This guide is written by Calyx. We build software for UK aesthetic clinics, which means we have spent a lot of time understanding what compliance actually looks like in practice. We are not a CQC consultancy and this is not legal advice. But we can give you a clear, honest picture of what is required and what to do about it.
Does your clinic need to be CQC registered?
This is the question most clinic owners get confused about first, and the answer depends on what treatments you offer.
The Care Quality Commission regulates providers of health and social care in England. For aesthetic clinics, registration is required if you carry out activities that fall within the definition of a regulated activity under the Health and Social Care Act 2008. In practice, this typically means clinics where a registered healthcare professional is administering treatments that constitute the provision of treatment of disease, disorder, or injury.
Common treatments that bring a clinic into scope include botulinum toxin injections administered by a prescriber, IV therapies, surgical procedures, and certain diagnostic activities. Many non-surgical treatments, including subcutaneous anti-wrinkle injections, dermal fillers, chemical peels, and laser and IPL treatments, do not currently fall within CQC scope unless they are performed in the context of a regulated activity.
The honest answer is that the boundary is not always straightforward, and if you are unsure whether your specific service mix requires registration, the CQC website and a qualified compliance adviser are the right starting points. What is clear is that the regulatory landscape is tightening. Proposed legislation will restrict high-risk procedures to qualified healthcare professionals and bring more providers and premises under CQC or local licensing. Clinics that build proper systems now will be in a stronger position regardless of where the legislation lands. MarkelUK
The five key questions CQC inspectors ask
If your clinic is registered with the CQC, or heading toward registration, everything the regulator does is structured around five key questions. Understanding these is the foundation of staying inspection-ready.
Safe. Is care provided in a way that keeps patients safe? Inspectors look at medicines management for injectables, emergency protocols for anaphylaxis and vascular occlusion, infection control procedures, equipment maintenance records, and product storage. The two areas that cause the most issues for aesthetic clinics are consent documentation and medicines management. Consentz
Effective. Does the care, treatment, and support achieve good outcomes? Evidence of training and qualifications, competency assessments, ongoing CPD records, and clinical supervision arrangements all fall here.
Caring. Do staff treat patients with compassion, kindness, dignity, and respect? This includes informed consent processes, cooling-off periods, and documentation that shows patients were involved in decisions about their treatment.
Responsive. Are services organised so they meet the needs of patients? Complaint handling procedures, feedback processes, and the ability to demonstrate that concerns have been acted upon are examined here.
Well-led. Does the leadership of the service promote a culture of openness, honesty, and learning? Governance structures, risk management, and evidence that the service learns from incidents and near misses are all relevant.
Clinics that embed compliance into daily operations have nothing to assemble before inspection. The evidence of good care exists because good care is being recorded continuously. That is the practical goal: a clinic where inspection-readiness is a by-product of running well, not a separate project that happens every few years. Zenoti
What inspectors actually look at
When a CQC inspector visits, they are looking for evidence. Verbal assurances do not count. Many clinics do excellent work but fail to record and demonstrate it. Inspectors need to see audit trails, patient feedback action logs, incident learning records, and staff development plans. Consentz
The documentation inspectors request most commonly includes:
Consent records. Every treatment must have a contemporaneous, signed consent record. For injectable treatments specifically, consent must be informed, documented, and ideally collected ahead of the appointment rather than at the point of treatment. Generic consent forms that have not been customised to your specific treatments are a red flag.
Medicines management records. If your clinic uses prescription-only medicines, inspectors will want to see prescribing records, stock management logs, batch tracking for injectables, and evidence that products are stored correctly. From June 2025, nurse and midwife prescribers are required to consult with patients face to face before prescribing non-surgical cosmetic medicines, making documentation even more important. MERIDIQ
Staff training and qualifications. Certificates, competency assessments, CPD logs, and evidence of clinical supervision. These need to be current and accessible, not stored in a folder that takes twenty minutes to locate.
Policies and procedures. Safeguarding policy, infection control policy, complaints procedure, incident reporting process, and emergency protocols. Inspectors check that documents are current, clinic-specific rather than generic templates, actually implemented, and regularly reviewed. Consentz
Incident and complaint records. A log of incidents, near misses, and complaints, along with evidence of what was done in response. The absence of any incidents is not reassuring to an inspector. It suggests the clinic is not recording them.
The registration process
If your clinic needs CQC registration and does not yet have it, the process typically takes three to six months from application to decision, with an additional one to two months of preparation before you can submit a complete application.
The application requires a statement of purpose describing your service, nominated individual and registered manager details, evidence of relevant qualifications and experience, and a set of policies aligned to the CQC Fundamental Standards.
A few things consistently slow applications down or cause refusals. Weak consent documentation is the most common reason for registration problems. Generic policy templates that do not reflect how your clinic actually operates are another. And staff who cannot locate or explain key policies during a site visit signals to the CQC that governance is not embedded in practice.
It is worth doing a mock inspection before your application or your first inspection. Walk through each of the five key questions and ask yourself what evidence you would produce for each one. If the answer is uncertain, that is where to focus your preparation.
Staying compliant after registration
Registration is the beginning, not the end. The CQC aims to inspect new providers within twelve months of registration. After that, inspections can be announced or unannounced, and can be triggered by complaints or concerns raised about your service at any time.
The clinics that manage compliance well treat it as an operational discipline rather than a periodic project. In practice that means a few specific habits:
Keep records in one place. Scattered documentation across filing cabinets, email threads, and shared drives makes compliance harder and inspection more stressful. A centralised system, whether that is specialist compliance software or a well-structured clinic management platform, makes it significantly easier to locate and produce evidence quickly.
Review policies annually at minimum. Set a fixed date each year to review every policy. Update them when your procedures change, when regulations change, and when incidents highlight gaps. Document the review itself, including who reviewed it and when.
Record everything clinical. If a treatment was given, it needs a record. If consent was obtained, it needs a record. If a patient raised a concern, it needs a record. If a near miss occurred, it needs a record. The principle is simple: if it is not documented, for regulatory purposes it did not happen.
Monitor staff training renewal. Qualifications expire, CPD requirements recur, and competency assessments need updating when practitioners take on new treatment types. A manual system for tracking this is fragile. Build reminders into whatever system you use.
Do not wait for inspection preparation to start. The most inspection-ready clinics are not the ones that scramble well. They are the ones where the evidence of good practice accumulates continuously because good practice is simply how they operate.
The regulatory direction of travel
The CQC compliance requirements that apply to registered aesthetic clinics today are likely to extend to more clinics over the coming years. The proposed licensing framework for non-surgical cosmetic procedures uses a risk-based system where lower and medium-risk procedures would sit under a local authority licensing scheme, while the highest-risk procedures would come under CQC regulation. MERIDIQ
The direction is clear even if the timeline is not. Higher standards, more documentation, stricter accountability, and enhanced patient protection are coming across the sector. Clinics that have already built proper systems for consent, record keeping, prescribing, and governance will find the transition significantly easier than those that have been operating informally.
Building those systems now is not just about regulatory preparation. It is about running a better clinic, which is what the regulation is ultimately designed to achieve.
If you want to understand how Calyx supports CQC-ready clinical workflows, including consent management, prescribing records, and audit trails, you can explore the platform or book a demo with the team.