Colorado Med Spa Regulatory Changes 2026: What Changed

Every January a wave of articles promises that this is the year the med spa rules change. In Colorado, 2026 was not that year — and saying so plainly beats manufacturing a change that is not there. The state continued two licensing acts about to expire, put a health-care advertising law into force, cleaned up compounded-drug supply, and then declined to pass the three bills that would actually have reshaped how a med spa is owned, staffed, or policed.

That combination produces a specific risk. When nothing big moves, owners stop reading, and the small dated things that did move slip past. Meanwhile the loudest 2026 headline in the Colorado aesthetics trade press concerned a bill that died in committee in March, which vendor pages still describe as if it took effect in August.

This guide gives every item a date. Enacted things get an effective date; failed things get the date they failed and a plain statement that they are not law. Then it turns to what actually generates Colorado enforcement files: rules that have not changed in years and are violated the same way every time. Read it alongside the Colorado med spa compliance checklist and the national state med spa regulatory changes for 2026 roundup.

The Short Version: What Actually Changed in Colorado in 2026

Colorado's 2026 regular session adjourned sine die on May 13, 2026, and the governor's deadline to act on bills was June 12, 2026. Bills enacted without a safety clause took effect on August 12, 2026 — nine days before this article published, which is why several items below are new enough that your policy binder predates them.

Four Enacted Measures, All Dated

The four items reaching a med spa are SB25-152 (a 2025 bill whose duties begin in 2026), HB26-1307, HB26-1181, and HB26-1262 — two sunset continuations, a transparency law, and a pharmacy-supply clarification. None amends the Medical Practice Act's delegation provisions or the Board's medical-aesthetic services rule.

Three Bills That Failed — and Why That Matters as Much

HB26-1249, SB26-066, and SB26-130 all died — two by committee vote with a date on the record, one simply not passing before adjournment. Failed bills matter twice over. They show what the legislature is circling, the only honest way to read 2027. And they are the most common source of bad compliance advice, because a bill covered heavily in February reads, six months later, exactly like a law.

The One Change That Touches Every Colorado Med Spa

SB25-152 is the only 2026 item imposing a new operational duty on essentially every med spa in the state, and it compounds with a disclosure law you may already be violating. Everything else here continues the status quo or affects a narrow slice of operators.

SB25-152: The Know Your Health-Care Practitioner Act Took Effect June 1, 2026

This is the change with the widest reach and the lowest profile. Senate Bill 25-152 was signed on May 5, 2025, but its substantive requirements apply to conduct occurring on or after June 1, 2026. A binder last updated in 2025 predates the duty entirely.

What the Act Requires

Three duties sit inside it. First, an advertisement for health-care services identifying a practitioner by name must also identify the type of state-issued license, certificate, or registration that practitioner holds, and may not contain deceptive or misleading information. Second, a practitioner must verbally communicate their credential type to the patient when the practitioner-patient relationship is established. Third, a practitioner in a state-licensed or certified general hospital must wear a name tag showing that credential type, visible during patient encounters.

Why This Lands Hard on Med Spas

The name-tag duty is written for hospital settings and does not reach a freestanding med spa. The other two do, and they collide with how aesthetics markets itself. A team page of first names, an injector profile reading "Aesthetic Specialist," a booking page offering appointments with "Jamie" — all name practitioners, and each now needs their credential type stated. Colorado issues no license called medical aesthetician, master injector, or laser specialist, so such a title is not a credential and does not satisfy the duty.

How It Stacks With HB25-1024

The two laws stack, and the stacking is where practices get caught. Since August 6, 2025, HB25-1024 has required a practice delegating medical-aesthetic services to an unlicensed person to disclose that arrangement on its website and in advertising for that person, with the delegating practitioner's name and license number. SB25-152 separately requires anyone named in an advertisement to be identified by credential type. So if you name an unlicensed delegatee, you owe the delegation disclosure and an accurate statement of what they are — which means not implying a clinical credential at all.

The Fine and Who Imposes It

Enforcement sits with the Division of Professions and Occupations inside DORA, whose director may impose a fine of up to 500 dollars for a violation. That number is small enough to dismiss and shouldn't be: the violation is self-evident from a public web page, making it the cheapest complaint a competitor can file — and a complaint opens a file that rarely stops at advertising.

