Med Spa Regulations by State: Ownership, Supervision, and Scope of Practice Requirements

Understanding med spa regulations by state is not optional — it is the foundation of a legally defensible aesthetic practice. Unlike traditional medical offices that operate under well-established regulatory frameworks, medical spas occupy a hybrid space between healthcare and consumer wellness that creates a patchwork of state-by-state rules governing who can own the business, who must supervise treatments, and which providers can perform which procedures.

Getting these requirements wrong carries severe consequences. State medical boards have shut down med spas operating without proper physician oversight. Non-compliant ownership structures have resulted in disgorgement of profits, personal liability for owners, and criminal charges in extreme cases. Providers performing treatments outside their scope of practice face license revocation, malpractice exposure, and patient harm that no amount of insurance can fully remedy.

This guide breaks down the critical med spa legal requirements across the major regulatory categories — ownership, supervision, and scope of practice — with specific attention to the states with the most distinctive or complex rules. Whether you are launching a new practice, expanding to a new state, or auditing your current compliance posture, this is the regulatory environment you need to understand.

1. Medical Director Requirements: The Non-Negotiable Foundation

Every med spa in the United States requires a medical director — a licensed physician who assumes responsibility for the medical services provided at the practice. However, what "medical director" means in practice varies enormously by state. The role can range from a deeply involved on-site physician who personally oversees every treatment to a consulting physician who reviews protocols quarterly and is available by phone.

What a Medical Director Must Do

At minimum, a medical director is expected to establish treatment protocols and standing orders, determine which procedures each provider is qualified to perform, make sure proper patient evaluation occurs before medical treatments, maintain responsibility for adverse event management, and oversee quality assurance and patient safety programs. In many states, the medical director must also personally evaluate patients before certain high-risk treatments such as injectable neurotoxins, dermal fillers, and laser resurfacing.

The medical director's level of involvement directly affects your compliance posture. A medical director who signs an agreement, collects a monthly fee, and never visits the practice is a compliance liability in virtually every state — even those with the most relaxed supervision standards. State medical boards increasingly scrutinize "paper medical director" arrangements, and several high-profile enforcement actions have resulted in sanctions against both the physician and the practice.

Compensation and Independence

How you compensate your medical director matters for regulatory compliance. Many states prohibit fee-splitting arrangements where a medical director receives a percentage of revenue generated from medical procedures. The rationale is that revenue-based compensation creates an incentive to approve procedures that may not be medically appropriate. Most healthcare attorneys recommend flat-rate monthly compensation based on the time commitment required, with the rate reflecting fair market value for the physician's specialty and geographic market. Typical medical director compensation ranges from $2,000-$10,000 per month depending on the practice's size, volume, and the physician's required on-site hours.

2. Ownership Models: Physician-Only vs. Non-Physician Ownership

The question of who can legally own a med spa is governed primarily by each state's corporate practice of medicine (CPOM) doctrine. This legal principle exists to prevent non-physicians from influencing medical decision-making for commercial gain, and it has profound implications for med spa ownership laws across the country.

States with Strict CPOM Doctrines

In states with strong CPOM enforcement — including California, New York, Illinois, Texas, and New Jersey — only a licensed physician (or in some states, a professional corporation owned by a physician) can own an entity that practices medicine. Non-physicians cannot directly own a med spa that provides medical aesthetic treatments in these states.

However, this does not mean non-physicians are entirely excluded from the med spa business in CPOM states. The widely used Management Services Organization (MSO) model allows a non-physician to own a management company that provides administrative, marketing, staffing, and operational services to a physician-owned professional corporation (PC) that delivers the actual medical services. The MSO handles the business side; the PC handles the medical side. When properly structured, this arrangement complies with CPOM requirements while allowing non-physician entrepreneurs to participate in the economics of the practice.

The critical legal requirement is that the physician-owned PC must retain independent control over all medical decisions — including hiring and supervising clinical staff, establishing treatment protocols, and determining which services to offer. If the MSO agreement gives the management company control over clinical decisions, the arrangement likely violates CPOM doctrine regardless of how the paperwork is titled.

States Permitting Non-Physician Ownership

Several states either do not have a CPOM doctrine or do not actively enforce it, making direct non-physician ownership of med spas possible. Florida, for example, allows non-physicians to own med spas provided they maintain a medical director who oversees all medical services. Arizona, Colorado, and Utah similarly permit non-physician ownership with appropriate medical oversight.

Even in these more permissive states, non-physician owners must make sure that a qualified physician maintains clinical authority over medical treatments. The ownership flexibility relates to business structure, not to clinical oversight — the requirement for physician supervision of medical procedures remains universal.

