CQC and record-keeping for aesthetic clinics

For many aesthetic and skin clinics in England, the question of CQC registration comes up sooner or later. Whether your clinic needs to register depends on the specific activities you carry out. Good record-keeping matters regardless.

Does your aesthetic clinic need to register with the CQC?

The Care Quality Commission regulates health and social care in England. Its remit covers a defined list of regulated activities, which include things like the treatment of disease, disorder or injury, the administration of prescription-only medicines, and certain surgical and diagnostic procedures.

Aesthetic clinics that administer botulinum toxin (a prescription-only medicine) or carry out procedures that involve the use of a prescription drug are likely to be engaging in a regulated activity, and will normally need to register. Clinics that offer only non-prescription, non-injectable treatments may fall outside the current CQC scope, but the picture is not always straightforward.

If you are unsure whether your services require registration, check directly with the CQC or take advice from a healthcare solicitor. The CQC website sets out the regulated activities in full, and their enquiry team can clarify how the rules apply to your situation. Do not rely on assumptions made by other clinics, as the position varies depending on exactly what you do.

Separate from CQC, it is also worth being aware of the licensing scheme for non-surgical cosmetic procedures that has been announced by the UK Government for England. This will apply to a defined set of procedures including botulinum toxin and dermal filler treatments. Clinics should monitor government announcements for the current timetable.

What good record-keeping looks like

Even if your clinic does not currently fall within CQC registration requirements, good clinical record-keeping is a professional and ethical standard that every aesthetic practitioner should meet. It also protects the clinic if questions are raised about a treatment after the fact.

Consent records

Every patient should give documented, informed consent before each procedure. This means recording not just a signature, but evidence that the patient was given adequate information about the treatment, the likely outcomes, the risks and the alternatives. The consent process should be separate from the appointment itself where possible, and any cooling-off period offered should be noted. A consent record should be stored securely and be retrievable before any follow-up appointment.

Treatment records

A treatment record should capture what was done, not just that an appointment took place. For injectable treatments this includes the product name and brand, the batch number, the dose, and the anatomical sites treated. For skin treatments it means the device or product used, the settings or formulation, and the areas of the face or body involved. A complete treatment record allows any practitioner covering in your absence to understand exactly what your patient has had and when.

Who did what and when

Every entry in the clinical record should be attributable, with a clear note of which practitioner made the record, on which date, and at what time where the system supports it. This audit trail is a fundamental part of clinical governance and is the kind of thing the CQC looks for when it inspects registered providers. It is also your protection if a patient later disputes what took place.

Before-and-after photographs

Clinical photographs are useful clinically and are often required for certain treatments. Consent for clinical photography should be specific, explaining how the images will be stored and what they may be used for. Photographs used for marketing require a separate and explicit consent. Store images securely within the patient record, not on personal devices or unprotected cloud storage.

Safeguarding

Aesthetic clinics can encounter patients in vulnerable circumstances. Any safeguarding concerns should be noted in the record and escalated through the appropriate channels. Practitioners should have up-to-date safeguarding training appropriate to their role and the patients they see.

Practical steps to improve your record-keeping

If you want to bring your records up to the standard that CQC inspection or professional scrutiny would expect, these are the practical areas to focus on.

• Use a system that timestamps entries automatically and records the practitioner's name against each note. Manual records are hard to audit reliably.
• Store consent forms where they are accessible at the point of the next appointment, not in a filing cabinet you only open when something goes wrong.
• Document any adverse events, however minor, and the steps taken to manage them. An unexplained gap in the record is harder to defend than a well-documented complication that was handled correctly.
• Retain adult patient records for at least eight years after the last treatment. Where treatment began before the patient turned 18, records should be kept until the patient's 25th birthday or for eight years, whichever is longer.
• Review your consent forms periodically to make sure they reflect the treatments you currently offer and the risks associated with them.

How software can support good records

One of the most reliable ways to maintain consistent records is to use a system that makes the right thing the easy thing. When a practitioner can complete a treatment note quickly, with the product and dose fields prompted by the system, records tend to be more complete than when they are written up from memory at the end of a busy day.

Aesta keeps an automatic audit trail of who added or changed what in a patient record, and when. Digital consent forms are sent before the appointment, returned signed by the patient, and attached directly to the patient record, so nothing needs to be filed manually. This does not replace clinical judgement or the need to understand your own CQC obligations, but it does make compliance less effortful in the day-to-day running of the clinic.

Whatever system you use, the principle is the same: records should be complete, accurate, attributable and accessible when you need them.