Medical Director Requirements for Medspas by State

Medical director requirements fall into three broad categories, though individual states often blend elements. Mandatory on-site presence (e.g., some interpretations in California, Florida, and New York) requires the MD or DO to be physically present during certain procedures—typically injectables and laser treatments—or to have examined the patient within a defined window and be immediately available. Remote or delegated supervision (e.g., Texas, Arizona, many others) allows the physician to oversee non-physician providers (RNs, NPs, PAs, aestheticians) from off-site, provided there is a written protocol, regular chart review, and periodic in-person patient evaluation. Minimal or no explicit requirement (e.g., some states with weak aesthetics regulation) may not mandate a medical director at all, though if a practice holds a medical license or operates under a physician's DEA number, state medical board rules still apply. The critical distinction: on-site presence is not the same as active supervision. A physician present in the building but not directly observing a procedure may not satisfy the standard of care in a negligence lawsuit, even if state law permits it. Conversely, a physician off-site but with robust protocols, real-time communication, and documented oversight may satisfy both state law and the standard of care. The gap between legal minimum and defensible practice is where liability lives.

State law defines which procedures a non-physician can perform and under what supervision. Registered nurses (RNs) can typically administer injectables (Botox, fillers) and operate lasers and radiofrequency devices in most states, provided they work under a physician's protocol and supervision. Nurse practitioners (NPs) and physician assistants (PAs) have broader independent authority in some states (especially for injectables) but remain subject to physician oversight in others. Licensed aestheticians can perform non-invasive treatments (chemical peels, microdermabrasion, facials) in most states but are prohibited from administering injectables or operating medical-grade lasers in nearly all states—though enforcement varies. The written protocol is the legal linchpin: it must specify which procedures each role can perform, what training and credentialing is required, what patient evaluation and consent steps are mandatory, and what triggers physician involvement. A protocol that is too vague ("RN may perform injectables under MD supervision") exposes the practice to board discipline; one that is too restrictive may make the business model uneconomical. State boards increasingly scrutinize whether protocols are actually followed or merely filed away.

Compliance with state law is a floor, not a ceiling. A plaintiff's attorney in a negligence case will argue that the standard of care in your market—what a reasonably prudent medspa owner and medical director would do—exceeds the minimum legal requirement. If a competitor in your city has the medical director present during all injectables and you do not, that fact may be used against you in discovery. Documentation is your defense: detailed pre-treatment consultations, informed consent forms specific to each procedure, post-treatment photos, adverse-event logs, and evidence of physician review are essential. If a patient claims an injection was placed incorrectly or a laser caused scarring, you must be able to show that the medical director evaluated the patient, reviewed the plan, and (if off-site) was promptly notified of the outcome. Malpractice insurance is non-negotiable; verify that your policy covers the specific procedures you offer and the supervision model you use. Some insurers will not cover remote-only supervision or will charge a premium for it. Corporate Practice of Medicine (CPM) doctrine, which prohibits non-physicians from owning or controlling medical practices in many states, also affects liability: if your practice is structured as a non-physician-owned entity with a physician as a contractor, the physician may have limited liability for the practice's negligence, but you (the owner) may have unlimited liability. Consult a healthcare attorney licensed in your state to review your ownership structure and insurance.

A few high-volume medspa markets illustrate the range:

• California: Medical Board of California rules require a physician to be present and directly supervising certain procedures; interpretation is fact-specific and evolving. Many practices interpret this as requiring MD on-site during injectables. Cosmetology Board also regulates aestheticians; scope overlap creates confusion.

• Florida: Board of Medicine allows remote supervision of RNs and LPNs under a written protocol, but the protocol must be filed with the board and reviewed. On-site presence is not mandated but is common practice.

• Texas: Medical Board permits delegation to RNs and NPs under a written protocol; on-site presence is not required. Remote supervision is legally permissible if the protocol is robust.

• New York: Department of Health regulates both physicians and nurses; rules are prescriptive about what nurses can do independently vs. under supervision. Injectables typically require physician oversight.

• Arizona: Medical Board allows significant delegation to NPs and PAs; on-site presence is not mandated for injectables if a protocol is in place.

Do not assume your state's rules based on a neighboring state or national trends. Contact your state medical board, nursing board, and (if applicable) cosmetology board directly; request written guidance on medical director requirements for your specific service mix. Many boards publish advisory opinions or FAQs; if they do not, submit a written inquiry and document the response.

The medical director must hold an active, unrestricted medical license (MD or DO) in your state and, if prescribing or administering controlled substances, a valid DEA registration. Board disciplinary history, malpractice claims, and prior sanctions are red flags; verify credentials through the National Practitioner Data Bank (NPDB) and your state medical board's public database. The medical director's obligations typically include: (1) reviewing and approving all clinical protocols; (2) evaluating new patients or performing periodic in-person evaluations (frequency varies by state and procedure); (3) reviewing adverse events and patient complaints; (4) ensuring staff training and competency; (5) maintaining records of supervision and oversight; and (6) being available for consultation if complications arise. Some states require the medical director to be on-site a minimum number of hours per week or month; others do not. A part-time or remote medical director is legally permissible in many states but creates practical and liability risks: if a complication occurs and the MD is unavailable, the practice is exposed. Many successful practices employ a full-time medical director or have a formal on-call arrangement with documented protocols for emergency consultation. The medical director's compensation should be clearly documented (salary, per-procedure fee, equity stake) and should not create a perverse incentive to approve unsafe practices or skip necessary oversight.

State medical boards are increasingly scrutinizing medspa operations, particularly regarding scope creep (e.g., aestheticians administering injectables without proper licensure), inadequate physician oversight, and adverse-event reporting. The FDA's enforcement actions against unlicensed or off-label use of devices (e.g., unapproved GLP-1 weight-loss drugs sold at medspas, as reported in recent enforcement sweeps) have heightened board attention to whether practices are operating within the bounds of FDA clearance and state law. To mitigate risk: (1) Retain a healthcare attorney licensed in your state to review your protocols and ownership structure; (2) Ensure your medical director is actively engaged, not a figurehead—document all oversight activities; (3) Implement a robust adverse-event and complaint-tracking system; (4) Maintain detailed records of staff training, credentialing, and competency assessments; (5) Obtain written guidance from your state board on any ambiguous procedures or delegation questions; (6) Review your malpractice insurance annually and confirm coverage for your service mix and supervision model; (7) Consider joining a professional organization (e.g., American Academy of Aesthetic Medicine, American Society of Plastic Surgeons) that provides practice guidance and peer support. Proactive compliance is far cheaper than reactive defense.