The MSO Model in Practice

A properly structured MSO arrangement typically involves two entities: a management company (often an LLC) owned by the non-physician entrepreneur, and a professional corporation (PC) owned by a licensed physician. The MSO provides services such as office space leasing, equipment procurement, staff recruitment and HR management, marketing, billing, and administrative operations. The PC employs or contracts with the clinical providers and maintains authority over all medical services.

The financial arrangement between the MSO and PC must be structured at fair market value and cannot be based on a percentage of medical revenue, as this could constitute illegal fee-splitting. Flat management fees, per-provider fees, or cost-plus arrangements are common compliant compensation models. Your healthcare attorney should draft the MSO agreement with careful attention to your specific state's CPOM rules, anti-kickback considerations, and fee-splitting prohibitions.

3. Supervision Levels: Direct, General, and Collaborative

Understanding medical spa supervision requirements is essential because the level of physician oversight required determines your staffing model, operating costs, and day-to-day workflow. States generally recognize three tiers of supervision, though the terminology and specific requirements vary.

Direct Supervision

Direct supervision requires that the supervising physician be physically present in the facility — not just available by phone — when medical procedures are being performed. The physician does not need to be in the same treatment room, but they must be on-site and immediately available to provide assistance or intervene if needed. California is the most prominent example of a state requiring direct supervision for most medical aesthetic procedures, including injectables and laser treatments performed by mid-level providers.

Direct supervision has significant operational implications. It means a physician must be physically present during all clinical hours, which limits the practice's scheduling flexibility and increases labor costs. Practices in direct-supervision states often employ the medical director on a full-time or near-full-time basis rather than using a part-time consulting arrangement.

General Supervision

General supervision requires that a physician authorize the procedure and be available for consultation (typically by phone or telehealth) but does not require on-site presence. The physician must have established protocols for the procedures being performed, must have verified the performing provider's competence, and must be reachable for questions or emergencies. Texas and Florida are examples of states where general supervision is sufficient for many aesthetic procedures performed by qualified mid-level providers.

General supervision allows practices to operate clinical hours without a physician physically present, which significantly reduces overhead and increases scheduling flexibility. However, the supervising physician must maintain meaningful involvement — regularly reviewing patient charts, updating protocols, and conducting periodic on-site visits to observe clinical operations.

Collaborative Practice Agreements

Collaborative practice agreements (CPAs) are specific to nurse practitioners and, in some states, physician assistants. A CPA establishes a formal relationship between a physician and an NP or PA that defines the scope of services the mid-level provider can deliver, the supervision and consultation requirements, and the process for physician review of patient cases. Some states require CPAs for NPs to practice at all, while others have moved toward full practice authority for NPs, eliminating the physician collaboration requirement.

As of 2026, approximately 27 states plus the District of Columbia grant nurse practitioners full practice authority, meaning NPs can independently diagnose, treat, and prescribe without a physician collaboration agreement. In these states, an NP could theoretically own and operate a med spa independently — though they must still comply with their state's specific rules about which aesthetic procedures fall within the NP scope of practice.

4. Scope of Practice by Provider Type

The med spa scope of practice question — which providers can legally perform which treatments — is the area where state regulations diverge most dramatically. What a registered nurse can do in one state may be restricted to physicians only in another. Understanding the scope boundaries for each provider type in your state is critical for staffing, training, and risk management.

Nurse Practitioners (NPs) and Physician Assistants (PAs)

NPs and PAs are mid-level providers with the broadest scope of practice in med spa settings. In most states, NPs and PAs can perform injectable treatments (Botox, dermal fillers), laser procedures, chemical peels, microneedling, PRP therapies, and sclerotherapy — provided they have appropriate training and (where required) physician supervision or a collaborative practice agreement.

The key distinction between NPs and PAs relates to practice authority. NPs in full-practice-authority states can practice independently, while PAs universally require a supervising physician relationship. For med spa owners, this means that an NP-led practice is possible in some states without a physician on the ownership or supervision side, while a PA-led practice always requires a physician collaborator.

Registered Nurses (RNs)

RNs can perform many aesthetic procedures in med spa settings but are more restricted than NPs and PAs. In most states, RNs can administer injectable neurotoxins and dermal fillers under physician orders or standing protocols, operate laser devices under supervision, perform chemical peels, and assist with more complex procedures. RNs cannot independently prescribe medications, diagnose conditions, or develop treatment plans — they must work under physician-established protocols.

