How long must a Texas body art studio keep client records under 25 TAC §229?

Under 25 Texas Administrative Code Chapter 229, Texas body art studios must retain client records for a minimum of three years from the date of service. Records typically include client identification, consent forms, aftercare instructions provided, and the procedure performed. The retention clock starts at the date of the procedure, not the date of facility license renewal.

What counts as a 'record' under Texas 25 TAC §229 for a body art studio?

Texas 25 TAC §229 treats client records, sterilization logs, sharps disposal documentation, and equipment maintenance records as records subject to retention. Client records include the intake form, consent, the date and type of procedure performed, the artist identifier, and any adverse-reaction notes. A studio that cannot produce the full set during an inspection is treated as out of compliance.

How long do body art exposure-incident records need to be kept under OSHA?

OSHA 29 CFR 1910.1030(h) requires that medical records for occupational exposure incidents be kept for the duration of employment plus 30 years. This is much longer than the 3-year state retention rule and effectively overlays the Texas requirement. Studios should keep all exposure-incident medical and sharps-injury records for the entire employment window plus three decades.

What happens if a DSHS inspector finds incomplete records at a Texas body art studio?

An incomplete record set is treated as a documented deficiency at inspection. DSHS or the delegated local health authority can issue a deficiency citation, require a corrective action plan, and tie the finding to the facility license renewal. Repeated record-keeping deficiencies are grounds for license suspension or non-renewal, and they also create OSHA exposure because record gaps correlate with weak exposure control plans.

Texas 25 TAC §229 Record Retention for Body Art Studios: 2026 Guide

If you operate a tattoo studio, piercing studio, or permanent cosmetics practice in Texas, your facility license obligates you to maintain a specific set of records — and to keep them on file long enough that a Department of State Health Services (DSHS) inspector or local health authority can reconstruct what happened at any procedure in your studio. 25 Texas Administrative Code Chapter 229 sets the state floor for client record retention, and OSHA 29 CFR 1910.1030 layers a separate, longer retention requirement on top for medical and exposure records. Studios that treat these as the same rule end up inadvertently short on one side or the other.

This guide walks through what the Texas BBP training requirements post touches on but does not unpack: the exact retention window under 25 TAC §229, what counts as a record, the OSHA 1910.1030(h) medical-record overlay, and how DSHS inspectors read a deficient record set during a facility review. For the broader Texas overview, see the Texas BBP training landing page; for a comparison with other states, see the state-by-state BBP guide, the Oregon overview, and the Minnesota overview.

What 25 TAC §229 Actually Requires

The Texas Department of State Health Services regulates body art facilities under 25 Texas Administrative Code Chapter 229 (subchapter A covers tattoo studios, subchapter B covers body piercing). Subchapter A, in particular, requires facility license holders to maintain records for every procedure performed under the license, and to make those records available on request to DSHS or a delegated local health authority.

The retention window is three years from the date of the procedure. The clock does not restart at license renewal, and it does not pause if a client relationship ends. A procedure performed on January 14, 2024 must remain in the studio's records through at least January 14, 2027 — regardless of whether the practitioner who performed the procedure still works at the studio, and regardless of whether the facility license itself renews in between.

The intent of the rule is straightforward: if a client develops an infection months later, or if an inspector wants to reconstruct a procedure trace during a complaint investigation, the studio must be able to produce the underlying documentation. A studio that has rotated its hard drives, replaced its booking software, or lost its paper archive in a move is treated as if the procedures never happened.

What Counts as a "Record" Under §229

The state rule covers more than the client intake form. A Texas body art studio must maintain, at minimum:

Client identification and intake — legal name, date of birth, contact information, and any medical-history disclosure relevant to the procedure
Informed consent — signed by the client before the procedure, identifying the procedure performed and acknowledging aftercare responsibilities
Procedure log entry — date, type of procedure, body location, practitioner identifier, jewelry or pigment used (lot/batch where relevant)
Adverse-reaction notes — any complication reported by the client and the studio's response, including follow-up contact
Sterilization and equipment maintenance logs — autoclave cycle records, biological indicator results, and instrument tracking for the equipment used
Sharps disposal documentation — pickup manifests from the regulated waste hauler, retained for the same three-year window

The procedure log entry is the one most often incomplete. Studios that capture the client intake and consent but skip the practitioner identifier, or that do not record the specific jewelry or pigment used, create a gap that an inspector will flag. The fix is procedural, not regulatory — add the fields to your intake workflow and audit a random sample of records monthly.

Watch the overlap. 25 TAC §229 covers client records; OSHA 29 CFR 1910.1030 covers medical and exposure records; the sharps injury log is separately required under OSHA. Studios that keep one binder and call it "compliance" usually have at least one of the three categories missing.

The OSHA 1910.1030 Overlay

The state rule is not the longest retention window a Texas body art studio faces. OSHA 29 CFR 1910.1030(h) requires that medical records related to occupational exposure incidents be kept for the duration of employment plus 30 years. For a practitioner who works in a studio for a decade, that is a 40-year retention window — an order of magnitude longer than the state's three-year rule.

