Guides · Last updated July 2026
What consent forms does an aesthetic clinic need in the UK?
Consent paperwork is where aesthetic clinics are most exposed and least consistent. Everyone has forms; far fewer have forms that would stand up when an insurer, a regulator or a solicitor asks for the record of a treatment performed three years ago.
This guide covers what forms you need, what informed consent has to include for the common procedures, how digital signatures and storage should work, and how to keep consent current for returning clients without drowning in admin.
Which forms does every aesthetic clinic need?
- New client consultation form. Contact details, how they found you, treatment goals, expectations. This is also your marketing segmentation data.
- Medical history questionnaire. Conditions, medications, allergies, previous aesthetic treatments, pregnancy and breastfeeding status, bleeding disorders, keloid history. Reviewed and re-confirmed at every visit.
- Treatment-specific consent forms. One per procedure family: dermal fillers, botulinum toxin, skin boosters, polynucleotides, fat dissolving, microneedling, chemical peels, laser and IPL. Each states the procedure, the specific risks, alternatives, expected downtime and aftercare responsibilities.
- Photography consent. Separate consents for clinical record photography and for marketing use. A client can agree to the first and refuse the second; bundling them is a GDPR problem. See our photography guide.
- Aftercare acknowledgement. Evidence the client received and understood aftercare instructions, this is what protects you when a complication traces back to ignored aftercare.
What must informed consent actually cover?
Since the Montgomery ruling in 2015, UK consent law is patient-centred: you must disclose the risks a reasonable person in this patient's position would want to know, not just the risks you consider significant. For an aesthetic consent form that means:
- What the procedure is, in plain language, including the product to be used.
- The material risks, both common and mild (bruising, swelling) and rare but serious (vascular occlusion and blindness for fillers, ptosis for toxin, scarring and pigment change for laser).
- Alternatives, including doing nothing.
- Expected results, their limits and their lifespan, managed expectations are consent too.
- Aftercare obligations and when to seek help.
- Costs, and your policy on adjustments and dissolving.
The consent conversation matters as much as the form. The form is the evidence that the conversation happened; a signature on a form the client demonstrably had no time to read is weak evidence. Sending forms ahead of the appointment, or completing them on a tablet in the consultation with the practitioner present, both work; a clipboard thrust at someone already on the treatment bed does not.
How should digital consent and signatures work?
Digital consent beats paper on every axis that matters, if it captures the right evidence:
- A timestamped signature drawn by finger, stylus or mouse, bound to the exact form content that was signed.
- An audit trail: when the form was completed, from what device or IP, and which version of the form text was live at the time.
- Immutable storage against the patient record, staff should be able to view and export a signed form, not edit it.
- PDF export for insurers and solicitors who want a document, not a login.
In ClinicBook, forms are built once in a form builder (or picked from a starter library of aesthetic templates), completed on any device, signed on screen, timestamped with the signer's IP recorded, stored against the patient, and exportable as a print-ready PDF.
What is smart form renewal and why does it matter?
The most common consent failure in real clinics is not a missing first form, it is a stale one. The client signed everything eighteen months ago, has been back four times since, started a new medication in between, and nobody re-asked.
Making a returning client re-type a full medical history at every visit is the kind of friction that makes front desks quietly skip the step. Smart renewal fixes the incentive: the system shows the client their previous answers, they confirm nothing has changed or update the one thing that has, and re-sign. Thirty seconds, current consent, every visit.
How should consent records be stored under UK GDPR?
Completed medical and consent forms are special category data under UK GDPR Article 9. Concretely:
- Encrypted storage with access limited to clinic staff who need it.
- A lawful basis, for clinical records this is the provision of health care, not consent-the-GDPR-concept, which confuses many clinics: the patient cannot "withdraw consent" to erase their clinical record.
- Defined retention: at least your insurer's claim window, commonly treated as 8 years from last treatment for adults.
- The ability to answer a subject access request: export everything you hold on a patient.
Paper folders and personal email attachments fail most of these tests. If you are still on paper, digitising consent is the single highest-value move you can make this quarter.
Related guides
- What is the best software for aesthetic clinics?
- How should aesthetic clinics take and store before and after photos?
Frequently asked questions
Are digital signatures legally valid on consent forms in the UK?
Yes. Electronic signatures have been legally recognised in the UK since the Electronic Communications Act 2000 and the UK eIDAS regulation. For clinical consent the substance matters more than the pen: evidence that the specific patient signed the specific form on a specific date, which a timestamped digital signature with an audit trail provides.
How long should an aesthetic clinic keep consent forms?
Follow medical record retention practice: a common standard is 8 years from the last treatment for adults (and longer for anyone treated under 18, until their 25th birthday). Your insurer's requirements are the floor, keep records at least as long as a claim could arise, and check your policy wording.
Does a returning client need to sign a new consent form every time?
Consent should be current for every treatment episode. In practice that means re-confirming medical history and re-signing treatment consent when the client returns, not relying on a form from a year ago. Smart renewal, where the client reviews previous answers and updates only what changed, keeps this fast enough that clinics actually do it.
Can I use one generic consent form for all treatments?
No. Informed consent must reflect the specific risks of the specific procedure. Dermal filler risks (vascular occlusion, migration) are different from anti-wrinkle risks (ptosis, asymmetry) and laser risks (burns, pigmentation change). A generic form is the kind of documentation that falls apart under insurance scrutiny.
Who can take consent for a treatment?
The practitioner performing the treatment should take consent, it is a conversation, not just a signature. For prescription-only treatments like botulinum toxin, the prescriber must consult the patient face to face before prescribing; the consent record should reflect that consultation.
What is the 2026 licensing scheme and does it change consent?
England is introducing a licensing scheme for non-surgical cosmetic procedures under the Health and Care Act 2022, expected to phase in from 2026. It formalises what insurers already expect: trained practitioners, safe premises, and documented consultation and consent. Clinics with clean digital records are already where the scheme is heading.
Do consent forms need to be stored separately from booking data?
They need to be stored securely and linked to the patient's clinical record, not scattered. Under UK GDPR, health data is special category data: it needs encryption, access control and a lawful basis. A signed PDF in a shared inbox or a paper folder in reception does not meet that bar.