Florida Med Spa Consent Forms: What You Legally Need in 2026

Why Consent Forms Are Not Just Paperwork

In the aftermath of a patient complaint, adverse event, or licensing investigation, consent forms become your most important piece of documentation. They demonstrate that you disclosed risks, obtained voluntary consent, and practiced within the standard of care. Without them — or with a legally deficient generic form — you lose your primary documentary defense.

But consent forms are not merely defensive tools. They are a fundamental component of ethical medical practice. Florida Statute 766.103, the Florida Medical Consent Law, codifies the right of every patient to make an informed decision about their medical care — including the right to refuse. When you present a well-drafted consent form and take the time to discuss it with a patient, you are fulfilling a core professional obligation.

The legal standard in Florida is informed consent — not merely signed consent. A signature on a form the patient didn't understand, was rushed through, or signed after the procedure provides minimal legal protection and may still constitute a consent violation.

What Florida Law Requires for Valid Informed Consent

Under Florida Statute 766.103, legally valid informed consent in Florida must include:

1. Disclosure of the procedure — a clear description of what will be done
2. Material risks — the risks that a reasonable patient would consider material to their decision, including both common minor risks and rare but serious risks
3. Expected benefits — what the procedure is expected to achieve
4. Reasonable alternatives — other options available to the patient
5. Consequences of refusal — what happens if the patient chooses not to proceed

The patient must also have the capacity to consent (mentally competent, not impaired), must consent voluntarily (no coercion or undue pressure), and must consent before the procedure begins — not during or after.

Florida applies a "reasonable patient" standard for informed consent — meaning the disclosure should cover what a reasonable patient would want to know, not just what the provider thinks is important to tell them. This is a higher standard than some other states.

The Complete Florida Med Spa Consent Form Checklist

Here is every consent and documentation form a Florida med spa should have in place:

1. Medical History and Health Intake Form

Before any consultation or procedure, every patient should complete a comprehensive health intake form. This is not consent — it's the information-gathering step that makes informed consent possible. Your intake form should capture:

• Current medications (including over-the-counter, supplements, blood thinners)
• Known allergies (especially to lidocaine, anesthetics, or any product ingredients)
• Relevant medical history (autoimmune disorders, bleeding disorders, active infections, herpes outbreaks)
• Previous aesthetic treatments and reactions
• Pregnancy or nursing status
• Contraindications specific to the procedure(s) planned
• Date of last treatment if a returning patient

The intake form is a clinical screening tool, not a liability waiver. It helps identify patients for whom certain procedures are contraindicated — and documents that you performed due diligence.

2. Procedure-Specific Informed Consent Forms

This is the most legally critical category. Florida med spas must have a separate, procedure-specific informed consent form for every medical service offered. Do not use one generic form. Each consent must cover the risks specific to that procedure. Examples:

Botox/Neuromodulator Consent must cover:

• Bruising, swelling, redness at injection sites
• Asymmetry and the need for touch-ups
• Ptosis (drooping eyelid or brow) — rare but material risk
• Headache
• Spread of toxin beyond injection area
• No guarantee of results
• Duration of effect and need for repeat treatment
• Contraindications (pregnancy, neuromuscular disorders, certain antibiotics)

Dermal Filler Consent must cover:

• Bruising, swelling, redness
• Nodules or lump formation
• Asymmetry
• Infection
• Vascular occlusion — including risk of tissue necrosis, vision loss, or stroke (this must be explicitly disclosed)
• Delayed hypersensitivity reactions
• Filler migration over time
• Tyndall effect (bluish discoloration if placed too superficially)
• Duration of effect and potential for touch-ups or reversal

Laser Treatment Consent must cover:

• Burns, blistering, or scarring
• Changes in pigmentation (hyperpigmentation or hypopigmentation)
• Post-treatment sensitivity and downtime requirements
• Sun avoidance requirements
• Eye protection requirements (and what happens if not followed)
• Number of treatments expected
• Results not guaranteed

Every consent form should be dated, signed by the patient, witnessed (or electronically executed per Florida law), and retained in the patient's medical record.

