lawyer

  • Which jurisdiction's law applies to this publication, and why? A clear answer names the law and the court, and says which facts could change it.
  • What is the time limit, and when does it start? A good answer states a date or says exactly what is needed to fix one.
  • Is this likely actionable at all, and what is the likely outcome if it is not? Look for a clear view, including when the answer is no.
  • What will the first letter say, to whom, and could it be published? Ask to see the draft before it goes out.
  • Who pays if the other side refuses? Ask for the fee structure in writing and the main costs risk.
  • Who will work with the reputation team, and what will you share? The answer shows whether privilege and the shared file are handled with care.

To the reputation management company

  • What exactly will you do on my search results, and what will you not do? Ask for a written scope, with methods described.
  • How will you handle the part of this that may be legal? The right answer routes it through your counsel.
  • Which results can you realistically move, and which can you not? A clear answer names the limits, including that accurate material cannot be removed by a letter.
  • What happens if a result does not move? Look for a defined review, not a promise.
  • Will you work under confidentiality and share only what is needed with my lawyer? Ask for the terms in writing; privacy and data handling are covered on our legal page.

Start the two reads at the same time, because each informs the other. The legal read tells you the clock and what can be said. The visibility audit tells you what people find now and what is driving it.

If this is happening to you now

Capture the pages and the search results for your name today, say nothing in public, and book a legal read. If you want the visibility side mapped at the same time, Reputation Partners can run a private audit and share the findings with your counsel under confidentiality. Start with the private audit.

Questions people ask

Can a reputation management company remove defamatory content?

A reputation firm can prepare evidence, file platform and search-engine requests and monitor for reposts. It cannot compel a publisher to remove content. Only the publisher, a platform applying its rules or a court can do that, and whether a statement is defamatory is a legal judgment for your lawyer.

Should I send a cease and desist letter myself?

Be careful. A letter that overstates your position can be published, can create liability of its own and may fail a pre-action requirement in some jurisdictions. A short factual request to a publisher to correct an error is different from a legal threat. If you are unsure which yours is, have a lawyer read it first.

What if the content is true?

If it is true, fairly reported and lawful, defamation will not help, and a legal threat is likely to raise its profile. The route is suppression and context: accurate, authoritative pages that answer the question people are really asking. A privacy or data protection route may still apply to some personal data, depending on your jurisdiction.

What if the time limit has already passed?

Do not assume the claim is lost. Some jurisdictions allow a court to extend or disapply the period, as England and Wales (section 32A) and New South Wales (section 56A) do, at the court's discretion. A lawyer can tell you quickly. Meanwhile, begin the visibility work, which does not depend on a limitation clock.

Reputation Partners desk

Notes from the desk. Written by the people who handle the cases.

Tell us what Google says. Quietly.

A partner reads every request personally. Every engagement is quoted individually, after an audit.