California Med Spa SOPs: What Your Manual Must Include

California is the state where a med spa manual is most likely to be structurally void before anyone reads a clinical policy. Most states let you begin with protocols. Here the first question is who owns the medicine — and if the answer is a lay-owned company, every procedure behind it belongs to a practice that should not be operating in that form.

What follows is the California documentation layer only: which paper must exist, who signs it, what it must say, and which widely repeated obligations have no California rule behind them. The craft underneath sits in our complete guide to med spa standard operating procedures and our medical spa policies and procedures manual guide, and is not repeated here.

Does California Require a Med Spa to Have Written SOPs?

Not under that name, and not as a manual — but California prescribes the contents of one instrument in more detail than most states prescribe anything. The duty attaches to the act and the person performing it, never to the building.

Why no California rule names a med spa SOP manual

A written-policy mandate needs a regulated thing to attach to: a licensed facility, a registered clinic, a defined provider category. California has none for medical spas — the Medical Board licenses physicians, the nursing board nurses, the cosmetology board estheticians, and nobody licenses the spa. A manual organised around "what the facility must do" is built on a category California does not recognise.

The registration claim to delete from your manual today

Strike this first if it appears in your binder: there is no requirement to register a med spa with the Medical Board of California. No licence, no permit, no facility certificate, no state registry. We published and then removed exactly this claim ourselves, which is why it gets a heading rather than a footnote. If a consultant or template tells you to file one, the instruction is fabricated, and the rest of that document deserves the same suspicion.

The instrument that does the work: 16 CCR §1474

The closest thing California has to a mandated procedure document is the standardized procedure. Under Business and Professions Code §2725 a registered nurse may perform functions otherwise requiring a physician's order when acting under one, and 16 CCR §1474 prescribes its contents. In a typical California med spa the RN is the injector and the laser operator, so the eleven elements below are the authority under which most of your revenue is produced.

The nuance an honest California manual writes down

One qualification belongs in the document rather than a consultant's head. The rules speak of development "collaboratively by nursing, medicine and administration in the organized health care system" — language written with hospitals in mind, and neither board has settled how a four-person practice satisfies it, as we flag in our California Botox injection authority guide. Do not treat the ambiguity as an exit: build to all eleven elements, record who participated, and file a written opinion from California healthcare counsel.

What Must a California Med Spa Document About Delegation and Supervision?

Verdict: more than most states, and the content is prescribed rather than left to you. California does not ask whether a delegation happened in spirit. It asks which instrument authorised this person to perform this function on this patient, and whether it says what the regulation requires.

The statutory floor: BPC §2052

Business and Professions Code §2052 makes practising medicine without a licence a public offence, and it is the provision that pulls an aesthetic menu into medicine: injecting a neuromodulator or filler, firing a laser on living tissue, prescribing a GLP-1 and running an IV are all medicine here. It also reaches whoever enables the act — aiding and abetting carries the same exposure, up to a $10,000 fine and imprisonment, which is why a supervising physician's licence is at stake whenever staffing drifts out of scope.

The eleven elements every standardized procedure must carry

Audit your existing procedures against this list before writing anything new. Under 16 CCR §1474, each standardized procedure shall:

1. Be in writing, dated and signed by the organized health care system personnel authorized to approve it
2. Specify which standardized procedure functions registered nurses may perform, and under what circumstances
3. State any specific requirements to be followed by registered nurses in performing particular functions
4. Specify any experience, training or education requirements for performance of those functions
5. Establish a method for initial and continuing evaluation of the competence of the nurses authorized to perform them
6. Provide for a method of maintaining a written record of those nurses authorized to perform the functions
7. Specify the scope of supervision required
8. Set forth any specialized circumstances under which the nurse is to immediately communicate with the patient's physician
9. State the limitations on settings, if any, for performance of the functions
10. Specify patient record keeping requirements
11. Provide for a method of periodic review

Four fail most often, and together: nobody wrote down what training qualifies a nurse to inject (4), how competence is re-evaluated (5), who is on the authorised roster (6), or when the document is next reviewed (11). Element 7 matters separately: California has fixed no supervision standard for RN cosmetic practice, so your procedure states the scope and you are held to it.

