Florida Med Spa AHCA Inspection: What to Expect & How to Prepare

What Is an AHCA Inspection and Who Is Subject to It?

The Agency for Health Care Administration (AHCA) is Florida's primary healthcare regulatory agency. Under Florida Statute Chapter 400, Part X, AHCA licenses and oversees healthcare clinics — a category that includes many Florida med spas that bill third-party payers for medical services.

However, even med spas that operate as cash-only businesses are not entirely outside the regulatory reach. The Florida Department of Health (DOH), which oversees individual professional licenses, also conducts inspections and investigates complaints independently of AHCA. In practice, a Florida med spa may face scrutiny from AHCA, the DOH Board of Medicine, the Board of Nursing, or all three — depending on how the practice is structured and what triggered the review.

Understanding which agency governs which aspect of your practice is step one in inspection preparedness. AHCA focuses on facility licensing and operational compliance; the DOH focuses on individual professional licenses and scope of practice violations. Both can issue fines, and DOH can initiate license revocation proceedings against individual providers.

What AHCA Looks for in a Florida Med Spa Inspection

Based on Florida Statute 400.9935 and the AHCA Healthcare Clinic standards, inspectors assess compliance across several domains. Here is what every Florida med spa owner should understand about each one.

1. Licensing and Corporate Documentation

The first thing an inspector will verify is whether your facility is properly licensed to operate as a healthcare clinic. If your med spa bills any insurance — including HSA/FSA payments processed through a health insurance administrator — you likely need an AHCA Healthcare Clinic license. You must also be able to produce:

• A copy of your current AHCA Healthcare Clinic license (if applicable), displayed or accessible on-site
• Local business tax receipt
• Certificate of Use and Occupancy
• Corporate formation documents showing ownership structure
• Any applicable specialty licenses for services offered (e.g., electrology establishment license)

One common trap: many med spa owners assume they don't need an AHCA license because they only accept cash. But if your practice accepts payment from a health insurance administrator, or if a patient submits a receipt to their FSA/HSA for reimbursement, the payment processing chain may trigger AHCA licensing requirements. When in doubt, consult a Florida healthcare attorney.

2. Medical Director Documentation

This is arguably the most scrutinized area in a Florida med spa inspection. Under Florida law, all medical procedures performed at a med spa must be supervised by a licensed physician (MD or DO) or, in some cases, an Advanced Registered Nurse Practitioner (ARNP) operating under a physician supervisory agreement. Inspectors will ask to see:

• The current, signed Medical Director Agreement (naming the specific MD or DO)
• A copy of the Medical Director's active Florida medical license in good standing
• Written delegation protocols specifying which procedures each non-physician provider is authorized to perform
• Signed visit logs documenting that the Medical Director has been physically present at the facility
• Evidence that the Medical Director has reviewed and signed all clinical SOPs

A "ghost" Medical Director — one who signed an agreement but never visits and has no meaningful oversight — is a serious violation that can result in immediate sanctions. Inspectors are trained to look for documentation gaps that suggest nominal rather than actual supervision. If your MD signed protocols two years ago and has never been back, that's a red flag.

3. Staff Credentials and Scope of Practice

Every clinical staff member must hold an active Florida professional license appropriate for the procedures they perform. Inspectors will verify this by examining staff personnel files and cross-referencing with the Florida Department of Health license verification system. Key requirements include:

• Active Florida RN, LPN, ARNP, or PA license for all injection providers
• Signed delegation protocols for any non-physician provider performing injectable procedures
• A written scope-of-practice matrix defining what each provider is authorized to perform
• Laser operator credentials (discussed further below)
• CPR/BLS certification current for all clinical staff
• Documentation that staff training has been completed for each procedure performed

Florida has historically been a "delegation" state for injectable procedures — meaning RNs can inject Botox and fillers only under a specific, written delegation protocol from a supervising physician. The inspector will check that these protocols exist, are current, and match the procedures being performed. See our guide on who can inject Botox in Florida for a complete breakdown of scope-of-practice rules.

4. Standard Operating Procedures (SOPs)

Inspectors expect to see written, signed SOPs for every procedure your med spa offers. This includes not just emergency procedures — but routine clinical protocols for Botox, filler, laser, chemical peels, microneedling, and every other service on your menu. SOPs must be:

• Written in clear, clinical language
• Signed and dated by the Medical Director
• Stored in an accessible location on-site (not just in a shared drive)
• Current — reviewed and re-signed when procedures, products, or devices change

The absence of written SOPs is one of the most commonly cited deficiencies in Florida med spa inspections. Even if every clinical staff member knows exactly what to do, if there is no written document that matches the actual practice, it is a violation.

