The Aesthetics & Imaging Bundle
Built for aesthetic clinics where AI imaging tools process biometric data and clinical records — and where the stakes are higher than in most professions.
Aesthetic clinics operate at the intersection of the most demanding compliance obligations in the AI Safe Suite. Clinical photographs processed by AI imaging tools may constitute biometric data under Article 9 UK GDPR. The 8-year clinical negligence limitation period applies to clinical records. A new criminal offence for creating non-consensual AI-generated intimate images came into force in February 2026. No generic compliance product addresses all three simultaneously. This bundle does.
What is included
AI Safe Starter Pack: the foundational UK GDPR framework for AI tool use, including the AI Tool Register and data flow mapping specific to clinical practice. Aesthetic Clinics Action Guide: the profession-specific guide covering before/after photographs as potential biometric data, four separated consent forms for treatment, data, images, and AI processing with individual tick boxes, the 8-year clinical negligence retention period applied to every data category, and a verified DPA navigation path for the platforms most commonly used in aesthetic practice. Includes a completed worked example using a fictional aesthetic clinic. AI Safe Risk & Data Pack + Companion Guide: four risk policies covering image and biometric data governance, deepfake and AI-generated content liability, AI wearables and passive data capture, and scope of practice boundaries for AI-assisted clinical recommendations. Six scenario walkthroughs and a regulatory watch appendix. Platform DPA Checkers Vol 1 & 2: fourteen platforms verified April 2026.
The specific risks this bundle addresses
Clinical photographs and biometric data: when a photograph is uploaded to an AI imaging or skin analysis tool, the AI may derive biometric characteristics from it — facial geometry, skin condition markers, identifying features — beyond what was intended. This is Special Category Data under Article 9 UK GDPR and requires explicit written consent before any AI processing. The Aesthetic Clinics Action Guide's four separated consent forms and the Image & Biometric Risk Policy address this directly. The deepfake criminal offence: Section 138 of the DUAA, in force from 6 February 2026, creates a criminal offence for creating non-consensual AI-generated intimate images. AI treatment simulation tools that generate visual previews of potential outcomes engage this risk. The Deepfake & AI-Generated Content Policy covers the consent language and disclosure requirements. Clinical negligence retention: the 8-year retention period aligned to clinical negligence limitation applies to treatment records, clinical photographs, and AI-generated treatment notes. The Action Guide applies this retention period to every data category in an aesthetic practice.
What this bundle does not include — and when to add the Legal Pack
The Aesthetics & Imaging Bundle is built around the profession-specific guide and the emerging risk framework. It does not include the AI Safe Legal Pack. For a clinic that wants the full operational legal infrastructure — the Data Processing Agreement template, the 72-hour Breach Response Plan, the Legitimate Interests Assessment framework, and the June 2026 complaints procedure template — the Full Suite Bundle includes everything in this bundle plus the complete Legal Pack. For most aesthetic clinics processing biometric and health data through AI tools, the Legal Pack is not optional. The Full Suite Bundle is the recommended complete purchase.
Recommended Pathways
Aesthetics & Imaging Bundle — £129
Starter Pack, Aesthetic Clinics Action Guide, Risk & Data Pack + Companion Guide, and Platform DPA Checkers Vol 1 & 2. The only bundle built specifically for practitioners using AI imaging tools where biometric data obligations, clinical negligence retention, and deepfake criminal liability apply simultaneously.
Full suite Bundle -£189
Everything. Starter Pack, plus industry Action Guide, Legal Pack & Companion Guide Plus Risk & Data Pack & Companion Guide. For practitioners who want complete coverage — understanding, legal infrastructure, and emerging risk protection.