The patient-specific order, and the end of the generic standing order

A standardized procedure authorises a category of function, not the treatment of a particular person. Before an RN treats, a prescriber must have examined that patient under BPC §2242 and issued an order for them. Two consequences: the chart template needs fields for the order and the ordering prescriber, and the procedures must say the RN may carry out the order but never decide the patient is a candidate.

Nurse practitioners: standardized procedures, or 103/104 certification

An NP outside the AB 890 categories furnishes drugs and devices under standardized procedures developed with the supervising physician, under BPC §2836.1, which ties what may be furnished to educational preparation or an established competency the physician should have assessed. An NP certified under §2837.103 may practise without standardized procedures inside a group setting including a physician; a §2837.104 NP, available since January 1, 2026, may do so outside one. Our AB 890 nurse practitioner ownership guide works the thresholds. A PA, separately, works under a practice agreement under BPC §3502 and following, with 16 CCR §1399.545 placing responsibility for the PA's medical services on the supervising physician.

The delegation matrix your California manual should carry

The productive question is not "may an RN do this," but what authorises this person, and what the record must show afterwards.

What Must Be Documented About the Medical Director Relationship in California?

Verdict: begin by documenting something else, because California recognises no medical director role — and hiring one into a lay-owned business is not a weak arrangement here, it is an unlawful one. This is where a California manual diverges hardest from a permissive-state template.

What strict corporate practice does to the document list

BPC §2400 denies corporations and other artificial entities any professional rights, privileges or powers — the statutory basis of California's corporate-practice-of-medicine bar. Read with §2052, the entity delivering medical services must be physician-owned and physician-controlled. The Medical Board's own med spa guidance says it plainly: a lay-owned business hiring a physician as "medical director" is prohibited, and the physician who accepts is aiding and abetting unlicensed practice.

The structure file, and what belongs in it

Open the manual with a structure file, reviewed whenever the cap table or the menu moves. It holds the formation documents for the professional medical corporation, with shares majority-held by licensed physicians and minority interests limited to the other licensed health professionals Moscone-Knox permits at Corporations Code §13401.5; the management services agreement, where a non-clinical owner reaches the business through an MSO; a statement of which decisions are clinical and reserved to licensees; and a dated determination from counsel. In a state with no facility licence, this file is your licence. Our guide to who can own a med spa in California walks the ownership-versus-authority line.

What SB 351 added on January 1, 2026

SB 351 expanded the corporate-practice rules: an MSO may not make billing, coding or staffing decisions turning on clinical judgment, and certain non-compete and non-disparagement terms are barred. An agreement predating 2026 needs a dated, filed review. Our roundup of California med spa regulatory changes for 2026 covers it.

The oversight evidence file a nominal physician cannot produce

Structure gets you to the starting line; evidence keeps you there. No California rule prescribes a visit schedule, a chart-review percentage or a minimum engagement, so the arrangement must be written and then evidenced: name and licence number, procedures covered, the reachability commitment, cover arrangements, review obligations with their interval, and compensation at fair market value — never a percentage of revenue, which is fee-splitting. Our California medical director requirements guide and the companion medical director agreement guide work the clauses one by one.

The 104 NP variant, and how the manual changes

Where a §2837.104 nurse practitioner owns the practice, the supervising-physician chapter and the physician compensation clauses fall away. What replaces them is a certification file: the BRN certification evidence, the population focus of the national certification, and a scope statement mapping each menu item against it. Nothing else relaxes — RNs still need eleven-element procedures, and the examination is still a prescriber act.

What Patient-Record and Consent Documentation Does California Require, and for How Long Must Records Be Retained?

Verdict: work from Business and Professions Code §2266, which makes failure to maintain adequate and accurate records for at least seven years after the last date of service unprofessional conduct — then read the next paragraph before printing that number.

