Marquee Background
Marquee Background

Offit Kurman Blogs

Healthcare

MedSpa: Physician Supervision of RNs—Do You Need It?

December 8, 2017

By Michael H. Cohen

There can be a lot of confusion in the industry—and medical spa treatment by RNs under physician supervision is an enforcement hot bottom.

How Much Treatment Can RNs Do in a Medical Spa?

While every state is different, we’ll start here with California.

The most helpful resources are The Medical Board of California (MBC), FAQs – Cosmetic Treatments, and MBC, The Bottom Line: The Business of Medicine—Medical Spas.

In Cosmetic Treatments, Question 1 says: “Physicians may use lasers or intense pulse light devices. In addition, physician assistants and registered nurses (not licensed vocational nurses) may perform these treatments under a physician’s supervision. Unlicensed medical assistants, licensed vocational nurses, cosmetologists, electrologists, or estheticians may not legally perform these treatments under any circumstance, nor may registered nurses or physician assistants perform them independently, without supervision.”

Question 2 says: “Physicians may inject Botox, or they may direct registered nurses, licensed vocational nurses, or physician assistants to perform the injection under their supervision. No unlicensed persons, such as medical assistants, may inject Botox.”

As to fillers, MBC states in Bottom Line that “the use of prescriptive medical devices and injections for cosmetic reasons is the practice of medicine…. There is a tendency for the public, and some in the profession, to view laser treatments, Botox and cosmetic filler injections as cosmetic rather than medical treatments. The use of prescriptive drugs and devices, however, is the practice of medicine, and the same laws and regulations apply to these types of treatments as those driven by medical necessity. There are no separate laws governing these procedures, and physicians will be held to the same standard as they are for their routine medical practices.”

Question 6 of Cosmetic Treatments addresses microdermabrasion—if “it’s a medical treatment that penetrates to deeper levels of the epidermis,” then it “must be performed by a physician, or by a registered nurse or physician assistant under supervision.”

Physician Supervision and Standardized Procedures for Nurses

With respect to supervision, in Bottom Line MBC states: “While current law allows the delegation of laser treatments and injections to the above mentioned licensees, the law requires supervision by the physician. In the current environment, many have operated under the opinion that since the nursing regulations are broadly written, nurses may perform anything anywhere with essentially no supervision as long as there are “standardized procedures” or “delegation of services” documents on file.

MBC also states: “Standardized procedures for nurses allow nurses to perform procedures while the physician is not on-site; however, they do not absolve physicians of their supervision responsibilities. Nor does the law allow nurses to set up a practice in a salon, hire a physician supervisor, or perform medical procedures independently. The law does not contain a legal definition of supervision, and therefore, absent a legal definition, the plain English definition applies. “Supervision” is defined as the act of supervising, which is to oversee, to direct, to have charge, to inspect, to provide guidance and evaluation.”

MBC provides the following example: “As an example, the regulations for “standardized procedures guidelines” require physicians to be responsible for ensuring the experience, training, and education requirements for performance of the delegated function – and this must be documented. The regulations require that a method of initial and continuing evaluation of the nurses’ competence be established.” (emphasis added)

Regarding your physical presence as the supervising physician, MBC in Bottom Line states: “When functioning under “standardized procedures,” physicians need not be present in the facility when the procedures are being performed. The facility, however, must be a medical setting. Regulations require that the location be an “organized healthcare system,” which is not a salon, spa, or other facility not under the control of the physician.” (emphasis added)

Thus, if you are in a setting other than your own office, you should rent at fair market value and have exclusive control of the medical space during the time you are using it.

As well: “The guidelines further require the standardized procedures to describe the circumstances under which the registered nurse is to immediately communicate with a patient’s physician concerning the patient’s condition. While there is no actual mileage limit relating to supervision, this requirement certainly means that the physician must be immediately reachable and able to provide guidance in the event of an emergency or the need for a higher level of care that must be provided by the physician. Physicians must be within a geographical distance that enables them to effectively provide supervision and support when needed or upon request.”

