Med spa compliance sits at the intersection of medical regulation and standard business operations, which makes it more complex than compliance for a typical beauty business — and more consequential to get wrong. This is a general, jurisdiction-neutral orientation to the major compliance domains a med spa needs to manage. It is not legal or medical advice, and every specific requirement here varies by state; confirm the details that apply to your practice with your state medical board or a healthcare attorney licensed in your state before relying on any of it operationally.
The four compliance domains
1. Medical licensing and supervision structure
Every state sets its own requirements for who may legally perform or oversee each aesthetic procedure a med spa offers, and for what kind of physician supervision — direct, indirect, or medical-director-level — applies to each. This is one of the most commonly misunderstood areas in the industry, and it varies enough by state and procedure type that general guidance can't substitute for confirming your specific requirements directly with your state medical board.
2. Scope-of-practice discipline
A written, current record of which license each staff member holds and exactly which procedures that license authorizes — checked against the practice's actual service menu, not assumed from training or experience. Confirm licensure before hiring, confirm exactly which services each specific license authorizes, and don't let informal cross-training stand in for a role a staff member isn't licensed to perform.
3. Documentation discipline
Consent records (see the consent best-practices playbook), sanitation and equipment logs, staff licensing and continuing-education records, and intake/medical-history documentation. Practices that move through inspections and audits smoothly are consistently the ones with organized, dated, easy-to-produce records — documentation gaps are frequently the actual citation, even in practices where the underlying clinical work was sound.
4. Advertising and marketing rules
Medical-aesthetic advertising is regulated differently across states, particularly around results guarantees, before/after content, and the use of titles like "doctor" or "medical director." Confirm your state's specific rules on medical advertising claims before running any campaign that touches these areas, and treat before/after content with the same consent discipline covered in the rank-locally and consent playbooks.
This page is orientation, not a compliance audit
Use it to know which questions to bring to your state medical board or healthcare attorney — not as a substitute for that conversation. Requirements genuinely vary by state, by procedure, and sometimes by municipality, and they change over time.
Building an audit-ready operation
The practices that handle compliance well don't treat it as a once-a-year scramble before a license renewal — they build the documentation habits (consent conversations recorded, sanitation logs kept current, staff licensing tracked) into daily operations so the paper trail is always current rather than reconstructed under pressure when an inspection notice arrives. This same discipline that protects the practice legally also tends to protect it clinically, since the documentation habits that satisfy an auditor are largely the same habits that catch a missed detail in a patient's care.
Compliance that's rebuilt from memory after an inspection notice arrives is compliance that was never really there. Build the habit before you need it.
What to review regularly
- **Supervision and licensing requirements** (re-confirm with your state medical board at least annually, or sooner if regulations change)
- **Scope-of-practice records** (updated whenever a staff member's licensing status changes)
- **Documentation completeness** (spot-audit consent, sanitation, and intake records quarterly)
- **Advertising and marketing copy** (reviewed against current state advertising rules before any new campaign launches)
Where to go from here
This overview is deliberately general because the specifics genuinely differ by state and by the exact procedures a practice offers. The next step for any med spa owner is a direct conversation with your state medical board about the licensing and supervision requirements for your specific service menu, and — where the stakes warrant it — a healthcare attorney licensed in your state who can review your consent forms, advertising copy, and staffing structure against current law.