Florida Botox & Filler Regulations: 2026 Compliance Guide
How Florida actually regulates neuromodulators and dermal fillers — what a physician may delegate and to whom, what has to happen before the needle, where the product may be bought, and what happens when something goes wrong.
In short
Injecting a neuromodulator or a dermal filler is the practice of medicine in Florida. That single classification drives everything else: the drug must be prescribed by someone with prescribing authority after a real examination, the injection must be performed by a licensee acting inside a written delegation, the product must come from a distributor licensed to sell it in Florida, and the practice must either hold an AHCA health care clinic licence or hold a documented exemption from it. The most consequential 2026 development is not a new statute — it is the Board of Nursing tightening what supervision of a registered nurse injector actually means.
⚡ What changed for 2026
- Board of Nursing guidance has treated direct supervision of an RN injector as requiring the physician to be physically present and visually observing — not merely reachable by phone.
- An APRN has not been accepted as a substitute for the physician in that supervisory role, which breaks a staffing model many Florida med spas were built on.
- Autonomous APRN registration still does not reach aesthetics — bills to widen APRN scope died again in the 2026 session.
- Federal enforcement against counterfeit and imported botulinum toxin has escalated, including warning letters to online sellers and criminal sentences for Florida operators.
Most Florida injectable compliance problems are not caused by anyone deciding to break the law. They are caused by a practice adopting a structure that sounded normal — a nurse injector, a medical director who signs quarterly, a distributor found online, a consultation form standing in for an exam — and never testing it against what four separate regulatory bodies each require.
This page covers the regulatory picture: delegation, supervision, examination, sourcing, facility status, adverse events, advertising and records. The narrower question of which licence types may put a needle in a face, credential by credential, is treated in our companion guide, Who Can Inject Botox in Florida? — this page summarises it and moves on.
How Florida Regulates a Syringe: Four Bodies, One Injection
There is no single Florida med spa regulator and no med spa licence. A Florida injectables practice is instead regulated at four separate points, by bodies that do not coordinate with one another and that can each act independently. Understanding which body owns which question is the difference between fixing a problem and fixing the wrong problem.
The Department of Health
The Department of Health, through its Division of Medical Quality Assurance, licenses individual practitioners, receives complaints, investigates, and prosecutes discipline before the professional boards. DOH also runs unlicensed activity enforcement, which is the arm that reaches people who are not licensees at all — the esthetician who injected, or the owner who let them. DOH is the body that will contact you first when a patient complains.
The Board of Medicine and the Board of Osteopathic Medicine
The Board of Medicine governs MDs under chapter 458 and writes the rules in title 64B8 of the Florida Administrative Code; the Board of Osteopathic Medicine does the same for DOs under chapter 459. These boards define what a physician may delegate, what the medical record must contain, what advertising may claim, and what standard of care means in an office setting. Because delegation flows downward from the physician, these boards effectively set the ceiling for everyone else in the building.
The Board of Nursing
The Board of Nursing governs RNs, LPNs and APRNs under chapter 464 and title 64B9. It decides whether a nursing licensee accepting a delegated task is practising within their scope. Critically, the Board of Nursing can reach a different conclusion from the Board of Medicine about the same arrangement — a physician can be perfectly entitled to delegate a task that a nurse is not entitled to accept. Both sides of that transaction have to be lawful independently.
The Agency for Health Care Administration
AHCA is the odd one out: it regulates facilities, not people. Under the Health Care Clinic Act in part X of chapter 400, AHCA decides whether your business entity must hold a health care clinic licence or may operate under an exemption. AHCA has no opinion on who may hold the syringe. It cares who owns the company, who supervises its business activities, and whether the entity is billing third parties. Practices routinely get the practitioner side right and the facility side wrong.
Why the overlap matters
These jurisdictions stack rather than substitute. A nurse injector operating under a physician protocol the Board of Medicine would accept can still be found by the Board of Nursing to have practised outside her scope, and an entity properly exempt from AHCA licensure still answers to DOH for how its injections are supervised. Run any proposed structure past all four filters, not the most convenient one.
Why Botox and Fillers Are the Practice of Medicine in Florida
Everything downstream in this guide follows from one classification, so it is worth stating precisely.
