There is no globally valid licence for this work. Where you practise decides which authority sets your requirements, where you may work, and who inspects you. So the first step is not choosing a course — it is finding out what your own jurisdiction requires. Get the order wrong and you lose both time and money.
Step 1: Establish who regulates this, and what they require
Find the issuing authority for your city or state and confirm three things:
- How cosmetic tattooing is classified locally (often as body art or tattooing, but not everywhere).
- Whether you need an individual registration, a facility permit, or both.
- Whether there are hard requirements for age, training hours, supervised practice hours or health documentation.
This is not theoretical. Two US jurisdictions with published rules differ sharply:
- Los Angeles County Department of Public Health (enforcing the California Safe Body Art Act) requires practitioners to be over 18, to register with the local agency, and to work only at a permitted facility. Applicants must provide either hepatitis B vaccination documentation or a voluntary declination form, plus a completion certificate from an approved bloodborne pathogen exposure control training course.
- New Jersey Department of Health (N.J.A.C. 8:27) works differently. The state health department does not issue individual licences; approval comes through the local health department where the establishment is located. Tattoo practitioners must document 2,000 hours of tattooing experience to qualify, otherwise they must apprentice under a licensed practitioner. Applicants also need 10 client applications, 10 photographs of their own work, and consent forms from three clients.
Both point to the same conclusion: the rules are local and they change. Check them before you pay for training, not after you discover the course is not recognised.
Step 2: Bloodborne pathogens training is not a formality
Cosmetic tattooing breaks the skin. In the United States, establishments with employees fall under the Occupational Safety and Health Administration (OSHA) Bloodborne Pathogens standard, 29 CFR 1910.1030. OSHA has cited tattoo studios under that standard, and has confirmed it applies to tattoo, piercing and permanent cosmetics practitioners.
The standard obliges the employer — not the training provider — to provide:
- a written Exposure Control Plan;
- training at initial assignment and annually, covering every element the standard lists;
- the hepatitis B vaccine, or a documented declination;
- engineering and work-practice controls, personal protective equipment, sharps handling and regulated waste disposal;
- reporting, evaluation and follow-up after an exposure incident;
- the associated records.
One requirement is easy to miss and should change how you choose a course. A generic online programme is not sufficient on its own. In an official OSHA interpretation, the agency restated that even an interactive computer course must be supplemented with site-specific information — where the exposure control plan is kept, what to do if an exposure occurs — and that trainees must have direct access to a qualified trainer during training. Answering questions by email does not count as direct access.
So when you evaluate a course, ask four things: does it cover every element of the standard? Does it supply workplace-specific content? Who handles interactive questions? Who is the contact?
It also helps to separate three things people constantly conflate: training, certificates and licences. OSHA does not issue or recognise a "BBP certification". A third-party completion certificate proves you attended a course; it is not a licence to practise. The licence comes from the issuing authority.
Step 3: Four questions when choosing a training course
- Does my local issuing authority recognise this course? (Ask for the specific rule it points to.)
- Does the course cover the standard's elements and include interactive Q&A plus site-specific content?
- Does it include supervised, documented hands-on hours, and do those hours count toward the experience my jurisdiction requires?
- Can I verify the trainer's own credentials and where they are registered?
If the answer is "we are well known", that is not information your issuing authority can use.
Step 4: Separate employed and self-employed compliance
This is the real trade-off in the career decision, because it determines which obligations you carry:
| Employed at a permitted facility | Working for yourself | |
|---|---|---|
| Facility permit and inspections | Usually the facility's responsibility; you may be listed as its practitioner | Yours to obtain and maintain, and to be inspected against |
| Exposure control plan | Established and maintained by the employer, where OSHA applies | If you employ anyone, you are the party who establishes and maintains it |
| Client flow | Existing clients; faster start | You build the client base and reputation yourself |
| Equipment portability | Rarely your concern | Matters if you plan mobile services |
| Schedule | Less flexibility | Your own schedule, but you handle marketing and accounts |
Insurance is a separate item to confirm. Whether you need it, and what it must cover, depends on your jurisdiction, your facility's requirements, and whether you employ anyone. Check with your issuing authority and a broker rather than assuming.
Step 5: Pigments and equipment carry a second set of rules
Career guides routinely skip this, yet it decides what you may legally use. In the European Union, mixtures for tattooing purposes are restricted by entry 75 of Annex XVII to the REACH Regulation (Commission Regulation (EU) 2020/2081). Its scope explicitly includes permanent make-up, cosmetic tattooing, micro-blading and micro-pigmentation, and it sets concentration limits by hazard classification.
Professional compliance is therefore not only "do I hold a licence". It also includes "is the pigment I use legal in this market". Requesting and retaining supplier compliance documentation before you buy is part of your professional records.
Step 6: Keep practice volume and pricing separate
These are decided by different things:
- Practice is governed by how many documented hours your jurisdiction requires (the 2,000-hour threshold above is one example) and whether you can accumulate them under supervision.
- Pricing is governed by your actual skill, comparable local rates, and the services you can deliver.
Discounting early work in exchange for a portfolio and experience is a normal industry practice. It does not change the compliance threshold above it.
A starting checklist you can work through
- Record your local issuing authority and the current rules (save the link and the date).
- Confirm which courses that authority accepts, especially the elements and interactive requirements of bloodborne pathogens training.
- Confirm the experience hours you must accumulate, who must supervise them, and how they are documented.
- Confirm whether you register as an individual or work under a facility permit, and choose employed or self-employed accordingly.
- Confirm which health documents are required (for example hepatitis B proof or a declination) and who issues them.
- Confirm the compliance status of the pigments and equipment you intend to use in your market, and keep the supplier documentation.
- Confirm insurance requirements with your authority or a broker.
Within whatever your rules permit, you can compare equipment and consumables starting from ATTO's PMU machine range, ATTO's PMU pigment range and ATTO's practice and training materials.