Med Spa Consent Forms: What Every Form Must Include
Required elements by treatment type, a free checklist you can use today, and the mistakes that turn a minor complication into a major lawsuit.
Free Resource: Consent Form Element Checklist
This guide includes a complete checklist of required elements for each treatment type — scroll to any procedure section to use it.
Why Consent Forms Are Your First Line of Legal Defense
When a patient experiences a complication and decides to pursue a malpractice claim, the first thing their attorney will ask for is your consent forms. Not your credentials. Not your technique. Your paperwork.
Informed consent is a legal doctrine in all U.S. states: before performing any medical procedure, a provider has a duty to disclose material risks, expected benefits, reasonable alternatives, and what happens if the patient does nothing. A signed consent form is your evidence that this duty was fulfilled.
Without a proper consent form:
- You cannot prove the patient was warned about the risk that occurred
- A "he said / she said" dispute almost always resolves in the patient's favor
- Your malpractice insurance may deny coverage for the claim
- State medical and nursing boards can cite you for failing to obtain informed consent — separately from any malpractice action
Consent forms are not bureaucratic paperwork. They are the legal foundation of every patient interaction. Get this part right and everything downstream is more defensible.
Universal Elements: What Every Consent Form Must Include
Regardless of procedure, every med spa consent form must contain these core elements to be legally valid.
Universal Consent Form Checklist
- Patient full name and date of birth
- Date the consent was obtained
- Name of the specific procedure being consented to
- Provider performing the procedure (name and credentials)
- Description of the procedure in plain language
- Expected benefits and realistic outcomes
- Material risks — common AND rare serious risks
- Alternatives to the procedure (including doing nothing)
- Pre-treatment instructions the patient must follow
- Post-treatment care and restrictions
- Photography consent (yes/no with specific use disclosure)
- Confirmation the patient had opportunity to ask questions
- Patient signature (wet or electronic)
- Provider/witness signature
- Version number and review date on the document
Note: A single blanket "I consent to all treatments" form does not satisfy this standard. Each procedure has unique risks that must be disclosed specifically. Courts and medical boards have repeatedly rejected general consent forms in malpractice and licensing cases.
Procedure-Specific Consent Form Requirements
Below are the required elements for each major med spa treatment category, building on the universal elements above. Use these as your reference when reviewing or building your consent form library.
Botox and Neurotoxins (Dysport, Xeomin, Daxxify)
Botox Consent Form — Required Elements
- Specific product name and manufacturer (e.g., Botox by Allergan — not generic "neurotoxin")
- Units to be injected and treatment areas
- Risks: bruising, swelling, asymmetry, headache, eyelid ptosis, eyebrow ptosis, spread beyond injection site
- Rare but serious risks: dysphagia, dysphonia (especially near neck/jawline)
- Duration of effect disclosure (typically 3–4 months)
- Contraindications confirmed: no pregnancy, no neuromuscular disease, no aminoglycoside antibiotics
- Pre-treatment: no blood thinners, alcohol, or NSAIDs for specified period
- Post-treatment: no massaging area, no lying down for 4 hours, no vigorous exercise same day
- Touch-up policy and timeline
- Acknowledgment that results vary and are not guaranteed
Dermal Fillers (Hyaluronic Acid, Radiesse, Sculptra)
Filler Consent Form — Required Elements
- Specific filler product name and brand (Juvederm Voluma, Restylane Lyft, etc.)
- Injection sites and estimated volume per area
- Risks: bruising, swelling, lumps, asymmetry, Tyndall effect
- Serious risks: vascular occlusion, tissue necrosis, vision loss (with plain-language explanation)
- Hyaluronidase disclosure: that dissolving is possible for HA fillers, and limitations for non-HA
- Duration of effect and reabsorption timeline
- Contraindications: pregnancy, allergy to filler components, active infection at site
- Herpes simplex prophylaxis disclosure if treating lip area
- Pre-treatment: blood thinners, dental work timing
- Post-treatment: no massage, no heat, no strenuous exercise, sun avoidance
- Acknowledgment that results are not guaranteed and may require additional sessions
Every SOP kit includes treatment-specific, attorney-reviewed consent forms ready to customize and implement — no starting from scratch.