Neuromodulators are prescription drugs
Botulinum toxin type A — sold as Botox, Dysport, Xeomin, Daxxify, Jeuveau and others — is an FDA-approved prescription drug. A prescription drug can only be ordered by someone holding prescriptive authority, and only for a patient with whom that prescriber has established a genuine relationship. This is why no amount of injector training creates authority: a certificate documents skill, and Florida is asking about licence.
Fillers are devices, and it changes less than people expect
Dermal fillers — hyaluronic acid products such as Juvederm and Restylane, calcium hydroxylapatite such as Radiesse, poly-L-lactic acid such as Sculptra — are regulated by the FDA as medical devices rather than as drugs. Operators sometimes read that distinction as meaning fillers are less regulated at state level. They are not. Florida treats the injection itself as the practice of medicine regardless of whether the substance in the syringe is classified as a drug or a device, so the delegation and supervision analysis is the same. The device classification changes the sourcing paperwork, not who may inject.
What that classification rules out
Because injection is the practice of medicine, performing it without an appropriate licence is unlicensed practice — a felony under section 456.065, alongside administrative fines. This is the provision that reaches estheticians, cosmetologists, medical assistants and unlicensed staff. It also reaches owners: permitting unlicensed practice is itself exposure, and relying on a manager's assurances is not a defence.
Delegation and Supervision: What a Florida Physician May Delegate
Florida medicine is built on delegation. A physician may delegate tasks to others, but the delegation is bounded, and the boundaries are where med spas fail.
The three conditions of a valid delegation
A delegation only holds if three things are true at once. The task must be one the physician is competent to perform personally. The person accepting it must be qualified by training and licence to perform it. And the physician must provide the level of supervision the task requires. Fail any one and the delegation collapses — which means the person who injected was practising medicine without authority and the physician who delegated failed to supervise. Both are disciplinable.
Levels of supervision, and why the label matters
Florida uses supervision terminology that operators tend to blur together, and the distinction decides cases:
- Direct supervision — the supervising physician is physically present on the premises and, in the Board of Nursing's recent framing for aesthetic injection, visually observing the procedure.
- Indirect or general supervision — the physician is not on site but is readily reachable and has issued the orders and protocols under which the work proceeds.
- Protocol-based collaboration — the arrangement that governs APRNs and PAs, where a written document defines the scope of practice in advance rather than the physician directing each act.
Practices often describe their medical director as providing supervision without ever specifying which of these they mean. If a regulator asks and the answer is not in a document, the answer is whatever the facts show — and the facts usually show less supervision than the practice believed.
What a medical director actually has to do
A medical director who signs a protocol annually and never appears is a compliance liability rather than a shield. The role carries real obligations: reviewing and updating protocols, verifying that injectors are credentialed for what they do, reviewing charts, being genuinely available when reached, and owning the emergency plan. Where the practice holds an AHCA clinic licence, those responsibilities are statutory rather than merely contractual. Our guide to Florida medical director requirements covers the role in detail.
What cannot be delegated at all
Some acts stay with the prescriber. The examination that establishes the patient relationship, the diagnosis, the treatment plan and the order for the drug are prescriber functions. A practice can delegate the injection; it cannot delegate the decision to treat. Arrangements where an injector selects the patient, decides the product and the dosing, and treats — with a prescriber's signature appearing afterwards — invert the sequence the law requires, no matter how experienced the injector is.
Who May Inject in Florida — The Short Version
Here is the summary; the credential-by-credential analysis, including the edge cases and the paperwork each licence type needs, lives in Who Can Inject Botox in Florida?
Physicians
MDs and DOs holding an active, unencumbered Florida licence may prescribe and inject independently, within their competence. No protocol, no delegation, no supervision. Competence is a real limit and a liability one — a physician with no aesthetic training who begins injecting is legally permitted and practically exposed.
APRNs and PAs
Both may prescribe and inject, and neither requires the physician to be physically present. Both require a written document: a collaborative protocol under section 464.012 for APRNs, a supervising physician's protocol under section 458.347 for PAs. In both cases the document has to actually authorise neuromodulator and filler administration. Generic protocols that describe aesthetic services without naming what is being injected are the single most common paperwork failure we see in Florida.
Registered nurses
RNs may administer medications under a prescriber's order, and Florida has permitted RN aesthetic injection as a delegated medical act — but on terms that have tightened significantly and remain contested. This is important enough that it gets its own section below.
