Compliance Guide · Updated 18 May 2026
Skin Penetration Permits & Hygiene Rules, by Australian State
Every Australian state and territory requires salons that perform skin-penetration services, piercing, tattoo, cosmetic tattoo, dermal needling, and microblading, to register or notify a council or health department before they operate, under public-health law. This guide covers registration by state, sterilisation standards, autoclave records, and the breach findings that most commonly cost operators their licence.
First, What Counts?
What “skin penetration” actually means
Skin penetration is broadly defined across Australian jurisdictions as any procedure that pierces, punctures, tears, or cuts the skin. Wax that lifts the outer layer of skin in routine application is generally NOT classified as skin penetration. Procedures that intentionally break the skin barrier always are.
In scope, needs registration
Body piercing
All sites, ear cartilage, nose, navel, oral, intimate.
Tattoo / cosmetic tattoo
Including microblading, lip blushing, scalp micropigmentation.
Dermal needling
Skin needling / microneedling / Dermapen, pen-based or roller.
Dermal fillers / cosmetic injectables
Always in scope. Plus additional therapeutic-goods and practitioner requirements.
Electrolysis (epilation)
Needle-based hair removal. Distinct from IPL/laser (which is regulated separately).
Acupuncture
Even when offered alongside spa services. Practitioner registration also required.
Usually out of scope (check council)
Waxing
In most states. NSW, VIC and QLD specifically classify waxing as 'not penetrating intact skin' in routine cases.
Threading
Hair removal by twisted thread. Out of scope in all states.
Eyelash extensions
Adhesive-based, no penetration. Out of scope, but allergic-reaction risk drives treatment liability cover.
Ear piercing with gun
Out of scope in some states, in scope in others (e.g. QLD treats earlobe piercing as in scope). Check council.
Laser / IPL
Separate state regulator, Radiation Safety Acts. Not skin-penetration legislation.
Spray tan / facials
Topical only. Out of scope.
State-by-State
Registration and regulator by state
Each state has its own Public Health Act framework and a different mix of council-level vs centralised registration. Multi-site operators must register in every state where they trade.
New South Wales
Act & regulator
Public Health Act 2010 + Public Health Regulation 2022
NSW Health + Local Council
Operators carrying out skin penetration must notify the local council in writing under the Public Health Regulation 2022 (replacing the 2012 instrument). Notification is free in most LGAs but the inspection cycle is routine, councils typically inspect annually or after a complaint. Sterilisation must comply with AS/NZS 4815 (office-based health-care) or AS/NZS 4187 (hospital-grade) depending on procedure.
Key compliance points
- Written notification to LGA before commencing, no licence fee in most councils
- Council inspection, annually or on complaint
- Sterilisation: steam autoclave compliant with AS/NZS 4815
- Single-use needles, sharps disposal contract required
- Record-keeping: autoclave cycle records + spore tests + client consent forms
Victoria
Act & regulator
Public Health and Wellbeing Act 2008 + Public Health and Wellbeing Regulations 2019
Department of Health + Local Council
Victoria runs a council-registration model. Salons offering body art (tattoo, piercing, cosmetic tattoo) must register with their local council under Part 6 of the Public Health and Wellbeing Act and pay an annual fee (typically $200 to $600 depending on council). Hairdressers and beauty therapists who do NOT do skin penetration may be exempt from registration but are still subject to the Infection Control Guidelines.
Key compliance points
- Council registration mandatory for skin-pen services, annual fee
- Inspection on registration + annual renewal cycle
- Compliance with the Victorian Infection Control Guidelines for Personal Appearance Services
- Autoclave AS/NZS 4815 + monthly spore-test logs
- Council can suspend or cancel registration for non-compliance, appeal via VCAT
Queensland
Act & regulator
Public Health (Infection Control for Personal Appearance Services) Act 2003 + Public Health Regulation 2018
Local Council (Public and Environmental Health Officer)
Queensland is the tightest regulator. The Public Health (Infection Control for Personal Appearance Services) Act 2003 splits services into 'higher-risk' (tattoo, piercing, dermal, cosmetic tattoo) and 'general' (manicure, pedicure, hair removal). Higher-risk operators must hold a licence from the local council; general operators must comply with the Infection Control Guidelines but do not need a separate licence. Note: Queensland also separately regulates ear-lobe piercing as in-scope.