3. HIPAA Notice of Privacy Practices (NPP) and Acknowledgment

Under HIPAA, every med spa that is a covered entity must provide patients with a Notice of Privacy Practices at their first visit. The NPP explains how the practice collects, uses, and protects patient health information (PHI). You must:

• Post the NPP in a visible location in the waiting area
• Provide a physical or digital copy to every new patient
• Obtain a signed acknowledgment that the patient received the NPP
• Document if a patient refuses to sign (you cannot require signature as a condition of treatment)

4. HIPAA Authorization for Marketing and Photography

If your med spa uses patient photos for any marketing purpose — website, social media, before/after galleries, print advertising — you must obtain a separate, explicit HIPAA authorization from the patient. This is distinct from the NPP acknowledgment. Key requirements for a valid photo/marketing authorization:

• Describe specifically what images will be used and for what purpose
• Specify where the images will be used (social media, website, ads, etc.)
• State the duration of authorization (and that it can be revoked)
• Confirm the patient can decline without affecting their treatment
• Be signed and dated separately from the clinical consent

Posting patient photos without a valid HIPAA authorization is a HIPAA Privacy Rule violation — even if the patient verbally agreed. Verbal agreement is not sufficient.

5. Pre- and Post-Treatment Instruction Acknowledgments

Pre-treatment and post-treatment instructions should be provided in writing and the patient should sign an acknowledgment that they received and understand them. This creates a record that you fulfilled your duty to educate the patient about preparation and aftercare — relevant if a patient later claims a complication resulted from something they were never told to avoid.

6. Financial and Cancellation Policy Acknowledgment

While not a clinical consent, a signed financial policy covers:

• Payment terms and refund policy
• Cancellation and no-show policy
• Touch-up and guarantee policy (many practices offer limited touch-ups within a defined window)
• Credit card authorization (if storing payment information)

Clear financial policies, signed upfront, prevent disputes and chargebacks — a significant operational issue for med spas.

Common Consent Form Mistakes That Create Liability

These are the most common consent documentation errors found in Florida med spa licensing investigations and malpractice cases:

Using a Generic "All-Procedures" Waiver

A single consent form that says "I consent to all aesthetic procedures" does not constitute informed consent for any specific procedure. Courts and licensing boards consistently find that generic waivers do not satisfy the material risk disclosure requirement. Use procedure-specific forms.

Obtaining Consent After the Procedure

Consent obtained after a procedure has begun — or after it's completed — is not legally valid. Consent must be obtained before the procedure, with adequate time for the patient to ask questions and decide. Rushing a patient through a consent form immediately before injecting, without real discussion, may not satisfy Florida's "voluntary" consent requirement.

Failing to Disclose Material Risks

The most common consent-related malpractice claim in aesthetic medicine involves a complication that the patient claims they were never told about. For fillers, this most commonly involves vascular occlusion. For laser, it's scarring or permanent pigment change. These risks must be explicitly named in the consent form — not buried in fine print or described only vaguely.

No Process for Patients Who Refuse to Sign

Some patients refuse to sign consent forms. Your policy should be clear: you cannot perform a medical procedure without documented consent. If a patient refuses to sign, you should document the refusal and the procedure cannot proceed. Staff should be trained on this policy.

Not Keeping Signed Consent Forms

Florida requires medical records, including consent forms, to be retained for at least 5 years (7 years for minors until age 18). A consent form that cannot be produced when needed — because it was lost, not scanned, or improperly stored — provides no protection. Use a medical records system that stores consent forms with the patient's full record.

Electronic Consent: What Florida Law Requires

Electronic consent is legal in Florida under the Florida Electronic Signature Act (Florida Statute 668.001). Electronic consent forms are widely used and accepted in Florida med spas via iPad-based intake systems, patient portals, and secure email. Requirements for valid electronic consent:

• The patient must be able to fully read the consent before signing
• The electronic signature must clearly indicate the patient's intent to consent
• The system must record the date and time of signature
• The signed document must be stored in a secure, retrievable format
• A copy should be available to the patient on request

Electronic consent does not change the content requirements — the form still needs all the procedure-specific risk disclosures required under Florida Statute 766.103. Format does not substitute for substance.

Record Retention: How Long to Keep Consent Forms

Under Florida Statute 456.057, medical records must be retained for a minimum of 5 years from the date of service. For minors, records must be kept until the patient reaches age 18, plus an additional 7 years — whichever period is longer.

Best practice: retain all records indefinitely in digital format. Storage is cheap; legal exposure from missing records is not. If you ever close your practice or sell the business, Florida law requires you to notify patients and either transfer records or make them available for retrieval.

For related compliance areas, see HIPAA Compliance Guide for Med Spas and Florida Med Spa Compliance Checklist 2026.

Disclaimer: This article is for educational purposes only and does not constitute legal advice. Florida med spa regulations change. Consult with a licensed Florida healthcare attorney to ensure your consent forms meet current requirements.