Michael H. Cohen

Affiliated Counsel

Healthcare

Medical Spas and Aesthetic Clinics: Key Legal Insights for Safe and Compliant Operations

December 15, 2024

By Michael H. Cohen

The popularity of medical spas has soared, offering clients advanced treatments like IV hydration, injectables, and aesthetic enhancements. However, medical spas operate within a highly regulated landscape. Compliance with scope-of-practice laws, corporate structure regulations, and advertising standards is essential to avoid enforcement actions. This guide provides key legal insights to help medical spas operate safely and legally, balancing innovation with compliance.

Key Legal Considerations for Medical Spa Compliance

Medical spas face distinct regulatory requirements, especially when it comes to ownership, licensing, and patient safety. Below are practical tips to help your medical spa remain compliant and thrive in this competitive industry.

1. Understanding Scope of Practice for Medical Spa Treatments

The scope of practice for services like IV hydration and injectables varies by state, with strict regulations regarding who can administer certain treatments. Compliance with these rules is essential for safe, legal operations.

    • Licensed Medical Professionals: Most states require that medical procedures like injectables and IV hydration be performed or supervised by licensed medical professionals, such as physicians, nurse practitioners, or physician assistants. Check your state’s specific scope-of-practice laws to ensure compliance.
    • Delegation and Supervision: In states where delegation is allowed, ensure that appropriate supervision is provided and that staff are trained for each service offered. Some treatments may require direct physician oversight, especially when IV therapy or prescription-based injectables are involved.
    • Liability Considerations: Medical spas should carry liability insurance that covers treatments offered. Non-compliance with scope of practice can lead to disciplinary actions, fines, or potential malpractice claims.

Example: A medical spa in California faced penalties for allowing unlicensed staff to administer injectables without physician supervision. After adjusting their protocols to ensure licensed staff performed these services, the spa achieved compliance. See California-specific scope of practice rules.

Key Action: Verify that only licensed professionals perform medical treatments and that necessary supervision is in place.

2. Structuring Your Medical Spa with Professional Medical Corporations and MSOs

Structuring your medical spa within legal ownership models is essential to remain compliant. Professional Medical Corporations (PMCs) and Management Services Organizations (MSOs) offer models for operating legally while allowing non-physicians to invest in the business.

    • Professional Medical Corporations (PMCs): Many states, including California, mandate that only licensed medical professionals own medical corporations. In these states, a physician must own a majority stake in the PMC. See California’s specific rules, refer to the Moscone-Knox Act.
    • Management Services Organizations (MSOs): MSOs allow non-physicians to manage non-clinical aspects, including marketing, administration, and billing. This model is often used by med spas to separate the clinical and business sides of the practice.
    • Compliance with State Corporate Practice of Medicine (CPOM) Laws: States with CPOM laws prohibit non-licensed individuals or companies from owning or controlling medical practices. Ensure your spa’s ownership model aligns with your state’s CPOM rules.

Case Study: A California-based med spa operated as an MSO, with a physician-owned PMC delivering all medical services. This structure aligned with California’s CPOM laws, allowing the business to legally offer IV hydration and aesthetic treatments. See  a summary of CPOM laws.

Key Action: Structure your medical spa as a PMC and/or MSO based on state CPOM requirements.

3. Patient Safety Protocols and Standard Operating Procedures (SOPs)

To provide high-quality care, medical spas must implement SOPs that focus on patient safety and risk management, especially for invasive procedures.

    • Informed Consent: Patients should receive a clear informed consent form for each treatment, outlining potential risks and expected outcomes. Consent forms should be signed before any procedure, particularly for treatments like injectables or IV hydration.
    • Sterilization and Infection Control: All equipment should be sterilized according to healthcare standards, and infection control procedures should be followed meticulously. Failure to maintain a sterile environment can lead to health department inspections and penalties.
    • Emergency Preparedness: Staff should be trained in emergency response protocols, including recognizing and managing adverse reactions to treatments. Emergency equipment, such as oxygen tanks and epinephrine, should be readily available.

Example: A medical spa faced a client complaint due to an adverse reaction from an injectable treatment. By updating emergency protocols and enhancing staff training, the spa improved patient safety and maintained compliance. See patient safety standards.

Key Action: Develop SOPs that emphasize patient safety, infection control, and emergency preparedness.

4. Compliant Marketing and Advertising for Medical Spas

Marketing for medical spas must comply with FTC and state advertising standards to avoid misleading claims. Clear, accurate marketing promotes patient trust and reduces regulatory risk.

    • Truthful Advertising and Avoiding Guarantees: Avoid claims that guarantee results or suggest the ability to cure medical conditions. Focus on describing wellness benefits in general terms, such as “supports hydration” or “promotes wellness.” Visit  FTC advertising guidance.
    • Use of Testimonials and Social Media: Be cautious with testimonials and social media promotions. The FTC requires that all testimonials reflect typical outcomes, and influencers must disclose any material connections with the spa.
    • Disclaimers in Digital Marketing: Use disclaimers on websites and ads to clarify that your services are wellness-focused and do not replace medical treatment. Disclaimers help manage client expectations and protect the spa legally.

Case Study: A medical spa received an FTC warning for advertising guaranteed results. After revising its language and including disclaimers, the spa met compliance standards and minimized future regulatory risk. Visit FTC’s advertising rules.

Key Action: Ensure all marketing claims are accurate, substantiated, and include disclaimers to avoid FTC scrutiny.