HB26-1307: The Medical Practice Act Was Continued to 2035

Colorado runs sunset reviews, and in 2026 the big one landed on the board that regulates everything a med spa does. The Colorado Medical Board operates under the Medical Practice Act at C.R.S. Title 12, Article 240, and that Act carried a repeal date of September 1, 2026.

What the Sunset Bill Did

The Office of Policy, Research and Regulatory Reform published its sunset review of the Medical Practice Act on October 15, 2025, recommending continuation for nine years, and the legislature agreed. HB26-1307 was signed on May 29, 2026 and took effect August 12, 2026, continuing the Colorado Medical Board to September 1, 2035. Its substantive amendments are administrative: the Distinguished Foreign Teaching Physician renewal period moves from annual to a period the board sets, the board president may sit as a full member of the licensing panel, and the board may issue an administrative license to a physician who teaches without direct patient care.

What the Sunset Bill Did Not Do

Worth stating flatly, because a nine-year continuation of the medical practice statute sounds like it must have changed something for aesthetics. It did not. HB26-1307 did not amend the delegation authority at C.R.S. 12-240-107(3)(l), did not touch Rule 1.17, did not alter supervision standards, did not change corporate practice of medicine limits, and did not create any med spa registration or facility license. If a consultant says the sunset bill changed your delegation obligations, ask for the section.

Why the Continuation Still Matters to You

A sunset is the legislature's scheduled chance to reopen a whole regulatory scheme. Aesthetic delegation was not reopened here, so the next scheduled opening of the Medical Practice Act is 2035. Until then, changes reach injectors and devices through Medical Board rulemaking or standalone bills, not a sunset vehicle.

HB26-1181: The Barber and Cosmetologist Act Was Continued to 2037

The second sunset was quieter and, for anyone employing estheticians, more immediately relevant. The Barber and Cosmetologist Act at C.R.S. Title 12, Article 300 governs the license your skin-care staff hold, and it was scheduled to repeal on the same date as the Medical Practice Act.

The Act Was Days From Its Repeal Date

Article 300 carried a repeal date of September 1, 2026. HB26-1181 was signed on June 3, 2026 and took effect August 12, 2026, extending that date to September 1, 2037. Esthetician, cosmetologist, hairstylist, nail technician, and barber licensure — and registration of places of business — therefore continue uninterrupted under DORA's Office of Barber and Cosmetology Licensure.

What Changed Inside the Act

Following the October 15, 2025 sunset review, the bill repealed the Barber and Cosmetology Advisory Committee, updated definitions and terminology, and added exemptions. Those exemptions carve out lower-risk work and work already regulated elsewhere — basic hair styling, makeup application, and simple nail polishing, along with mortuary science practice, theatrical makeup, and cosmetic tattooing and electrolysis. If your menu touches those categories, confirm against the enacted text which side of the line it falls on.

What Did Not Change: The Epidermis Test

Nothing in HB26-1181 expanded what an esthetics license authorizes. Rule 1.8 of 4 CCR 731-1 still prohibits a licensee from performing any service, or using any implement, device, product, machine, tool, or technique, that penetrates, destroys, or alters the client's skin beyond the epidermis. Class IIIb and higher lasers, IPL, injections, and tissue-altering radiofrequency remain outside the license and reachable only through medical delegation. Our Colorado esthetician and skin scope guide maps that boundary service by service.

HB26-1262: Compounded Medications Got a Clearer Supply Chain

The fourth enacted item matters most to weight-loss and hormone programs — and is the most likely to be misread as permission it does not grant.

What the Law Provides

HB26-1262 was signed on June 2, 2026. It provides that a licensed person may compound a drug or device in Colorado; that a state-licensed pharmacy or an FDA-registered 503B outsourcing facility may supply a compounded drug or device to a licensed health-care provider, pharmacy, facility, or organization; and that those licensed recipients may obtain, dispense, or administer what such a source supplies. It also bars the State Board of Pharmacy from adopting compounding rules more restrictive than federal or state law. Bills enacted this session without a safety clause took effect August 12, 2026; confirm the applicability date in the enacted text before relying on it operationally.

What It Does Not Legalize

Read it carefully: the permissions run to licensed parties from licensed or registered sources. Nothing here authorizes an unlicensed reseller, a foreign distributor, a wellness-industry group buy, or a peptide vendor selling research chemicals. Nothing changes who may prescribe, and nothing overrides the FDA's essentially-a-copy limits on compounding commercially available drugs. If your GLP-1 supply chain relies on any of those, this law does not fix it — see our Colorado compliance checklist for the sourcing documentation to keep on hand.

