Prior to providing a microdermabrasion, chemical exfoliation, IPL or a device driven hair removal service, a licensee shall obtain the client's consent to service, which should include, but is not limited to:
All intake and consent to treatment information, including medical and health information, supplied by the client for services under this section is confidential. The establishment or booth owner shall establish procedures to ensure that such information is safeguarded against theft and identify theft and may not be used or disclosed without written permission of the client.
02-041 C.M.R. ch. 26, § 26.230