Article
CQC-registered aesthetic and cosmetic clinics: what compliance really means
Commercial polish has to be backed by clinical governance. The inspection question is not whether the procedure was performed, but whether the person was selected, informed, treated, monitored and followed up safely.
By Klaudiusz Zembrzuski, ex-CQC inspector.
CQC-registered aesthetic and cosmetic clinics are often judged by a mix of clinical risk, commercial pressure and patient expectations. That mix is exactly why compliance cannot be treated as a template exercise. The risks do not only sit in the procedure room. They sit in advertising, suitability assessment, consent, cooling-off, medicine use, infection prevention, complications, emergency readiness, aftercare, complaints and the way the clinic responds when the outcome is not what the patient hoped for.
For a CQC-registered clinic, the inspection question is not simply "Was the procedure performed?" It is "Was the person selected, informed, treated, monitored and followed up safely?"
This article is for CQC-registered providers
The cosmetic and aesthetic market includes many services that are not currently CQC-registered. The legal landscape is changing, including the separate licensing direction for some non-surgical cosmetic procedures under the Health and Care Act 2022. This article is narrower. It is for providers already registered with CQC because they carry on regulated activities: cosmetic surgery, certain private medical services, treatment under anaesthesia or sedation, and other clinical activity within CQC scope.
If your clinic is CQC-registered, do not assume that "aesthetic" means lower governance expectations. CQC will still look through the fundamental standards: consent, safe care and treatment, safeguarding, complaints, staffing, governance and duty of candour where relevant.
Consent is not a signed form
In aesthetic and cosmetic work, consent carries particular weight because the procedure may be elective, expectations may be high, and the patient may be influenced by advertising, social pressure or personal distress. A consent record should show more than a signature. It should show that the patient understood:
- what procedure was proposed
- realistic benefits and limitations
- material risks and common complications
- alternative options, including doing nothing
- aftercare and recovery expectations
- costs, cancellations and refund rules where relevant
- who to contact if they are worried afterwards
It should also show that the clinic considered whether the patient was suitable: clinical suitability, capacity, age, safeguarding concerns, coercion, body-image concerns and whether the patient had enough time and information to decide. This is where weak clinics expose themselves. The consultation sells, the consent form follows, and the governance record does not show reflection, challenge or patient-centred decision-making.
Patient selection is a safety control
Some providers see patient selection as commercial filtering. CQC will see it as a safety control. The clinic should be able to show how it identifies and responds to:
- unrealistic expectations
- signs of body dysmorphic disorder or severe distress
- coercion or pressure from another person
- under-18 restrictions where relevant
- contraindications, allergies or medication risks
- patients seeking repeated or escalating procedures
- vulnerability, capacity concerns or safeguarding risks
Declining treatment can be evidence of good governance. It shows the provider is not treating every enquiry as a sale. In this sector, good compliance often means slowing the process down. The clinic that can explain why it did not treat someone may be showing better governance than the clinic that can only show high throughput.
Complications need a real loop
Aesthetic and cosmetic complications are sometimes handled as customer-service issues. That is dangerous. Pain, infection, bleeding, necrosis, vascular occlusion, visual symptoms, burns, nerve injury, medicine reaction, scarring, device failure and hospital admission are not just unhappy outcomes. They may be clinical incidents, notifiable events, complaints, safeguarding triggers, duty-of-candour events or prompts for practice change depending on the facts. The provider should be able to show:
- how complications are identified and recorded
- who reviews them clinically
- how urgent symptoms are escalated
- what aftercare is offered
- when external referral is required
- whether medicines or devices need reporting
- how patterns are reviewed, and what changed after learning
For filler services, emergency readiness and competence around vascular occlusion and hyaluronidase should be checked carefully against the clinic's actual scope. For surgical services, infection prevention, wound review, emergency transfer and post-operative contact arrangements need the same clarity. The principle is simple: if the clinic learns about harm or potential harm, the record should not stop at "patient contacted", the closed loop we describe in what CQC looks for in incident records.
Medicines, devices and advertising are part of governance
This sector often has risk at the boundary between clinical treatment and commercial promotion. Medicines governance matters: prescription-only medicines, emergency medicines, storage, expiry, stock checks, prescribing arrangements and adverse-reaction reporting should all be controlled. Where devices are used, maintenance, training, incident reporting and Medicines and Healthcare products Regulatory Agency (MHRA) Yellow Card awareness should be visible.
Advertising matters too. Claims about outcomes, before-and-after images, discounts, urgency, vulnerable audiences and practitioner credentials can all create governance risk. The clinic should be able to show that marketing is reviewed with the same seriousness as clinical documents, especially where patient expectations and consent are affected. Complaints matter because they often reveal whether expectations were managed properly: a complaint about an "unsuccessful" result may still point to weak consent, poor photography governance, unclear aftercare, unmanaged complications or advertising that over-promised.
What good evidence looks like
An inspection-ready CQC-registered aesthetic or cosmetic clinic should be able to show a connected record across the patient journey.
Before treatment
- accurate advertising and service information
- practitioner scope and competence
- consultation and suitability assessment
- consent and cooling-off where relevant
- clinical risk assessment
- safeguarding and capacity consideration
During treatment
- safe premises and equipment
- infection prevention
- medicines and device controls
- chaperone arrangements where relevant
- procedure record
- emergency readiness
After treatment
- aftercare instructions
- complication reporting and review
- patient contact and escalation
- complaint handling
- outcome and audit review
- completed improvement actions
That connected evidence helps the provider answer the inspection question that matters most: how do you know the clinic is safe, effective and honest with patients?
The founder-view test
For this sector, I would ask to follow one patient pathway where the outcome was not straightforward. Not the perfect case. The difficult one. A patient was unhappy. A wound looked infected. A filler complication was suspected. A patient returned repeatedly asking for more treatment. A complaint raised consent concerns. A medicine or device issue occurred. What did the clinic do?
If the record shows assessment, escalation, honest communication, learning and completed actions, that is strong evidence. If it shows defensive emails, missing notes and no governance review, the risk is bigger than the single patient.
Cosmetic and aesthetic healthcare is still healthcare. CQC-registered providers need to prove that commercial polish is backed by clinical governance, and the strongest clinics can show not only that procedures are performed well, but that the service can pause, challenge, learn and improve when the answer should not simply be "yes". That shift from reactive paperwork to a living record is the thesis we set out in why annual-panic compliance fails. Verivius keeps consent, complications, medicines, safeguarding, complaints and governance evidence inspection-ready in one place; you can start a free trial.