Georgia Laser Safety Regulations for Med Spas 2026: GCMB Delegation, Who Can Operate & OSHA

Georgia is one of the trickier states for med spa laser compliance — not because the rules are written tightly, but because they are scattered across the Medical Practice Act, GCMB rules, the Nurse Practice Act, and federal consensus standards that are easy to miss.

Unlike Florida (which has a state electrolysis and laser hair removal regulation) or Texas (which requires DSHS facility registration and certified laser hair removal professional certification for non-physician laser hair removal), Georgia has no dedicated laser law. There is no operator license, no certification, no facility permit specific to lasers. That blank space leads many operators to assume the rules are loose. They are not.

This guide walks through what actually governs laser operation at a Georgia med spa in 2026: the statute that puts lasers inside the practice of medicine, the GCMB delegation rules, the federal ANSI/OSHA framework, and the documentation that every facility owner needs in a binder before the first patient is treated.

The Core Rule: Lasers Are the Practice of Medicine in Georgia

Georgia Code §43-34-21 defines the practice of medicine broadly to include diagnosing, treating, operating, or prescribing for any human disease, ailment, injury, deformity, or other physical condition. The Georgia Composite Medical Board (GCMB) has consistently interpreted this to include energy-based devices — lasers, IPL, RF microneedling, and similar technologies — that penetrate or alter living tissue.

That single principle does most of the regulatory work. If a procedure is the practice of medicine, then every person performing it must either be a physician or be acting under valid delegation from one. There is no separate "cosmetic laser" carve-out under Georgia law.

The delegation rules live in GCMB Rule 360-32, governing the delegation of cosmetic procedures by physicians. A physician who delegates to an unqualified person — or who delegates without proper supervision, a written protocol, or a good faith exam — has committed unprofessional conduct and can be disciplined by the GCMB. The full GCMB rules are published by the Georgia Secretary of State.

Who Can Legally Operate a Laser in Georgia

Because there is no state laser license, the question is not "who is certified?" but "who can lawfully accept delegation of a medical procedure?" The answer is narrower than most operators realize.

Physicians (MD/DO)

Any Georgia-licensed physician in good standing can operate a laser within their scope of practice and competence. There is no specialty requirement, but standard of care expectations apply. A physician must also be able to handle complications — burns, paradoxical hyperpigmentation, scarring — and is the ultimate responsible party for any delegated treatment in their facility.

Advanced Practice Registered Nurses (APRNs)

APRNs in Georgia operate under a written nurse protocol agreement with a delegating physician, as required by GA Code §43-34-25. The protocol must specify procedures the APRN can perform, the conditions under which delegation occurs, and any required physician oversight. The protocol authorizes laser operation provided the APRN has documented training and the procedure is within the agreed scope. For more detail, see our guide on Georgia nurse practitioner med spa protocol agreements.

Physician Assistants

PAs in Georgia operate under a job description approved by the GCMB and supervision from a primary supervising physician. The supervising physician must be available for consultation but does not need to be on-site for routine laser procedures. PAs can operate lasers under the approved job description and written protocols.

Registered Nurses

This is where most Georgia compliance failures happen. RNs can operate lasers only under all of these conditions simultaneously:

• A licensed physician, APRN (under a nurse protocol agreement), or PA has performed a good faith examination establishing the treatment plan
• A written standing protocol authorizes the specific procedure, device, and parameters
• The supervising practitioner is available (in person or by direct communication) during treatment
• The RN has documented training on the specific device and procedure

An RN cannot independently "open a med spa" and fire lasers — even with a medical director on retainer who never meets the patient. That arrangement is a textbook GCMB complaint pattern, and it is the same pattern the board cites when sanctioning physicians.

