11.3 Client Records, Confidentiality, Retention & Liability

Why a Note Is Worth More Than a Memory

An esthetician sees hundreds of clients. Two years after a service, no one remembers what strength of acid was used, how long it stayed on, or what the client was told about sun exposure. A contemporaneous note remembers. That is why record-keeping appears in the professional-practice portion of every state's licensing content and why it is the single most useful habit a new licensee can build.

Records do three jobs:

1. Continuity of care. You can build a treatment plan across visits instead of starting over each time.
2. Safety. Recorded contraindications, reactions and product responses prevent repeat injuries.
3. Defence. If a client complains to the Board or threatens litigation, the written record is the evidence.

What Belongs in a Treatment Record

Write it so a stranger could read it

A note that says "peel, went well" is worthless. A note that says "20% lactic, single layer, 3 min, mild uniform erythema, neutralised, SPF 50 applied, advised no retinoid 5 days, rebook 3 weeks" tells the next practitioner — or an investigator — exactly what happened.

Never alter a record after the fact. If you need to correct something, add a new dated entry noting the correction. Overwriting or back-dating destroys the credibility of the whole file.

Descriptive, Not Diagnostic

Records must observe without diagnosing. Diagnosis is the practice of medicine and is outside the aesthetician scope.

The descriptive version conveys everything a physician needs and commits you to nothing you are not licensed to say.

Photographs

Photographs are genuinely useful for tracking change, and they carry their own consent requirement.

• Obtain written permission before taking any photograph.
• Obtain separate, specific written permission before any use beyond the client file — social media, a website, a portfolio, advertising. General treatment consent does not cover publication.
• Store images with the same security as the rest of the record: encrypted device or password-protected system, not a personal phone camera roll.
• Standardise the conditions — same lighting, same angle, no makeup — or the comparison is meaningless.
• Honour a withdrawal of permission. If a client asks you to remove a published image, remove it.

Confidentiality

Estheticians learn intimate things: medications, medical conditions, insecurities, personal circumstances. All of it is confidential.

In practice this means:

• Client files are stored in a locked cabinet or a password-protected system, not on an open reception desk.
• Screens are angled away from the waiting area.
• You do not discuss one client with another, ever — including "I had someone in this morning with the same thing."
• You do not discuss a client with a colleague except where it is genuinely necessary for the client's care.
• You do not confirm or deny that a person is a client to anyone who asks.
• Nothing identifiable goes on social media without written permission.
• Conversations in a treatment room can be heard through a curtain or a thin wall; keep your voice down.

A breach of confidentiality damages the client, ends the relationship, and is a professional-conduct problem the Board can hear about.

Retention

Tennessee's cosmetology rules do not set a client-record retention period for individual licensees. Because they do not, the sensible professional standard is to retain treatment records for at least the period during which a claim could realistically be brought, and longer where the service carried meaningful risk — chemical exfoliation, device work, lash chemistry. Where a client was a minor at the time of treatment, retain longer still. If you close or sell a practice, records travel with the responsibility for them; do not simply discard them.

When records are eventually destroyed, destroy them securely — shredding for paper, secure deletion for digital.

Liability

Professional liability insurance — often called malpractice cover — funds the legal defence and any settlement if a client alleges injury from a service. It typically sits alongside general liability cover, which handles ordinary premises accidents such as a slip in the reception area.

What insurance does not do:

• It does not stop a Board disciplinary action or pay a civil penalty assessed under Rule 0440-01-.14.
• It does not cover services outside your licensed scope. An esthetician who performs a procedure Rule 0440-02-.16 prohibits may find no cover at all.
• It does not substitute for consent, screening or documentation.

Most employers require licensees to be covered; many booth renters must carry their own. Check whether a policy is occurrence-based — covering incidents that happened while the policy was live — or claims-made, which only covers claims filed while the policy is active. That difference matters most when you change insurer or leave the profession.

Incident Reporting

If something goes wrong — a burn, a reaction, a fall, an injury during extraction or waxing:

1. Attend to the client first.
2. Document the incident the same day: date, time, what happened, what you observed, what you did, what you advised, whether the client sought medical care.
3. Notify your employer or manager.
4. Notify your insurer promptly; late notification can prejudice cover.
5. Do not alter earlier records.
6. Follow up with the client and record the follow-up.
7. Review the process and change what caused it.