Colorado GLP-1 & Weight Loss Med Spa Compliance (2026)

Weight-loss medicine is now the growth engine of the Colorado med spa. Semaglutide and tirzepatide have brought in a new category of patient across the Front Range, and the buyer-intent questions Colorado operators ask — who can prescribe, is compounded still legal, can we do this entirely by telehealth — have moved to the top of the list. GLP-1 is also the single service most likely to put a Colorado med spa in front of a regulator, because it touches all three of the state's health-licensing boards at once, each housed under the Department of Regulatory Agencies (DORA).

This is the Colorado-specific companion to our national GLP-1 med spa compliance guide, which covers the federal picture we won't repeat here. What this guide adds is Colorado's own layer: who may prescribe and administer under a full-practice-authority regime, how the Board of Pharmacy's registration and compounding rules reach an out-of-state supplier, what Policy 40-27 requires of a telehealth encounter, and the monitoring and documentation a program needs to survive a board look.

Why a Colorado GLP-1 Program Answers to Three Boards

Colorado has no single "med spa law." A GLP-1 program sits at the intersection of three regulators, and a gap in front of any one of them creates real liability. Knowing which board owns which question is the fastest way to find your own exposure.

The Colorado Medical Board

The Medical Board licenses physicians and physician assistants and governs the practice of medicine under the Medical Practice Act, C.R.S. 12-240-101 et seq. Because writing a GLP-1 prescription is the practice of medicine, the board's rules on the provider-patient relationship, telehealth, and — critically for med spas — the delegation of medical services under Rule 1.17 apply from the first patient. The board also sets what a physician may and may not hand off, and prescribing sits firmly on the "may not" side.

The Colorado State Board of Nursing

The Board of Nursing licenses APRNs, registered nurses, and licensed practical nurses under the Nurse Practice Act, C.R.S. 12-255-101 et seq. In Colorado this board carries more weight for a weight-loss program than in most states, because Colorado grants APRNs full practice authority. It decides who holds prescriptive authority, what an RN may administer under a prescriber's order, and what nursing tasks may be delegated further down the chain.

The Colorado State Board of Pharmacy

The Board of Pharmacy regulates the drug itself — how it is compounded, dispensed, shipped, and sourced. In the compounded-GLP-1 era this board became the one most likely to surprise an operator, because its reach extends to out-of-state suppliers: any pharmacy that ships, mails, or delivers a prescription into Colorado must hold a Colorado nonresident prescription drug outlet registration.

Who Can Prescribe GLP-1 Medications at a Colorado Med Spa

Prescribing is a licensed act, and Colorado draws firm lines around who holds the authority to write for a weight-loss drug. This is also where Colorado departs most sharply from the restrictive states that require a collaborating physician.

Physicians (MD or DO)

A physician licensed by the Colorado Medical Board has full prescriptive authority and may initiate, titrate, and discontinue GLP-1 therapy after a proper evaluation. In a physician-anchored practice, the physician is also the structural keystone: they own the delegation framework under Rule 1.17, the standing orders that let nursing staff administer, and the quality-assurance trail that shows the program is actively managed.

APRNs With Prescriptive Authority (RXN) — Colorado's Full Practice Authority

Colorado is a full practice authority state. An advanced practice registered nurse who holds prescriptive authority may evaluate, diagnose, and prescribe GLP-1 medications independently — no collaborating-physician agreement, no supervision requirement, no countersignature. For a weight-loss practice, that is the single most consequential fact in this guide: an APRN-led GLP-1 program in Colorado can be fully compliant without a physician anywhere in the clinical chain.

The authority is earned, not automatic. Under C.R.S. 12-255-112 and the board's prescriptive-authority rules at 3 CCR 716-1.15, an APRN first obtains provisional prescriptive authority (RXN-P) after an 1,800-hour preceptorship plus graduate coursework in pathophysiology, physical assessment, and advanced pharmacology. Within three years, the APRN must complete a 750-hour mentorship with a physician or a full-RXN APRN to convert to full, unrestricted authority. Before that conversion the APRN is still provisional — a distinction to verify on the DORA license lookup rather than assume from a résumé.

Physician Assistants Under a Collaborative Agreement

Colorado overhauled PA practice with SB23-083, effective August 7, 2023, replacing physician supervision with an ongoing collaborative agreement set by the employer, physician, or physician group. Newer PAs face more structure: a PA with fewer than three years of practice must have their first 160 working hours supervised by a physician working at the same location, with at least 40 hours of supervision from a primary supervising physician. A med spa hiring a recently graduated PA to run a weight-loss program should plan for that ramp rather than discover it during an audit.