Key compliance points
- Higher-risk licence required, annual fee $300 to $800 by council
- General services: no licence but full compliance with the Infection Control Guidelines
- Mandatory worker training in infection control for higher-risk services
- Sterilisation AS/NZS 4815 + per-cycle records + spore tests
- On-the-spot fines and prosecution for operating without licence, significant
South Australia
Act & regulator
South Australian Public Health Act 2011
SA Health + Local Council
South Australia uses notification rather than licensing. Operators must notify their local council under the SA Public Health Act 2011 before commencing skin penetration. Councils inspect on notification and at intervals (typically 1 to 2 years). The SA Health Infection Control Guidelines for Hairdressing and Beauty Therapy set the technical standards.
Key compliance points
- Council notification before commencement, usually no fee
- Inspection 1 to 2 yearly cycle
- Compliance with SA Health Guidelines for Personal Appearance Services
- AS/NZS 4815 steam autoclave or single-use only
- Cosmetic tattoo and microblading are explicitly in scope
Western Australia
Act & regulator
Health (Miscellaneous Provisions) Act 1911 + Health (Hairdressing Establishments) Regulations 1972
Local Council (Environmental Health Officer)
Western Australia regulates 'hairdressing establishments' broadly and uses additional Department of Health guidance for skin penetration. Operators must notify the local council in writing. WA also has a separate regulator (the Radiological Council) for laser/IPL services, which sit alongside but distinct from skin-penetration permits.
Key compliance points
- Council notification + EHO inspection
- Compliance with the WA Code of Practice for Skin Penetration
- Steam autoclave AS/NZS 4815, UV cabinets alone explicitly NOT compliant
- Laser/IPL: separate Radiation Safety licence (Radiological Council of WA)
- Local councils issue improvement notices and prohibition orders for breaches
Tasmania
Act & regulator
Public Health Act 1997 + Public Health (Skin Penetration) Regulations
Department of Health + Local Council
Tasmanian operators register with their council under the Public Health Act 1997. Council EHOs inspect on registration and at routine intervals. Tasmania has additional licensing for laser/IPL through the Radiation Protection Act 2005.
Key compliance points
- Council registration before commencing skin penetration
- Routine inspections, frequency varies by council
- Tasmanian Health Infection Control Guidelines apply
- Autoclave AS/NZS 4815 + spore-test logs
- Laser/IPL: separate Radiation Protection licence
Australian Capital Territory
Act & regulator
Public Health Act 1997 (ACT) + Public Health Regulation 2000
ACT Health (Health Protection Service)
The ACT uses a centralised registration model, operators register directly with ACT Health rather than a local council. Annual registration fee applies. The Health Protection Service inspects on registration and at risk-based intervals (more frequent for tattoo and piercing studios).
Key compliance points
- Centralised registration with ACT Health, annual fee
- Risk-based inspection cycle
- Compliance with the ACT Public Health Code of Practice for Skin Penetration
- AS/NZS 4815 sterilisation + per-cycle and spore-test records
- Sharps disposal contract must be evidenced
Northern Territory
Act & regulator
Public and Environmental Health Act 2011 + Public and Environmental Health Regulations 2014
NT Department of Health (Environmental Health Branch)
NT registers skin-penetration operators centrally through the Department of Health Environmental Health Branch. Operators in remote communities are still subject to the same standards, though inspection cycles can be longer. The NT Code of Practice for Skin Penetration Industries sets the technical standards.
Key compliance points
- Registration with NT Health Environmental Health Branch
- Inspection on registration + routine cycle
- NT Code of Practice for Skin Penetration applies
- Autoclave AS/NZS 4815 + spore-test records
- Particular focus on remote-community sterilisation continuity
Daily Practice
Cleaning, sterilisation, and record-keeping protocols
Common minimum standards across every Australian jurisdiction. AS/NZS 4815 (office-based health-care sterilisation) is the practical benchmark.