16 CCR 1364.50 states: “Whenever an elective cosmetic procedure involving the use of a laser or intense pulse light device is performed by a licensed health care provider acting within the scope of his or her license, a physician with relevant training and expertise shall be immediately available to the provider. For the purposes of this section, “immediately available” means contactable by electronic or telephonic means without delay, interruptible, and able to furnish appropriate assistance and direction throughout the performance of the procedure and to inform the patient of provisions for post procedure care. Such provisions shall be contained in the licensed health care provider’s standardized procedures or protocols.” (emphasis added)

See also Board of Registered Nursing, Standardized Procedure Guidelines.

The Good Faith Exam

What is a good enough for a good faith exam in a medical spa or similar healthcare venture, and when do you need it?

MBC states in Bottom Line: “Further, it is the responsibility of the physician to examine the patient before delegating a task to a registered nurse.” However, a nurse practitioner (NP) “may be delegated the task of providing the appropriate prior examination and ordering the drug or prescriptive device for the patient, if acting under standardized procedures.”

MBC clarifies: “An appropriate prior examination is required where prescriptive drugs and devices will be used, and this examination may not be delegated to registered nurses. After performing the examination, the supervising physician may delegate a procedure that utilizes a prescriptive device to a nurse working under standardized procedures.”

Videoconference Exam

Regarding the “appropriate prior examination,” California law generally holds physicians to the same standard of care whether the patient encounter is in-person or via telehealth (e.g., videoconferencing), and requires informed consent, documentation in the medical record, compliance with privacy and security laws, and other adherence to law. (See Bus. & Prof. Code 2290.5; CMB, Practicing Medicine Through Telehealth Technology).

However, CMB indicates that an in-person examinations for prescribing will “not only enhance the opportunity to confirm if a patient needs the identified medication or to rule out other medical conditions, but ensures the patient is advised of alternative treatment options and is aware of potential side effects.”

(See CMB, Internet Prescribing – Information for Physicians; FAQs – Internet Prescribing and Practicing; Internet Prescribing—Information for Consumers). Although Business & Professions Code section 2242.1 only speaks to “an appropriate prior examination and medical indication therefor,” CMB has made its policy clear that the exam should be in-person, and “continues to investigate cases” that raise enforcement scrutiny. (Note 2242.1(a) states: “(a) No person or entity may prescribe, dispense, or furnish, or cause to be prescribed, dispensed, or furnished, dangerous drugs or dangerous devices, as defined in Section 4022, on the Internet for delivery to any person in this state, without an appropriate prior examination and medical indication, except as authorized by Section 2242.” 2242(b) has a limited 72-hour supply exception).

On its webpage describing telemedicine, the California Medical Board (CMB) appears to default to the standard of care as the test as to whether telemedicine is permissible; however, on its webpage concerning Internet prescribing, CMB states that the law prohibits prescribing, without an “appropriate prior examination,” notwithstanding that standard of care may be satisfied or that it might be considered within the range of acceptable professional practice by peers not to have an in person exam (for example, in some tele-dermatology).  On this page, CMB cites California Business & Professions Code, Section 2242.

Notably, as of October 11, 2019, the California legislature amended and liberalized Section 2242 via AB 1264, to provide that an appropriate prior examination does not require a synchronous interaction between the patient and the licensee and can be achieved through the use of telehealth, as specified, provided that the licensee complies with the appropriate standard of care.  Thus, 2242 now provides:

“Prescribing, dispensing, or furnishing dangerous drugs as defined in Section 4022 without an appropriate prior examination and a medical indication, constitutes unprofessional conduct. An appropriate prior examination does not require a synchronous interaction between the patient and the licensee and can be achieved through the use of telehealth, including, but not limited to, a self-screening tool or a questionnaire, provided that the licensee complies with the appropriate standard of care.”

Cal. Bus. And Professions Code § 2242.

Yet even so, there are also standard of care concerns, as noted in a 2019 disciplinary action by the Medical Board of California entitled, In re Richard J. Holmes, M.D

Operating Your Medi-Spa in a Legally Compliant Way

Healthcare compliance is complex and there are multiple elements to a good compliance programs.