Who Cannot Operate Medical Lasers in Georgia

• Licensed Practical Nurses (LPNs) — LPN scope under the Georgia Nurse Practice Act does not include independent assessment or acceptance of delegated medical procedures. LPNs cannot fire Class 3B or Class 4 lasers.
• Medical Assistants — MAs are unlicensed in Georgia and cannot perform any medical procedure, including laser treatments. Their role is limited to clerical and basic patient-prep tasks.
• Estheticians — Licensed by the Georgia State Board of Cosmetology for non-medical skincare. Lasers and IPL are explicitly outside esthetician scope, and operating one constitutes unlicensed practice of medicine.
• Laser technicians or "certified laser specialists" — Vendor certifications (Candela, Cutera, Sciton) verify device training. They are not licenses. A vendor certificate does not authorize anyone to operate a laser in Georgia.

The Good Faith Examination — Why It's Non-Negotiable

Before any laser treatment can be delegated, a licensed practitioner — physician, APRN under a nurse protocol agreement, or PA — must perform a good faith examination of the patient. This is not a formality. It is the legal foundation of the practitioner-patient relationship that makes delegation lawful under GCMB Rule 360-32.

A compliant good faith exam includes:

• Review of the patient's medical history and current medications
• Examination of the treatment area
• Assessment of contraindications (photosensitizing drugs, recent sun exposure, active infection, pregnancy, history of keloids)
• Determination that the requested treatment is appropriate
• Documentation of the exam in the patient's chart, signed by the examining provider

Telehealth good faith exams are permitted in Georgia under GCMB telemedicine rules, but they must involve a real synchronous interaction — not a checkbox on an intake form. The board has cited facilities for "good faith exams" that consisted of a patient signing a consent form on an iPad without ever speaking to a provider.

The ANSI Z136.3-2018 Framework

While Georgia does not have its own laser regulation, federal and consensus standards fill the gap. The most important is ANSI Z136.3-2018: Safe Use of Lasers in Health Care — the recognized standard for medical laser safety in the United States.

ANSI Z136.3 establishes the framework that every Georgia med spa is expected to follow:

• Laser hazard classification — virtually all medical aesthetic lasers are Class 3B or Class 4, the two highest-risk categories
• Nominal Hazard Zone (NHZ) — defined area where eye protection and access controls are required
• Written laser safety program — facility-specific document covering procedures, hazards, eyewear, controls, and incident response
• Engineering and administrative controls — interlocks, warning signs, posted procedures, key-controlled access
• Plume evacuation — for ablative lasers and procedures producing tissue debris

OSHA does not have a laser-specific regulation, but it enforces ANSI Z136.3 by reference under the General Duty Clause and through related standards. See OSHA's laser hazards guidance. A Georgia facility that ignores ANSI Z136.3 is exposed both to OSHA citations and to malpractice arguments that it failed to meet the standard of care.

The Laser Safety Officer (LSO) Requirement

ANSI Z136.3 requires every facility using Class 3B or Class 4 lasers to designate a Laser Safety Officer. For most Georgia med spas, this is mandatory in practice — almost every aesthetic laser on the market is Class 3B or Class 4.

What the LSO Does

• Authors and maintains the written laser safety program
• Conducts initial and annual hazard evaluations
• Approves laser eyewear (correct optical density for each wavelength)
• Oversees training and credentialing of all laser operators
• Investigates incidents and near-misses
• Maintains training, maintenance, and incident logs

Who Can Serve as LSO

ANSI does not require any particular license — the LSO can be the medical director, an APRN, an RN, or another trained staff member. What matters is that the person has documented LSO training (typically a 2-day course from organizations such as the Laser Institute of America) and the authority within the facility to enforce safety procedures. See the ANSI Z136.3 standard from the Laser Institute for the official text and certification options.

Smaller med spas often designate an experienced RN or the lead APRN as LSO. Whoever it is, the appointment must be in writing, the training must be documented, and the LSO must have time and authority to actually do the role — not just hold the title.

OSHA Requirements for Laser Treatments

OSHA jurisdiction applies the moment you have employees. Every Georgia med spa with even one W-2 employee is subject to OSHA standards.

