Why Digital Consent Forms Are Now Essential for CQC-Registered Clinics
Verbal consent is not enough. For CQC-registered aesthetic clinics, documented, auditable consent is a legal requirement before every treatment. Here’s what valid consent looks like — and what it doesn’t.
Consent is one of the most scrutinised areas of any CQC inspection of an aesthetic clinic. Inspectors want to see not just that consent was obtained, but that it was valid, properly documented, and that patients genuinely understood what they were agreeing to. Getting this right protects your patients — and your registration.
What Makes Consent Valid Under CQC Regulation 11?
Regulation 11 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires that registered providers must obtain consent that is:
- Voluntary — the patient must not be pressured or unduly influenced
- Informed — the patient must understand the treatment, its risks, alternatives, and what happens if they decline
- Capacitated — the patient must have the mental capacity to make the decision
- Specific — consent to one treatment does not cover additional or different treatments
- Documented — there must be a written or digital record that can be produced during an inspection
What Must Consent Forms Include?
A compliant aesthetic consent form should include, as a minimum:
- The specific treatment being consented to (not just a generic “aesthetic treatment”)
- A clear explanation of the procedure in plain language
- Known risks, side effects and potential complications — including rare but serious ones
- Alternatives to the proposed treatment
- Confirmation that the patient has had adequate time to ask questions
- For injectable treatments: confirmation of the cooling-off period offered
- Photo consent — separately stated, not bundled into treatment consent
- Data protection / GDPR consent for how records will be stored and used
- Date, patient signature, and clinician signature
The Cooling-Off Period
For injectable cosmetic procedures, best practice — and increasingly, regulatory expectation — is that patients are offered a cooling-off period between consultation and treatment. While there is no fixed statutory minimum period for aesthetics (unlike surgery), the CQC expects clinics to have a documented policy, and inspectors will look for evidence that it is applied consistently.
Many compliant clinics operate a 48-hour minimum cooling-off period for new patients receiving injectables. Whatever your policy, it should be written, consistently applied, and evidenced in patient records.
Paper vs Digital Consent: A Practical Comparison
| Factor | Paper Consent | Digital Consent |
|---|---|---|
| Audit trail | Difficult — paper can be lost or altered | Automatic timestamp, IP, device logged |
| Storage & retrieval | Manual filing, risk of loss | Instant search by patient or date |
| GDPR compliance | Physical storage risks | Encrypted, access-controlled |
| CQC inspection | Must manually locate paper records | Instant, filterable evidence |
| Cooling-off enforcement | Manual, easy to overlook | Can be system-enforced with date locks |
| Remote consent (pre-appointment) | Not possible | Patient completes at home before visit |
Who Can Obtain Consent?
Consent for aesthetic treatments should always be obtained by a suitably qualified clinician — not a receptionist or non-clinical member of staff. For prescription-only injectable procedures, the prescribing clinician or a qualified practitioner under their supervision should conduct the consent process.
The CQC will look at whether the person who consented the patient had the clinical knowledge to answer questions about risks and alternatives. A consent form signed by a patient who was not properly counselled by a clinician will not be considered valid, regardless of what it says on the form.
Consent for Under-18s
Injectable cosmetic procedures are now legally restricted to adults aged 18 and over in England, Wales and Scotland under the Botulinum Toxin and Cosmetic Fillers (Children) Act 2021. A compliant clinic should have a clear policy on age verification, and this should be documented in patient records. Inspectors will look for this.
How to Conduct a Consent Audit
A quarterly review of a random sample of patient consent records is good practice — and it’s something inspectors will look for as part of your governance framework. Check for:
- Completeness — all required fields present and signed
- Specificity — consent matches the treatment actually delivered
- Timing — consent was obtained after consultation, not before
- Cooling-off — cooling-off period applied and evidenced for injectable patients
Document your audit findings and any actions taken. This is the kind of evidence that marks a clinic as “well-led” in CQC terminology.
Compliant consent, built into every appointment
Intentiq’s digital consent module enforces cooling-off periods, captures fully timestamped signatures, and links consent directly to treatment records — giving you an instant, audit-ready evidence trail.