Traceability guide for tattoo studios in the United Kingdom

Tattoo studios in all four UK nations must be registered or licensed, with sterilisation of instruments a condition of that registration. In Wales, the mandatory licensing scheme requires demonstrable infection prevention and control. This guide details every step from receiving instruments to archiving records — for studios that meet the requirements of their local authority and are ready for every Environmental Health inspection.

Step 1: Receiving and sorting instruments

At the end of each session, reusable instruments (tubes, grips, forceps) are immediately placed in a pre-disinfection tray. Single-use instruments (needles, tips, ink cups) are disposed of in the clinical waste container. Never mix the two categories.

Step 2: Cleaning and packaging

After pre-disinfection (duration depends on the product), instruments are rinsed, dried, and placed in sterilisation pouches. Each pouch is sealed and marked with a process indicator (autoclave tape). The pouch is dated and numbered.

Step 3: Autoclave cycle

The pouches are loaded into the autoclave. The recommended cycle is 134°C for 18 minutes (prion cycle). The autoclave prints a report (ticket or file) at the end of the cycle. This report is the proof that the required parameters were reached.

Before the first load of the day, run a Bowie-Dick or Helix test to verify steam penetration.

Step 4: Labelling and use-by date

After the cycle, each pouch receives a traceability label showing: the cycle number, the sterilisation date, the use-by date (typically 2 months for a single-layer pouch), and the identification of the contents.

With traceability software, the label can include a QR code linking the pouch directly to the autoclave cycle report.

Step 5: Storage

Sterilised pouches are stored in a clean, dry, enclosed space away from dust. The first-in, first-out (FIFO) principle applies: the oldest pouches are used first.

Step 6: Recording and archiving

Each cycle is recorded in the sterilisation register with: date, time, cycle number, parameters (temperature, pressure, duration), result (pass/fail), and operator identity. The autoclave report is retained (in paper or digital format).

In the United Kingdom, tattoo studios are regulated in all four nations. Council byelaws in England and Northern Ireland mandate sterilisation of instruments. In Scotland, 3-year council licences require maintained sterilisation standards. In Wales, the mandatory licensing scheme under the Public Health (Wales) Act 2017 (in force 29 November 2024) requires practitioners to hold an RSPH Level 2 Award in Infection Prevention and Control — your IPC qualification proves you know the theory, and your sterilisation records prove you follow it in practice. BS EN 17169:2020 (adopted by BSI) is referenced by some local authorities during inspections.

The regulatory landscape

Wales leads the UK with a mandatory national licensing scheme for special procedures since 29 November 2024. Practitioner licences last 3 years, require an RSPH Level 2 IPC qualification, and non-compliance carries unlimited fines. England requires council registration under the LGMPA 1982, with byelaws mandating sterilisation. A government consultation on broader licensing of non-surgical cosmetic procedures was published in 2025 — regulation is tightening. Scotland operates 3-year council licensing under the Civic Government Act 1982. Northern Ireland requires registration under the LGMP (NI) Order 1985, with fines up to £1,000 for non-compliance.

Common mistakes

Not filling in the record immediately after the cycle (forgetting). Not marking the use-by date on the pouch. Storing pouches in an open or humidity-exposed drawer. Not performing the daily Bowie-Dick test. Not keeping autoclave reports. Using a pouch past its use-by date without reprocessing.

Related resources

Free Inspection Checklist

Verify every compliance point before the inspector arrives. Enter your email and receive the checklist immediately.

We'll send your checklist by email. No spam, ever. Privacy Policy