Common Legal Risks and Penalties for Medical Spa Non-Compliance

Non-compliance with medical spa regulations can lead to severe penalties. Here’s a breakdown of common risks and potential consequences:

Example Penalty Breakdown for Medical Spa Non-Compliance

Violation Type Potential Consequences
Scope of Practice Violations Fines, license suspension, cease-and-desist orders
Misleading Marketing Claims FTC penalties, required advertising corrections
Inadequate Patient Safety Protocols Health department inspections, client complaints
CPOM Law Violations Regulatory penalties, restructuring requirements

For more guidance on operating a compliant medical spa, see the following resources:

Medical spas must comply with a range of legal requirements to offer safe, professional treatments. By structuring your business correctly, training staff, adhering to scope-of-practice rules, and marketing accurately, your spa can thrive while avoiding regulatory pitfalls. Contact the healthcare and FDA lawyers at Cohen Healthcare Law Group for strategic guidance on running a legally compliant medical spa.


Contact our healthcare law and FDA attorneys for legal advice relevant to your healthcare venture.

Categories: Healthcare

Related People

Related Services

  • Biography
  • Representative Matters
  • Blog Feed
  • Publications
  • News
  • Contact Michael

Firm Highlights

  • Blog Posts
    Powering the Future Maximizing Energy Storage Value with David Braun
    In this episode of the MSSIA Insight Podcast, host Matthew Karmel, Chair of Offit Kurman’s Environmental & Sustainability Practice, sits down with David Braun, Chief Commercial Officer at Intelligent Generation, to explore how distributed energy storage is creating new opportunities for businesses, developers, and the broader energy grid.With more than 35 years of experience in the energy and utility sector, David shares how battery storage can help commercial and industrial customers earn revenue, reduce energy costs, and improve power reliability. The conversation explores revenue stacking, including how batteries can generate value through wholesale energy markets, reduce capacity and transmission charges, store excess solar energy, and provide backup power during outages or disruptions.Matthew and David also discuss the evolving energy storage landscape across New Jersey, Pennsylvania, and Delaware, highlighting differences in state policies, utility programs, and opportunities for virtual power plants. David explains how industry collaboration through MSSIA can help advance effective energy policies and accelerate project development.Looking ahead, David shares his perspective on the future of distributed energy storage, the transition toward a more interconnected and resilient grid, and the importance of accurately modeling battery economics to demonstrate project value and support investment decisions. In this episode, you’ll learn about: How battery storage can help businesses earn revenue, save money, and protect operations. What revenue stacking means and how multiple battery applications create economic value. How rising capacity and transmission charges are influencing energy storage opportunities in PJM. The differences in energy storage policies and incentives across New Jersey, Pennsylvania, and Delaware. The role of virtual power plants in supporting grid reliability and managing energy demand. Why accurate financial modeling, customer load profiles, and utility rate structures are critical to evaluating battery projects. How MSSIA supports industry collaboration and policy advocacy across the Mid-Atlantic. Whether you're a solar or storage developer, investor, contractor, attorney, or clean energy professional, this episode offers practical insights into the economics, policy considerations, and emerging opportunities shaping the distributed energy storage market. About the MSSIA Insight Podcast Powered by Offit Kurman and presented in partnership with the Mid-Atlantic Solar & Storage Industries Association (MSSIA), the MSSIA Insight Podcast explores the legal, regulatory, and business developments shaping the solar and energy storage industries across New Jersey, Pennsylvania, and Delaware. Hosted by Matthew Karmel, the podcast features conversations with industry leaders and subject matter experts, delivering actionable insights to help clean energy professionals navigate an evolving industry. New episodes are released every other month.   Join our next policy committee call as a guest to see firsthand the impact we're driving: https://forms.gle/8WqmDvdJUKBh35Qw7
  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.
  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.
  • Podcasts
    The College Prep Most Parents Skip with Candace Dellacona and Kimberly Lau
    When the "Cornell 7" case made national headlines this fall, many parents found themselves asking a question they never expected to face: what actually happens when something goes wrong on campus? We spend so much time preparing our kids to get into college and succeed once they get there, but how often do we prepare them for what happens next if a report is made, by them or about them? In this episode of The Sandwich Generation Survival Guide, host Candace Dellacona is joined by her colleague Kimberly Lau, who represents both complainants and respondents in Title IX matters such as the case capturing the latest headlines. Together, they break down what Title IX is, who it protects, what happens when a college receives a report, and what students and parents should know before their child ever needs it. Kimberly explains why Title IX reaches far beyond athletics, what it generally means when a student is contacted by the campus Title IX office, and what a family should do first, whether their child is reporting something that happened to them, is the subject of a complaint, or simply got caught up in a situation they never expected. She also walks through how privacy rules affect what a school can share with parents, who can sit in on meetings, how investigations, hearings, and decisions typically unfold, and why preserving evidence and knowing your school's policies early can make all the difference. Whatever the outcome of the case making headlines, it has put a spotlight on how campus processes work, and on how much families often don't know until they're in the middle of one. If you are sending a freshman off to campus, welcoming a student home for the holidays, or simply want to be the kind of parent your child feels safe calling when things go wrong, this conversation offers clear, practical guidance you can use now. As Candace puts it, calling home right away is not a sign that your child has failed at being an adult. It is knowing where to turn. This episode is for general informational purposes only and is not legal advice. Every situation is different, so please consult an attorney about your specific circumstances. Learn more about Kimberly Lau and her practice at Offit Kurman: https://www.offitkurman.com/kimberly-lau Connect with Kimberly on LinkedIn: https://www.linkedin.com/in/kimberlylauesq/ Follow and subscribe to The Sandwich Generation Survival Guide wherever you listen to podcasts. New conversations are released on the first and third Tuesdays of every month. If this episode resonates with you, leave a five-star rating or review and share it with another sandwich generation caregiver!