Client consultation & patch testing Risk Assessment Template

Typical hazards & measures

• Data protection and privacy breaches — Restrict access with role-based permissions; use encrypted, GDPR-compliant systems and retention schedules. Collect only essential data, provide clear privacy notices, and audit access logs to maintain compliance and client confidence.
• Photosensitive or acid-related reactions — Identify retinoids, AHAs/BHAs, benzoyl peroxide or photosensitising drugs. Avoid recently exfoliated or sunburnt skin, reduce UV on the test site, and schedule tests away from intensive treatments to prevent confounding irritation or false positives.
• Emergency response to severe reaction — Keep a first-aid kit, cold compresses and clear escalation steps. Train staff to recognise angioedema, breathing difficulty or widespread hives; stop testing, call emergency services, record events, notify insurer if required, and review before resuming.
• Cross-contamination during application — Decant tiny amounts into single-use labelled pots; use fresh applicators and gloves per client. Sanitise hands and touchpoints, keep products separated, discard leftovers, and prevent mixed exposures that could distort outcomes and future service decisions.
• Inadequate medical history disclosure — Use a structured form covering allergies, asthma, eczema, prior reactions, black henna, medications and pregnancy. Explain why details matter, review records each visit, and use open questions to capture any changes since the last service.