View SOP KitsLaser and IPL Treatments
Laser / IPL Consent Form — Required Elements
- Specific device and wavelength being used
- Treatment area and number of planned sessions
- Risks: redness, swelling, blistering, hyperpigmentation, hypopigmentation, scarring
- Fitzpatrick skin type documented and risk disclosure adjusted accordingly
- Pre-treatment: no sun exposure, tanning, or self-tanner for specified period; no retinoids
- Isotretinoin (Accutane) history — consent must confirm patient is not currently taking and has completed course for required waiting period
- Pregnancy confirmed as contraindication
- Post-treatment: SPF requirements, no sun exposure, cooling instructions
- Eye protection confirmation (provider and patient)
- Realistic outcome expectations and number of sessions typically required
- Disclosure that results vary significantly by skin type and condition
Chemical Peels
Chemical Peel Consent Form — Required Elements
- Peel type and active agent (glycolic, TCA, Jessner's, phenol, etc.) with concentration
- Depth classification (superficial, medium, deep)
- Risks: redness, peeling, crusting, hyperpigmentation, hypopigmentation, scarring (higher risk with deeper peels)
- Herpes simplex activation risk and prophylaxis protocol if applicable
- Pre-treatment: retinoid or Retin-A preparation protocol and pause requirements
- Post-treatment: no picking, peeling, or scrubbing; SPF requirements; activity restrictions
- Downtime disclosure (varies significantly by peel depth)
- Number of sessions recommended and interval
- Contraindications: active infection, recent sun exposure, pregnancy (for certain peel types)
IV Therapy and Hydration
IV Therapy Consent Form — Required Elements
- Specific formulation and ingredients listed (vitamins, minerals, medications)
- IV access site and catheter gauge
- Risks: bruising, phlebitis, infiltration, infection at IV site
- Serious risks: anaphylaxis, fluid overload (especially relevant for cardiac/renal patients), air embolism
- Medical history screening confirmation (cardiac, renal, hepatic conditions)
- Current medications and allergy confirmation
- Pregnancy confirmation
- Disclosure that IV therapy is not FDA-approved treatment for specific conditions
- Clinical rationale and appropriateness assessment documented
- Emergency protocol notification: what happens if a reaction occurs
- Post-treatment monitoring expectations and when to seek further care
Weight Loss Injections (Semaglutide, Tirzepatide)
Weight Loss Injection Consent Form — Required Elements
- Specific medication name, formulation, and dose
- GLP-1 mechanism of action explained in plain language
- Risks: nausea, vomiting, diarrhea, constipation, injection site reactions
- Serious risks: pancreatitis, gallbladder disease, thyroid C-cell tumor risk (black box warning)
- Contraindications confirmed: no personal/family history of MTC or MEN 2, no pancreatitis history
- Pregnancy confirmation and contraception counseling disclosure
- Current medications reviewed (insulin, oral diabetes medications — hypoglycemia risk)
- FDA regulatory status of the specific formulation disclosed (approved vs. compounded)
- Dietary and lifestyle requirements communicated
- Escalation protocol: when to contact clinic vs. go to ER
- Discontinuation instructions and expectations
Digital vs. Paper Consent Forms
Digital consent is legally valid in all U.S. states under the federal E-SIGN Act and UETA. But digital forms must meet specific standards to hold up legally and under HIPAA.
Digital Consent Requirements
- Timestamp and audit trail: Your system must record exactly when the form was signed and from what device
- Identity verification: The patient must confirm their identity before signing (name, date of birth, or similar)
- Full form accessibility: The patient must be able to read the entire form before signing — it cannot be hidden behind a scroll wall with a signature at the bottom
- HIPAA-compliant storage: Forms must be encrypted and stored on a HIPAA-compliant platform with a signed BAA with your software vendor
- Retrievability: You must be able to produce the signed form on demand — including the version signed, not just a current template
Paper forms still have a place: they create a physical record that doesn't depend on a software vendor or server uptime. Whichever you use, the form content must meet the same standards.
Consent Form Storage and Retention
Consent forms are medical records. They must be stored accordingly — and retrievable on demand.
- Retention minimum: 7 years for adult patients in most states; longer in some (check your state's medical records law)
- Minor patients: Until the patient turns 21, or 7 years, whichever is longer
- Storage: Encrypted digital storage or locked physical files — never in shared drives, email folders, or unprotected systems
- Access control: Only authorized staff should be able to retrieve patient consent records
- Backup: Digital records should be backed up with a documented recovery plan
Consent forms are also part of your HIPAA compliance obligations — improper storage of signed forms is a HIPAA violation, not just a records-management issue.
7 Consent Form Mistakes That Create Liability
These are the most common consent form failures that turn a complication into a lawsuit — or a board complaint into a license suspension.
- One form for all treatments — Generic consent doesn't cover procedure-specific risks and is consistently found inadequate in malpractice cases
- Missing the serious risks — Courts require disclosure of rare but serious risks (vascular occlusion for fillers, vision loss, anaphylaxis). If it's bad and it can happen, it must be on the form
- Staff obtains consent without provider review — Informed consent is a provider duty, not an administrative task. A front desk team member cannot obtain informed consent
- Forms not updated when protocols change — Using a 2021 consent form for a 2026 treatment or updated product is a liability gap
- No version control — If you can't produce the version of the form signed on a specific date, you lose the ability to prove what was disclosed
- Patient didn't have time to read — Handing a patient a form at the treatment table 90 seconds before a procedure is legally vulnerable. Forms should be sent in advance or given with adequate reading time
- No witness or provider co-signature — Some states require a provider or witness signature in addition to the patient's
A Note on "Consent" vs. "Acknowledgment" Forms
Many practices use intake forms, acknowledgment forms, and consent forms interchangeably. They are not the same thing:
- Patient intake form: Collects medical history, medications, allergies — a screening tool, not a consent document
- Acknowledgment form: Confirms the patient received policies (cancellation, photography, etc.) — administrative, not medical consent
- Informed consent form: Legally documents that material risks, benefits, and alternatives were disclosed and the patient voluntarily agreed to proceed
You need all three — separately. Combining them into one long document often results in none of them being read carefully, and a court may find that the consent was not truly "informed."
Getting Your Consent Forms Right
A consent form library is not a one-time project. It needs to be reviewed whenever you add a new service, change products, receive a regulatory update, or update your protocols as part of your broader SOP program.
Professionally written, procedure-specific consent forms — reviewed against current clinical and legal standards — are the foundation of a defensible practice. Every SOP kit we offer includes the consent forms specific to that treatment category, ready to customize with your practice name, Medical Director credentials, and state-specific language.