Scope of practice and supervision rules are the legal bedrock of your medspa operation—and they differ dramatically across states. A nurse injector working under your license in California operates under entirely different legal constraints than one in Florida or Texas. Whether you're hiring your first injector, expanding to a new state, or structuring your MSO relationships, you need to know: Who is legally permitted to administer injectables? What does "supervision" actually mean in your state—on-site, off-site, or standing orders? Do you need a good-faith exam before treatment? What are the penalties for scope violation? This page maps the key regulatory patterns, names the state boards and statutes you must check, and explains the structural differences that shape your hiring, delegation, and compliance strategy.
The Three Core Regulatory Models
State scope-of-practice law falls into three broad patterns, each with different implications for your staffing and liability.
Physician-only states (e.g., some interpretations in New York, certain procedures in Massachusetts) restrict injectables to licensed physicians. Nurse practitioners and physician assistants may be permitted under physician supervision, but RNs typically cannot. These states impose the highest barrier to entry and require direct physician involvement in treatment decisions.
Nurse-practitioner/PA-led states (e.g., Florida, Texas, California under certain conditions) permit NPs and PAs to perform injectables independently or under looser supervision, often with standing orders or collaborative agreements rather than real-time oversight. This model expands your hiring pool but requires careful credentialing and protocol documentation.
RN-inclusive states (e.g., Nevada, Arizona, parts of California) allow registered nurses to administer injectables under physician supervision or standing orders, provided they meet training and competency requirements. This is the most flexible model for medspa operations but demands rigorous documentation of delegation and oversight.
Your state's model determines whether you can hire a nurse injector, whether that person needs a physician on-site, and whether you can operate via standing orders or require case-by-case physician approval. Misclassifying your state's rules—or your staff member's credentials—creates immediate liability.
Supervision & Delegation: What the Rules Actually Require
"Supervision" is not a single legal standard. It ranges from on-site presence to off-site availability to pre-approved standing orders, and the definition varies by state board rule, statute, and sometimes by procedure.
On-site supervision means the supervising physician is physically present in the facility during treatment. Some states (or specific procedures within states) require this; others do not. On-site supervision is the safest legal posture but the most operationally restrictive and expensive.
Off-site supervision (or "general supervision") typically means the physician is available by phone/telemedicine, has reviewed the patient chart, and can intervene if needed. Many states permit this for routine injectables under standing orders, but the exact standard varies. Check your state board's guidance on response time and documentation.
Standing orders are pre-approved protocols that allow a delegated provider (NP, PA, RN) to treat patients meeting specific criteria without case-by-case physician approval. Standing orders are common in medspa settings but must be written, signed by the supervising physician, and regularly reviewed. They do not eliminate the physician's liability for the delegated provider's negligence.
Good-faith exam requirement: Some states mandate that a physician perform an in-person evaluation before injectable treatment (or before the first treatment by a delegated provider). Others allow the delegated provider to perform the initial exam under physician oversight. A few states have no explicit good-faith-exam rule. Violating this requirement can result in board discipline, loss of license, or civil liability. Verify your state's rule before delegating initial consultations.
State-by-State Variation: Key Jurisdictions for Medspa Operators
Because scope-of-practice law is state-specific and frequently updated, you cannot rely on general rules. Here are the key patterns and where to verify:
California: Permits RNs to administer injectables under physician supervision (Business & Professions Code § 2725). Supervision can be off-site; standing orders are permitted. NPs and PAs have broader independent authority. However, the Dental Board and Medical Board have issued conflicting guidance on certain procedures. Verify current guidance with the California Medical Board and your liability carrier.
Florida: NPs and PAs can perform injectables independently or under collaborative agreements; RNs cannot administer injectables without physician supervision. The Florida Board of Medicine and Board of Nursing have specific rules on delegation. Confirm current rules with both boards.
Texas: NPs and PAs can perform injectables under physician supervision or collaborative agreements. RNs may administer under standing orders in some settings. The Texas Medical Board and Board of Nursing have issued joint guidance. Verify the current collaborative-agreement requirements.
New York: Scope is narrower. Injectables are generally restricted to physicians; NPs and PAs may perform under specific conditions and physician supervision. The New York Department of Health and the Medical Board have strict rules. Do not assume you can delegate injectables to an NP without explicit board guidance.
Nevada, Arizona: More permissive for RN-administered injectables under standing orders and physician oversight. These states are popular for medspa expansion partly because of this flexibility.