5. Emergency Protocols and Safety Equipment

Under Florida law and AHCA standards, every med spa must have written emergency protocols for foreseeable adverse events, and those protocols must be posted in or near treatment areas — not just filed in a binder. Inspectors will specifically check for:

• An anaphylaxis protocol with a current epinephrine auto-injector (EpiPen) on-site
• A vascular occlusion protocol for filler complications
• Syncope (vasovagal) response protocol
• Laser burn and adverse reaction protocols
• A documented emergency supply inventory with expiration dates checked
• Emergency contact information and 911 escalation criteria posted in treatment rooms
• Documentation of staff training on emergency procedures (drills, sign-in sheets)

Expiration dates matter. An EpiPen that expired six months ago is treated as if there is no EpiPen at all. Build a quarterly supply check into your operations calendar.

6. HIPAA Compliance Documentation

AHCA inspectors are not HIPAA enforcement agents (that falls to the U.S. Department of Health and Human Services' Office for Civil Rights), but they do look for basic evidence of HIPAA compliance as part of general healthcare clinic standards. You should have readily accessible:

• A posted Notice of Privacy Practices in the waiting area
• A written HIPAA Privacy Policy and Security Policy
• Evidence of staff HIPAA training (sign-in sheets, certificates)
• Business Associate Agreements with vendors who access patient health information

7. Infection Control and OSHA Compliance

Inspectors also review infection control practices and OSHA compliance. They may observe treatment areas directly, check for proper sharps disposal containers, verify the availability of PPE, and review your written Bloodborne Pathogen Exposure Control Plan. Surface disinfection logs, autoclave sterilization records (if you sterilize reusable instruments), and chemical inventory Safety Data Sheets (SDSs) may also be reviewed.

The AHCA Inspection Process: What Actually Happens

Understanding the process helps you stay calm and organized if an inspector arrives. Here is a typical sequence:

1. Arrival and identification — The inspector presents credentials and states the purpose of the visit. You have the right to ask to see their identification and confirm they are a legitimate AHCA inspector.
2. Document review — The inspector will request your licensing documents, Medical Director agreement, staff credentials, SOPs, and compliance policies. Having these in a dedicated "Compliance Binder" or organized folder makes this phase smooth.
3. Physical walk-through — The inspector will tour treatment rooms and common areas, looking for posted protocols, proper sharps disposal, infection control setup, and safety equipment.
4. Staff interviews — Inspectors may briefly interview clinical staff to confirm they understand their scope of practice and know where emergency protocols are located. Staff should answer truthfully and calmly.
5. Exit conference — After the inspection, the inspector will review any findings with you. Take notes and ask for clarification on any cited deficiencies.
6. Written report and corrective action — You will receive a written inspection report within a set timeframe. Any cited deficiencies will include a corrective action deadline.

Building an Inspection-Ready Practice

The best approach to AHCA inspections is to treat every day as if an inspector might walk in. This sounds stressful, but in practice it simply means maintaining systems rather than scrambling to create them. Here are the key operational habits that keep Florida med spas consistently inspection-ready:

Common Deficiencies Found in Florida Med Spa Inspections

Based on patterns in Florida DOH complaint investigations and AHCA inspection outcomes, the most commonly cited deficiencies in Florida med spas are:

• No written Medical Director Agreement or an agreement that has expired / is with a physician no longer in good standing
• Missing or outdated SOPs — especially for procedures added after the initial compliance setup was done
• Inadequate Medical Director oversight — no visit logs, no signed protocol reviews
• Emergency protocols not posted — they exist in a binder but aren't accessible during a real emergency
• Expired EpiPen or missing emergency supplies
• Staff performing procedures outside their licensed scope — most commonly, estheticians doing services requiring nursing supervision, or RNs injecting without a delegation protocol
• Missing or incomplete patient consent forms
• Lack of documented staff training for procedures performed

What to Do If You Receive a Violation Notice

Receiving a violation notice does not mean your business is over. AHCA's administrative process allows for corrective action and, in many cases, informal resolution. Steps to take immediately:

1. Read the notice carefully — understand exactly what is cited and the corrective action deadline
2. Contact a Florida healthcare attorney — do not respond to AHCA violations without legal guidance, especially if they involve scope-of-practice or patient care concerns
3. Document your corrective actions — keep records of every step you take to address each deficiency
4. Respond within the deadline — missing the corrective action deadline escalates the severity of consequences significantly
5. Prevent recurrence — use the experience to identify systemic gaps and build better compliance processes

The goal is not just to pass an inspection once — it is to build operational habits that protect your patients, protect your license, and demonstrate professional integrity. Inspections exist because patient safety is genuinely at stake in med spa settings. Owners who approach compliance as a core value rather than a bureaucratic hurdle tend to have better patient outcomes and fewer regulatory problems over time.

For related compliance areas, see our Florida Med Spa Compliance Checklist, our guide on Med Spa SOPs, and our 7 Compliance Mistakes That Get Florida Med Spas Shut Down.

Disclaimer: This article is for educational purposes only and does not constitute legal or regulatory advice. Florida med spa regulations change frequently. Consult with a licensed Florida healthcare attorney for guidance specific to your practice.