Who may not inject
Estheticians and cosmetologists may not inject, and no certification changes that; their licences are issued under a different chapter entirely and do not authorise administering prescription drugs or performing medical procedures. LPNs do not have the scope for aesthetic injection. Medical assistants are unlicensed personnel in Florida and may perform only delegated tasks that do not require licensure — injecting a prescription drug is not one of them.
The Autonomous APRN Trap: Why 464.0123 Does Not Cover Aesthetics
This is the most expensive misunderstanding in Florida med spa ownership, and it catches sophisticated operators.
What autonomous registration actually grants
Florida created autonomous practice registration for qualifying APRNs under section 464.0123. Registration requires substantial supervised clinical hours, specified graduate coursework, and a clean disciplinary history. An APRN who obtains it may practise without a supervisory protocol — but only within primary care, which the law defines as family medicine, general pediatrics and general internal medicine, together with the acts a certified nurse midwife may perform.
Why aesthetics falls outside it
Aesthetic injection is not family medicine, general pediatrics or general internal medicine. It therefore sits outside the autonomous grant, and an autonomously registered APRN who opens an injectables practice still needs a collaborative protocol with a physician for that work. The registration is real; it simply does not reach this service line. The same reasoning excludes the other services med spas commonly bundle alongside injectables.
The practical consequence
Florida APRNs may own med spas outright, and many do. Ownership is not the issue — the clinical authority is. An APRN-owned injectables practice with no collaborating physician has an unlawful clinical structure even though it has a lawful corporate one, and the two get confused constantly. Bills to broaden APRN scope have been filed repeatedly and did not pass in the 2026 session, so this remains the position.
The RN Question Is Genuinely Unsettled — and Recently Got Stricter
If you take one thing from this guide, take this: Florida's treatment of RN aesthetic injection is not settled law, it has moved in a restrictive direction, and a great many Florida med spas are staffed on the basis of the older, looser understanding.
Where the rules actually come from
There is no Florida statute or rule that says in terms whether an RN may inject Botox. The Nurse Practice Act permits RNs to perform delegated medical acts under a prescriber's order, and the question of whether cosmetic injection is such an act has been answered case by case through declaratory statements — rulings the Board of Nursing issues to a specific petitioner about that petitioner's specific facts.
What the Board has said
The Board has not spoken with one voice. It has issued statements permitting a petitioning RN to administer cosmetic toxin injections where a physician examined the patient, wrote an order specifying the muscles to be injected and the units per site, and delegated the task — including a final order to that effect in October 2023. It has also drawn a line in another matter treating aesthetic injection as outside RN scope. The petitioners' own training histories mattered to the outcomes, which tells you how fact-bound these rulings are.
The supervision standard has tightened
The more consequential development is what supervision has come to mean here. Board guidance has treated direct supervision of an RN aesthetic injection as requiring the physician to be physically present and to have visualisation of the injection — in the room, watching. On that reading, remote or standby availability does not satisfy the standard, and an APRN does not substitute for the physician in the supervisory role. Guidance has also indicated that patient-facing consent should disclose that an RN is performing the procedure.
Why someone else's declaratory statement will not protect you
A declaratory statement binds the Board as to the petitioner who asked. It is not a rule, it does not generalise, and printing one out for your staff file confers nothing. Practices relying on a nurse-injector model with an off-site physician, or with an APRN supervising the RN, should get Florida counsel to review the arrangement now rather than after a complaint — and should understand that an RN found to have exceeded her scope faces discipline under the unprofessional conduct rule regardless of how the practice characterised the arrangement.
An honest statement of the uncertainty
We are not going to tell you this question has a clean answer, because it does not. What can be said with confidence: the conservative structure — physician or APRN or PA injecting, or an RN injecting with a physician physically present and observing under a patient-specific written order — is defensible today. Structures that depend on a looser reading of supervision carry genuine, current regulatory risk, and that risk has been increasing rather than receding.
The Good-Faith Exam: What Florida Actually Requires Before Injection
Florida does not have a statute headed "good faith examination." It has something that amounts to the same thing, assembled from the prescribing rules, the medical records rules and the standard of care — and the absence of a single citation causes operators to underestimate it.