The retention answer, and exactly how far we could verify it

The seven-year figure is not a guess and not a national default imported into a California page. It traces to BPC §2266, whose long-standing text made inadequate record-keeping unprofessional conduct and which searches indicate was amended by SB 815 (Stats. 2023, Ch. 294), effective January 1, 2024, to add the clock. Now the honest limit: the network this page was researched on blocks every California .gov domain, so we could not open leginfo and read the current section text ourselves. Treat seven years as the working figure, confirm §2266 against the primary source before it enters a policy, and take counsel's view where the patient was a minor at last service. Note what the seven years is not: Health and Safety Code §123145 binds licensed clinics and health facilities, and a physician-office med spa is generally not one — citing it is the commonest way a California retention policy ends up authoritative-sounding and wrong.

What the California chart has to contain

Build the template from what a California inquiry asks for. Identity and history. The good-faith examination, with the examiner named and their credential recorded. The medical indication and plan. The patient-specific order and who issued it. Signed consent. A note naming who performed the procedure and under which instrument. Product, lot number and expiry. Follow-up and any adverse event. Two fields carry disproportionate weight — examiner and order — and aesthetic software often has a place for neither.

The good-faith examination, and documenting it by telehealth

BPC §2242 makes prescribing or furnishing a dangerous drug without an appropriate prior examination and a medical indication unprofessional conduct, and every neuromodulator, filler, GLP-1 and IV therapy is a dangerous drug. Who may perform it is a closed list: a physician, a PA under a practice agreement, or an NP under standardized procedures or 103/104 certification. An RN may gather history and prepare the chart, but not examine or order. Telehealth is permitted where the standard of care is met, and BPC §2290.5 then requires the provider to inform the patient and obtain consent, documented in the record — so a telehealth exam produces two entries, not one.

Consent: no disclosure panel, which changes the analysis

California publishes no statutory list of procedures requiring prescribed written disclosure; the governing standard is the common-law reasonable-patient rule from California case law. Practically, no California rule dictates your consent form, so every choice about it is yours to defend later. Write procedure-specific forms; name the product and its regulatory status, including off-label use; record alternatives, material risks and the no-treatment option; and split photography into a separate authorisation.

Privacy: the CMIA layer above HIPAA

The Confidentiality of Medical Information Act, Civil Code §56 and following, restricts disclosure of medical information without authorisation and requires providers to preserve confidentiality, with a private right of action and statutory damages that make it a live commercial risk. The policy consequences are cheap to write and easy to skip: a records-request procedure with a named owner, a CMIA-compliant authorisation form rather than a generic HIPAA one, and business associate agreements with every vendor touching patient data.

What Must Be Documented About Drug Handling, Storage and Disposal?

Verdict: one genuine California written-document requirement sits here, and it is the one most often missing — the medical waste management plan. Around it, most drug obligations are federal or practice standards, and a California manual earns trust by labelling which is which.

Sort the inventory before you write the policy

Obligations follow the product class, not the treatment name. Botulinum toxin, fillers, hyaluronidase, lidocaine, GLP-1 agonists and most injectable vitamins are prescription drugs but not controlled substances, so no DEA scheme reaches them and the governing records are the chart plus the purchasing file. What is controlled: testosterone, phentermine, and any benzodiazepine held for anxiolysis. Write the sort as a product schedule, because the downstream policy set branches off that classification.

CURES, and the registration a hormone menu triggers

Where the practice handles controlled substances the prescriber needs a DEA registration, and California adds a layer: Health and Safety Code §11165.1 requires prescribers to register with CURES, the state prescription drug monitoring system, and consult it before a first controlled-substance prescription and periodically after. Two policy entries follow — clinicians produce CURES evidence at onboarding, and the consultation step is documented inside the prescribing workflow. If the menu is injectables and laser only, the honest entry is a line saying the practice holds no controlled substances.