Also, there are different kinds of healthcare ventures that require special attention to structure. For example, there are compliance similarities and differences between and among healthcare ventures such as:

  • Medical spas
  • Telemedicine, telepsychology, teledermatology, telehealth, telepsychiatry
  • Mobile health and fitness apps or software with a health advice component
  • Other online and mobile / virtual healthcare businesses

Here are some basics for the brick-and-mortar medical spa, at least in California:

  1. Procedures: An aesthetic RN can inject Botox or fillers, or perform laser treatment or medical microdermabrasion under your medical supervision.
  2. Standardized Procedures: You should have standardized procedures in place for the RNs. These standardized procedures should comply with all the requirements of California law.We noted above MBC’s example of “ensuring the experience, training, and education requirements for the performance of the delegated function”—and documenting the same, as well as evaluating the RN’s competence on an ongoing basis.
  3. Supervision: Be sure the supervision is real and not token. As noted, MBC wants you “to oversee, to direct, to have charge, to inspect, to provide guidance and evaluation.”MBC also wants you, the physician, to be “knowledgeable and competent in the procedure being delegated” and “capable of performing it.” This does not require board certification to perform the cosmetic procedure, but it does require “sufficient knowledge and training in the procedures being performed.”Further, you must be “immediately reachable to provide guidance in the event of an emergency or the need for a higher level of care that must be provided by the physician,” and within a “geographical distance” that allows you to provide appropriate supervision and support upon request. If you are using an elective cosmetic procedure involving the use of a laser or intense pulse light, you must be “immediately available” to the provider—which means “contactable by electronic or telephonic means without delay, interruptible, and able to furnish appropriate assistance and direction throughout the performance of the procedure and to inform the patient of provisions for post procedure care.” Further, you must place such provisions in the licensed health care provider’s standardized procedures or protocols.Your name (or that of your professional medical corporation), not the RN’s, must show in advertisements about the treatments.
  4. No “medical director”: You should not be “medical director” for the medi-spa (see Q4 of Cosmetic Treatments) but should operate under your medical practice or professional medical corporation.
  5. Control of medical space: As noted above, if you are in a setting other than your own office, you should rent at fair market value and have exclusive control of the medical space during the time you are using it.
  6. Appropriate prior examination: An RN may not be delegated the appropriate prior examination. A nurse practitioner (NP) may be delegated the task of providing the appropriate prior examination and ordering the drug or prescriptive device for the patient, if acting under standardized procedures.Videoconference: Regarding the “appropriate prior examination,” California law generally holds physicians to the same standard of care whether the patient encounter is in-person or via telehealth. We recommend that physician see the patient in-person prior to prescribing. Among other things, CMB will want to be sure that there was a valid medical indication for the prescription, and the in-person exam can potentially bolster the record of such. We can discuss the nuances with you if you would like.
  7. Some Additional compliance points—record, documentation, standard of care, informed consent: As we discussed, the patients belong to you and are your responsibility as the physician. You are held to the standard of care and have to follow all the usual legal and regulatory requirements such as, for example, a robust informed consent process and documentation (see CMB, Medical Spas—What You Need to Know).

Contact our healthcare law and FDA attorneys for legal advice relevant to your healthcare venture.

