Tattoo consent and age verification in the UK

A tattoo consent form is not a waiver and it does not make a procedure legal that the law would otherwise prohibit. What it does is document that the client understood what was happening, agreed freely, and had the capacity to make the decision. Get those three things right and the rest follows. Get them wrong and a signed form will not protect you from a council complaint, a civil claim, or in serious cases a criminal prosecution.

UK consent law, applied to tattooing, requires all three of:

Informed

The client must know what is proposed: design, placement, approximate size, the procedure itself, realistic healing pattern (pain, bleeding, swelling, scabbing), aftercare duties, and known risks (infection, allergic reaction, scarring, fading, disappointment with the healed result, permanence). "Informed" is more than a sentence on a form, it's a conversation backed by a written summary the client can re-read.

Voluntary

The decision is the client's, not someone else's. Pressure from friends, partners, drinking groups, family, or social-media bets all undermine voluntary consent. If the booking feels coerced, walk away from it, even if everyone involved insists they're fine.

Capacity

Capacity is the legal threshold to make the specific decision in front of you. The Mental Capacity Act 2005 (England and Wales) framework asks whether the person can:

Understand the information.
Retain it long enough to decide.
Weigh it.
Communicate a choice.

For tattooing, the practical capacity check is straightforward: the client is not intoxicated, not under the influence of drugs that impair decision-making, not in acute mental distress, and not cognitively impaired to the point where they can't process the information. If you are unsure whether the client has capacity at the moment, don't tattoo them today. The booking can be rescheduled.

Intoxication is the most common capacity failure. The Public Health (Wales) Act 2017 special procedures licensing scheme explicitly expects consultation forms to include a signed declaration that the client is not intoxicated. England has no statutory equivalent, but the same logic applies through common law and licensing conditions.

The hard rule, no under-18s

The Tattooing of Minors Act 1969 makes it a criminal offence to tattoo anyone under 18, with one narrow exception:

Section 1: "It shall be an offence to tattoo a person under the age of eighteen except when the tattoo is performed for medical reasons by a duly qualified medical practitioner or by a person working under his direction."

There is no parental-consent override. There is no carve-out for "small tattoos" or "names" or "tribute tattoos for a family bereavement." The only exception is medical tattooing by or under the direction of a qualified medical practitioner, that does not include you, even if a parent says "the GP said it's fine."

The statutory defence under s.1(2) is that the artist had reasonable cause to believe the person was 18 or over. Reasonable cause is not "they looked old enough", it is photo ID checked and recorded.

The under-18 ban applies regardless of gender identity or transition context. There is no affirming-intent exception. See [[top-surgery-tattoo-timing-and-affirming-practice]] for how this interacts with chest tattoo work after top surgery (the statutory ban still bites; minimum age is 18 plus typically a 12-month wait after surgery for scar maturation, framed as position-of-claim by surgeons not as a hard medical rule).

What "reasonable cause" looks like in practice

Photo ID with date of birth, passport, UK photocard driving licence, PASS-accredited proof of age card (CitizenCard, Validate UK, etc.).
Check the ID is genuine, hologram, photo matches the person, date of birth makes them 18+.
Record the check, note the ID type, ID number (or just "passport / DL / PASS card"), date checked, name of artist who checked.
If anything looks off, refuse. A 17-year-old with a borrowed sibling ID is a real pattern, if the photo doesn't match precisely, walk away.

What is not adequate:

"They told me they were 18."
Social-media age claims.
A parent or older friend "vouching."
A school-issued ID without DOB.

The conviction risk is real and the council registration risk is certain. There is no booking worth this.

A defensible 2025-26 UK tattoo consent form contains:

Identity and age verification

Client full name.
Date of birth.
ID type checked, ID number (or initials of the ID type), date of check.
Signature of artist confirming the ID check.

Medical history (relevant to tattooing only)

You ask about:

Bleeding disorders (haemophilia, von Willebrand, etc.).
Medications affecting bleeding (warfarin, DOACs, aspirin).
Skin conditions in or near the planned site (eczema, psoriasis, infection).
Pregnancy or breastfeeding (declaration; many studios decline tattooing during pregnancy as policy).
Recent surgery (especially anaesthesia, immunosuppression).
Allergies (specifically: latex, tattoo ink, topical anaesthetics, antiseptics, plasters/adhesives).
Any prior reactions to tattoos.

You do not ask about:

HIV or hepatitis status, covered in bloodborne viruses and vaccination. Asking creates an Equality Act 2010 risk and a UK GDPR special-category-data risk. Standard precautions are universal.
General medical history unrelated to tattooing.

Procedure description

Design (described in writing or via a referenced design proof).
Placement, side, orientation.
Approximate size.
Estimated session time.
Estimated number of sessions if multi-session.
Price agreement.

Risks and outcome acknowledgement

Pain, bleeding, swelling, scabbing as normal healing.
Risk of infection if aftercare not followed.
Risk of allergic reaction (unpredictable, can occur even with compliant inks).
Risk of fading, blowout, ink rejection.
Permanence, laser removal is partial, slow, expensive, painful.
Risk of disappointment with the healed result.

Aftercare acknowledgement

Confirmation the client has received the aftercare sheet.
Specific aftercare points (cling film/second skin removal, washing, moisturiser, sun/swimming/sauna avoidance, when to seek medical advice).

"I am not under the influence of alcohol or any substance that impairs my judgment."
"I am making this decision freely and without pressure."
"I have had the opportunity to ask questions and have them answered to my satisfaction."

Separate consent for healed-photo follow-up, portfolio use, social media. Distinct from the procedure consent.

Data protection notice

Brief notice that the form is retained under UK GDPR / Data Protection Act 2018, retention period, contact route for the studio's privacy enquiries. See client records and UK GDPR.

Signatures

Client signature, dated, time-stamped.
Artist signature confirming ID check and consent discussion.

Capacity edge cases

The intoxicated client

If a client arrives clearly drunk, high, or otherwise impaired, refuse and reschedule. No exceptions. A signed consent form taken from a non-capacitous client is worthless and creates legal exposure rather than reducing it.

The hesitant client

If the client expresses doubt, asks to take time, or shows signs of wavering, pause. Offer water, a break, time to think. If still uncertain after a reasonable break, reschedule. Pressuring a client to sign is voluntary-consent failure.

The "I'm 18 today" client

A first-birthday tattoo is fine if the ID checks out. Same standard, photo ID with DOB. No exceptions even for "but it's their birthday."

No. Re-read the Tattooing of Minors Act section above. Parental consent does not override the criminal offence.

The client requesting something concerning

Self-harm placement requests, partner-pressured tattoos, designs implying coercion or distress, these are safeguarding signals. The artist's discretion to refuse is unlimited. See the workplace-health section for resources around these encounters, and the Samaritans (116 123) for any client clearly in crisis.

Retention and storage

Retain consent forms for at least the personal-injury limitation period. The standard guidance is 6 years as a working minimum (the contract claim limitation), with many studios retaining longer (10+ years) given personal-injury limitation can run from date of discovery rather than date of harm.
Secure storage, locked filing cabinet for paper, encrypted database for digital. See client records and UK GDPR.
Access restricted to the studio team that needs it.

What this guide cannot do

This is a framework guide. Your specific consent form should be drafted to match your services (general tattooing vs PMU vs paramedical vs intimate) and reviewed against any local licensing conditions.

Information, not advice. For your situation, verify with your council's licensing team, your insurer (they often require specific consent wording), and your data protection responsibilities under the ICO guidance.

The three legs of valid consent