Medical Spa Scope-of-Practice & Supervision Rules by State

Scope-of-practice law lives at the state level, typically in the Medical Practice Act, Nursing Practice Act, and state board rules. The FDA clears a drug or device nationally, but each state decides who can administer it. A neurotoxin like Botox or Dysport is a prescription drug; a filler like Restylane or Juvederm is a device. Both require a licensed prescriber (MD, DO, or in some states NP/PA) to order them. The question is whether a non-physician can inject under delegation. Some states define injection as the practice of medicine (requiring an MD/DO); others permit it under NP or PA license if supervised. State medical boards and nursing boards issue guidance—sometimes conflicting—and enforcement varies. A good-faith exam (GFE) requirement means a physician must evaluate the patient before injection, but "good faith" is often undefined: does it mean in-person, same-day, or can it be a chart review? These gaps create compliance risk. Before hiring or expanding, consult your state board and a healthcare attorney licensed in that state; generic national guidance will not protect you.

A handful of states permit nurse practitioners and physician assistants to inject injectables independently, without on-site physician supervision. These include California (under certain conditions), New York (NP with prescriptive authority), and a few others. In these jurisdictions, an NP or PA with prescriptive authority can evaluate, prescribe, and inject—provided they meet their own licensing and continuing-education requirements. However, "independent" does not mean unregulated: the injector must still follow FDA labeling, document informed consent, and maintain liability insurance. The advantage is operational flexibility and lower overhead (no required on-site MD). The risk is that state boards are increasingly scrutinizing non-physician injectables, and a bad outcome (nerve injury, vascular occlusion, allergic reaction) can trigger a board investigation and malpractice claim. Even in permissive states, many practices retain a medical director or consulting physician for liability protection and clinical oversight. Check your state's NP and PA practice acts directly; boards update guidance frequently, and a 2024 ruling may differ from 2022 precedent.

Most states require a physician (MD or DO) to supervise non-physician injectors. Supervision can be defined as on-site, immediate, or general oversight—the statute often does not specify. On-site supervision means the MD must be physically present in the facility during injections; this is the most restrictive and most common interpretation. Some states permit "general supervision," meaning the MD has established protocols and is available for consultation but need not be present. A few states allow "remote supervision" via telemedicine, though this is rare for injectables and carries higher liability risk. The good-faith exam (GFE) requirement typically mandates that the physician evaluate the patient before injection—in person or via chart review, depending on state law. Some states require the GFE to occur within a certain timeframe (e.g., 30 days before injection). If your state requires on-site supervision, you must employ or contract a physician; this adds $150k–$300k+ annually in salary, benefits, and malpractice insurance. If remote supervision is permitted, you may hire a medical director who oversees multiple locations or works part-time. Verify the exact language in your state's Medical Practice Act and board rules; "supervision" is often vague, and boards interpret it conservatively.

A good-faith exam (GFE) is a physician's in-person or documented evaluation of the patient before injection. The purpose is to ensure the patient is a suitable candidate, rule out contraindications, and establish informed consent. State laws vary widely: some require an in-person GFE by the supervising physician on the same day; others permit a chart review or telemedicine visit; a few do not define GFE at all. If your state requires an in-person GFE, a patient cannot be injected by a nurse unless a physician has examined them first—this slows throughput and increases cost. If your state permits remote GFE or chart review, you can streamline the process: a patient completes a health history, a physician reviews it and approves the injection, and the nurse executes it. Documentation is critical: the GFE note must be in the patient's chart, signed by the physician, and dated. If a complication occurs and the chart lacks a GFE note, you face liability and board discipline. Some practices use a standing protocol: the physician sees all new patients in person, then subsequent visits are nurse-only under general supervision. This balances efficiency and compliance. Check your state board's guidance on GFE; if none exists, ask your attorney to draft a defensible protocol based on the statute's language and board precedent.

Several states have no explicit statute governing who can inject injectables—the law is silent, and practices rely on board guidance or attorney interpretation. This creates both opportunity and risk: you may be able to hire a nurse injector without a physician on-site, but you have no statutory protection if a board later challenges your model. States like Florida, Texas, and Arizona have relatively permissive scope laws for NPs and PAs, but boards interpret them differently. Conversely, states like Massachusetts and New Jersey have stricter physician-supervision requirements. A trend: state boards are increasingly requiring medical director oversight even in permissive states, citing liability and patient safety. Some boards now require the medical director to be on-site or immediately available, narrowing the remote-supervision window. Additionally, boards are scrutinizing delegated prescribing: if a nurse injector prescribes injectables (rather than the physician prescribing and the nurse injecting), some boards view this as unauthorized practice. The safest model is physician prescribing + nurse injection under supervision. Finally, Corporate Practice of Medicine (CPOM) doctrine in some states prohibits non-physicians from owning or controlling a medical practice; this affects MSO structures and investor ownership. If you operate in multiple states, you must comply with the most restrictive rule or maintain separate legal entities. Consult a healthcare attorney in each state; do not assume your home-state model is portable.

Before hiring a non-physician injector or opening a new location, verify: (1) State statute: Read the Medical Practice Act and Nursing Practice Act; note any recent amendments. (2) Board guidance: Check your state medical and nursing boards' websites for advisory opinions, FAQs, or enforcement actions on injectables. (3) GFE requirement: Determine if your state requires an in-person, same-day, or remote good-faith exam; document your protocol in writing. (4) Supervision model: Confirm whether on-site, remote, or general supervision is permitted; if on-site is required, budget for physician staffing. (5) Prescribing authority: Verify whether your NP/PA can prescribe injectables independently or only under physician delegation. (6) Liability insurance: Ensure your malpractice policy covers your actual practice model; many carriers exclude non-physician injectors or require on-site physician presence. (7) Medical director contract: If required, draft a clear contract specifying the director's duties, availability, and compensation; avoid vague "oversight" language. (8) Staff credentialing: Confirm your injector's license, continuing education, and training; maintain records. (9) Patient consent: Use a state-compliant informed-consent form that addresses the injector's credentials and the supervising physician's role. (10) Attorney review: Have a healthcare attorney licensed in your state review your model before launch. This checklist takes 2–4 weeks and costs $2k–$5k in legal fees; it is far cheaper than a board investigation or malpractice claim.