What Goes on a Med Spa Incident Report Form?
Published October 4, 2026 · 7 minute read · General information, not legal advice. Your licensing regulators decide what applies to you.
An incident report form is the page a practice fills out for events that have nothing else in common. A needlestick. A refrigerator found warm on a Monday. A visitor who tripped on the way out. A record sent to the wrong address. A device that would not power on halfway through a treatment. The treatment record cannot hold most of those, because most of them never reached a patient at all.
What follows is about the form and its fields. It does not describe what to do about any event, who to call, or how to judge severity. Those belong to the clinicians involved and to whoever holds clinical accountability for the practice.
What a medical incident report form collects
Patient safety organizations have already published the categories they sort reports into. AHRQ's Common Formats are described on the agency's own page as "a set of standardized definitions and formats that make it possible to collect, aggregate, and analyze uniformly structured information about patient safety," and the same page sorts what gets reported into three kinds: "Incidents: patient safety events that reached the patient, whether or not there was harm involved," "Near misses (or close calls): patient safety events that did not reach the patient," and "Unsafe conditions: circumstances that increase the probability of a patient safety event occurring."
That is a national reporting framework for organizations that participate in one, cited here as a source on how event reporting gets structured rather than as a program an aesthetic practice has to join. The part that carries over is the first line of the form. A page that only has room for things that happened to someone will never collect the fridge found warm or the syringe set down and lost track of, and those are the cheapest events a practice ever gets to learn from. One form with an event-type line beats three forms in three drawers, because the first ambiguous event goes onto whichever form is closest to hand.
What the federal injury forms show about fixed fields
Federal workplace injury recordkeeping is worth reading for its form design rather than its scope. 29 CFR 1904.29 opens: "You must use OSHA 300, 300-A, and 301 forms, or equivalent forms, for recordable injuries and illnesses." An equivalent form is allowed as long as it "has the same information, is as readable and understandable, and is completed using the same instructions as the OSHA form it replaces." The entry has to be made "within seven (7) calendar days of receiving information that a recordable injury or illness has occurred."
The bloodborne pathogens standard is narrower and more instructive. Its sharps injury log at 29 CFR 1910.1030(h)(5) asks for three things per injury: "The type and brand of device involved in the incident," "The department or work area where the exposure incident occurred," and "An explanation of how the incident occurred." The same paragraph adds that the log "shall be recorded and maintained in such manner as to protect the confidentiality of the injured employee."
Whether either of those applies to a given practice is a question for its own counsel and carrier, and neither is cited here as a rule for the reader. Two design lessons sit in them regardless. A deadline measured from when the practice learned of the event, rather than from the event itself, is the version that can actually be met. And a record built around the device and the place, with the injured person's name deliberately kept out of the log, is still answerable years later, while a record built around who was involved is mostly a personnel file with a date on it.
Get the Clinic Opening File
A free print-and-fill file for owners getting ready to open: a workstream index, an open items register, a document inventory and an opening day go or no-go record. It comes by email, along with each new guide when it publishes.
Sent by Scope & Standard through beehiiv. Every email has an unsubscribe link. See Privacy.
What each line of a med spa incident report carries
- A sequential report number printed on the form. Without it, a missing report is invisible.
- Two dates, not one. When the event happened, and when the report was written. The gap between them is information.
- The event type, chosen from the small list the practice settles in advance.
- The reporter's name and role, with a signature line.
- What was involved, named as it appears on the label, the screen or the file name. "The laser" is not a line somebody can follow up on.
- Where in the practice, by room, not by building.
- A plain account of what happened, with no cause assigned. Cause belongs to the review, further down the page, after the facts are fixed in writing.
- What was done at the time, kept in its own field so that the account above it stays an account.
- Who outside the room was told, and when. One row per person or body notified, with the date.
- Whether anything was used up. An event that empties a kit line creates a second obligation on the kit checklist, and the two records should name each other by date.
- The corrective action, its named owner, and the date it closed. Without an owner, an open corrective action has nobody to ask about it.
- A revision marker on the form itself, so two generations of the form in one binder can be told apart.
Where the form sits relative to the patient's chart
When an event did reach a patient, the clinical account continues in that patient's record and the incident report runs alongside it. What the record should show after a patient complication covers that split and why writing internal review into the chart causes a problem of its own. Events with no patient in them never touch a chart, which is exactly why they need somewhere else to live.
Who holds the finished form
The incident report is a practice record, not a clinical one, so it has its own answers to three questions that the chart answers differently: how long it is kept, who may read it, and what happens when something in it turns out to be wrong. Retention runs on the practice's own decision rather than the patient record schedule covered in how long to keep patient records. Access is a short named list, because a report that everyone can read is a report people write carefully and uselessly. And a filed report is corrected the way any signed record is corrected, by dated addendum with the original left readable, which is the same mechanism as the emergency correction log.
The Emergency Documentation Set carries the incident report form with the event-type line, the notification rows and the corrective action block, alongside the event debrief and the notification record. The fields are blank. What counts as an event, and what the practice does about one, is the practice's decision to write down and sign.
Do this next
Take the incident form currently in use and look for the event-type line near the top. If it is not there, add it with the three kinds named, then go through the last twelve months of reports and see how many describe something that reached a patient. If all of them do, the form has been filtering out the near misses rather than collecting them, and the next step is telling whoever would have reported one that the form now has a place for it.
- Emergency Documentation Set, $29
- Emergency Preparedness Module, $29
- Complete Charting Bundle, 12 records, $27
Questions this guide answers
What goes on a med spa incident report form?
A sequential report number, the event date and time kept separate from the date the report was written, which kind of event it was, the named reporter and role, the device or product or document involved as named on its label, where in the practice it happened, a plain account with no cause assigned, what was done at the time, who outside the room was told and when, anything consumed from the emergency kit, and the corrective action with an owner and a closing date.
Should a med spa use one incident report form or several?
One form, with a line near the top that says which kind of event it was. Separate forms for needlesticks, patient events and equipment failures mean three stacks that nobody can count, and the first ambiguous event goes on whichever form is nearest.
Does a near miss get an incident report?
That is the practice's decision, but a form with no field for an event that reached nobody will not collect them, and near misses are the cheapest events a practice ever has to learn from. Adding the event-type line is what makes the entry possible.
Is the incident report part of the patient's chart?
They are usually kept apart. The chart is clinical documentation written for the next clinician to see that patient. The incident report is a practice record written for readers outside the treating relationship, and it carries its own retention period and its own list of who may see it.
Who signs an incident report form?
The reporter signs the account. A second named person signs the closing section when the corrective action is finished, and where that is the same person on every report, the form has no review step in it.