What the exam has to establish
Before a prescription drug is ordered for a patient, a prescriber must have established a practitioner-patient relationship and performed an evaluation sufficient to support the treatment. In practice that means a documented history, relevant medical and medication history including prior neuromodulator and filler exposure, assessment of contraindications, an examination of the area to be treated, a diagnosis, and a treatment plan naming the product, the sites and the dosing. An intake form completed at the front desk does not establish a practitioner-patient relationship, and neither does a checkbox added to a consent.
Who may perform it
The exam is a prescriber function: a physician, PA or APRN with prescriptive authority. It cannot be delegated to the injecting RN, and it cannot be performed by an aesthetician or a patient coordinator. A recurring Florida structure — the injector evaluates and treats, and a prescriber signs the chart afterwards — does not satisfy the requirement, because the order has to precede the treatment.
Telehealth is permitted, with conditions
Florida's telehealth statute, section 456.47, permits the evaluation to occur by telehealth, and applies to it the same standard of care, scope-of-practice limits and documentation requirements that apply in person. The practical conditions that follow: the encounter has to be a real, synchronous, two-way interaction rather than a form or a store-and-forward questionnaire; the practitioner must be able to conduct an adequate assessment through that medium; and the encounter must be documented as thoroughly as an in-person visit. Where Florida is stricter than some states is the pairing — the practitioner performing the telehealth evaluation should hold prescribing authority for the treatment ordered, rather than the exam and the prescription being split across two providers.
How often it has to be repeated
This is a genuine gap. Florida does not specify an interval at which a returning patient must be re-examined, so practices set their own policy and defend it as reasonable. What is not defensible is treating one exam as permanent authority for indefinite future treatment. A workable approach is documented re-evaluation at a fixed interval and always on any change in medical history, medication, pregnancy status, or a new treatment area or product — with the reasoning written into your protocol so it reads as considered policy rather than omission.
Run a compliant Florida injectables program.
The Injectables Kit includes delegation and supervision SOPs, good-faith exam templates, consent forms, and vascular occlusion emergency protocols.
View Injectables Kit — $29730-day money-back guarantee
Prescribing, Ordering, and Stocking Neurotoxins and Fillers
How product legally reaches a patient is a distinct compliance track from who injects it, and the one practices document worst.
Two different pathways, often confused
There are two ways a prescription drug reaches a patient, and neuromodulators normally travel the second. In the dispensing pathway, a prescriber writes a prescription, a pharmacy fills it for a named patient. In the office stock pathway, the practice purchases product from a licensed distributor under a prescriber's authority, holds it as inventory, and administers it in office against a patient-specific order written after the examination. Most Florida med spas operate the second pathway, and the paperwork it requires is a purchase trail plus an order in the chart — not a pharmacy prescription.
The electronic prescribing mandate, and where it bites
Section 456.42 requires Florida prescribers to transmit prescriptions for medicinal drugs electronically, subject to enumerated exceptions — impracticality for the patient, research protocols, drugs whose prescriptions need elements electronic transmission cannot carry, hospice and nursing home patients, and price comparison — and the department may grant a waiver of up to a year for demonstrated economic hardship or technological limitations. The mandate governs prescriptions transmitted to a pharmacy for dispensing. It does not convert office-administered stock into a prescription that must be e-transmitted. The mandate does become directly relevant to a med spa the moment it prescribes anything a patient collects from a pharmacy — which for injectables practices most often means adjunctive medications rather than the toxin itself.
What the order in the chart has to show
Whoever injects, the chart must contain a prescriber's order that came first and that is specific enough to be followed without independent clinical judgement by the person executing it: product by name, dilution where relevant, injection sites, units per site, and the date. Where an RN is injecting, the specificity of that order is not a formality — it is the thing that makes the act delegated rather than independent, and the declaratory statements turn on exactly this level of detail.
Product Sourcing: FDA-Approved Versus Imported and Grey-Market
Sourcing is where an ordinary compliance problem becomes a criminal one, and the enforcement trend since 2024 has been sharply upward.
What lawful sourcing looks like
Product must be the FDA-approved version, purchased from a distributor licensed to distribute prescription drugs in Florida, under the authority of a licensed prescriber associated with the practice. Florida regulates wholesale drug distribution under its own drug and cosmetic act, and buying outside that system is a state-law problem before it is ever a federal one. The practical test is unglamorous: can you produce, for any vial you have used, an invoice from a named licensed distributor showing the product and lot?
