Cosmetic and medispa clinic software: prescriber consults, consent and advertising rules

What changed for cosmetic practice, and why your software has to know

On 1 July 2023 the Medical Board of Australia issued guidelines for medical practitioners who perform cosmetic surgery and procedures, and they turned several clinic habits into rules a system can check. The guidelines have separate sections for cosmetic surgery and for non surgical procedures such as injectables. Ahpra then added guidelines for advertising higher risk non surgical cosmetic procedures, in effect from 2 September 2025.

The result is that a cosmetic clinic now has three kinds of record a hairdresser’s booking app was never designed for: which prescriber consulted which patient before each injectable treatment, what the patient consented to and when, and whether each photo may be used and for what. Beauty booking products handle the calendar well. Clinical products built for aesthetics, including Pabau, Clinicminds and Cliniko, go further. The gaps that remain are where custom work fits.

Injectables are prescription medicines

Each Schedule 4 injectable treatment must trace back to a prescriber consult with that patient. The Board’s guidelines say medical practitioners must consult the patient, in person or by video, each time they prescribe a Schedule 4 cosmetic injectable, and must comply with their state or territory’s drugs and poisons laws on permits, prescribing, records, supply, storage and transport. Where another registered practitioner administers the injectable and is not an authorised prescriber, the prescribing doctor remains responsible for the patient, including post procedure care. The prescriber also needs formal alternative arrangements, with a nominated delegate, when they are not available afterwards.

The guidelines also require the prescriber to obtain informed consent, assess the patient’s reasons and motivations, screen for underlying psychological conditions such as body dysmorphic disorder, and refer the patient for independent evaluation where needed. They state that botulinum toxin and dermal fillers should not be prescribed to patients under 18 for cosmetic purposes.

A system that supports this links four things for every treatment:

1. The prescriber consult: date, mode (in person or video), practitioner and outcome.
2. The prescription: product type and quantity.
3. The administration: who injected, batch, site and amount.
4. The aftercare contact: who is responsible if complications arise.

If any link is missing, the treatment shouldn’t be bookable. That single check makes the prescriber requirement visible at the front desk, where gaps usually start.

Why your booking site copy is a compliance risk

Your website, booking pages and social accounts are advertising, and three rule sets apply to them at once. The TGA’s guidance says prescription medicines are prohibited from being advertised to the public, and that most cosmetic injectables contain prescription only substances. It warns that content implying the effect of a prescription medicine, such as before and after images or treatment progress, is likely to be prohibited, and that promoting a telehealth service as a way to obtain particular prescription medicines is likely to be prohibited too.

Ahpra’s rules sit on top. Testimonials are not permitted in any advertising of a regulated health service, and a clinic’s own social media pages count as advertising. Ahpra’s resources for the higher risk non surgical guidelines say a patient or influencer cannot post about their procedure and tag the clinic, because the tag makes the post part of the clinic’s advertising. Where before and after images are allowed for these procedures, they must not show anyone under 18, must be actual patients of the advertising practitioner, must be realistic, and must not make the after image the most prominent.

What software can do here is modest but useful:

• Keep booking page treatment names in a managed list your adviser has approved, not free text.
• Block reviews and testimonial widgets on clinical pages.
• Stop photos without an advertising consent from ever reaching the website or social scheduler.
• Keep a dated record of what each page said, in case a regulator asks.

Consent, cooling off and referrals for surgery

Cosmetic surgery workflows are where the Board’s rules are most specific, and easiest to enforce in software. All patients seeking cosmetic surgery must have a referral, preferably from their usual GP, from a practitioner who works independently of the surgeon. They must have at least two pre operative consultations. They cannot consent until they have had an in person consultation with the surgeon. After two consultations and signed consent, there must be a cooling off period of at least seven days before the surgery can be booked or a deposit paid, and no money should be payable until it ends, other than for initial consultations. For patients under 18, the cooling off period is at least three months. All cosmetic surgery must be performed in a facility accredited to Commission standards specified by the Board.

Rule	What the system checks
Referral	Referral attached, referrer independent of the surgeon
Two consultations	Both recorded, first with the surgeon or a registered practitioner working with them
In person consult	Consent form unavailable until it is recorded
Seven day cooling off	Surgery booking and deposit blocked until day eight
Under 18	Three month wait applied automatically from the date of birth
Facility	Booking only into an accredited facility

For non surgical procedures, patients under 18 need a cooling off period of at least seven days between consent and the procedure. The specialist practice software page covers referral handling in more depth.

Before and after photos: storage, consent and social use

Every clinical photo needs a consent attached to it, and the consent has to say what the photo may be used for. The Board’s guidelines say consent must be requested for any photographs or videos the practitioner proposes to take during a consultation or procedure. Separately, clinics that provide health services are covered by the Privacy Act regardless of turnover, so photos are part of the health record and need the same protection.

A photo vault with consent tagging stores each image against the patient, treatment and date, records consent per purpose (clinical record, de identified education, advertising), and refuses to export an image for a purpose the patient hasn’t agreed to. Staff phones stop being a storage location. Access is logged and hosting stays in an Australian region. Our guide to the Privacy Act and AI covers what changes if you add AI image analysis.

Booking platforms versus clinical records

Keep the calendar and the clinical record joined, but don’t let the booking tool become the record. Many clinics start on a beauty booking app and add clinical forms. That works until a regulator or insurer asks for the prescriber consult behind a treatment. A clinical product designed for aesthetics is usually the better base, with custom work limited to the prescriber telehealth step, S4 stock reconciliation across sites and consent tagging. Our web and mobile apps service covers patient facing flows, and AI in healthcare explains the TGA line for any AI that assesses skin or suggests treatment.

Indicative costs

Indicative planning ranges for the Australian market, not quotes. Conduct’s cost guide puts mid sized Australian agencies at roughly $150 to $330 an hour.

Build	Indicative range (AUD, ex GST)	Main drivers
Consult and consent flow linked to a prescriber telehealth step	$30k to $90k	Clinical system integration, video provider, prescription records
Photo vault with consent tagging	$20k to $60k	Storage, consent model, integrations with the record and website
S4 stock reconciliation across sites	$25k to $70k	Stock sources, batch tracking, reporting

How AWLabs would approach a cosmetic clinic project

You start with a Development Consult. A paid Discovery Audit follows, with the fee credited in full against the build, and it maps your clinical system, booking tool and website against the rules above. You then pick from a fixed price Schedule of Work with three options: The Minimum, The Recommended and The Complete. Senior engineers lead every build, with updates every Tuesday and Friday. We have no cosmetic clinic projects behind us yet, and we don’t give advertising or clinical advice: your medical director and advisers make those decisions, and we build to them.