Who Cannot Prescribe

Registered nurses, licensed practical nurses, medical assistants, estheticians, and non-clinical owners cannot prescribe GLP-1 medications in Colorado. This is not a soft convention — C.R.S. 12-240-107(3)(l) and Rule 1.17 expressly exclude prescribing from what a physician may delegate, and the Board of Nursing's delegation rules likewise put the prescription or selection of medications outside delegable nursing tasks. An arrangement where a non-prescriber "approves" weight-loss intakes, or where an owner decides which patients receive the drug, is the unlicensed practice of medicine no matter what the org chart calls it. The same scope logic governs neurotoxin and filler, which we walk through in who can inject Botox in Colorado.

Compounded Semaglutide and Tirzepatide Sourcing in Colorado

Sourcing is where most Colorado programs are currently exposed, because the compounded-vial business model that built thousands of weight-loss clinics rested on a federal drug-shortage exemption — and that exemption is gone.

The Federal Baseline: The Shortage Era Ended

Section 503A of the federal Food, Drug, and Cosmetic Act lets a pharmacy compound a drug for an individual patient, and Section 503B covers larger "outsourcing facility" compounding. During a shortage, compounders could lawfully make copies of an FDA-approved drug. That window closed: the FDA declared the tirzepatide shortage resolved in December 2024 and the semaglutide shortage resolved in February 2025, and enforcement discretion ran out on February 18, 2025 for 503A pharmacies and March 19, 2025 for 503B facilities. We break down the 503A-versus-503B mechanics in the compounded GLP-1 sourcing guide.

What Still Qualifies as Lawful Compounding

Compounding is not banned outright; it is now the exception. The lawful path requires a documented, patient-specific clinical difference from the approved product — a genuine allergy or intolerance to an inactive ingredient, or a required alternate dosage form the manufacturer does not make. What does not qualify is the reasoning most med spas were actually using: lower price, easier supply, or a "custom" blend such as semaglutide with added B12, which is a marketing variation rather than a clinical necessity. Every compound must rest on a valid patient-specific prescription; a Colorado med spa cannot order a batch "for the practice."

The Colorado Wrinkle: Nonresident Pharmacy Registration

This is the Colorado-specific trap. Under Colorado's pharmacy statutes and the Board of Pharmacy's outlet rules at 3 CCR 719-1, any pharmacy located outside Colorado that ships, mails, or delivers drugs into the state pursuant to a prescription order must first register as a nonresident prescription drug outlet, and a nonresident 503B outsourcing facility carries its own registration obligation. Registration requires verification of the home-state license and the most recent home-state inspection report. Many direct-to-patient compounding vendors marketing to med spas are out-of-state operations, and an unregistered supplier shipping into Colorado is a Board of Pharmacy problem that arrives on your patients' doorsteps with your clinic's name on the label.

What a Colorado Program Should Source

The defensible options are the FDA-approved branded products: semaglutide (Wegovy, Ozempic) and tirzepatide (Zepbound, Mounjaro), plus liraglutide (Saxenda), dispensed by a Colorado-licensed pharmacy or a properly registered nonresident outlet on a valid prescription from a Colorado-authorized prescriber. If you use a compounding partner for a documented exception, verify the registration before the first order and keep the patient-specific justification in the chart. Oral formulations follow the same sourcing logic, covered in the cluster post on oral GLP-1 options.

The Good-Faith Exam and the Provider-Patient Relationship

Before any GLP-1 prescription, Colorado requires a legitimate provider-patient relationship established through a clinically appropriate encounter. There is no single Colorado statute titled "good faith examination," but the requirement is unmistakable: Rule 1.17 demands personal and responsible direction over delegated services, and the Medical Board's telehealth policies require a documented evaluation and clinical history sufficient to establish a diagnosis before treatment. A patient assessment consistent with the standard of care is required before the first treatment — full stop.

What the Encounter Must Establish

The evaluation must support the diagnosis and the treatment; it cannot be a formality. For a GLP-1 program, the prescriber — physician, APRN with RXN, or PA under a collaborative agreement — personally documents a real assessment of eligibility and medical necessity before writing. The exam is performed before the first treatment and repeated when the patient seeks a therapy outside the original plan, when their health changes substantially, or when enough time has passed that the original assessment no longer describes them. It is a non-delegable clinical act: support staff may gather intake data, but they cannot perform the evaluation.

