VIO Franchise Group and SafeLink Consulting co-author this clinician professional series.
What every nurse practitioner, physician assistant, registered nurse, and physician working in a medical spa needs to understand about the regulatory environment they operate in and what is personally at stake.
You chose aesthetics for the craft, the science, and the connection with patients whose outcomes you can see and measure. The compliance environment around you - supervision agreements, scope-of-practice rules, documentation requirements, OSHA obligations - may not have been part of that decision. It is part of your professional reality anyway. And right now, it is changing. |
This is not a compliance lecture. It is a direct, peer-level conversation about what the current regulatory and clinical evidence shows and what it means for practitioners working inside this industry. Specifically: what you can be held responsible for, what protects you when things go wrong, and what is currently not protecting many clinicians working in med spa settings.
|
FREE RESOURCE This article pairs with the Med Spa Clinician Compliance Checklist - a working reference covering your own license standing and what to demand from any practice environment before you start. |
Two peer-reviewed studies published in Dermatologic Surgery by the American Society for Dermatologic Surgery (2024, 2025) surveyed medical spas nationally. Their findings are the clearest picture available of what patients are actually walking into.
73% |
78.6% |
50 - 81% |
61-100% |
| Of invasive med spa procedures performed by nonphysicians nationally | Of medical directors not board-certified in dermatology or plastics | Of supervising physicians not on-site during invasive procedures | Of cosmetic complications seen by ASDS members were attributable to medical spas |
These numbers from two peer-reviewed studies in Dermatologic Surgery (ASDS, 2024–2025) describe the structural conditions under which many medspa clinicians are currently practicing. They do not mean that you are practicing unsafely. They do mean that the infrastructure around you - supervision, documentation, complication protocols - may not protect you if something goes wrong.
Before performing any procedure in a med spa setting, the fundamental question is not whether you are clinically competent. It is whether you are legally authorized to perform it, in the state where you are practicing, under the supervision arrangement actually in place.
A registered nurse license, nurse practitioner license, or physician assistant license each authorizes a specific scope of practice that is defined differently in every state. In some states, nurse practitioners have full practice authority for a wide range of aesthetic procedures. In others, they must operate under collaborative agreements or direct supervision. What is permissible in your current state may constitute unlicensed practice in the next one.
One of the most common questions in this space is whether a nurse practitioner can perform Botox, fillers, or laser treatments without a physician on-site. There's no single answer - it depends entirely on your state's scope-of-practice rules and the actual supervision agreement in place, not on what the job posting or practice manager tells you.
Scope-of-practice questions can be surprisingly narrow. In many states, specific procedures - certain laser treatments, ablative resurfacing, some injectables - require credentials or supervision levels that differ from your general practice authority. The question is not “can an NP do this?” but “can this NP do this, in this state, under this supervision arrangement, for this specific procedure?”
If you are delegating procedures to an esthetician, medical assistant, or laser technician, you may be personally liable for the outcome of that delegation. Delegation is legal only when the procedure is within the recipient’s scope, the required supervision is actually provided, and the delegating clinician has documented oversight. If the practice allows procedures outside these parameters, the legal exposure follows the clinical chain - which often ends with you.
! |
The Nominal Medical Director Problem: A physician listed in paperwork but absent from daily practice is not supervision — it is a liability risk wearing the appearance of one. State boards have been increasingly willing to cite both the supervising physician and the supervised clinician when adverse events reveal the supervision arrangement was fictional. Your name is on the chart. Your license is on the line. |
The ASDS research found that 50–81% of supervising physicians were not on-site during invasive procedures. Nearly 30% of medical directors did not perform any procedures themselves. These are not statistics about negligent outliers - they describe the norm in a substantial portion of the industry.
If you are practicing under a supervision arrangement, you should know: the specific terms of the supervising physician’s agreement; the method of supervision; the process for complication notification; and whether that arrangement meets your state’s legal requirements - not the practice owner’s interpretation of them.
Med spa medical director requirements vary widely by state: some boards require the medical director to be physically present for certain invasive procedures, others permit off-site supervision with a defined response time. So if you're asking yourself, "is my med spa supervision agreement legal," your state board's rules are the only source that can answer it - not your employer's assurance that everything is "covered".
