Cosmetic Procedure Consent Form

A Cosmetic Procedure Consent Form in the United States authorises a defined activity and evidences that the necessary permission was given.

The doctrine of informed consent in US medical law derives from two foundational legal theories. The first is the tort of battery — any unconsented touching of a patient constitutes battery, regardless of whether the procedure was performed skillfully. The second is the tort of negligence — even where a patient has given general consent to treatment, a physician who fails to disclose a material risk that the patient would have considered significant in deciding whether to proceed may be liable for negligence if that risk materializes. US states apply one of two standards for the scope of disclosure required: the professional standard (what a reasonable physician in the same specialty would disclose), applied in states including New York and New Jersey; and the patient-oriented standard (what a reasonable patient in the plaintiff's position would want to know), applied in states including California, Washington, and the majority of US jurisdictions.

Cosmetic procedures span a wide spectrum from non-medical services (facials, waxing, non-chemical peels, microdermabrasion) to medical procedures (Botox injections, dermal fillers, chemical peels, laser treatments, microneedling, and surgical procedures). The regulatory framework governing who may perform each procedure varies significantly by state. In most states, injectable procedures — including botulinum toxin (Botox, Dysport, Xeomin) and hyaluronic acid dermal fillers (Juvederm, Restylane, Sculptra) — are classified as the practice of medicine and may only be administered by or under the direct supervision of a licensed physician, physician assistant (PA), or nurse practitioner (NP), subject to applicable state scope-of-practice statutes.

Medical spas (med spas) in the US must comply with state medical board regulations governing the corporate practice of medicine. Most states prohibit non-physician ownership of medical practices, requiring that med spas be organized as professional corporations owned by a licensed physician or as management service organizations with a physician-owned professional entity providing medical services. The medical director of a med spa is responsible under state medical board standards for establishing written protocols, supervising medical procedures, and being available for emergencies.

The Health Insurance Portability and Accountability Act (HIPAA, 42 U.S.C. § 1320d et seq.) and its implementing regulations (45 CFR Parts 160 and 164) apply to cosmetic procedure providers that are covered entities — primarily those that submit claims to health insurers. HIPAA requires that patient health information collected in cosmetic procedure intake forms be handled, stored, and disclosed in accordance with the Privacy Rule, and that appropriate administrative, physical, and technical safeguards be implemented under the Security Rule.

A Cosmetic Procedure Consent Form is needed before every cosmetic medical or aesthetic procedure performed in a US medical spa, dermatology office, plastic surgery center, or aesthetic clinic, both as a legal prerequisite to treatment and as a clinical documentation requirement.

Botulinum toxin injection procedures — Botox, Dysport, Xeomin, Daxxify — require procedure-specific consent forms that disclose the risks unique to neurotoxin injections: bruising, swelling, asymmetry, ptosis (eyelid drooping), headache, and the very rare but serious risk of inadvertent vascular occlusion or spread of toxin effect. The consent form should disclose the specific product to be used by brand name, the dosage planned, the areas to be treated, and the provider's credentials.

Dermal filler injections — hyaluronic acid fillers (Juvederm, Restylane), calcium hydroxyapatite (Radiesse), poly-L-lactic acid (Sculptra), and polymethylmethacrylate (Bellafill) — carry risks including bruising, swelling, nodule formation, granulomas, and vascular occlusion with potential tissue necrosis or vision loss. The FDA has issued multiple safety communications regarding dermal filler risks, most recently in 2021, and providers must disclose these risks in the consent form.

Laser and energy-based treatments — including intense pulsed light (IPL), fractional laser resurfacing (Fraxel, CO2), radiofrequency microneedling (Morpheus8), and cryolipolysis (CoolSculpting) — require consent forms disclosing risks that vary by skin type under the Fitzpatrick classification scale: patients with Fitzpatrick skin types IV through VI have elevated risk of post-inflammatory hyperpigmentation and should receive specific disclosure of this risk.

Chemical peel procedures — superficial (glycolic, salicylic), medium-depth (TCA 20-35%), and deep (phenol) — require tiered consent based on peel depth. Phenol peels require cardiac monitoring and specific anesthesia consent in addition to standard procedure consent, and are performed exclusively in clinical settings.

New patients at a med spa should complete a complete health history intake form incorporating cosmetic consent elements before any treatment begins, as some conditions — isotretinoin use within six to twelve months, active infection, pregnancy, or certain autoimmune conditions — are absolute or relative contraindications to multiple procedure types.

A complete US Cosmetic Procedure Consent Form contains the following essential sections that address the legal, clinical, and risk management requirements for cosmetic procedure documentation.

The patient identification and demographic section records the patient's full name, date of birth, address, contact information, and emergency contact. For med spa and physician practice records, this information must be maintained in the patient's medical record in compliance with applicable state medical records retention statutes — typically a minimum of seven to ten years from the date of the last entry, or three years after a minor patient reaches the age of majority.

The procedure description section identifies with specificity the procedure or procedures to be performed, including the brand names of any injectables or devices to be used, the areas of the body to be treated, the anticipated number of units or syringes, and any combination treatments in the same session. This specificity is important because the risks and alternatives differ significantly between procedure types.

The medical history questionnaire section collects the health information necessary to identify contraindications and risk factors. Key items include: current medications (anticoagulants, retinoids, antibiotics, immunosuppressants); recent isotretinoin use (absolute contraindication for many procedures within 6-12 months); known allergies to procedure materials (lidocaine, hyaluronic acid, latex); history of autoimmune conditions; history of cold sores (herpes simplex — antiviral prophylaxis required before many laser and injection procedures); pregnancy or breastfeeding status; prior cosmetic treatments and any adverse reactions; and skin conditions in the treatment area.

The risk disclosure section lists the material risks specific to the procedure being performed, in language that a non-medical patient can understand. For each risk, the approximate frequency (common, uncommon, rare) and likely severity (temporary, reversible, permanent) should be stated where known. The FDA-required prescribing information for injectable products should inform the content of this section.

The alternatives section explains the treatment alternatives to the proposed procedure — including no treatment — and the likely outcome of each alternative. For surgical cosmetic procedures, non-surgical alternatives should be described. This disclosure is required under the patient-oriented standard of informed consent applied in the majority of US states.

The realistic expectations and results clause is among the most important risk management provisions in a cosmetic consent form. The clause should acknowledge that cosmetic results are not guaranteed, that individual outcomes vary based on factors including age, skin type, lifestyle, and healing response, and that the patient has not been promised any specific result. Pre-procedure photographs taken by the provider constitute important documentation supporting this acknowledgment.

The HIPAA authorization clause, where applicable, confirms the patient's consent to the use and disclosure of their protected health information for treatment, payment, and healthcare operations purposes under the HIPAA Privacy Rule (45 CFR § 164.506), and any specific authorization for photography and use of before-and-after images in marketing materials under 45 CFR § 164.508.