What to Document

Colorado publishes no statutory checklist, so the standard of care defines the elements. For a GLP-1 evaluation, document:

• Verified anthropometrics — measured height, weight, and BMI, not a self-reported figure where the patient can be measured
• Medical and weight history — prior weight-loss attempts, current medications, allergies, relevant surgical history
• Comorbidities — type 2 diabetes, prediabetes, hypertension, dyslipidemia, obstructive sleep apnea, and cardiovascular disease, which establish medical necessity
• Contraindication screen — personal or family history of medullary thyroid carcinoma (MTC), MEN-2, pancreatitis, gastroparesis, pregnancy or pregnancy planning, and severe renal or hepatic impairment
• Informed consent — risks, benefits, common GI adverse events, serious risks, the MTC boxed warning, and off-label use where applicable
• Treatment plan — starting dose, titration schedule, monitoring cadence, follow-up, and discontinuation criteria

The full national documentation set is in the complete GLP-1 guide. Colorado's distinction is procedural rather than substantive: the relationship-establishing encounter must be performed by a prescriber who holds the authority to write the prescription that follows it.

Can a Nurse Administer GLP-1 Injections in Colorado?

Registered nurses are the workhorse of most injection programs, and Colorado permits RN administration — inside firm walls.

What an RN Can Do

A Colorado RN may administer a GLP-1 injection pursuant to a valid order from an authorized prescriber, perform follow-up weight and vitals checks, deliver patient education, and document the encounter — administration on a lawful order falls squarely inside registered nursing scope under the Nurse Practice Act. The prescriber need not be physically present, but the order must be individualized and current before the first dose.

What the Protocol Framework Must Contain

To be defensible for a GLP-1 program, the orders and protocols should be:

• Established in writing by the prescriber before any injection is given
• Specific to the drug, the dose, the patient population, and the circumstances under which the RN may administer
• Tied to the prescriber's prior evaluation — the protocol authorizes administration, never the decision to prescribe
• Clear on training, competency verification, and emergency-response expectations
• Reviewed on a stated schedule, with the review documented

What an RN Cannot Do

An RN cannot establish the provider-patient relationship, perform the evaluation, diagnose, select the patient for therapy, or make the prescribing decision. Both regulatory tracks close this door from opposite sides: the Board of Nursing's delegation rules exclude the prescription or selection of medications from delegable nursing tasks, and Rule 1.17 excludes prescribing from what a physician may delegate. A "standing order" that lets an RN approve weight-loss intakes without an individualized prescriber evaluation is unlicensed prescribing wearing a protocol's clothing. LPNs face tighter administration limits, and unlicensed staff should never administer a GLP-1 injection.

Rule 1.17, Unlicensed Delegation, and HB25-1024

Rule 1.17 is Colorado's signature med spa rule, and it shapes a weight-loss program even though the drug itself can never be delegated to an unlicensed person.

What Rule 1.17 Governs — and What It Excludes

Codified at 3 CCR 713-1.17 under C.R.S. 12-240-107(3)(l), Rule 1.17 governs the delegation of medical services to, and personal and responsible direction over, a person not licensed to perform them. The delegating physician must perform over-the-shoulder direct observation before authorizing a delegatee to work outside their physical presence, remains accountable for the delegatee's acts, and must satisfy the thirty-minute in-person availability standard. Prescribing sits outside the rule entirely — it is expressly non-delegable. What the rule does reach in a weight-loss clinic is the adjacent services often bundled with GLP-1 therapy: body contouring, aesthetic add-ons, and any procedure performed by staff not licensed to perform it independently.

The HB25-1024 Disclosure Obligation

Colorado added a disclosure layer with HB25-1024, signed by Governor Polis on April 7, 2025 and effective roughly ninety days after the legislature adjourned that May. Where medical-aesthetic services are delegated to unlicensed persons, the practice must post a highly visible sign naming the delegating practitioner with license number and contact information plus the board's complaint web address, and must disclose the delegation on its website, in advertising, and to the patient. A weight-loss program that keeps every GLP-1 touchpoint in licensed hands sidesteps this entirely — but a spa bundling delegated aesthetic services alongside the injection program inherits the full obligation, and it is the newest requirement most commonly missing from clinics that opened before it took effect.

Telehealth Prescribing for Weight Loss in Colorado

Telehealth is central to modern weight-loss programs, and Colorado permits it — within limits that track the provider-patient-relationship rule rather than any GLP-1-specific statute.

Telehealth Is Allowed for GLP-1s

GLP-1 receptor agonists are not controlled substances, so the federal in-person examination requirements and DEA telemedicine flexibilities that dominate the controlled-substance conversation do not apply here. A Colorado-licensed prescriber may establish the provider-patient relationship and issue a GLP-1 prescription after a properly conducted telehealth encounter, with no prior physical examination required.