29 CFR 1910.133 — Eye and Face Protection

Wavelength-specific laser eyewear with appropriate optical density is required for all personnel and patients in the Nominal Hazard Zone. Each laser has different wavelengths, which means a single pair of "laser glasses" does not protect against every device. Eyewear must be:

• Marked with optical density (OD) and wavelength range
• Inspected before each use for cracks, scratches, or filter damage
• Stored in dedicated, labeled cases
• Replaced on schedule recommended by the manufacturer

29 CFR 1910.1030 — Bloodborne Pathogens

Laser-generated plume — the smoke and aerosol produced by ablative procedures — can contain viable viral particles, including HPV DNA. OSHA's Bloodborne Pathogens standard applies to procedures producing tissue debris, which means CO2 laser, fractional ablative resurfacing, and laser hair removal of certain skin types and depths. Plume evacuation systems with ULPA filtration are the standard of care.

Hazard Communication and Training

All employees who work with or near lasers must receive documented training on hazards, controls, and emergency procedures. Training records must be maintained and updated annually. OSHA inspections will ask for these records first.

FDA Device Clearance — The Federal Layer

Before any laser device can be used clinically in Georgia, it must be FDA-cleared (or approved) for the specific indication. The 510(k) clearance database is searchable on the FDA website. Two issues come up often:

• Off-label use — A physician can use an FDA-cleared device off-label within the practice of medicine, but cannot delegate off-label use to non-physician staff with the same latitude. Off-label parameters typically require physician operation or much tighter delegation.
• Gray-market or non-cleared devices — Imported lasers without FDA clearance cannot be used clinically. A device that is "FDA listed" is not the same as "FDA cleared." Verify clearance before purchase.

Documentation: What Every GA Med Spa Must Keep

GCMB investigations and OSHA inspections both follow the documents. Missing or sloppy paperwork does more damage than the underlying issue. The minimum laser binder for a Georgia facility:

1. Written laser safety program — facility-specific, signed by the LSO
2. LSO appointment letter and training certificate
3. Written delegation protocols — for each laser device, by procedure, signed by the supervising physician/APRN/PA
4. Nurse protocol agreement — if APRNs are part of the team, executed and current
5. Standing protocols and good faith exam template
6. Operator training records — vendor training plus internal competency check-offs
7. Equipment maintenance and calibration logs
8. Treatment logs — patient ID, device, settings, operator, supervising provider, date
9. Eyewear inventory and inspection records
10. Incident and near-miss log
11. Annual program review — signed by LSO and medical director
12. FDA 510(k) clearance documentation for each device
13. Patient consent forms — device-specific, including risk disclosures

For the broader compliance binder, see our Georgia med spa compliance checklist.

Common GCMB Findings in Georgia Laser Cases

Reviewing publicly posted GCMB actions reveals consistent patterns. The same five findings appear repeatedly:

1. RN treating without good faith exam — patient never met the supervising physician or APRN, intake form alone does not qualify under GCMB Rule 360-32
2. Standing protocol absent or generic — facility has a "protocol" but it is a vendor brochure, not a signed clinical document specific to the practice
3. Untrained operator — staff member firing a laser without documented device training or competency check-off
4. Esthetician operating IPL or laser — facility argues IPL "is not a laser" or device is "non-medical"; GCMB and the Board of Cosmetology disagree
5. Phantom medical director — physician on contract who never visits, never reviews charts, never sees patients

Any of these on their own can lead to a GCMB investigation. In combination, they typically lead to license action against the supervising physician and a referral to law enforcement for unauthorized practice of medicine charges against unlicensed operators. For more on the supervising physician's role, see our guide to Georgia med spa medical director requirements.

Penalties: What Goes Wrong When This Goes Wrong

The downside in Georgia is substantial — and often surprises operators who came from states with looser regimes.