Sourcing, cold chain and the lot-number discipline

Prescription products should come only through manufacturer-authorised channels, with invoices, lot numbers and delivery records retained. Refrigerated stock needs a dedicated medication refrigerator with a logged thermometer, daily checks, access control and expiry rotation, and a stock log tying lot numbers to patients so a recall can be traced in an afternoon. Be precise about status: none of those logs is named in a California rule, so label the group a practice standard. Where compounded product is bought, the supplier file belongs in the drug policy: Board of Pharmacy licence, certificates of analysis, batch sterility and potency results. Our California GLP-1 weight-loss compliance guide walks that file supplier by supplier.

The medical waste management plan California does require

This one is not a practice standard. The Medical Waste Management Act at Health and Safety Code §117600 and following governs sharps and biohazardous waste, administered by the California Department of Public Health or by the local enforcement agency in counties running their own programme. A med spa is almost always a small quantity generator, under 200 pounds a month. Register with whichever agency administers your county, contract a permitted hauler, keep the tracking documents, and hold a written plan on site with training records. The plan is generally not submitted anywhere, which is precisely why it goes missing.

Devices: no California laser registry, and what that leaves you holding

California does not license, register or certify aesthetic laser devices, and there is no state laser operator certificate — an absence worth stating plainly, because operators go looking for a credential that does not exist and buy a private one instead. What applies is federal: the device must be FDA-cleared for the indication you market, and "FDA listed" is not cleared. Keep a device binder with clearance documentation, calibration certificates and service visits. Then remember what outranks all of it: operating a medical laser here is the practice of medicine. Our California laser safety guide covers operator authority.

What Training and Competency Records Should a California Med Spa Keep Per Role?

Verdict: required in substance, because two of the eleven standardized-procedure elements are training and competence — but the review interval is yours to set, and no California rule names one. It is the cleanest example on the page of a requirement whose content is prescribed and whose cadence is not.

The two elements §1474 makes mandatory

Element 4 requires the procedure to specify experience, training or education requirements for the function. Element 5 requires a method for initial and continuing evaluation of competence. Together they mean a folder of vendor certificates does not discharge the obligation: the procedure states the standard in advance, and the file shows it was applied to this nurse before they treated a patient. Element 6 closes the loop with a record of who is currently authorised — live and dated, not assembled after a request arrives.

What each role's file has to contain

For the RN: primary-source licence verification with the date it was run, training evidence against the standard the procedure sets, the signed procedures covering each function, a competence assessment with a named assessor, and their entry on the authorised roster. For the NP: the same, plus §2836.1 furnishing evidence or the §2837.103 or §2837.104 certification. For the PA: the current practice agreement. For the LVN: a written scope statement. For the esthetician: the cosmetology and establishment licences and a signed service map. For every clinical role: BLS, bloodborne pathogen training with the hepatitis B offer or declination, and the IIPP training record.

What a competency record must prove, and when to review it

"Completed training" evidences attendance and little else. A record evidencing competence names the procedure and technique, the date, the trainer and their qualification, the supervised cases and outcomes, the assessor's sign-off, and when competence is next due. For filler the complication element should name vascular occlusion specifically, because a filler-course certificate rarely covers it. California fixes no interval, so adopt one, satisfy element 11 by writing the review method into the procedure, and pair it with a trigger list — a new service, a new role, a change of supervising physician, an adverse event, or a rule amendment.

What Incident and Adverse-Event Documentation Is Expected?

Verdict: California publishes no med spa adverse-event registry, so nothing routine goes to a board — but enforcement here is complaint-driven and multi-board, which makes the internal record what everything later depends on.

No California filing, and why that is not relief

There is no cosmetic-complication register and no standard state incident form. That removes a filing duty, not a consequence. Enforcement arrives through a patient complaint, a competitor tip or a board audit, and because a single med spa touches the Medical Board, the nursing board, the cosmetology board and county district attorneys — which share information — one issue can pull in several at once. What arrives first is a documents request: the structure file, every instrument in force on the date of the incident, the chart with the examination and the order, product records, and staff verifications. Our California med spa compliance checklist works that set box by box.