Who May Inject Neurotoxins and Fillers in Colorado in 2026

This is the question the year is really being asked, so here is the direct verdict: no enacted 2026 Colorado law or adopted rule changed injection authority. The ladder is exactly where it was in 2025.

Rule 1.17 Names Injections Directly

Rule 1.17 of 3 CCR 713-1, adopted under C.R.S. 12-240-107(3)(l), defines medical-aesthetic services as cosmetic or aesthetic services constituting the practice of medicine. It reaches Class IIIb and higher lasers, radiofrequency devices, intense pulsed light, techniques revising or destroying tissue, hair removal — and the performance of injections into the human body, naming neurotoxin and dermal filler products. Injecting is medicine in Colorado, and that sentence did not move in 2026.

The Ladder of Authority Is Unchanged

A Colorado-licensed physician may inject within their training. An APRN with prescriptive authority may evaluate, prescribe, inject, and delegate with no physician in the chain — which is why a Colorado injectable program can be built entirely around a nurse practitioner. A PA may inject under a collaborative agreement. An RN may inject on a valid order from a provider who evaluated the patient, but does not independently determine candidacy, product, or plan. Our guide to who can inject Botox in Colorado works through each rung.

Delegation to Unlicensed Injectors Is Still Lawful — and Still Documented

Colorado remains unusually open about who may be delegated to and unusually demanding about what the delegator must do. A physician or APRN may delegate injections to an unlicensed person, but only after personally assessing that person's competence for the service, with a delegatee and authorized-service list available to the public at the site, written treatment and emergency protocols, on-premises presence or ability to attend the patient in person within thirty minutes, quality monitoring at least every two weeks at the site, and annual reassessment. Off-label use in a delegated service is generally prohibited unless the delegating provider specifically authorized it. A weekend injector-course certificate is training evidence; it has never been authority here.

What Changed for Nurse Practitioners and Physician Assistants in 2026

Both professions carry most of the clinical load in Colorado aesthetics. Both had a quiet year in statute, and both have reason to watch the calendar.

APRNs: Nothing Changed in Statute

The Nurse Practice Act at C.R.S. Title 12, Article 255 was not amended in 2026 in any way affecting aesthetic practice. The structure holds: an APRN obtains provisional prescriptive authority and completes a 750-hour structured prescribing mentorship with a physician or a fully authorized APRN before progressing. The Colorado State Board of Nursing still does not regulate cosmetic lasers, so nursing rules cannot supply permission the Medical Board must grant.

Physician Assistants: The Ownership Bill Failed

PA practice is still governed by the collaborative agreement structure created by SB23-083, effective August 7, 2023, under which PAs collaborate rather than being supervised after a defined number of practice hours, with a supervisory agreement required in specified circumstances. Nothing in 2026 changed that. What 2026 did do to PAs is reject an expansion of their ownership rights, covered in detail below.

The Nurse Practice Act Sunsets September 1, 2027

The Nurse Practice Act carries a repeal date of September 1, 2027, so COPRRR is reviewing the Board of Nursing and nurse aide certification during 2026, with its report due to the Office of Legislative Legal Services by October 15, 2026. That report shapes a 2027 sunset bill. If Colorado revisits RN delegation, APRN mentorship hours, or the nursing side of aesthetic scope, that is the vehicle — and the comment window is open now, not then.

What Changed for Estheticians and Laser Operators in 2026

Estheticians had the most consequential year on paper and the least consequential one in practice — a distinction worth drawing carefully.

The License Survived, the Scope Did Not Move

Continuation to September 1, 2037 preserved the license itself. Beyond that, an esthetician's authority in a Colorado med spa is unchanged: facials, exfoliation and peels within the coursework gates, wax and sugar hair removal, makeup, and lash and brow work sit inside the license; anything below the epidermis sits outside it. No 2026 enactment added a device, modality, or certification pathway.

Lasers and IPL: No Change at All

Not one 2026 measure addressed cosmetic laser operation. Colorado still issues no laser operator license, Rule 1.17 still classifies Class IIIb and higher lasers and IPL as medical-aesthetic services expressly including for hair removal, and delegation remains the only lawful route for a non-provider to hold the handpiece. ANSI Z136.3 and OSHA still supply the safety layer Colorado does not write. Full detail is in our Colorado laser safety guide.