Policy 40-27 and the Same Standard of Care

The governing framework is Colorado Medical Board Policy 40-27, with its companions Policy 40-03 on the provider-patient relationship and Policy 40-09 on prescribing. Three points matter most. First, the practice of medicine occurs where the patient is located — treating a patient sitting in Colorado requires Colorado licensure regardless of where your prescriber sits. Second, telehealth is held to the same standard of appropriate practice as an in-person encounter, including a documented evaluation and clinical history sufficient to establish a diagnosis and identify contraindications before treatment. Third, and most pointedly, the board states that issuing a prescription based solely on an online questionnaire does not constitute an acceptable standard of practice — naming precisely the intake-form-plus-rubber-stamp model some national weight-loss platforms still run.

Colorado Telehealth Checklist for GLP-1

• Colorado-licensed prescriber — the physician, APRN with RXN, or PA must hold active Colorado licensure and current prescriptive authority
• A clinically appropriate, real-time encounter for the initial evaluation — an intake form alone is expressly insufficient
• Documented evaluation and history establishing the diagnosis, with the contraindication screen and treatment plan in the chart
• Identity verification and informed consent handled to the same standard as an in-person visit
• Appropriate follow-up arranged for titration and monitoring, not left to the patient to request
• A compliant platform and retrievable records that protect patient information

The mechanics of a synchronous evaluation are the same regardless of formulation; the exam standard for oral products is identical, as covered in the oral GLP-1 post.

Monitoring a Colorado GLP-1 Program

A GLP-1 program is ongoing medical management, not a one-and-done prescription, and the monitoring schedule is what separates a defensible protocol from a refill mill. Colorado publishes no GLP-1 monitoring statute, so the standard of care — and your own written protocol — is the yardstick a board will use.

Baseline Before the First Dose

At initiation, verify BMI from measured values, confirm the comorbidities that establish medical necessity, screen contraindications, review the medication list for interactions, and order baseline labs where clinically indicated — commonly a metabolic panel and A1c, with lipid and hepatic studies where relevant. Baseline data is what later lets a prescriber show the decision to treat was medically reasonable rather than commercially convenient.

The Titration Window

During dose escalation, schedule structured follow-up: a first check around four weeks after initiation, then reviews every four to twelve weeks through titration. At each visit, track weight, blood pressure, tolerability, and adverse events, and escalate the dose deliberately rather than on an automatic calendar. A ready-made cadence is laid out in our GLP-1 monitoring schedule template.

Adverse-Event Vigilance

Screen at every visit for persistent gastrointestinal symptoms, signs of pancreatitis, gallbladder disease, and where relevant thyroid symptoms. Document what the patient reports, what you decided, and why. An adverse-event log is both good medicine and the evidence a board looks for that a program is actively managed rather than running on autopilot between refills.

Documentation a Colorado GLP-1 Program Must Keep

Across all three boards, documentation is the through-line. If it is not written down, a Colorado regulator treats it as not done.

Structural and Clinical Records

• A written GLP-1 SOP signed by the responsible prescriber — eligibility, contraindications, titration, monitoring, and discontinuation criteria
• Proof of prescriptive authority — current RXN or RXN-P status for each APRN, and the collaborative agreement for each PA, expressly covering weight-management prescribing
• RN administration orders and standing protocols, drug-specific and dated before first use
• Rule 1.17 delegation records where unlicensed delegatees perform any adjacent medical-aesthetic service, including the over-the-shoulder observation sign-off
• HB25-1024 disclosure evidence — a photo of the posted sign, the website language, and the patient-facing disclosure
• Per-patient charts — evaluation, verified BMI, consent, treatment plan, and every follow-up

Quality-Assurance Records

Colorado expects clinical oversight to be visible, not asserted: documented chart review, quality-assurance meetings with minutes, an adverse-event log, and evidence of corrective action when something is flagged. This trail is what shows the person holding clinical responsibility is genuinely engaged.

Sourcing Records

Keep the pharmacy's Colorado licensure or nonresident registration on file, retain the patient-specific justification for any compounded product, and be able to show branded product came through a properly registered pharmacy. If a Board of Pharmacy question lands, this file is the difference between a quick answer and an investigation. If you would rather not build all of this from scratch, our ready-to-use med spa compliance SOPs cover the policy and protocol layer behind every item here.

Does a Colorado Med Spa Need a Medical Director for GLP-1?

This is the question Colorado answers differently from most states, and getting it right can save a practice a substantial monthly retainer — or expose it if the structure is misread.