The reporting routes that do reach a California practice

Three exist even without a state registry, and none is a California rule. Drug complications are reported federally through FDA MedWatch; device-related injuries travel the separate federal device pathway; and your professional liability policy almost certainly sets its own notice window, often only days long. Write that window into the incident policy itself, because a late notice can forfeit the cover precisely when the practice needs it.

The internal incident record, and treating complaints as incidents

Because no California form exists, write your own and use it every time: date and time, patient identifier, product and lot, the clinician and the instrument they acted under, what was observed and done, who was contacted, the outcome, and the change the debrief produced. Keep it separate from the chart, and extend it to complaints involving no clinical harm — in a complaint-driven state a grumble is the earliest signal that your documentation is about to be read by somebody who did not write it.

What Should a California Med Spa's Emergency Protocols Cover?

Verdict: almost entirely standard of care rather than California rule — with one exception, because element 8 of every standardized procedure makes emergency communication a mandatory written component. Say so clearly, because over-claiming here costs credibility elsewhere.

What California writes down, and what it leaves to the standard of care

16 CCR §1474 requires each standardized procedure to set forth the specialized circumstances under which the nurse is to immediately communicate with the patient's physician. Small clause, large consequence: your escalation rules are a required content item of the instrument authorising the treatment, and a procedure silent on when to call is incomplete on its face. Beyond that, California fixes no crash-cart contents, no drill schedule and no aesthetic staffing rule.

The events a California menu generates

Give each credible complication its own page rather than one general chapter. Filler carries vascular occlusion, the tightest clock in aesthetics, and the response turns on whether hyaluronidase is already in the building. Any injectable can produce anaphylaxis; neurotoxin can produce distant spread. Laser work produces burns and ocular injury — and because California treats the device as medicine, escalation runs to a prescriber, not a senior technician. Each page names the recognition signs in the words a nurse would use, the actions in sequence, the drug with dose and route, and a named receiving facility.

The kit, the drill and the reachability question

Stock is only useful if in date and reachable: log contents and expiry, check monthly, initial the log — all practice standard. Run a drill twice a year anyway. The California overlay is reachability: because element 7 makes you state the scope of supervision and element 8 when to call, the emergency protocol and the supervision policy must agree with each other and with reality.

The Section-by-Section California Med Spa SOP Manual Outline

Seven parts, thirty named policies, each written to a California authority where one exists and marked a practice standard where none does. Structure comes first, because everything downstream is void if the entity is wrong.

Part 1 — Structure and authority

1.1 Entity and clinical ownership. 1.2 Management services agreement, with the reserved-decision list and a dated SB 351 review. 1.3 Scope of services, each menu item classified as medicine, a cosmetology-side service, or both. 1.4 Supervising clinician designation — physician or 104 NP, licence number, procedures, reachability. 1.5 Notice to consumers, under BPC §138. 1.6 Regulatory monitoring.

Part 2 — Delegation instruments

2.1 Service-to-role-to-instrument matrix, as a controlled document. 2.2 Standardized procedures, one per function, each carrying all eleven §1474 elements. 2.3 Authorised personnel roster, element 6 as a live dated document. 2.4 Patient-specific order policy, including the ban on blanket standing orders. 2.5 NP and PA instruments.

Part 3 — The patient record

3.1 Chart content standard, with examiner and order as mandatory fields. 3.2 Good-faith examination policy: who performs it, what is recorded, which telehealth modality is permitted. 3.3 Telehealth consent, the §2290.5 disclosure documented in the record. 3.4 Retention and destruction: the §2266 clock, litigation holds, a destruction log. 3.5 Access and closure.

Part 4 — Consent, privacy and communication

4.1 Informed consent standard, procedure-specific and written to the reasonable-patient rule. 4.2 Photography and image use, a separate authorisation. 4.3 CMIA and HIPAA: authorisations, business associate agreements, secure destruction. 4.4 Advertising review: who approves claims and what substantiation is held.