LICENSE PROTECTION CHECKLISTBefore practicing in any medical spa setting, you should be able to verify five things: your state’s scope-of-practice and supervision requirements, the terms of your written supervision agreement, how to reach your supervising physician if a complication occurs, exactly which procedures you’re authorized to perform at this location, and your documented competency for each one. |
Clinical documentation in a med spa carries the same weight as in any other medical context. When a complication occurs, when a board complaint is filed, when a malpractice claim is brought - the chart is the foundation of every defense. For every procedure: a complete intake, a procedure note, a consent process note. If a complication occurs: a contemporaneous note describing the event, your clinical assessment, and the response - including notification of the supervising physician.
The research finding that only 46% of med spas notify a medical director of complications is not just a regulatory failure. It is a documentation failure. If a complication is not documented and the supervising physician is not notified, the clinical and legal exposure falls entirely on the clinician who performed the procedure.
OSHA’s Bloodborne Pathogens standard applies to your work regardless of whether your employer has implemented a compliant program. If you perform procedures involving potential exposure to blood or other potentially infectious materials - and in a med spa that includes micro-needling, PRP, injectables, and many laser procedures - you are working under this standard. You should have received Hepatitis B vaccination or documented declination. You should have been trained on the Exposure Control Plan and know where it is.
As a licensed clinician, you have independent HIPAA obligations that exist alongside your employer’s. Patient health information created in the course of your clinical care, including before-and-after photographs, is protected health information. Using a personal phone to photograph patients, sharing images through unsecured messaging platforms, or posting content including identifiable patient information without valid authorization creates personal liability. OCR is actively increasing enforcement attention in this sector.
|
CLINICAL EVIDENCE · JAMA DERMATOLOGY “Research published in JAMA Dermatology (Jalian et al., 2014) found that laser procedures performed by nonphysician operators were associated with significantly increased risk of litigation compared with physician-performed procedures. The most common causes of legal action were burns, scarring, and failure to obtain adequate informed consent.” — Jalian HR, Jalian CA, Avram MM. JAMA Dermatol. 2014;150:407–411. |
When a complication produces a malpractice claim or board complaint, the investigation follows the clinical chain. If you performed the procedure, documented it, and the supervision arrangement was inadequate, the exposure follows you. “I worked for a practice that didn’t have the right systems” has limited value as a defense once the board is asking questions.
|
Compliance is not something that happens around your clinical work. It is part of your clinical work. Your documentation, your supervision, your scope-of-practice review - these are not administrative burdens. They are the infrastructure of defensible care. - Matt Rahman, CISSP, CHPSE · SafeLink Consulting Inc. |
WHAT TO DEMAND FROM YOUR PRACTICEA compliant med spa should be able to provide: a written supervision agreement you’ve personally reviewed, a current scope-of-practice matrix, a documented Exposure Control Plan, a complication response protocol, HIPAA and photography/social media training, written infection control protocols, competency verification records, and a culture that welcomes compliance questions. → Download the full Checklist here - including what to ask for and what a compliant answer looks like |
If your current practice environment cannot provide these, that is worth taking seriously - not because the risk of something going wrong is necessarily high, but because when something does go wrong, the absence of these elements is what turns a clinical event into a career event.
SafeLink and VIO work with med spa operators to build the compliance infrastructure that makes these questions easy to answer.
VIO Franchise Group | info@viomedspa.com
SafeLink Consulting Inc. | info@safelinkconsulting.com | Learn about medical spa compliance services
SOURCES & REFERENCES
1. Almukhtar RM et al. Supervision Unveiled: Navigating the Supervision Landscape in Medical Spas. Dermatol Surg. 2024;50(10):954–957.
2. Second national medspa supervision study. Dermatol Surg. 2025. (ASDS) [full citation on file].
3. Jalian HR, Jalian CA, Avram MM. Increased risk of litigation: laser surgery by nonphysician operators. JAMA Dermatol. 2014;150:407–411.
4. Wang JV et al. Experiences with medical spas and associated complications. Dermatol Surg. 2020;46:1543–1548.
5. Rossi AM et al. Nonphysician practice of cosmetic dermatology. Dermatol Surg. 2019;45:588–597.
6. NYC Council. Joint Investigation into Growing Industry of Medical Spas. council.nyc.gov. Dec. 11, 2025.
7. Gibson JF et al. Medical oversight and scope of practice of medical spas. Dermatol Surg. 2019;45:581–587.
Learn more about Medical Spa Compliance: Under the Microscope.
SafeLink Consulting provides site assessments, written program development, staff training, and ongoing managed compliance for med spas nationwide. Discover more about Medical Spa Compliance.