Every medspa operates under some form of medical supervision—but what that means depends entirely on where you practice. Some states require a licensed physician on-site during all procedures; others allow remote oversight. Some mandate daily presence; others permit periodic chart review. These differences create vastly different operational costs, liability profiles, and compliance burdens. This guide explains the core supervision models, how liability flows, and what you need to verify for your specific state.
The Core Supervision Models Across States
Medical director requirements fall into three broad categories: on-site presence, direct supervision (physician present but not necessarily performing), and general supervision (physician available by phone or chart review). Some states—notably California, Florida, and Texas—require a licensed physician to be physically present during injectable and laser procedures. Others, including many in the Northeast and Midwest, allow nurse injectors and aestheticians to work under standing orders or protocols reviewed by a supervising physician who may not be on-site. A few states (like Arizona and Nevada) have minimal statutory requirements, leaving much to facility policy and insurance carriers. The distinction matters enormously: on-site presence means higher staffing costs but lower liability exposure for the practice; remote supervision is cheaper operationally but shifts more risk to the medical director and may expose the practice to regulatory action if complications arise. Before hiring or opening, contact your state's medical board (often called the Board of Medicine or Board of Healing Arts) and your state's nursing board (if employing nurse injectors) to confirm current rules. Many states have recently tightened requirements in response to unlicensed-injection prosecutions.
Liability: Who Answers When Something Goes Wrong
Medical director liability is joint and several in most jurisdictions. If a nurse injector causes injury, both the injector and the medical director can be sued; the plaintiff's attorney will pursue both. The medical director's exposure depends on the level of supervision: on-site presence creates a duty to monitor and intervene in real time; remote supervision creates a duty to establish safe protocols and review outcomes. Malpractice insurers distinguish sharply between these models—on-site medical direction typically costs 30–50% less in premiums than remote supervision, because the insurer's risk is lower. However, the medical director is also personally liable for negligent credentialing (hiring an unqualified injector) and failure to supervise (knowing an injector is unsafe and not stopping them). State medical boards can also impose discipline on the medical director independently—license suspension or revocation—if they find the director failed to maintain adequate oversight. Document everything: training records, competency assessments, incident reports, and chart reviews. If your state requires on-site presence and you're not there, you have no defense.
What 'Medical Direction' Actually Requires in Practice
Medical direction is not a passive title. It requires active engagement: reviewing patient intake forms before procedures, assessing contraindications, approving treatment plans, and reviewing outcomes. Many states require the medical director to see new patients before their first procedure or to review charts within 24–48 hours. Some states mandate that the medical director perform or directly supervise a percentage of procedures (often 10–25%) to maintain competency. You must also establish written protocols for each procedure offered—what products are used, dosing ranges, patient selection criteria, and adverse-event response. The medical director is responsible for ensuring staff are trained on these protocols and for updating them as new evidence emerges or products are approved. Ongoing chart audits (typically quarterly or semi-annually) are essential and increasingly expected by state boards. If you employ a medical director, your employment agreement should specify these duties in writing and require proof of completion (e.g., signed attestations of chart review). If you are the medical director, maintain a log of your oversight activities. State boards increasingly request these logs during investigations.
State-Specific Variations and Where to Check
State requirements are codified in medical practice acts and nursing practice acts, often with additional guidance in administrative rules or board opinions. California's Medical Board publishes detailed guidelines on physician supervision of non-physician practitioners; Florida's Board of Medicine has specific rules for aesthetic procedures. Texas allows nurse injectors under physician supervision but requires the physician to be available for consultation. New York requires a licensed physician to be on-site during certain procedures but permits remote oversight for others. Because rules change frequently—and because many states have recently cracked down on unlicensed injection following high-profile prosecutions—do not rely on outdated information. Contact your state medical board directly and request their current guidance on medspas and injectable/laser procedures. Ask specifically: (1) Is on-site physician presence required? (2) Can nurse injectors work under standing orders? (3) What documentation is required? (4) What are penalties for non-compliance? Also check your state's nursing board if you employ RNs or LPNs. Some states impose separate requirements on nurses that are stricter than physician-supervision rules.
Compliance Red Flags and Regulatory Trends
State medical boards are increasingly scrutinizing medspas, particularly following prosecutions of unlicensed injection operations (e.g., the 2024 Port St. Lucie case in Florida). Common violations include: no medical director on file, medical director not actually supervising, procedures performed by unlicensed staff, and inadequate training records. Boards now routinely request proof that the medical director has reviewed charts, trained staff, and established protocols. If you cannot produce these documents, expect disciplinary action. Another emerging issue: telemedicine supervision. Some states now prohibit remote medical direction for in-person procedures; others permit it only if the physician has an established relationship with the patient and the facility. Do not assume that a medical director in another state can supervise your medspa remotely—many states require the director to be licensed in that state. Finally, insurance carriers are tightening requirements. Many now require on-site medical presence or will not insure remote-supervision models. Check your malpractice policy's specific requirements before structuring your supervision model.
Building a Compliant Medical Director Relationship
Whether you hire a full-time medical director, contract with a part-time physician, or serve as your own director, formalize the relationship in writing. A medical director agreement should specify: duties (chart review, protocol development, staff training, incident response), time commitment (hours per week or percentage of procedures), compensation, term, and termination clause. Require the director to maintain current malpractice insurance and verify their medical license annually. Establish a credentialing file for every staff member performing procedures, including education, training, certifications, and competency assessments. Create a procedure manual that the medical director reviews and signs off on, and update it annually or when new products/techniques are introduced. Implement a chart audit schedule (e.g., 10% of charts monthly) and document the director's findings. If issues arise, document the corrective action taken. This paper trail protects both you and the director and demonstrates good-faith compliance to regulators. Finally, do not hire a medical director solely to satisfy regulatory requirements—hire someone who is genuinely engaged and willing to be accountable. A disengaged director creates liability for both of you and exposes your patients to unnecessary risk.
Bottom line
Medical director requirements are state-specific and evolving; verify your state's current rules with your medical board, formalize the relationship in writing, and maintain active oversight—on-site presence if required, documented chart review and protocol management at minimum.