Medical director oversight and scope of practice, state by state

Every med spa needs a medical director on paper, but the practices that get into trouble are the ones where that relationship exists only on paper. Regulators and plaintiff’s attorneys both look at the same question after an adverse outcome: was the medical director actually involved, or was the name on a wall license used to open the doors and then forgotten. Scope of practice rules and medical director duties vary by state, and owners who treat this as a one-time setup task rather than an ongoing relationship are the ones who end up in front of a medical board.

What a medical director is actually supposed to do

A real medical director relationship includes periodic chart review, availability for consultation on complications, written protocols for the services offered, and some documented process for delegating procedures to non-physician staff. States differ on how much in-person presence is required versus supervision that can happen remotely, and a handful require the medical director to be on-site for certain procedures at least part of the time. Do not assume the arrangement that worked for a colleague in another state applies to yours; verify current requirements with your state medical board or a healthcare attorney rather than copying a contract template found online.

Document the relationship the way you would document any other compliance function: signed protocols, dated chart reviews, and a clear record of who is authorized to perform what. If a complication happens and there is no record the medical director was ever consulted on protocols, the paper relationship stops protecting anyone.

Scope of practice differs by role and by state

Registered nurses, nurse practitioners, physician assistants, and aestheticians all have different scopes of practice, and those scopes are set at the state level, not by what a training course certifies someone to do. A weekend certification class can teach injection technique without conferring legal authority to inject in every state, and “certified” is not the same as “licensed to perform this procedure independently here.” Confirm, in writing, what each role on staff is legally permitted to do unsupervised versus under direct or indirect physician supervision before that person treats a client.

This matters most for laser and energy-device treatments, where several states classify certain procedures as requiring physician, NP, or PA-level involvement rather than delegating them to an aesthetician regardless of training. Cross-check your state’s rules against the device you are running; see our guide on buying laser, IPL, and RF devices for how manufacturer training and legal scope of practice are two separate questions.

Corporate practice of medicine rules shape ownership

A number of states restrict non-physicians from owning a medical practice or employing physicians directly, which is why many med spas use a management services organization structure that separates the clinical entity from the business entity. Getting this structure wrong is not a minor paperwork issue; it can expose the practice to fines, forced restructuring, or worse if a regulator determines the arrangement is a workaround rather than a compliant structure. This is genuinely a “hire a healthcare attorney” decision rather than a DIY one, and the cost of that consultation is small next to the cost of unwinding a non-compliant ownership structure after the fact.

Build a compliance calendar, not a compliance memory

Track license renewals, medical director agreement renewal dates, required continuing education, and state-mandated reporting on a calendar with reminders, not on the assumption that someone will remember. States also change their rules on injectables and devices more often than owners expect, so a periodic check-in with your healthcare attorney or state board, even when nothing seems to be changing, catches updates before they become violations.