• Unauthorized practice of medicine — GA Code §43-34-26, a misdemeanor of a high and aggravated nature with potential felony exposure depending on circumstances. Applies to the unlicensed operator and potentially to the practice owner who arranged the violation.
• GCMB discipline against the supervising physician — fines, probation, suspension, or revocation under GA Code §43-34-8 (formerly §43-34-9 prior to renumbering).
• OSHA citations — civil penalties for eyewear, training, plume, and hazard communication violations.
• Civil liability — patient injury cases involving improper delegation often pierce the corporate veil and reach the owner personally.
• Insurance void — most professional liability policies exclude treatments performed outside scope or without proper supervision. A claim involving an untrained or unsupervised operator may not be covered at all.

How Georgia Compares: GA vs NY vs CA vs TX vs FL

If you operate across states or are evaluating where to expand, the laser regulatory regimes look very different:

• Georgia — No laser license. Lasers are practice of medicine under §43-34; delegation under GCMB Rule 360-32; nurse protocol agreement framework for APRNs; ANSI/OSHA federal layer. Moderately friendly framework, but enforcement is real.
• New York — Also no laser license; lasers are practice of medicine under Education Law §6521. OPMC enforcement is aggressive, and unauthorized practice is a Class E felony.
• California — Lasers are practice of medicine under Business & Professions Code. RNs can operate under physician supervision after a good faith exam; LVNs and estheticians cannot. Medical Board of California is highly active.
• Texas — The most prescriptive: Texas DSHS requires laser hair removal facility registration, certified laser hair removal professional certification, and a consulting physician. Other laser procedures fall under medical practice rules.
• Florida — The Florida Board of Medicine has issued declaratory statements treating laser hair removal and most aesthetic lasers as medical procedures requiring physician oversight. Electrolysis is separately licensed.

Bottom line: Georgia is in the middle of the pack on paper — no licensing layer, but a serious delegation framework with felony-adjacent penalties for getting it wrong.

Building a GA-Compliant Laser Program: The Order of Operations

1. Identify the supervising physician (or qualified APRN under a nurse protocol agreement) — verify license, malpractice coverage, and willingness to perform good faith exams
2. Designate a Laser Safety Officer in writing and complete LSO training
3. Author or adopt a written laser safety program specific to your devices
4. Draft written delegation protocols for each device and procedure, signed by the medical director
5. Document operator training — vendor course plus internal competency check-off
6. Stock device-specific laser eyewear with documented OD and wavelength match
7. Set up plume evacuation for ablative procedures
8. Implement a good faith exam workflow (synchronous, documented, signed)
9. Build the treatment log, incident log, and annual review templates
10. Schedule the annual program review on the LSO's calendar — do not skip it

For broader scope-of-practice and marketing rules, see our guides on who can inject Botox in Georgia and Georgia med spa advertising rules.

Summary

1. Georgia has no state laser operator license — but lasers are the practice of medicine under GA Code §43-34
2. Every laser treatment requires physician delegation under GCMB Rule 360-32, including a good faith examination
3. Physicians, APRNs (under a nurse protocol agreement), PAs, and RNs (under delegation) can operate lasers; LPNs, MAs, and estheticians cannot
4. ANSI Z136.3-2018 is the operative safety standard, enforced by OSHA through the General Duty Clause
5. Class 3B and Class 4 lasers require a designated, trained Laser Safety Officer
6. OSHA eye protection (29 CFR 1910.133) and bloodborne pathogens (29 CFR 1910.1030) rules apply
7. Devices must be FDA-cleared for clinical use; gray-market lasers are not lawful
8. GCMB enforcement is real — unauthorized practice of medicine carries criminal penalties under §43-34-26

Disclaimer: This article is for educational purposes only and does not constitute legal advice. Laser regulation involves overlapping state, federal, and consensus standards specific to your devices and staff. Consult a Georgia healthcare attorney and a qualified Laser Safety Officer before launching or modifying a laser program.