What imported and grey-market product actually is
Foreign-labelled botulinum toxin bought from an overseas seller or an online marketplace is not merely cheaper — it is unapproved, misbranded, or counterfeit as a matter of law, whatever is actually in the vial. The FDA has issued warning letters to online sellers offering unapproved botulinum toxin, and a cluster of harm between late 2023 and early 2024 saw people across many states injured, some hospitalised with botulism-like symptoms, after receiving counterfeit product.
The consequences, which are not theoretical in Florida
The exposure runs on three tracks at once. Board discipline for the licensees involved. State drug law liability for the entity. And federal prosecution — a South Florida operator has been sentenced to federal prison over illegal importation of unapproved prescription drugs used for injectable treatments. And a patient injured by unapproved product faces a defendant whose insurer may well decline coverage.
Storage, handling and lot tracking
Legitimate sourcing still fails if handling does not hold up. Log refrigeration within the manufacturer's range, keep a temperature excursion procedure, track expiry, and record the product name and lot number in every patient's chart. Lot capture is what lets you respond to a recall or an adverse event cluster — and its absence makes an otherwise defensible practice look careless.
Get the Free Med Spa Compliance Checklist
A printable checklist of every SOP category, emergency protocol, and record your practice needs to pass a state board inspection. Enter your email and we'll send it over.
It usually lands in your Promotions tab (or spam) — move it to your inbox and add MedSpa Standards to your contacts so you don't miss the follow-ups.
Join 200+ med spa professionals. Unsubscribe anytime.
Facility Requirements: When AHCA Licensure Is Triggered
The facility question is decided by ownership and billing, not by what you do clinically. Two med spas offering identical injectable services can land on opposite sides of it.
The clinic definition
Part X of chapter 400 — the Health Care Clinic Act — requires an entity meeting the statutory definition of a clinic in section 400.9905 to hold a health care clinic licence from AHCA. Broadly, the Act reaches entities where licensed practitioners provide health care services and which bill third parties for them. Entities billing insurers, workers' compensation or Medicaid are squarely in scope; a cash-pay aesthetic practice is a closer question that turns on ownership.
The practitioner-ownership exemption
The exemption most Florida med spas rely on is section 400.9905(4)(g), which exempts entities wholly owned by one or more licensed health care practitioners, provided that one of the practitioner owners supervises the business activities and is legally responsible for the entity's compliance with all federal and state laws. Read the conditions carefully, because each is load-bearing. Wholly owned means exactly that — a single non-practitioner investor holding equity can defeat the exemption for the entire entity. And the practitioner owner has to actually supervise the business and accept legal responsibility, not merely appear on the cap table.
The certificate of exemption
Being exempt and being able to prove it are different things. An entity relying on an exemption applies to AHCA for a certificate of exemption, which must be renewed on the schedule AHCA sets rather than obtained once and forgotten. Entities seeking a certificate are also required to publish and maintain a schedule of charges for services provided to uninsured patients paying by cash, cheque, credit or debit card. Practices that took the exemption years ago and never renewed the certificate, or that changed their ownership without re-testing the exemption, are the common failure pattern.
When ownership changes, re-test everything
Bringing in an outside investor, adding a non-practitioner partner, converting to a management services structure, or selling to a group all potentially move an entity from exempt to licensable. Florida does not apply a blanket corporate practice of medicine prohibition the way some states do, which leads operators to assume ownership structure is unregulated here. The Health Care Clinic Act performs much of that function instead, and it does so through exactly these ownership tests.
Office surgery registration and inspections
Separately from AHCA, the Board of Medicine requires registration of physician offices where office surgery at defined levels is performed, with associated inspection or accreditation. Routine cosmetic injection without sedation is not generally what that regime targets, but the boundaries are set by the rule's levels rather than by whether a practice thinks of itself as surgical — and adding sedation or procedures beyond injectables can cross the line without anyone noticing. For what an inspection involves once you are subject to one, see the Florida med spa AHCA inspection guide.
Adverse Events: Reporting Duties and Vascular Occlusion Readiness
Injectable practices tend to plan for the clinical emergency and forget the regulatory one. Both have deadlines.
