Informed consent for aesthetic treatments is a two-stage process: a clinical discussion, followed by a documented record of that discussion. A signed form without the discussion behind it is not valid consent. That distinction matters in complaints, in legal proceedings, and under the incoming licensing scheme.
What Informed Consent Actually Means in Aesthetic Practice
The word "consent" is used loosely in aesthetics. In clinical and legal terms, informed consent is specific. It requires that the patient:
- understands the nature of the proposed procedure
- understands the material risks and benefits
- has been told about reasonable alternatives, including no treatment
- has had sufficient time to consider the information
- has made their decision freely, without coercion
The GMC's decision making and consent guidance applies to doctors performing aesthetic procedures and has been the reference standard for best practice across the profession since it came into effect in 2020. It sets out that consent is an ongoing process, not a one-time event, and that the exchange of information must be meaningful, not formulaic.
The JCCP/CPSA Code of Practice applies across the non-surgical aesthetics sector and sets the same standard for all practitioners, regardless of statutory registration background. The code describes consent as two stages: a discussion about the procedure and its associated risks and benefits, and a formal record of that discussion.
A generic terms-and-conditions form covering every possible treatment the clinic offers does not meet either standard. Consent must be specific to the procedure being performed.
The Two-Stage Consent Process
Stage one is the clinical consultation. The practitioner discusses:
- what the treatment involves, step by step
- the expected outcome and its limitations
- the material risks, including those that are rare but serious
- what alternative treatments exist
- what happens if the patient declines treatment
- the aftercare required and what to do if something goes wrong
Stage two is the record. The practitioner documents the discussion that took place, the questions the patient asked, the information provided, and the patient's decision.
The GMC is explicit that recording decisions is a clinical responsibility. A consent form that a receptionist hands to a patient to sign in the waiting room is not a record of a clinical discussion. It is a form. The two are not the same.
For aesthetic practitioners, the practical implication is that the consent process must happen in the consultation room, led by the person who will perform the treatment, before anything else proceeds.
Who Is Responsible for Taking Consent
The JCCP/CPSA Code of Practice is unambiguous on this: practitioners must seek consent themselves. This responsibility cannot be delegated.
This catches several common clinic workflows. A consultation delivered by a clinic coordinator, a treatment advisor, or even a junior clinician, followed by consent forms signed before the treating practitioner has spoken to the patient, does not meet the standard. The practitioner performing the treatment must personally conduct the consent discussion.
This matters when a clinic is running a busy diary. The pressures on treatment time are real. But a consent discussion conducted at speed, without adequate time for the patient to ask questions, does not produce valid consent. The GMC's seven principles of decision making include the principle that patients must have enough time to make decisions about their care. Rushing a patient through a form is inconsistent with that standard.
The JCCP code also addresses psychological suitability. Practitioners are required to screen for anxiety, body dysmorphic disorder (BDD), and other presenting mental health concerns during the consultation. Where BDD or significant psychological distress is identified, the code indicates practitioners should not proceed. This assessment is part of the consent process. It cannot be treated as optional.
What the Consultation Record Must Contain
The minimum content of a clinical record for an aesthetic consultation, as set out in the JCCP/CPSA Code of Practice, includes:
- The patient's presenting concerns and reasons for seeking the procedure
- Psychological and emotional assessment, including BDD and anxiety screening
- A summary of the consent discussion, including the risks and benefits explained
- The patient's questions and the practitioner's responses
- A signed consent document specific to the treatment, confirming the patient has understood the information given
- Any decision not to involve the patient's GP or relevant healthcare professional, and the practitioner's assessment of how that affects the risk-benefit balance
- The prescribing rationale where the treatment involves a prescription-only medicine
- Batch numbers for any injectable product used
- Aftercare instructions provided and how they were delivered
Records must be contemporaneous. Completing notes from memory at the end of a clinical session introduces the risk of inaccuracy. The record should be written at or immediately after each consultation.
Pre-Treatment Documentation and Clinical Photography
The JCCP code requires pre-procedure clinical photographs to be taken in accordance with CPSA guidelines. This means standardised positioning, consistent lighting, and photographs that capture the full treatment area before any product is administered.
Photographs require their own consent process. The patient must understand:
- what the photographs will be used for
- who will have access to them
- how they will be stored
- how long they will be retained
- whether they will be shared in clinical education or marketing contexts
Photograph consent should be specific and separate from the treatment consent. A signed blanket agreement buried in a general consent form is not adequate for images, particularly if those images will be used in any promotional capacity.