For any state: Contact the state Medical Board, Nursing Board, and Board of Pharmacy (if applicable) directly. Request written guidance on scope for injectables, supervision requirements, and good-faith-exam rules. Do not rely on vendor guidance or peer reports; boards update rules frequently and may have unpublished interpretations.
Good-Faith Exam & Initial Consultation Rules
A "good-faith exam" typically means a physician or qualified provider has evaluated the patient in person (or, in some states, via telemedicine) before treatment to assess candidacy, contraindications, and informed consent.
Physician-performed exam: Many states require the supervising physician to perform the initial exam. This is the safest legal standard and is required in some high-regulation states (e.g., parts of New York, Massachusetts).
Delegated provider exam under physician oversight: Other states allow an NP, PA, or RN to perform the initial exam, provided a physician reviews the chart, approves the treatment plan, and is available for consultation. This is common in California, Texas, and Florida under proper standing orders.
Telemedicine exams: Some state boards now permit telemedicine consultations for injectables, provided the provider can visualize the treatment area and the patient consents. However, telemedicine rules vary widely and are evolving. Confirm your state's position before offering virtual consultations.
Documentation: Regardless of who performs the exam, document the evaluation, patient history, contraindication screening, informed consent, and the supervising physician's approval. This documentation is your primary defense in a malpractice claim or board investigation.
Failure to perform a good-faith exam can result in board discipline, loss of license, and civil liability. Some states treat it as a per-se violation of the standard of care. Do not skip this step to save time or cost.
Corporate Practice of Medicine & MSO Structures
If you are operating an MSO or multi-provider medspa, you must navigate the Corporate Practice of Medicine (CPOM) doctrine, which prohibits non-physicians from owning or controlling the medical decisions of a medical practice.
CPOM states (e.g., California, Texas, Florida) restrict who can own a medical practice and require that a licensed physician retain control over clinical decisions. In these states, a nurse-owned medspa cannot employ a physician; instead, the physician must be the owner or a controlling partner, or the practice must be structured as a professional corporation with physician ownership.
Non-CPOM states (e.g., Nevada, Arizona, Delaware) allow non-physicians to own medical practices, provided a licensed provider is responsible for clinical oversight. This is more flexible but still requires clear delegation and supervision protocols.
MSO structures: Many medspa operators use Management Services Organizations (MSOs) to separate business operations from clinical control. An MSO provides administrative, billing, and marketing services to an independently owned medical practice. The physician-owner retains clinical control and licensing authority. This structure can comply with CPOM in restrictive states, but it requires careful documentation and legal review. The MSO cannot direct clinical decisions; it can only provide administrative support.
Verify CPOM status in your state with a healthcare attorney familiar with your jurisdiction. Violating CPOM can result in loss of license, contract voidability, and civil penalties. Do not assume your current structure is compliant without explicit legal review.
Compliance Checklist & Red Flags
Before hiring a delegated provider or expanding to a new state, verify:
- Scope of practice: Contact your state Medical Board, Nursing Board, and (if applicable) Board of Pharmacy. Request written guidance on who can administer injectables and under what conditions.
- Supervision requirements: Confirm whether supervision must be on-site, off-site, or via standing orders. Get the rule in writing.
- Good-faith exam: Determine who must perform the initial exam and whether telemedicine is permitted.
- Standing orders: If your state permits them, ensure yours are written, signed by the supervising physician, and reviewed annually.
- Delegation documentation: Document all delegated tasks, the provider's credentials, training, and competency assessment. Keep records for at least 5 years.
- CPOM compliance: If you operate in a CPOM state, have a healthcare attorney review your ownership structure and MSO agreements.
- Liability insurance: Confirm that your malpractice carrier covers delegated injectables and that your delegated providers are named insureds or covered under your policy.
- Red flags: Do not hire a provider based on cost alone; verify credentials and scope independently. Do not operate without written standing orders if your state permits delegation. Do not skip good-faith exams to save time. Do not assume peer practices are compliant; they may be operating illegally.
State board investigations often begin with a patient complaint or a whistleblower report. Compliance violations can result in license suspension, loss of DEA registration, civil liability, and criminal charges in egregious cases. The cost of prevention (legal review, documentation, training) is trivial compared to the cost of a board investigation or malpractice claim.
Bottom line
Scope-of-practice and supervision rules are state-specific, frequently updated, and non-negotiable—verify your state's current rules in writing with the Medical Board before hiring, delegating, or expanding.