The fifteen-day reporting duty
Section 458.351 requires physicians to report adverse incidents occurring in office practice settings not licensed under chapter 395 to the Department of Health, in writing, postmarked within fifteen days of the incident, with a parallel provision for osteopathic physicians. An adverse incident is defined by reference to events the practitioner could control that are associated with the medical intervention rather than the underlying condition and that produce specified patient injuries. The trigger is the severity of the outcome, not the complexity of the procedure — which is precisely why injectable practices miss it. A filler complication that causes serious injury or sends a patient to hospital can be reportable even though the injection was entirely routine.
Vascular occlusion is the emergency to plan for
Filler occlusion of a vessel can cause tissue necrosis, and in periocular and nasal territories, blindness. It is time-critical, it is not rare enough to treat as hypothetical, and outcomes depend almost entirely on how fast the person in the room recognises it and begins treatment. Every Florida practice offering filler needs a written vascular occlusion protocol, hyaluronidase stocked, in date and immediately accessible wherever HA filler is injected, staff who have rehearsed recognition and response rather than merely read about it, and a defined escalation path including when to send the patient to emergency care. Our vascular occlusion guide covers recognition and management in clinical detail.
The rest of the emergency kit
Anaphylaxis can follow either product class, so epinephrine must be on site, in date and accessible, with staff trained to use it and a protocol naming who calls emergency services. Hold protocols too for vasovagal syncope and for toxin spread beyond the injection site, and log expiry dates on emergency medications with the discipline applied to product stock. Expired hyaluronidase found during an investigation is a memorable way to lose a defensible case.
What to document when something goes wrong
Contemporaneous documentation decides these matters. Record the time of onset, the presenting signs, what was administered and when, who was contacted, the physician's involvement, the patient's disposition and every follow-up contact — written as events unfold rather than reconstructed afterwards. Then assess the reporting duty on its own timeline, because the fifteen days runs from the incident, not from when the practice finishes its internal review.
Advertising, Before-and-After Photos, and Credential Claims in Florida
Advertising is the most public part of a med spa's compliance posture and the easiest for a regulator or competitor to review without ever entering the building.
The governing standard
Rule 64B8-11.001 prohibits a physician from disseminating advertising that is false, deceptive or misleading, and defines that to include misrepresentation of fact, partial disclosure of relevant facts, creating false or unjustified expectations of beneficial assistance, and claims about services the physician does not expect to perform. The partial-disclosure and unjustified-expectation limbs are the ones aesthetic marketing trips over, because both catch advertising that is literally true.
Before-and-after photographs
Florida's advertising rule does not set out photograph-specific requirements the way a handful of other states do, so the analysis runs through the general standard rather than a checklist. Applying it: photographs should be of your own patients, taken with consent that covers marketing use, unretouched, and shot under consistent lighting, angle and expression. Results materially better than typical create unjustified expectations unless disclosed as atypical. Omitting how many sessions, how much product, or what adjunctive treatments produced the result is the partial disclosure the rule names. Consent for clinical records does not carry over to advertising use — that needs its own written authorisation, and it should address the platforms and the duration.
Credential and title claims
How your team is described has to match what they hold. Titles suggesting physician status for non-physicians, "specialist" or "expert" framing implying a certification nobody holds, or board certification claims referencing bodies that are not recognised certifying boards are all straightforward deception findings. Advertising should make the treating licensee's credentials identifiable rather than presenting an undifferentiated clinical team.
Social media, influencers and reviews
Everything above applies to social posts, stories and paid partnerships — the rule reaches advertising, not a list of approved channels. Content posted by influencers or staff on the practice's behalf is the practice's advertising. Material connections must be disclosed, incentivised reviews are a separate deception problem, and pricing promotions that omit conditions run into partial disclosure. Keep an archive of what you published and when.
Recordkeeping and Consent Expectations
In a Florida investigation the chart is the case. Where practice and documentation diverge, the documentation wins.
What each treatment record must show
A defensible injectable record establishes the sequence the law requires. It should show the examination and who performed it, the history and contraindication screening, the diagnosis and treatment plan, the prescriber's order preceding treatment, the product name and lot number, the dilution where relevant, the sites and units administered, who injected and under what supervision, the consent obtained, post-treatment instructions given, and any complication and response. If an RN injected, the record must make the delegation visible — the physician's specific written order and the supervision actually provided.