The specific procedures an RN can perform vary by state. Some states allow RNs to perform injections only under direct physician supervision, while others permit RN injections under standing orders with general supervision. Check your state's nurse practice act and any advisory opinions from the board of nursing for specific guidance on RN scope in aesthetic settings.

Licensed Aestheticians and Medical Aestheticians

Aestheticians have the most restricted scope of practice in a med spa. Generally, licensed aestheticians are limited to non-invasive treatments that do not penetrate beyond the epidermis: superficial chemical peels, microdermabrasion, basic facials, LED light therapy, and certain body treatments. Aestheticians cannot perform injectable treatments, prescribe products, or operate medical-grade laser devices in most states.

Several states have created tiered aesthetician licensing — a "master aesthetician" or "medical aesthetician" credential that expands scope to include treatments like microneedling, medium-depth peels, and operation of specific laser devices under physician supervision. Virginia, Utah, and the District of Columbia are among the jurisdictions recognizing an advanced aesthetician scope.

One of the most common compliance mistakes in med spas is allowing aestheticians to perform treatments outside their scope — particularly laser hair removal and microneedling. While some states explicitly permit aestheticians to operate certain devices under physician supervision protocols, many do not. Verify your state's rules before delegating any treatment to an aesthetician that goes beyond basic skincare services.

5. Key States with Unique Regulatory Frameworks

While all 50 states regulate med spas, certain states have particularly distinctive or complex regulatory environments that merit specific attention.

California

California has one of the most restrictive regulatory environments for med spas. The state enforces a strong CPOM doctrine, requires physician ownership of medical practices, mandates direct supervision for most medical aesthetic procedures, and has aggressively pursued enforcement actions against non-compliant practices. California's Medical Board has specifically targeted "Botox bars" and med spas operating without proper physician oversight. The MSO model is widely used in California but must be carefully structured to avoid CPOM violations.

Texas

Texas enforces CPOM but has a relatively well-defined regulatory framework for med spas through the Texas Medical Board's rules on delegation. Physicians can delegate medical aesthetic procedures to NPs, PAs, and RNs under appropriate supervision protocols. Texas also permits aestheticians to perform laser hair removal under physician supervision — a notable exception to the typical aesthetician scope restrictions. The Texas Medical Board has published specific guidance on med spa operations, making compliance requirements clearer than in many other states.

Florida

Florida is one of the more permissive states for med spa operations. The state allows non-physician ownership, permits general supervision for many procedures, and has a broad delegation framework that allows physicians to delegate most aesthetic treatments to qualified mid-level providers. However, Florida requires that all medical spas register with the Department of Health and comply with specific facility and record-keeping requirements. The state has increased enforcement activity in recent years, particularly around proper delegation documentation and adverse event reporting.

New York

New York enforces a strong CPOM doctrine and requires that medical services be provided through physician-owned professional corporations or similar licensed entities. The state's education department, which oversees professional licensing, has taken the position that many aesthetic procedures — including injectable treatments and medical-grade laser procedures — constitute the practice of medicine and must be performed by or under the direct supervision of a physician. New York's regulatory environment is further complicated by overlapping jurisdiction between the Department of Health and the Education Department.

Illinois

Illinois has a strict CPOM doctrine and requires that medical aesthetic services be provided under the auspices of a physician-owned entity. The Illinois Medical Practice Act prohibits non-physicians from employing physicians to practice medicine, which directly limits ownership structures. Illinois also requires collaborative practice agreements for NPs and has specific rules about delegation of medical aesthetic procedures to non-physician providers. The state's regulatory framework requires careful navigation, and many Illinois med spas use MSO structures to accommodate non-physician business operators.

6. The Corporate Practice of Medicine Doctrine

The corporate practice of medicine (CPOM) doctrine is the single most important legal concept governing med spa ownership laws in the United States. Understanding CPOM is essential whether you are a physician planning to open a practice or a non-physician entrepreneur exploring the med spa industry.

CPOM prohibits corporations or non-physician entities from practicing medicine, employing physicians to practice medicine, or exercising control over medical decisions. The doctrine exists to make sure that medical judgment is exercised by licensed physicians free from commercial pressure that might compromise patient care.

States enforce CPOM to varying degrees. Approximately 30 states have some form of CPOM restriction, either through statute, case law, or medical board regulation. The remaining states either do not recognize CPOM, have statutory exceptions for certain business structures, or simply do not enforce the doctrine actively.

