Med spas sit at the intersection of aesthetics and medicine, and that intersection is where compliance gets complicated. Unlike a traditional day spa, a medical spa offers treatments that constitute the practice of medicine—injectable neurotoxins, dermal fillers, laser treatments, chemical peels, and more. This means med spas are subject to medical practice laws, including the corporate practice of medicine doctrine, physician supervision requirements, and scope of practice regulations.

If you are a non-physician entrepreneur looking to open a med spa, this guide covers the compliance fundamentals you need to get right before opening your doors.

Med Spa Ownership Rules by State

The first question every aspiring med spa owner faces is whether a non-physician can own the business. The answer depends entirely on the state where you plan to operate.

Even in states that allow non-physician ownership of med spas, you still need a medical director. Ownership rules and supervision requirements are two separate regulatory questions, and both must be addressed.

Medical Director Requirements

Every med spa needs a medical director, but the role involves far more than signing off on paperwork. A compliant medical director arrangement includes:

On-Site vs. Off-Site Supervision

Supervision requirements vary by state and by procedure. Some states require the supervising physician to be physically present in the facility during certain procedures, while others allow off-site supervision via telemedicine or telephone availability. The supervision level typically depends on the procedure being performed and the provider performing it.

Common supervision levels include:

  1. Direct supervision: The physician must be present in the office suite during the procedure.
  2. Indirect supervision: The physician must be immediately available by telephone and able to be on-site within a reasonable time.
  3. General supervision: The physician oversees the overall program but does not need to be present or immediately available for each individual procedure.

Scope of Practice for Aesthetic Treatments

One of the most common compliance failures in med spas involves scope of practice violations—having the wrong type of provider perform a procedure they are not authorized to perform under state law.

Typical scope of practice rules for common med spa services include:

Scope of practice is not static. State boards regularly issue new guidance and advisory opinions that can change who is authorized to perform specific procedures. Monitor your state medical board, nursing board, and aesthetics licensing board for updates.

Common Med Spa Compliance Violations

State medical boards and attorneys general have increasingly targeted med spas for compliance enforcement. The most common violations include:

MSO Structure for Med Spas

For non-physician entrepreneurs in CPOM states, the MSO-PC structure is the standard path to med spa ownership. Here is how it works in the med spa context:

The management services organization (MSO) is owned by the entrepreneur and handles all non-clinical aspects: lease, buildout, equipment purchases, marketing, scheduling, non-clinical staff, billing, and business strategy. The professional corporation (PC) is owned by a physician and employs the medical director and any clinical staff. The PC holds the medical licenses and maintains clinical authority over all medical procedures.

The MSO and PC enter into a management services agreement under which the MSO provides administrative and operational services to the PC in exchange for a management fee. This fee must be at fair market value and should be structured to avoid characterization as fee-splitting.

This arrangement allows the entrepreneur to control the business side of the med spa while the physician maintains control over clinical operations, satisfying both CPOM requirements and supervision mandates. It is the same structure used by telehealth companies, clinic chains, and other healthcare businesses founded by non-physicians.

Launching a med spa is an exciting business opportunity, but the regulatory requirements are real and the consequences of non-compliance can include license revocation, fines, and even criminal charges. Getting the structure right from the start is far easier and less expensive than fixing violations after the fact.