The short answer
You can use one, but free forms rarely hold up: they usually omit state-specific disclosure requirements, current FDA labeling and boxed warnings, the identity of the examining prescriber and the treating provider, and HIPAA-compliant photo authorization language. No form makes a practice compliant — the underlying licensure, supervision and examination must be lawful first.
What goes wrong with generic forms?
Informed consent is measured against a disclosure standard, not against whether a signature exists. Roughly half the states follow the patient-centered material-risk rule from Canterbury v. Spence — what would a reasonable patient want to know — and the rest apply a professional standard based on what a reasonable practitioner would disclose. Several states legislate specific elements. A form written for none of those states satisfies none of them well.
The specific failure modes repeat:
| Gap | Why it bites |
|---|---|
| No boxed warning language | BOTOX and other botulinum toxins carry an FDA boxed warning for distant spread of toxin effect |
| No off-label flag | Masseter, lip flip, platysmal bands and most non-glabellar toxin uses are off-label |
| Outdated regulatory claims | Peptide and GLP-1 compounding status changed materially in 2025 and 2026 |
| No provider identity | Doesn't record who performed the good faith exam or who injected |
| Photo permission buried inside | HIPAA marketing authorization under 45 CFR 164.508 must stand alone |
| Waiver language | Many states will not enforce a pre-injury release of negligence in a medical setting |
| Wrong scope assumptions | Written for a physician practice, used by an RN or esthetician |
The waiver problem deserves emphasis. Free templates often lean on broad "hold harmless" and "release from all liability" language borrowed from gyms and recreational activities. Courts in many states refuse to enforce prospective releases of medical negligence on public policy grounds. Worse, a document that reads as a liability waiver undercuts the argument that it was a genuine disclosure conversation — which is the thing that actually protects you.
Does a good template help at all?
Yes, as a starting structure. What it cannot do is substitute for the three things that make the treatment lawful in the first place: a properly licensed provider acting within scope, a good faith exam by a prescriber with a patient-specific order, and supervision or delegation that matches your state's rule. A perfect consent signed before an unlawful delegation documents the violation in the patient's own handwriting.
Nor can a template know your facts. It does not know which products you stock, which areas you treat, what your touch-up policy is, whether you use a device with its own FDA-cleared indications, or which state board you answer to.
What should you check before adopting any form?
Read it against four sources and mark the date you checked. The current FDA labeling and any safety communication for every product you inject — the FDA warned in April 2024 about counterfeit BOTOX found in multiple states, and the CDC issued advisory HAN 00507 after harmful reactions to counterfeit or mishandled botulinum toxin. Your state medical board's rules on cosmetic procedures, delegation and supervision, such as Texas Medical Board rule 22 TAC section 193.17 or the Medical Board of California's position on the examination required by Business and Professions Code section 2242. Your state nursing board's current declaratory statements or advisory opinions. And 45 CFR 164.508 if the form touches photography or marketing.
Then have a health care attorney licensed in your state review the final set once. That is a one-time cost measured against a defense that starts at multiples of it.
What this means for your paperwork
Treat forms as living documents with owners and review dates. Put a version number and a "last reviewed" date in the footer of every consent, keep an archive of superseded versions — because a claim will be judged against the form in effect on the treatment date, not today's — and log what changed and why.
Set a fixed review trigger: annually, plus whenever FDA labeling changes, whenever your state board issues new guidance, whenever you add a product, device or treatment area, and whenever your staffing model changes. Assign one named person to own that calendar. A form that no one owns drifts out of date silently, and the drift only becomes visible during a complaint.
Related questions
This answer is educational and is not legal or medical advice. Requirements vary by state and change over time — verify with your own legal and clinical advisors before applying anything here in practice.