The OSHA rule covers a narrower set of records than the state rule: specifically, the medical records generated when an employee has an exposure incident (a needlestick, a blood splash to mucous membranes, a cut from a contaminated instrument). These records include the date and circumstances of the incident, the results of any post-exposure evaluation, and the healthcare professional's written opinion.

In practice, the OSHA rule means that a studio cannot simply discard exposure-incident records after three years. Studios should keep them in a separate, securely maintained file indexed by employee, not by procedure. The same applies to the OSHA-required sharps injury log, which the standard requires to be maintained in a manner that protects employee confidentiality and retained for at least five years following the date the entry was made.

The interaction matters because the state rule and the federal rule can pop at the same inspector visit. A DSHS inspector may ask for the 25 TAC §229 set; an OSHA inspector, on a referral or complaint-driven visit, may ask for the 1910.1030 set. Studios that maintain only one archive will be short on whichever side the inspector chooses to examine.

What DSHS Inspectors Actually Look For

DSHS and delegated local health authorities (Houston, Dallas, Austin, San Antonio) typically check records in three modes: at routine facility inspection, at facility license renewal, and during a complaint-driven investigation. The record set is evaluated as a whole, and gaps correlate with the rest of the compliance picture.

Inspectors typically look for:

Completeness of the procedure log entries — every procedure performed under the license should have a corresponding record, and missing entries are treated as worse than incomplete entries
Retention period compliance — a random sample of older procedures should still have records on file if the three-year window has not yet elapsed
Sterilization log continuity — gaps in the autoclave biological-indicator log are a strong signal that sterilization discipline is not embedded in the studio workflow
Sharps log present and current — regulated-waste pickup manifests aligned with the studio's actual procedure volume
Exposure-incident records isolated and confidential — kept separately from the general records, accessible only to the exposed employee and the supervising clinician

The practical consequence of a deficient record set is rarely a one-line citation. Inspectors treat record gaps as a marker of broader compliance weakness, and a single gap often escalates into a fuller facility review. For a studio with expired or missing records, license renewal is where the cost lands most directly.

How Long to Keep What: A Quick Reference

Client records (intake, consent, procedure entry, adverse-reaction notes): 3 years from the date of procedure (25 TAC §229)
Sterilization and equipment maintenance logs: 3 years (state rule) — longer is preferable, as autoclave records are useful for tracing infection complaints beyond the window
Sharps disposal manifests: 3 years (state rule), but align with the regulated-waste hauler's own retention
Sharps injury log (OSHA): 5 years from the date the entry was made (29 CFR 1910.1030)
Exposure-incident medical records (OSHA): Length of employment plus 30 years (29 CFR 1910.1030(h))
BBP training certificates: While employed plus the prior cycle — the certificate is part of the inspection set every year

Consequences of Incomplete Records

A studio that cannot produce the record set during inspection is treated as out of compliance, and the consequences compound:

DSHS deficiency citations at routine inspection or complaint-driven investigation
Facility license renewal risk — deficiencies are factored into the renewal review, and repeated record-keeping deficiencies are grounds for non-renewal
OSHA employer liability — record-keeping failures under 1910.1030 are independently citable and can run into the same penalty bands as training failures (up to $15,625 per serious violation)
Civil exposure in client infection claims — a studio that cannot produce the records needed to defend a procedure trace loses the strongest line of defense in a malpractice or infection lawsuit

The record set is also the artifact that ties this rule to the broader body art training framework. Texas's annual BBP training requirement is enforced partly through documentation — the certificate on file, the exposure control plan, the HBV vaccination record or declination form. Studios that treat record retention as an administrative chore rather than a compliance scaffold tend to fall behind on the training side as well.

Frequently Asked Questions

How long do I have to keep client records at my Texas body art studio?

Three years from the date of the procedure. That window comes from 25 TAC Chapter 229 and applies to intake forms, consent, procedure log entries, and adverse-reaction notes. Sharps disposal manifests are covered by the same window. You can keep records longer — many studios do, especially for sterilization logs — but you cannot dispose of them earlier without creating exposure.

Does OSHA require anything beyond the three-year Texas rule?

Yes. OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030) requires that medical records related to an occupational exposure incident be kept for the duration of employment plus 30 years. The OSHA sharps injury log is separately required and must be retained for at least five years from the date of each entry. The OSHA rule and the Texas rule cover overlapping but non-identical record sets, and a compliant studio keeps both.

What does a DSHS inspector check in my records?

Inspectors typically pull a random sample of procedures and check for a complete record on file — client identification, consent, procedure entry with practitioner identified, any adverse-reaction notes. They also check sterilization log continuity and the sharps disposal manifest trail. A single missing entry is treated as a deficiency; repeated deficiencies across samples are treated as a compliance pattern.

Where can I find more information about Texas body art facility licensing?

Contact the Texas Department of State Health Services Consumer Health Protection Division at 800-252-8239 or visit dshs.texas.gov. For the broader compliance picture, the Texas BBP training landing page covers the training framework; the Oregon and Minnesota state landing pages cover the comparison states.

Texas 25 TAC §229 Record Retention for Body Art Studios Explained