FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Aesthetics clinics
An aesthetics chatbot that answers suitability or aftercare questions is giving clinical advice on the clinic's behalf, and the clinic is responsible for it. Whether malpractice cover, general PI or neither responds depends on the wording and on human oversight.
Part of: AI in aesthetics clinics
In short
Aesthetics clinics may use AI chatbots on websites, social media and messaging apps to answer enquiries, book treatments and respond to aftercare questions. Booking and pricing information is low risk. Once a chatbot tells someone they are suitable for a treatment or that a symptom after treatment is normal, it is acting as a practitioner without one. GMC consent duties, CAP advertising rules and UK GDPR all apply, and conversations about health are special category data. Aesthetic malpractice cover usually responds to advice given by a named practitioner, so a clinic may need malpractice, technology PI and cyber cover working together.
Chatbots can handle enquiries that arrive outside working hours: prices, availability, what a treatment involves and how long it lasts. Some run on generative AI, so they answer free-text questions rather than following a script. Some are connected to booking systems and take deposits. Others are set up to send aftercare instructions after an appointment and reply to follow-up messages. For a busy clinic they can capture bookings that would otherwise be lost.
The risk rises as the chatbot moves from information to judgement:
Under GMC cosmetic guidance para 16, consent is sought personally by the practitioner who will treat, and paras 24 to 26 require the patient to have the information and time they need. A chatbot cannot take over either duty. Chatbot replies about treatments are also marketing communications, so CAP rules apply, including rule 12.12 on prescription-only medicines, and GMC para 49 says doctors must not claim interventions are risk free. NMC Code 20.10 requires nurses to use digital communication responsibly.
Messages about health, medications and photos sent through a chatbot are special category data. Clinics need a lawful basis and condition, transparency that the user is talking to AI, a processor contract with the chatbot supplier, and controls on where conversations are stored. If the chatbot decides suitability on its own, the Data (Use and Access) Act 2025 automated decision safeguards require explicit consent or another legal basis with safeguards, including human intervention.
Illustrative scenario: a clinic's chatbot is set up to answer aftercare questions. A patient messages two days after filler about increasing swelling and redness. The chatbot replies with standard aftercare wording about expected swelling and suggests waiting. The patient later needs treatment for infection and complains that the clinic's advice delayed care. The clinic had no process for staff to review chatbot conversations.
Other problems include chatbots naming toxin products in public replies, quoting prices for prescription-only medicines, promising results, or being manipulated into giving dosing information.
Suppliers may also update the underlying model without notice, so a chatbot that behaved well at launch may start answering questions it previously refused. Unless someone reviews conversations, the clinic may not know what has been said in its name until a complaint arrives.
It depends on the wording. Aesthetic malpractice and treatment-risk policies usually cover treatment and advice given by or under the supervision of named practitioners, and may not respond to advice generated autonomously by software. One medical defence organisation excludes autonomous systems, software defects and data breaches from its AI position. A general or technology PI policy may cover incorrect information but may exclude clinical advice. A data leak through the chatbot usually needs cyber cover. Check whether any AI or technology exclusion applies. See AI chatbot insurance and cyber insurance and AI risks.
Related: AI for complication triage, AI social media and the Botox ad ban, chatbots for private medical clinics and the aesthetics AI hub.
Apex arranges indemnity for aesthetics clinics and practitioners; see our guide to aesthetic clinic insurance. A broker reviews how your policies treat a patient-facing chatbot and where the gaps are.
It should not. Suitability is a clinical judgement for the practitioner who will treat and seek consent. A chatbot that decides suitability on its own also engages automated decision safeguards under data protection law.
It can be. Replies that promote treatments are marketing communications, so CAP rules apply, including the ban on advertising prescription-only medicines such as botulinum toxin to the public.
Not necessarily. Malpractice cover usually focuses on advice and treatment by named practitioners. Autonomous software advice, technology errors and data breaches may need other cover. Tell your insurer what the chatbot does.
Tell us about your practice and the work you do. A broker will review how your current cover treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start an indemnity quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