For med spa owners, CPOM compliance requires careful attention to three areas: ownership structure (who holds equity in the entity providing medical services), employment relationships (whether the medical entity or a management company employs the clinical staff), and operational control (who makes decisions about medical treatment protocols, clinical hiring, and patient care standards). Violations can result in voiding of the business entity, disgorgement of profits, and personal liability for the owners and operators involved.

7. How to Research Your State's Specific Requirements

Given the complexity of med spa regulations by state, researching your specific state's requirements is essential before launching or modifying your practice. Here is a systematic approach to identifying the rules that apply to your med spa.

• State medical board website: Your state medical board publishes rules on physician supervision, delegation of medical acts, and CPOM enforcement. Look for advisory opinions, position statements, and enforcement actions related to medical spas or aesthetic practices specifically
• Board of nursing: For NP and RN scope of practice questions, your state board of nursing is the authoritative source. Many boards have published specific guidance on aesthetic nursing scope
• Cosmetology or aesthetics licensing board: Your state's cosmetology board defines the scope of practice for licensed aestheticians and may have specific rules about advanced aesthetic services
• State statutes and administrative code: Search your state's medical practice act, nursing practice act, and cosmetology licensing act for specific language about delegation, supervision, and scope of practice
• Healthcare attorney: Engage a healthcare attorney with specific experience in medical aesthetics in your state. Generic business attorneys typically lack the specialized knowledge to handle med spa regulatory issues effectively
• Industry associations: The American Med Spa Association (AmSpa) maintains state-by-state regulatory guides and offers compliance resources specifically for medical spas

Do not rely solely on what other med spas in your area are doing as a guide to compliance. The fact that a competitor operates with a particular staffing model or ownership structure does not mean their arrangement is legal. Many non-compliant practices operate without issue until a patient complaint, adverse event, or random audit triggers state board scrutiny.

8. Common Compliance Mistakes to Avoid

After reviewing thousands of med spa regulatory actions and consulting with healthcare attorneys who specialize in aesthetic practice compliance, several recurring mistakes emerge as the most frequent and most consequential violations.

• Paper medical directors: Engaging a physician who signs an agreement but has no meaningful involvement in the practice. State boards increasingly view this as inadequate supervision regardless of the formal documentation
• Revenue-based medical director compensation: Paying the medical director a percentage of procedure revenue rather than fair-market-value flat compensation. This raises fee-splitting and anti-kickback concerns in most states
• Scope of practice violations: Allowing aestheticians to perform injectable treatments, permitting RNs to develop treatment plans independently, or enabling any provider to perform procedures without appropriate training documentation
• Inadequate delegation protocols: Failing to maintain written standing orders, supervision protocols, and competency verification documents for each provider performing delegated medical acts
• CPOM-violating ownership structures: Structuring ownership in a way that gives non-physician owners control over medical decisions, even when the paperwork nominally assigns clinical authority to a physician
• Multi-state expansion without state-specific analysis: Assuming that the regulatory framework in your home state applies when you expand to a new state. Each state requires independent analysis
• Ignoring facility requirements: Some states require specific facility registrations, equipment safety certifications, or physical plant standards that differ from general medical office requirements

Each of these mistakes can result in medical board investigations, practice shutdowns, financial penalties, and personal liability for practice owners and medical directors. The cost of proactive compliance — engaging qualified legal counsel, maintaining proper documentation, and conducting periodic compliance audits — is trivial compared to the cost of enforcement actions.

Frequently Asked Questions

Compliance Is Not Optional — It Is Your Competitive Moat

Handling med spa regulations by state requires diligence, expert counsel, and ongoing attention as laws evolve. The regulatory environment is not static — states regularly update supervision rules, scope of practice definitions, and CPOM enforcement postures. What was compliant two years ago may not be compliant today, and what is permissible in one state may be a violation in the state next door.

The practices that invest in strong compliance infrastructure — proper ownership structures, well-compensated and actively involved medical directors, clear delegation protocols, documented provider competencies, and ongoing legal counsel — are the practices that operate with confidence. They can scale without fear of regulatory action, attract higher-quality providers who want to work in professionally managed environments, and build enterprise value that withstands due diligence scrutiny from potential buyers or investors.

Start by auditing your current compliance posture against the categories outlined in this guide. Engage a healthcare attorney who specializes in medical aesthetics in your state. Document everything — supervision agreements, delegation protocols, provider credentials, training records, and competency assessments. And when you expand to a new state, treat it as a fresh regulatory analysis rather than assuming your existing framework transfers automatically.

The cost of getting compliance right is a fraction of the cost of getting it wrong. Build your practice on a foundation of regulatory excellence, and the rest of your business strategy can operate from a position of strength.