Categories: Healthcare

Related People

Related Services

  • Posts
  • About
  • Subscribe

Firm Highlights

  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.
  • Blog Posts
    Powering the Future Maximizing Energy Storage Value with David Braun
    In this episode of the MSSIA Insight Podcast, host Matthew Karmel, Chair of Offit Kurman’s Environmental & Sustainability Practice, sits down with David Braun, Chief Commercial Officer at Intelligent Generation, to explore how distributed energy storage is creating new opportunities for businesses, developers, and the broader energy grid.With more than 35 years of experience in the energy and utility sector, David shares how battery storage can help commercial and industrial customers earn revenue, reduce energy costs, and improve power reliability. The conversation explores revenue stacking, including how batteries can generate value through wholesale energy markets, reduce capacity and transmission charges, store excess solar energy, and provide backup power during outages or disruptions.Matthew and David also discuss the evolving energy storage landscape across New Jersey, Pennsylvania, and Delaware, highlighting differences in state policies, utility programs, and opportunities for virtual power plants. David explains how industry collaboration through MSSIA can help advance effective energy policies and accelerate project development.Looking ahead, David shares his perspective on the future of distributed energy storage, the transition toward a more interconnected and resilient grid, and the importance of accurately modeling battery economics to demonstrate project value and support investment decisions. In this episode, you’ll learn about: How battery storage can help businesses earn revenue, save money, and protect operations. What revenue stacking means and how multiple battery applications create economic value. How rising capacity and transmission charges are influencing energy storage opportunities in PJM. The differences in energy storage policies and incentives across New Jersey, Pennsylvania, and Delaware. The role of virtual power plants in supporting grid reliability and managing energy demand. Why accurate financial modeling, customer load profiles, and utility rate structures are critical to evaluating battery projects. How MSSIA supports industry collaboration and policy advocacy across the Mid-Atlantic. Whether you're a solar or storage developer, investor, contractor, attorney, or clean energy professional, this episode offers practical insights into the economics, policy considerations, and emerging opportunities shaping the distributed energy storage market. About the MSSIA Insight Podcast Powered by Offit Kurman and presented in partnership with the Mid-Atlantic Solar & Storage Industries Association (MSSIA), the MSSIA Insight Podcast explores the legal, regulatory, and business developments shaping the solar and energy storage industries across New Jersey, Pennsylvania, and Delaware. Hosted by Matthew Karmel, the podcast features conversations with industry leaders and subject matter experts, delivering actionable insights to help clean energy professionals navigate an evolving industry. New episodes are released every other month.   Join our next policy committee call as a guest to see firsthand the impact we're driving: https://forms.gle/8WqmDvdJUKBh35Qw7
  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.
  • Podcasts
    The College Prep Most Parents Skip with Candace Dellacona and Kimberly Lau
    When the "Cornell 7" case made national headlines this fall, many parents found themselves asking a question they never expected to face: what actually happens when something goes wrong on campus? We spend so much time preparing our kids to get into college and succeed once they get there, but how often do we prepare them for what happens next if a report is made, by them or about them? In this episode of The Sandwich Generation Survival Guide, host Candace Dellacona is joined by her colleague Kimberly Lau, who represents both complainants and respondents in Title IX matters such as the case capturing the latest headlines. Together, they break down what Title IX is, who it protects, what happens when a college receives a report, and what students and parents should know before their child ever needs it. Kimberly explains why Title IX reaches far beyond athletics, what it generally means when a student is contacted by the campus Title IX office, and what a family should do first, whether their child is reporting something that happened to them, is the subject of a complaint, or simply got caught up in a situation they never expected. She also walks through how privacy rules affect what a school can share with parents, who can sit in on meetings, how investigations, hearings, and decisions typically unfold, and why preserving evidence and knowing your school's policies early can make all the difference. Whatever the outcome of the case making headlines, it has put a spotlight on how campus processes work, and on how much families often don't know until they're in the middle of one. If you are sending a freshman off to campus, welcoming a student home for the holidays, or simply want to be the kind of parent your child feels safe calling when things go wrong, this conversation offers clear, practical guidance you can use now. As Candace puts it, calling home right away is not a sign that your child has failed at being an adult. It is knowing where to turn. This episode is for general informational purposes only and is not legal advice. Every situation is different, so please consult an attorney about your specific circumstances. Learn more about Kimberly Lau and her practice at Offit Kurman: https://www.offitkurman.com/kimberly-lau Connect with Kimberly on LinkedIn: https://www.linkedin.com/in/kimberlylauesq/ Follow and subscribe to The Sandwich Generation Survival Guide wherever you listen to podcasts. New conversations are released on the first and third Tuesdays of every month. If this episode resonates with you, leave a five-star rating or review and share it with another sandwich generation caregiver!