Part 5 — Drugs, devices and waste

5.1 Product schedule, each item classified controlled or non-controlled. 5.2 Supplier vetting: authorised channels, the invoice and lot trail, the compounder file. 5.3 Storage and reconciliation. 5.4 Controlled substances and CURES, including the §11165.1 consultation step. 5.5 Device file: clearance, calibration, authorised operators. 5.6 Medical waste: the written plan, generator registration, hauler contract.

Part 6 — Personnel and competency

6.1 Credentialing and verification, with an expiry calendar. 6.2 Competency standard: the standard each procedure sets, documented supervised practice, a named sign-off, a review interval. 6.3 Role-specific file contents, the lists above. 6.4 Scope boundaries by role, written into the job description. 6.5 Onboarding and attestation.

Part 7 — Safety, emergencies, incidents and review

7.1 Injury and Illness Prevention Program, under 8 CCR §3203. 7.2 Exposure control plan, the 8 CCR §5193 plan with its annual review, sharps injury log and hepatitis B offers. 7.3 Emergency protocols, one page per complication, cross-referenced from element 8. 7.4 Incident and complaint handling, including the carrier notice deadline. 7.5 Document control.

How the Policies Change by Role: Physician, NP, PA, RN, LVN, Esthetician, Medical Assistant

Verdict: the technique at the chairside hardly moves between roles, while the authorising paper, the supervision rule and the required chart entry move completely. Put three questions to every service line: what authorises this person, what must exist before they begin, and what the record must show afterwards.

Physician: the owner, the prescriber, and the origin of every delegation

The physician acts on their own licence, performs the good-faith examination, issues the order, and — uniquely among the roles that can do all three — is the person the ownership rules require. That convergence is why the physician chapter is short on scope questions and long on evidence: signed and dated procedures, honoured review intervals, chart reviews with dates, a reachability arrangement somebody can describe without checking. Where the physician is a contractor to a practice they do not own, the manual must confront the structure question.

Nurse practitioner: three regimes, three different manuals

The NP is where a California manual branches hardest. Under §2836.1 with standardized procedures, the NP chapter resembles the RN chapter with furnishing authority added. Under §2837.103 the procedures fall away inside a group setting including a physician, and certification evidence replaces them. Under §2837.104 the NP may practise independently and own the corporation — at which point the manual needs a scope statement mapping the menu to the population focus of the national certification, because the independence is bounded by that focus.

Physician assistant: the practice agreement is the whole file

For a PA nearly everything traces to one document. The practice agreement defines the medical services the PA may provide, and 16 CCR §1399.545 puts responsibility for them on the supervising physician. Two failure modes recur: the agreement drifts out of date as the menu grows, so the PA performs services it does not name; and it adopts review obligations the practice does not evidence.

RN: the delegate who administers but never selects

Three documents become load-bearing when an RN performs the service: the eleven-element procedure covering that function, the patient-specific order from the prescriber who examined the patient, and the competency file elements 4 and 5 require. State the boundary in the RN's job description — they may carry out the order but not examine, decide the patient is a candidate, select the product or set the dose. The nursing board adds an independent duty: a nurse does not practise under a physician's licence, and accepting an assignment beyond their competence is disciplinable whoever issued it.

LVN: the licence is the limit, not the supervision

California licenses vocational nurses as LVNs, and the answer here is cleaner than in most states: an LVN practises a directed scope under the Vocational Nursing Practice Act, administered by the Board of Vocational Nursing and Psychiatric Technicians, and neither cosmetic injection nor operating a medical laser as the treating provider sits inside it. The structural point is that the limit sits on the licence rather than on oversight, so no supervision arrangement creates authority. Name the tasks an LVN performs here and the ones they do not, and never build a service line that depends on the boundary moving.

Esthetician: the policy that changes is the map, not the delegation

Here the threshold question is scope, not supervision. BPC §7320 is explicit that a cosmetology licence confers no authority to practise medicine, and 16 CCR §991 confines practice to the epidermis. The Medical Board's guidance is equally direct that estheticians may never inject, operate medical lasers, or perform medical-level peels. Delegation is not a workaround: a physician cannot delegate a medical act to a licence that does not reach it. So what changes is the written service map. Our California esthetician and advanced skin scope guide maps service by service.