Retention
Board of Medicine rules require physicians to retain medical records for at least five years from the last patient contact, alongside the records obligations in section 456.057 governing access, transfer and what happens when a practice closes or relocates. Five years is a floor rather than a target: Florida's malpractice limitations and repose periods can extend exposure beyond it, so most healthcare attorneys advise retaining longer. Photographs taken for clinical purposes are part of the record and inherit the same obligations, including secure storage — which matters if your before-and-after images live on a phone.
Consent
Florida's Medical Consent Law, section 766.103, sets the framework: the practitioner must generally describe the procedure, explain medically acceptable alternatives, and explain the substantial risks and hazards. Consent evidenced in writing and validly signed raises a rebuttable presumption that consent was valid — which is the practical reason to document it properly. Consents should be product-specific and procedure-specific rather than a single form covering everything the practice offers, should name vascular occlusion expressly for fillers, and should be re-obtained when the product, the treatment area or the patient's circumstances change. Where an RN is injecting, current guidance points toward the consent disclosing that.
Florida Enforcement Patterns, Penalties, and a Defensible Program
Enforcement in Florida is overwhelmingly complaint-driven, which means the practices that get investigated are not the worst ones — they are the ones with an unhappy patient or a departing employee.
How cases actually start
The common entry points are a patient complaint after a poor result, a report from a competitor, a former staff member with direct knowledge of how the practice is really run, an adverse event reaching an emergency department, and the practice's own advertising. Once DOH opens a file it is not confined to the complaint — investigators examine supervision, charts, sourcing and advertising together, so a complaint about a bruise routinely becomes a finding about protocols.
What penalties look like
Exposure is cumulative rather than singular. Unlicensed practice of medicine is a felony under section 456.065, with administrative fines alongside it. Licensees face the full disciplinary range: citation, fine, remedial education, probation, restriction, suspension and revocation, and per-violation fines that multiply because one inspection commonly generates several findings. Health Care Clinic Act violations carry their own penalties, and fraud referrals follow where billing is involved. Beyond the regulators sit the practical consequences — malpractice exposure, insurance disputes, and a public disciplinary record that follows every licensee involved. Our breakdown of the compliance mistakes that get Florida med spas shut down covers the recurring fact patterns.
Owner exposure
Non-clinical owners frequently assume the licensees carry the risk. They do not carry all of it. Permitting unlicensed practice reaches whoever permitted it, the practitioner owner claiming the AHCA exemption has accepted written legal responsibility for the entity's compliance, and an entity operating without a required licence or valid exemption is exposed as an entity. Delegating compliance to a manager does not transfer it.
The structural checklist
A Florida injectables program that survives scrutiny generally has these in place, current and retrievable:
- Medical director agreement naming the physician, specifying oversight duties and the level of supervision provided, with evidence it is performed
- Written protocols per injector — collaborative protocol for APRNs, supervising physician protocol for PAs, patient-specific physician orders for RNs — each expressly naming neuromodulators and fillers
- Good-faith examination policy covering who performs it, what it documents, telehealth conditions and the re-examination interval
- Credentialing file per injector — licence verification, training, competency sign-off and scope-relevant continuing education
- Sourcing file — distributor licence verification and invoices traceable to lot numbers in charts
- Storage records — temperature logs, excursion procedure, expiry tracking
- Emergency protocols — vascular occlusion with in-date hyaluronidase, anaphylaxis with in-date epinephrine, documented staff drills
- Adverse incident procedure including the fifteen-day reporting assessment
- Consent forms per product and procedure, plus separate photography and marketing authorisations
- AHCA status documentation — clinic licence or current certificate of exemption, re-tested whenever ownership changes
- Advertising archive and a review process applying the deceptive advertising standard before publication
Where to start if you are behind
Take them in risk order. Confirm every person injecting is doing so under a structure lawful today, with particular attention to any RN injector and any APRN relying on autonomous registration. Then verify sourcing, because that is the exposure that becomes criminal. Then emergency readiness, because that is the one that harms a patient. Documentation and advertising come next — serious, but survivable if the first three are sound. Browse the full MedSpa Standards library for the underlying templates.
Disclaimer: This article is for educational purposes only and does not constitute legal or regulatory advice. Florida statutes, board rules and declaratory statements change, and several questions discussed here — particularly the scope of RN aesthetic injection — remain genuinely unsettled. Consult a licensed Florida healthcare attorney for guidance specific to your practice, your ownership structure and your provider credentials.