The Advisory Committee Is Gone

One structural change matters if you ever intended to lobby. The Barber and Cosmetology Advisory Committee was repealed by HB26-1181 effective August 12, 2026 — the sunset review found it had met once in 2022, once in 2023, not at all in 2024, and once in 2025. Input on rules and examinations now routes through the Office of Barber and Cosmetology Licensure and DORA directly, leaving one fewer forum where esthetics scope questions get aired.

The Bills That Did Not Pass — and the Real Status of Each

Three bills would have changed Colorado med spa practice materially. All three failed. Each is stated below with its date and disposition, because treating one of them as law is the most common Colorado compliance error right now.

HB26-1249, Medical-Aesthetics Corporation Ownership — Postponed Indefinitely March 25, 2026

This bill did not become law and has no effective date. It would have created an exception to Colorado's professional service corporation rules for a corporation organized solely to provide medical-aesthetic services, letting physician assistants own a majority interest and letting estheticians, cosmetologists, licensed practical nurses, registered nurses, APRNs, and PAs hold shares. The House Committee on Health and Human Services postponed it indefinitely on March 25, 2026, after opposition from the Colorado Medical Society, COPIC, and the Colorado Hospital Association. Several vendor pages still describe HB26-1249 as effective August 12, 2026. That is wrong. Colorado's corporate practice of medicine posture is unchanged, and our guide to who can own a med spa in Colorado still states the operative rules.

SB26-130, Medical Spas Deceptive Trade Practices — Did Not Pass

This bill did not become law. Introduced in the Senate on February 25, 2026 and assigned to Health and Human Services, it would have made a defined list of med spa conduct an unfair or deceptive trade practice under the Colorado Consumer Protection Act: acquiring a prescription drug from a person not legally authorized to distribute it, failing to properly store or handle drugs, permitting a person to prescribe outside their scope, failing to safeguard against contamination or theft, misrepresenting a drug's safety or FDA approval status, failing to designate a licensed provider responsible for oversight, and failing to keep records of serious adverse events. Notably it would not have required registration or a facility license. It did not pass before adjournment on May 13, 2026.

SB26-066, Compounded Weight-Loss Medication — Postponed Indefinitely May 5, 2026

This bill did not become law. It would have regulated the sale, transfer, and distribution of compounded weight-loss medication — preparations intended for obesity or weight management containing an active ingredient found in an FDA-approved drug. It passed the Senate on third reading on April 17, 2026 by 20 to 15, then the House Committee on Health and Human Services postponed it indefinitely on May 5, 2026. Colorado therefore has no compounded-GLP-1 statute; your obligations run through the Medical Practice Act, the Nurse Practice Act, pharmacy law, and federal compounding limits, as before.

What a Colorado Owner Should Be Watching Next

Three things carry real 2027 signal. None of them is law today, and none should appear in your policies as a requirement.

The Nurse Practice Act Sunset Review

The Board of Nursing review runs now, with a report due by October 15, 2026 and a sunset bill expected in 2027 ahead of the September 1, 2027 repeal date. It is the most likely vehicle for a change to nursing scope, RN delegation, or APRN prescriptive-authority requirements, and it takes stakeholder comment before the report is written.

Colorado Medical Board Rulemaking

Rule changes do not need a legislative session. The Colorado Medical Board calendared a permanent rulemaking hearing for August 27, 2026; check the Board's published notice for the rules under consideration, because the notice, not a headline, tells you whether anything in 3 CCR 713-1 is in play. Nothing had been adopted from it as of this writing. Subscribe to DORA's rulemaking notices rather than trade coverage, which usually arrives after the comment period closes.

A Likely Return of the Med Spa Drug-Sourcing Bill

SB26-130 failed, but the ideas inside it — verified drug sourcing, storage and handling standards, a named provider responsible for oversight, and retained records of serious adverse events — are cheap to build and hard to argue against. A practice that builds them now is not gambling on a forecast: each is already defensible under existing standards of care, and each puts you ahead if a similar bill returns.

What Has Not Changed — and Is Still Commonly Violated

Colorado enforcement in 2026 runs on rules that are years old. These five patterns account for most files, and every one is a paperwork failure rather than a clinical one.

