Marquee Background
Marquee Background

Offit Kurman Blogs

Healthcare

Medical Spas and Aesthetic Clinics: Key Legal Insights for Safe and Compliant Operations

December 15, 2024

By Michael H. Cohen

The popularity of medical spas has soared, offering clients advanced treatments like IV hydration, injectables, and aesthetic enhancements. However, medical spas operate within a highly regulated landscape. Compliance with scope-of-practice laws, corporate structure regulations, and advertising standards is essential to avoid enforcement actions. This guide provides key legal insights to help medical spas operate safely and legally, balancing innovation with compliance.

Key Legal Considerations for Medical Spa Compliance

Medical spas face distinct regulatory requirements, especially when it comes to ownership, licensing, and patient safety. Below are practical tips to help your medical spa remain compliant and thrive in this competitive industry.

1. Understanding Scope of Practice for Medical Spa Treatments

The scope of practice for services like IV hydration and injectables varies by state, with strict regulations regarding who can administer certain treatments. Compliance with these rules is essential for safe, legal operations.

    • Licensed Medical Professionals: Most states require that medical procedures like injectables and IV hydration be performed or supervised by licensed medical professionals, such as physicians, nurse practitioners, or physician assistants. Check your state’s specific scope-of-practice laws to ensure compliance.
    • Delegation and Supervision: In states where delegation is allowed, ensure that appropriate supervision is provided and that staff are trained for each service offered. Some treatments may require direct physician oversight, especially when IV therapy or prescription-based injectables are involved.
    • Liability Considerations: Medical spas should carry liability insurance that covers treatments offered. Non-compliance with scope of practice can lead to disciplinary actions, fines, or potential malpractice claims.

Example: A medical spa in California faced penalties for allowing unlicensed staff to administer injectables without physician supervision. After adjusting their protocols to ensure licensed staff performed these services, the spa achieved compliance. See California-specific scope of practice rules.

Key Action: Verify that only licensed professionals perform medical treatments and that necessary supervision is in place.

2. Structuring Your Medical Spa with Professional Medical Corporations and MSOs

Structuring your medical spa within legal ownership models is essential to remain compliant. Professional Medical Corporations (PMCs) and Management Services Organizations (MSOs) offer models for operating legally while allowing non-physicians to invest in the business.

    • Professional Medical Corporations (PMCs): Many states, including California, mandate that only licensed medical professionals own medical corporations. In these states, a physician must own a majority stake in the PMC. See California’s specific rules, refer to the Moscone-Knox Act.
    • Management Services Organizations (MSOs): MSOs allow non-physicians to manage non-clinical aspects, including marketing, administration, and billing. This model is often used by med spas to separate the clinical and business sides of the practice.
    • Compliance with State Corporate Practice of Medicine (CPOM) Laws: States with CPOM laws prohibit non-licensed individuals or companies from owning or controlling medical practices. Ensure your spa’s ownership model aligns with your state’s CPOM rules.

Case Study: A California-based med spa operated as an MSO, with a physician-owned PMC delivering all medical services. This structure aligned with California’s CPOM laws, allowing the business to legally offer IV hydration and aesthetic treatments. See  a summary of CPOM laws.

Key Action: Structure your medical spa as a PMC and/or MSO based on state CPOM requirements.

3. Patient Safety Protocols and Standard Operating Procedures (SOPs)

To provide high-quality care, medical spas must implement SOPs that focus on patient safety and risk management, especially for invasive procedures.

    • Informed Consent: Patients should receive a clear informed consent form for each treatment, outlining potential risks and expected outcomes. Consent forms should be signed before any procedure, particularly for treatments like injectables or IV hydration.
    • Sterilization and Infection Control: All equipment should be sterilized according to healthcare standards, and infection control procedures should be followed meticulously. Failure to maintain a sterile environment can lead to health department inspections and penalties.
    • Emergency Preparedness: Staff should be trained in emergency response protocols, including recognizing and managing adverse reactions to treatments. Emergency equipment, such as oxygen tanks and epinephrine, should be readily available.

Example: A medical spa faced a client complaint due to an adverse reaction from an injectable treatment. By updating emergency protocols and enhancing staff training, the spa improved patient safety and maintained compliance. See patient safety standards.

Key Action: Develop SOPs that emphasize patient safety, infection control, and emergency preparedness.

4. Compliant Marketing and Advertising for Medical Spas

Marketing for medical spas must comply with FTC and state advertising standards to avoid misleading claims. Clear, accurate marketing promotes patient trust and reduces regulatory risk.

    • Truthful Advertising and Avoiding Guarantees: Avoid claims that guarantee results or suggest the ability to cure medical conditions. Focus on describing wellness benefits in general terms, such as “supports hydration” or “promotes wellness.” Visit  FTC advertising guidance.
    • Use of Testimonials and Social Media: Be cautious with testimonials and social media promotions. The FTC requires that all testimonials reflect typical outcomes, and influencers must disclose any material connections with the spa.
    • Disclaimers in Digital Marketing: Use disclaimers on websites and ads to clarify that your services are wellness-focused and do not replace medical treatment. Disclaimers help manage client expectations and protect the spa legally.

Case Study: A medical spa received an FTC warning for advertising guaranteed results. After revising its language and including disclaimers, the spa met compliance standards and minimized future regulatory risk. Visit FTC’s advertising rules.

Key Action: Ensure all marketing claims are accurate, substantiated, and include disclaimers to avoid FTC scrutiny.

Common Legal Risks and Penalties for Medical Spa Non-Compliance

Non-compliance with medical spa regulations can lead to severe penalties. Here’s a breakdown of common risks and potential consequences:

Example Penalty Breakdown for Medical Spa Non-Compliance

Violation Type Potential Consequences
Scope of Practice Violations Fines, license suspension, cease-and-desist orders
Misleading Marketing Claims FTC penalties, required advertising corrections
Inadequate Patient Safety Protocols Health department inspections, client complaints
CPOM Law Violations Regulatory penalties, restructuring requirements

For more guidance on operating a compliant medical spa, see the following resources:

Medical spas must comply with a range of legal requirements to offer safe, professional treatments. By structuring your business correctly, training staff, adhering to scope-of-practice rules, and marketing accurately, your spa can thrive while avoiding regulatory pitfalls.

Categories: Healthcare

Related People

Related Services

  • Posts
  • About
  • Subscribe

Firm Highlights

  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.
  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.