The practitioners I speak to in June 2026 fall into two groups.
The first group has a folder. Physical or digital, it doesn't matter. It has their indemnity documents, their consent forms, their clinical protocols, their emergency procedures, their medicines management records, and their CPD log. They know what's in it. They've reviewed it in the last three months.
The second group has a vague intention to sort it out.
If you are in the second group and you practice in England, this is the post to read now.
The licensing scheme introduced under the Health and Care Act 2022 is not a future concern. Local authorities are developing their frameworks. The enforcement architecture is being built. Being ready is not about ticking boxes before an inspector visits. It is about building a practice that can demonstrate, on request, that it meets the standard. The practitioners who do that work now are not doing it out of anxiety. They are doing it because it is what clinical accountability looks like in practice.
Here is what that work involves.
The two-licence structure
The scheme requires a licence for the practitioner and a licence for the premises. These are not the same application and they do not come from the same place. Practitioners who work across multiple sites need a premises licence for each site, even if their own practitioner licence covers all of them.
If you work from home, the premises is your home. If you rent a room in a salon or clinic, the premises licence applies to that room. If the salon owner tells you they are handling it, confirm that in writing and ask to see the application.
Do not assume someone else is sorting it.
The documentation that matters most
Inspections under equivalent frameworks in Scotland and Wales have shown consistent patterns in what gets found. The most common gaps are not the ones practitioners expect.
Clinical governance documentation is the most frequently flagged area. This means written protocols for every treatment you perform, not just the headline procedures. It means a documented process for adverse event management, including who you would call, in what order, and what you would do in the first ten minutes. It means a written record of how you keep your clinical knowledge current.
Consent records are the second most common gap. A consent form is not the same as a consent record. The form captures what was said. The record captures that it was said, understood, and that the client had time to ask questions and change their mind. The distinction matters to an inspector and it matters more to you if something goes wrong.
Medicines management is the third. If you prescribe or administer prescription-only medicines, your records need to show that your prescribing pathway is clear, documented, and reviewed. This includes your PGD or independent prescriber status, your supply chain, your storage records, and your disposal records.
CPD is often incomplete or undated. A log that says "attended a masterclass in 2024" is not a CPD record. A CPD record says what you attended, what learning objective it addressed, what you did differently as a result, and when. It is a reflective document, not a receipt collection.
The checklist, in order of priority
Work through these in order. The ones at the top are the ones inspectors reach for first.
1. Emergency protocols. Do you have a written anaphylaxis protocol? Is your adrenaline in date? Do you know your nearest emergency department and how long it takes to get there? Is this written down somewhere a colleague or client could find it if you were incapacitated?
2. Adverse event record. Have you had any adverse events in the last two years? Are they documented? If you have not had any, that is worth noting too. A blank record with no explanation looks different to a record that says "no reportable adverse events in this period."
3. Consent process. Walk through your last five client consultations. For each one, can you show the consent form, the date it was signed, and a clinical note that records the consultation happened before treatment? If any of those five are missing a component, fix the process now.
4. Medicines paperwork. If you use prescription medicines, is your prescribing pathway current and documented? When did you last review your PGD? Is your supplier audited and on your records?
5. CPD log. Open it. Is everything dated? Does each entry have a reflection, not just a title? Does it cover the last twelve months?
6. Premises safety. Is your infection control documentation current? Do you have a written waste disposal record? Is your equipment serviced and within its maintenance schedule?
What the RAG system means in practice
The Traffic Light System used in the From Regulation to Reputation pathway is a practical shortcut for exactly this audit. Red means the gap is material and creates immediate regulatory or clinical risk. Amber means it needs attention but is not an immediate risk. Green means it is documented and current.
Most practitioners who use it honestly find they are a mixture of all three. That is not a failure. It is a map. A map you can work from.
The practitioners who go through this process tend to say the same thing afterwards: it is not as bad as they thought, and now they know where they stand.
That knowledge is worth having. Especially in the weeks before this deadline.
If you want a structured framework for working through the full compliance picture, the From Regulation to Reputation pathway covers every area above in eight modules, with documentation templates and the clinical governance framework built into the course. It takes most practitioners four to six hours to complete.
The deadline is close. The work is finite. Start with the list above.