Hand hygiene
Wash hands with soap + water before each client; use 70% alcohol hand-rub between procedures. Gloves do NOT replace hand washing.
Surface cleaning
Surfaces wiped with hospital-grade detergent between clients. Treatment beds covered with disposable paper or sanitised vinyl cover.
Sterilisation cycle
Steam autoclave (134°C / 3.5 min vacuum or 121°C / 15 min) to AS/NZS 4815. Boiling, UV cabinet, or chemical sterilants are NOT compliant.
Single-use needles
Mandatory in all states. Open in front of the client where practical. Dispose immediately into approved sharps container.
Per-cycle autoclave records
Time, temperature, pressure, load contents recorded for every cycle. Most modern autoclaves print or USB-export this automatically.
Spore testing
Weekly to monthly biological indicator testing (Geobacillus stearothermophilus). Sent to NATA-accredited lab. Results kept on file 3+ years.
Linen handling
Used linen bagged at point of use; not stored with clean linen. Wash at 65°C+ or use a commercial linen service.
Sharps disposal
AS 4031 approved containers; collected by licensed clinical-waste contractor. Retain manifest receipts.
Watchouts
Common breach findings during inspections
The six findings every Australian environmental health officer says they see week after week. Most can be fixed in an afternoon, once you know to look.
No autoclave records
By far the most common breach finding. Owning the autoclave is not enough, per-cycle records and spore tests are mandatory.
UV cabinet only
Inspectors find a UV cabinet on the bench used as a 'steriliser'. UV is at best a low-level disinfection step, never substitutes for steam autoclave.
Re-using single-use needles
Often justified by 'I sterilise them between uses'. Never compliant. Single-use means single-use. Prosecution risk is extreme.
Sharps in domestic bins
Used needles, lancets, or microblade cartridges in the regular salon bin. Must be in AS 4031 sharps containers and disposed via clinical-waste contractor.
No registration at all
Most common in new operators offering cosmetic tattoo or microblading without realising it counts as skin penetration. Strict-liability offence.
Untrained operators
QLD specifically requires worker training for higher-risk services; other states require documented competency. Inspectors check certificates.
Practical tips for operators
Log autoclave cycles digitally
Paper logs go missing, and the inspector always wants the previous 12 months. Most modern autoclaves print or USB-export per-cycle records; pair with a weekly calendar reminder for the spore test.
Keep a 'compliance binder' near reception
Council registration, sharps-disposal contract, spore results, staff training certificates, infection-control policy. When the EHO walks in, you produce everything in 60 seconds, that signals 'organised operator' and shortens the inspection.
Train every staff member (even reception)
Front-of-house staff don't perform procedures but they see how the back room operates. Brief everyone on the infection-control basics so they know what to flag if a contractor or a temp cuts corners.
Treat the consent form as part of the record
A signed informed-consent form (covering allergies, medications, pregnancy, prior reactions) is both a clinical record and a treatment-liability defence. Digital consent in your booking software auto-files and timestamps it.
Frequently Asked Questions
Do I need a permit to do waxing?
In most Australian states, waxing is classified as not breaking intact skin in routine cases and is out of scope of skin-penetration legislation. However, you still need to comply with general infection-control guidelines for personal appearance services, and your council may still inspect. Brazilian/intimate waxing is a grey area in some jurisdictions, always confirm with your local council.
Is microblading the same as cosmetic tattoo for permit purposes?
Yes. Microblading uses a blade or pen to deposit pigment into the dermis, this is skin penetration in every Australian jurisdiction. You need skin-penetration registration plus, in some states, additional cosmetic-tattoo or body-art licensing. Operating microblading without registration is a strict-liability offence with significant fines.
Can I use a UV cabinet instead of an autoclave?
No. UV cabinets provide at best low-level disinfection, they do not sterilise. The relevant standard (AS/NZS 4815) requires steam autoclaves for any reusable instrument that penetrates the skin. UV cabinets used as the primary sterilisation method are a guaranteed breach finding.
