Digital informed consent in cosmetic surgery: a legal and practical guide

Spain's Law 41/2002 of 14 November on patient autonomy states clearly that no practitioner may carry out a procedure on a patient without their prior, free and informed consent. In cosmetic surgery this requirement becomes even more significant: since in most cases it is elective rather than strictly curative medicine, Spanish case law has gradually established a stricter standard regarding the quality and detail of the information the patient must receive before signing. Informing the patient in general terms isn't enough: the specific risks of the procedure, the alternatives, the results that can reasonably be expected and the possibility that the outcome may not match the patient's expectations all have to be explained. Informed consent in cosmetic surgery is therefore much more than an administrative formality: it's the documentary proof that this process of informing the patient actually took place.

The problem is that, in many clinics, this crucial document is still handled on paper. And paper fails just when it's needed most: a folder that can't be found, an illegible signature, a document that was laminated by hand with nobody remembering which version of the template was used, or simply the impossibility of tracking down, within minutes, the consent form a patient signed two years ago when a complaint or inspection arrives. Digitising this process isn't a fad: it's a direct response to these very real problems of traceability, retention and access to the document.

The legal framework for informed consent in cosmetic surgery

In general terms, Law 41/2002 provides that consent is normally given verbally, except where the law requires written form, which expressly includes surgical procedures. In addition to this national law, it's important to bear in mind the regional regulations governing healthcare centres and establishments in Spain, which in many cases add their own requirements on the minimum content of consent documents and how they're retained. On top of this come the General Data Protection Regulation (GDPR) and Spanish data protection legislation, which have a direct bearing on how a document containing health data — a special category of personal data — is stored, signed and safeguarded.

In cosmetic surgery, the duty to inform is usually even greater than in curative medicine, precisely because the patient has no objective medical need that justifies taking on risk: it's a voluntary decision about their own body, and so the information they receive is expected to be exhaustive, understandable and specific to the particular procedure being performed, not a generic text that could apply to any operation.

The problems with paper informed consent

Any clinic that has managed paper consent forms for years will recognise the same symptoms. The first is loss: documents filed in physical folders, mixed up with other clinical paperwork or simply lost during a move or a reorganisation of the archive. The second is illegibility: hurried handwritten signatures, forms filled in with ballpoint pens whose ink fades over time, and poor-quality photocopies that make it hard to prove exactly what information was given to the patient.

The third problem, probably the most serious from a medico-legal point of view, is how hard it is to find the signed document when it's really needed — usually years after the procedure, in the context of a complaint or a health inspection. A paper archive spread across different staff members, different physical locations and different filing systems turns what should be an instant search into a task taking hours, if the document ever turns up at all. Underlying this is a further problem: without proper version control, it's hard to know for certain whether the patient signed the current version of the consent template or an earlier one that no longer accurately reflected the risks of the procedure.

These same symptoms of disorganisation also tend to appear in the management of records, quotes and the diary when a clinic works with paper, loose folders or simple spreadsheets. It's no coincidence that clinics which make the move to medical software for cosmetic surgery usually do so precisely because they've suffered this kind of traceability problem in more than one area of their day-to-day operations, not just consent.

What digital informed consent is and how it works

Digital informed consent replaces paper with a template set up in advance for each type of procedure, which is filled in automatically with the details of the patient and the specific treatment: full name, specific procedure, planned date, responsible practitioner and, where applicable, any particular risks added to the base template. The patient reads this personalised document and signs it, and the date, time and exact version of the template signed are recorded automatically.

In CirugiaNexa, consent templates are set up by type of procedure, so each operation has its own document with the variables relevant to that treatment, avoiding the risk of using a generic or out-of-date consent form. This approach of digitising documents that used to be handled manually is the same one already applied in other areas of the clinic: just as digital quotes eliminate calculation errors and make it easier to follow up each financial proposal, digital informed consent removes any ambiguity about exactly what information the patient received and when.

Signing on a tablet in the clinic or remotely via a link

Consent forms can be signed digitally in two complementary ways. The first is in person on a tablet at the clinic, usually during the pre-operative appointment or just before the procedure: the patient reads the document on screen, raises any questions with the medical team and signs directly on the tablet with a finger or stylus. The second is remote signing via a link sent by WhatsApp or email, which the patient can open on their own device, read at their leisure away from the consulting room and sign before coming to the clinic. For security reasons, this remote link expires two hours after it's generated, so it doesn't remain accessible indefinitely if it's forwarded by mistake or the patient's device changes hands.

Both routes are recorded with the same traceability — date, time and version of the template signed — so whichever channel is used, the resulting document has the same evidential value within the system.

Informed consent and patients under 18

When the patient is a minor, the consent process requires an additional step: linking a legal guardian who signs the document on their behalf. In general terms, Spanish legislation on patient autonomy provides for different scenarios depending on the minor's age and maturity, and in cosmetic surgery specifically there are usually further restrictions on which procedures may be performed on minors and in what circumstances, which vary according to the type of procedure and the applicable regional regulations. For this reason, this is one of the areas where it's most advisable to seek your legal advisers' opinion before defining the consent process for patients under 18.

From an operational point of view, a well-designed digital consent system should allow the legal guardian's details to be linked to the minor's record, generate the document with both identities clearly shown and record the guardian's signature with the same traceability as any other consent: date, time and version of the template used.

What a good digital informed consent system should guarantee

Not every digital consent system offers the same safeguards. Before entrusting the process to a particular tool, it's worth checking that it covers at least the following points, which should also be linked naturally to the patient's file within your patient management so that the entire clinical history is centralised in one place:

• Full traceability of each consent form, from generation to signature, including the channel used.
• A record of the exact version of the template signed, showing precisely what content the patient read and accepted.
• The exact date and time of signature, attached to the document so it cannot be altered.
• The ability to link a legal guardian who signs on behalf of a patient under 18.
• Secure storage of signed documents, with protection measures appropriate for health data.
• Signing both in person on a tablet and remotely via a link, with a security expiry in the latter case.
• Fast access to the signed document within seconds, without relying on physical archives or manual searches.
• A direct link between the consent form and the specific procedure and patient record.

The benefits of digital informed consent for the clinic

Beyond regulatory compliance, digitising informed consent in cosmetic surgery brings very tangible day-to-day benefits for a clinic. The first is reduced medico-legal risk: because the date, time and exact version of each signed template are recorded automatically, the clinic has solid, easily retrievable documentary evidence in the event of any complaint or inspection — something much harder to guarantee with paper scattered across folders.

The second benefit is time saved on admin. Generating, printing, filing and tracking down paper consent forms takes up team time that could be spent on patient care. With a digital system, the template is generated automatically with the details already filled in, signed in minutes and filed without any further manual work.

The third benefit is the patient experience: a clear signing process, on a tablet or via a link, conveys the image of an organised, modern clinic — something particularly valued in a sector where trust ahead of an aesthetic procedure is decisive. And the fourth is centralisation: when the signed consent form is linked to the same record that already holds the patient's consultations, quotes, clinical photos and post-operative checks, all the relevant information about a procedure is accessible from a single place, without having to cross-reference different systems or files.

In CirugiaNexa, this centralisation is precisely one of the system's aims: for informed consent not to be an isolated document, but one more piece of the patient's complete digital history, consistent with the rest of their clinical process within the same platform.

Frequently asked questions