Practitioners using clinical photographs on social media without explicit, photography-specific consent are exposed to significant risk, both under UK GDPR and under the terms of most professional indemnity policies.
How Long to Keep Records and How
Records for adult patients should be retained for a minimum of eight years following the final appointment, consistent with NHS retention standards and common practice for private medical records. For patients who were under eighteen at the time of treatment, records should be kept until the patient's twenty-fifth birthday, or eight years after the final appointment if that is later.
Data protection law under the UK GDPR and the Data Protection Act 2018 requires that personal data is stored securely, accessed only by those who need it, and retained for no longer than necessary. Aesthetic clinical records are special category data. They require higher standards of protection than ordinary personal data.
Practical requirements include:
- Encrypted storage for digital records
- Access controls limiting who can view patient records
- Secure disposal at the end of the retention period
- A documented data breach response process
Paper records held in unsecured filing cabinets, or client information stored on personal phones or unsecured cloud storage, do not meet these standards. The Information Commissioner's Office can investigate and fine organisations for inadequate data security. Private aesthetic clinics are not exempt.
Consent and the Incoming Licensing Scheme
Under the incoming licensing scheme for non-surgical cosmetic procedures in England, both practitioners and premises will need to be licensed. The competency framework underpinning the scheme, developed primarily by the JCCP, requires practitioners to demonstrate the ability to obtain valid, documented consent as part of their qualification for a licence.
The scheme formalises what good practice already requires. Practitioners who already follow the JCCP/CPSA Code of Practice on consent and record-keeping have the documentation evidence that a licensing application will need. Practitioners who do not will need to build that evidence base before they can be licensed.
The highest-risk procedures under the incoming scheme, classified as red category, will require CQC registration of the provider. CQC-registered providers are already subject to oversight that includes consent and record-keeping standards. For practitioners in that category, the standard is already being enforced.
For all other practitioners, the licensing scheme creates a new external check. Practitioners without adequate consent and documentation processes will not meet the standard for a licence. Practising without a licence once the scheme is live will be unlawful.
Good consent practice is not a bureaucratic requirement. It is how practitioners protect their patients and themselves, and it is the foundation of the UK regulation framework that the incoming scheme is now formalising.
If you are working through what the licensing scheme means for your practice and want the structured programme built on this framework, From Regulation to Reputation is £200 off until 20 July, £299 instead of £499, with code REG299. Bernadette wrote Regulation to Reputation: mastering successful aesthetic practice and the course is the four-week programme built on that work, covering consent, documentation, and the compliance framework in full.
FAQ
Is a signed consent form sufficient for aesthetic treatments?
A signed form is evidence that a conversation took place, but only if the conversation actually happened. A form completed without a prior clinical discussion, or one signed before the treating practitioner has spoken with the patient, does not constitute valid consent. Both the GMC and the JCCP/CPSA Code of Practice require a two-stage process: discussion first, documentation second.
Can a receptionist or coordinator take consent on behalf of the treating practitioner?
No. The JCCP/CPSA Code of Practice requires practitioners to take consent themselves. This responsibility cannot be delegated to non-clinical staff or to another clinician who is not performing the procedure. The practitioner who will carry out the treatment must personally conduct the consent discussion.
What should happen if a patient shows signs of body dysmorphic disorder?
The JCCP code requires practitioners to screen for BDD and other psychological concerns as part of the consultation and consent process. Where significant indicators are present, the code indicates that practitioners should not proceed with treatment. The assessment and the decision should be documented in the clinical record. Referring the patient to their GP or to an appropriate mental health professional is the considered response.
How long should aesthetic treatment records be kept?
The standard for private medical records is a minimum of eight years from the end of treatment for adult patients. For patients who were under eighteen at the time of treatment, records should be retained until the patient's twenty-fifth birthday, or eight years from the last appointment if that is later. Records must be held securely and in compliance with UK GDPR.
Do consent requirements apply to non-healthcare practitioners as well as registered professionals?
Yes. The JCCP/CPSA Code of Practice applies across the non-surgical aesthetics sector regardless of whether the practitioner holds statutory registration. The incoming licensing scheme is expected to formalise this further, making consent and documentation requirements part of the licence conditions for all practitioners performing licensable procedures.
What does UK GDPR require for clinical photographs?
Clinical photographs are personal data, and often biometric data, which attracts additional protections under UK GDPR. Practitioners must have a specific lawful basis for processing them, explicit consent where that is the basis, and clear records of what consent was given, for what purpose, and how images are stored and retained. Using clinical photographs in social media marketing without separate, explicit consent for that use is a common and significant compliance gap.