When a Physician Is Not Required

Because Colorado grants full practice authority, an APRN holding full RXN can independently evaluate, diagnose, prescribe, and own the clinical protocol. In an APRN-led practice where every GLP-1 touchpoint stays in licensed nursing hands, there is no state requirement for a physician medical director. That is a genuine structural advantage — and it is why "do I need a medical director?" is the wrong first question in Colorado. The right one is "who holds the authority for each act my program performs?"

When a Physician Is Required

A physician becomes necessary the moment the program leans on physician authority: physician prescribing, PA collaborative agreements, delegation of medical services to unlicensed persons under Rule 1.17, and corporate structures requiring physician ownership under Colorado's corporate practice of medicine doctrine. Most multi-service med spas end up needing a physician for something, even if the GLP-1 line alone would not.

Ownership, CPOM, and the Rented-Signature Trap

Colorado's corporate practice of medicine doctrine still has teeth: non-physician owners and management companies may run marketing, scheduling, facilities, and staffing logistics, but not diagnosis, treatment, prescribing, or clinical staffing decisions. Legislation that would have expanded PA and NP ownership was postponed indefinitely in March 2026, so the existing structure stands. Whoever holds clinical responsibility must genuinely exercise it: approving protocols, reviewing charts, meeting the thirty-minute in-person availability standard for delegated services, and staying reachable. A named-only signature that never reviews a chart satisfies no board, and any oversight agreement should pay fair market value for actual services rather than a share of medical revenue.

The Risks of a Non-Compliant Colorado GLP-1 Program

The cost of getting this wrong is layered, because each of the three boards can act on its own — and the consequences reach past licensing.

Board Discipline Across Three Regulators

The Colorado Medical Board can discipline a physician or PA for prescribing outside the standard of care, questionnaire-only prescribing, or delegating an act that may not be delegated. The Board of Nursing can act against an APRN prescribing beyond their RXN status or an RN operating outside nursing scope. The Board of Pharmacy reaches improper compounding and unregistered nonresident pharmacies shipping into Colorado. Unauthorized practice of medicine is a class 6 felony under C.R.S. 12-240-135, which is not a theoretical ceiling in a state that has been actively legislating on med spa delegation.

Beyond Licensing

The exposure does not stop at a board order. Operators risk unwinding of a non-compliant corporate structure, missing-disclosure findings under HB25-1024, civil liability if a patient is harmed, and fallout with malpractice carriers and payment processors. A single injured patient in a program that skipped the evaluation turns a scope problem into a lawsuit — and the chart, or its absence, becomes the case.

Building a Compliant Colorado GLP-1 Program

Pulling the pieces together, here is the operational stack a Colorado GLP-1 program should be able to produce on demand in 2026.

1. Verified prescriptive authority — a physician, an APRN whose RXN or RXN-P status you confirmed on the DORA license lookup, or a PA under a current collaborative agreement
2. A real provider-patient relationship for every patient — a clinically appropriate evaluation by the prescriber, never a questionnaire alone
3. Valid administration orders — individualized prescriber orders and drug-specific protocols dated before the first injection
4. Defensible sourcing — FDA-approved product through a Colorado-licensed or registered nonresident pharmacy, with patient-specific justification for any compounding exception
5. Compliant telehealth — Colorado-licensed prescribers, real-time encounters, and Policy 40-27's standard of care
6. Rule 1.17 and HB25-1024 compliance for any delegated medical-aesthetic services bundled alongside the program
7. A written monitoring schedule — baseline, four-week, and ongoing four-to-twelve-week reviews with an adverse-event log
8. Documented clinical oversight — chart review, QA minutes, and a fair-market-value agreement wherever a medical director is required

Do those eight things and you have a Colorado GLP-1 program that can survive a board look. For a box-by-box view of every Colorado requirement, the Colorado med spa compliance checklist runs the full list, and the Colorado compliance hub collects every Colorado-specific guide in one place. Industry organizations such as AmSpa publish useful state updates, and the Colorado Medical Board, the Colorado State Board of Nursing, the Colorado State Board of Pharmacy, and the FDA are the primary sources for the rules above.

Disclaimer: This article is for educational purposes only and does not constitute legal or medical advice. Colorado's prescribing, delegation, telehealth, and pharmacy rules are administered by several DORA boards and change frequently — the delegation rule was recodified in 2023, PA practice changed under SB23-083, the HB25-1024 disclosure law took effect in 2025, and an ownership bill was postponed indefinitely in March 2026. Verify current FDA shortage status and consult a Colorado healthcare attorney and your responsible prescriber before establishing or modifying a weight-loss program.