Medical assistant: the role whose supervision rule is stricter than its authority

Medical assistants are unlicensed personnel whose authority comes entirely from BPC §§2069–2071: basic administrative, clerical and technical supportive services under specific authorization. 16 CCR §1366 does permit an MA to administer medication by intradermal, subcutaneous or intramuscular injection subject to conditions — specific authorization for that medication, documented training, no intravenous route, no anaesthetic agents, and the supervising prescriber physically present in the facility. It does not extend to cosmetic injectables — a neat illustration that supervision and authority are unrelated variables, since the one role barred from cosmetic injection carries the strictest presence rule of all.

The Documentation Failures That Most Often Surface in California Complaints

Verdict: nearly all are drafting failures rather than clinical ones — a requirement met in practice and lost on paper, or a document imported from a state whose rules do not apply here.

The standing order standing in for an examination

This is the defining California failure, and it is a documentation failure with clinical consequences rather than the reverse. A blanket order pre-approving everyone who books does not merely fail §2242 — it is durable written evidence that no examination happened, for every patient it covered. Practices adopt it for throughput and find the instrument built to save time is the one that establishes the violation. Replace it, then audit by pulling ten charts at random and asking who examined the patient.

The standardized procedure missing four of its eleven elements

A one-page delegation letter is not a standardized procedure, and neither is a vendor protocol with a signature block added. The elements that go missing are consistently the same four — training requirements, competence evaluation, the authorised roster and the periodic review method — because those four require an ongoing commitment rather than a clinical description. Audit as a grid: every function down one axis, the eleven elements across the other, and a date in every cell.

The paper director, and the MSO that decides clinical questions

Two structural failures travel together. The first is a physician who signed on, signed some documents, then had no realistic involvement in procedures, supervision or reachability; what proves involvement is an evidence trail, and its absence is the pattern regulators cite most. The second is a management company drifting into clinical territory — staffing decisions turning on clinical judgment, protocols set by the business side, quotas shaping what is recommended. SB 351 made that far more dangerous from 2026.

The manual that invents a California requirement

The most corrosive failure is over-claiming, and it is specific here: a manual asserting that California requires med spa registration with the Medical Board, or an annual competency reassessment, or a particular consent form, invites the obvious question about every other sentence in it. Label every policy a requirement with a citation or a practice standard without one — including when a paid template did otherwise. The rule set with primary-source citations sits on our California med spa regulations page, and the opening sequence in our guide to how to open a med spa in California.

What California Requires, and What Is Only Best Practice

If a policy in your manual is not in the left-hand column with a citation beside it, do not describe it as a legal requirement — not to your staff, and not to a regulator.

Summary: The California SOP Layer in Plain Terms

California will never ask to see a document called your SOP manual, because no such filing exists. It will ask who owns the medicine, which standardized procedure authorised this nurse, who examined this patient and when, which order the treatment was given under, and what the record says about all four — usually through a complaint, often through more than one board at once. The manual's job is to make those answers agree with each other and with what the practice does on a Tuesday. Cite the section, label every policy a requirement or a practice standard, delete anything claiming a registration California does not have, and take the ambiguities to counsel. More guides sit on our California med spa compliance hub.

This guide is for informational purposes only and does not constitute legal or medical advice. California aesthetic practices are governed by the Medical Board of California, the Board of Registered Nursing, the Board of Vocational Nursing and Psychiatric Technicians, the Board of Barbering and Cosmetology and, for waste and workplace safety, by CDPH and Cal/OSHA. Citations here were assembled from our own vetted California research and could not be checked against California state websites from the network used to prepare this page — confirm current section text with the relevant agency before relying on it. Consult a California healthcare attorney before applying any of this to your practice, particularly on entity structure and record retention.

Frequently Asked Questions