Delegation That Exists Only on Paper

A signed agreement naming a delegating physician, with no dated competence assessment behind it and no evidence anyone watched the delegatee work, is the most common Colorado violation. Rule 1.17 requires the delegating physician or APRN to personally assess competence for each delegated service, including initial monitoring of the person performing it. A vendor certificate does not substitute; neither does a job title.

The Missing Two-Week Site Visit

The rule requires quality monitoring at least every two weeks, at the site where services are performed, through direct observation and review of care, outcomes, equipment, protocols, and charts, plus annual reassessment. A remote medical director on a monthly retainer making quarterly visits is not compliant, however clean the contract looks — and this is the duty an investigator asks the provider to evidence first.

HB25-1024 Disclosures Nobody Posted

In force since August 6, 2025: where a physician or APRN delegates medical-aesthetic services to a person who is not a licensed health-care provider, the practice must post a highly visible on-site sign with the delegating practitioner's name, license number and contact information plus the board's complaint web address; disclose the arrangement on the website and in advertising for that person; and obtain written consent stating the service is delegated to an unlicensed individual, signed before treatment and retained at least seven years. A missing consent is a standing violation on every chart it is absent from.

The Good-Faith Exam That Never Happened

Colorado never uses the phrase, but the requirement arrives through the practice-of-medicine analysis. Neurotoxins, fillers, and Class IIIb and higher devices are prescription products and devices, so a physician, APRN, or PA must evaluate the patient and issue the order before treatment. Rule 1.17 reinforces it by permitting delegation only of routine, technical services, which presupposes the clinical decision was already made. Treating on an intake form, or continuing a series after a material change in area, product, or medication, is where a delegated technical service quietly becomes unlicensed medical judgment. Our Colorado medical director requirements guide covers that workflow.

Advertising That Now Fails Two Laws at Once

The newest exposure is the oldest asset: your website. A team page naming an unlicensed injector without the HB25-1024 delegation disclosure has been non-compliant since August 6, 2025. That same page, if it names the person without stating their credential type, has been separately non-compliant under SB25-152 since June 1, 2026. One page, two statutes, both checkable from outside your building.

Your 2026 Colorado Update Checklist

Everything above reduces to a short list for this quarter. Work it in order.

1. Audit every page that names a person. Team pages, injector bios, booking flows, paid ads, social profiles — each named practitioner needs their license, certificate, or registration type stated, per SB25-152 as of June 1, 2026.
2. Delete every title Colorado does not issue. Medical aesthetician, master injector, master laser specialist. Replace with the actual credential, or remove the name.
3. Layer the HB25-1024 disclosure on top. Where a named person is an unlicensed delegatee, the delegation disclosure belongs on the website and in advertising for them too.
4. Walk the lobby. Confirm the posted sign is highly visible and carries the delegating practitioner's name, license number, contact information, and the board's complaint address.
5. Pull ten charts at random. Confirm the delegated-service consent was signed before treatment and is retained on a seven-year schedule.
6. Date-stamp your delegation file. Competence assessments per person per service, authorized-service lists available at the site, annual reassessments, and written treatment plus emergency protocols.
7. Put the two-week monitoring on the calendar. With a documented method and named observer, at each site where services are performed.
8. Verify your compounded-drug supply chain. Every source a state-licensed pharmacy or FDA-registered 503B outsourcing facility, documented.
9. Correct any binder citing HB26-1249, SB26-130 or SB26-066 as law. All three failed; none has an effective date.
10. Diary the watch items. Nursing sunset report by October 15, 2026, and the Medical Board rulemaking notice for its August 27, 2026 hearing.

The American Med Spa Association tracks Colorado legislation usefully alongside Colorado healthcare counsel. If you would rather not draft the delegation files, consent forms, sourcing logs and monitoring records this list implies, our library of med spa SOP and protocol kits maps to every item above.

This article is for informational purposes only and does not constitute legal or medical advice. Bill status, effective dates, rule citations and agency guidance change over time, and enacted text may differ from summaries, including the dates and dispositions referenced here. Confirm current requirements against the enacted bill text, the Code of Colorado Regulations, and the relevant Colorado agency, and consult a Colorado healthcare attorney before changing how your practice advertises, delegates, staffs, or sources medications.

Frequently Asked Questions