How often does the council inspect?
Routinely 1 to 2 yearly for general personal-appearance services, more frequently (annual or on opening) for high-risk skin-penetration premises like tattoo studios. Complaint-driven inspections happen any time. Treat record-keeping as if an inspector will walk in tomorrow, most operators we've spoken to had only 24 to 48 hours' notice.
What records do I have to keep for a skin-penetration premises?
Per-cycle autoclave records (time/temp/pressure/load), weekly to monthly spore-test results from a NATA-accredited lab, sharps-disposal manifests, client consent forms, staff infection-control training certificates, and product-batch records (for tattoo inks and cosmetic-tattoo pigments). Most regulators require retention for 3 to 5 years.
What happens if I operate without registration?
Strict-liability offence in every state. Fines start at low thousands and rise into tens of thousands per offence, with the council/health department empowered to issue prohibition orders that immediately stop you trading. Insurers will also typically deny treatment-liability claims for unregistered operators, meaning a single adverse incident becomes personally ruinous.
What is skin penetration?
Skin penetration is any procedure that pierces, punctures, tears, or cuts the skin barrier. Across Australian public-health law it covers body piercing, tattooing, cosmetic tattoo and microblading, dermal needling, dermal fillers and cosmetic injectables, electrolysis, and acupuncture. Procedures that only affect the surface of the skin, such as waxing in routine cases, threading, eyelash extensions, spray tanning, and facials, are generally not classified as skin penetration, though they remain subject to general infection-control guidelines.
Track consent, sterilisation, and client records in one place
OneBookPlus stores per-client consent forms, treatment history, allergy flags, and infection-control records alongside your booking calendar, so the next EHO inspection is a five-minute event.
Rather look before you sign up? Open a live demo account with real data in it, or compare the AUD plans on the pricing page.
Reviewed by Bishal Shrestha
About the author
Bishal Shrestha
Founder & CEO, OneBookPlus
Bishal spent a decade running digital projects for Australian small businesses before founding OneBookPlus. He writes and maintains these pages, and publishes what OneBookPlus does not do alongside what it does.
Read the founder bioHow this page was researched
Every figure above is either linked to the body that published it or recomputable from the numbers shown on the page. Plan prices come from the OneBookPlus price registry, so the page and the checkout cannot disagree. Everything said about OneBookPlus describes what the product does today, and the page says so where it does not do something.
From the blog
Related reading for salons
Practical guides and explainers from the OneBookPlus blog, grouped by topic.
Best Booking Software in Australia
Two identical six-chair salons, one paying $29 a month for booking software and the other $252. Calendly, Acuity, Square, Setmore, Fresha, Timely and SimplyBook.me compared on what they actually cost an Australian business, with prices read from each vendor in August 2026.
15 min readRead articleBest Salon Software in Australia (2026): A Fresha Alternative That Keeps Your Client Data
Salon and beauty booking software in Australia for 2026, compared. Cut no-shows, take deposits, and keep your own client list.
10 min readRead articleThe Card Surcharge Ban 2026: What It Really Costs (and Saves) Australian Small Business
From 1 October 2026 you cannot surcharge eftpos, Mastercard or Visa. What the RBA reform costs and saves you, modelled by business type.
14 min readRead articleFrom Quote to Paid in One App: The Australian Job Workflow
One landscaping job followed from quote to money in the bank, with the customer, quote, job, invoice, payment and BAS all staying linked.
24 min readRead article
More in this guide
Related resources
Start a Hair & Beauty Salon
8-step founder guide, ABN, GST, premises, skin-penetration permit, insurance, equipment, pricing, opening week.
Read Start a Hair & Beauty SalonOperator GuideHair & Beauty Award (MA000005)
Plain-English MA000005, Level 1–6 classifications, junior rates, casual loading, Sunday penalties.
Read Hair & Beauty Award (MA000005)ReferenceSalon Insurance Guide
Public liability ($10–20M), workers comp, treatment/malpractice cover, equipment, premises, glass, premium ranges.
Read Salon Insurance Guide