Georgia Nurse Practitioner Med Spa Playbook 2026: Ownership, Launch & Compliance

If you are a nurse practitioner planning to launch a med spa in Georgia in 2026, the regulatory landscape just got materially more complicated. For years, the path of least resistance was to spin up a single-purpose LLC, paper a "medical director" arrangement with a Georgia physician matched by an online platform, and start injecting. That path is over.

This playbook walks the statutory framework in O.C.G.A. §43-34-25 and GCMB Rule 360-32, the Corporate Practice of Medicine boundary that blocks NP ownership of the clinical entity, the friendly-PC + NP-owned MSO structure that is now the only compliant path, the mechanics of filing a Nurse Protocol Agreement, what the May 7 Position Statement requires, the IV hydration pillar, the 75–120 day launch sequence under direct-sourcing constraints, the service mix, and the ongoing compliance load. For the regulatory backdrop, pair this with our 2026 Georgia regulatory update.

The 2026 Georgia NP Med Spa Landscape — NPA-Required, Post-Matchmaker-Prohibition Era

Georgia sits in the restricted-practice category for NP scope: APRNs are authorized to deliver delegated medical services, but only pursuant to a written Nurse Protocol Agreement with a delegating physician. There is no full practice authority in Georgia. There is no autonomous-practice carve-out comparable to Florida's primary-care autonomous registration, and no statutory ownership grant comparable to Arizona's ARS §32-1601. Every APRN in Georgia practices under a current NPA, full stop.

What changed in 2026 is not the statute — it has read the same way since the 2006 expansion of APRN prescriptive authority. What changed is enforcement posture. The GCMB has spent the last eighteen months signaling — through advisory communications, disciplinary actions, and now the May 7 Position Statement — that the prevalent rent-a-medical-director arrangements do not satisfy the statute's requirement of a genuine delegating-physician relationship. The Statement made the position explicit and added the IV hydration pillar that targets one of the fastest-growing NP-led service lines.

The contrast with the cohort sharpens the picture. California opened the 104 NP designation. New York blocks NP ownership of the clinical entity. Texas requires a Prescriptive Authority Agreement plus a friendly-PC. Georgia adds the NPA layer plus, now, the matchmaker prohibition — a constraint no other major state in the cohort imposes with the same specificity.

The legislature is paying attention. On March 25, 2026, the Georgia House adopted HR 1891, creating the House Study Committee on Physicians' Delegation Authority and APP Supervision. NP entrepreneurs building in Georgia in 2026 should design for the current rules and expect tightening, not loosening.

The single-path framing for this playbook: friendly-PC + NP-owned MSO, with a current NPA filed with the GCMB and a delegating-physician relationship sourced directly. That is the only architecture that survives the May 7 Position Statement intact.

Why NPs Cannot Own the Clinical Entity in Georgia (CPOM and PC Requirements)

Georgia is a Corporate Practice of Medicine state, with the doctrine expressed through O.C.G.A. Title 14 and reinforced by GCMB rules and case law. The entity that holds itself out as practicing medicine — diagnosing, treating, prescribing — must be owned by Georgia-licensed physicians and organized as a Professional Corporation (PC). Non-physician licensees, including APRNs, cannot own a controlling interest in that clinical entity.

The reasoning is not that NPs cannot practice clinically — they plainly can, under an NPA. The reasoning is that ownership of the medical practice implicates corporate practice of medicine concerns: fee-splitting, undue lay influence on clinical judgment, and the integrity of the licensee's responsibility to the patient. The PC requirement and the physician-ownership constraint are the structural defenses Georgia has built against those risks.

The constraint is on the clinical entity. It does not extend to administrative services. An NP can own an entity that provides management, marketing, staffing, leasing, billing, and back-office services to a physician-owned PC under a written Management Services Agreement at fair-market value. That MSO is not "practicing medicine," and the NP-owner is not exercising clinical authority over the PC's practice. The line between MSO services and clinical authority is the most-litigated line in MSO architecture; Georgia healthcare counsel will walk you across it carefully.

In practice: you cannot be the sole owner of the entity that injects neuromodulator into a patient. You can be the sole owner of the entity that owns the lease, employs the non-clinical staff, runs the website, owns the equipment, and collects the management fee from the PC for those services. The clinical revenue belongs to the PC; your MSO revenue is the management fee. That structural separation is what makes the arrangement compliant. The ownership rule is detailed in our who can own a med spa in Georgia guide.

The Friendly-PC + NP-Owned MSO Structure for Georgia

Once the ownership constraint is clear, the architecture writes itself. The compliant structure has three legal entities and one document binding them together: the physician-owned Professional Corporation (the PC), the NP-owned Management Services Organization (the MSO), and the Management Services Agreement (the MSA) between them. Plus, of course, the Nurse Protocol Agreement between the delegating physician and the NP, which sits inside the PC.

The Professional Corporation (PC)

The PC is the clinical entity. It is owned by a Georgia-licensed physician (or physicians). It holds the practice's clinical licensure posture, the DEA registration for controlled substances if any are stored on site, the malpractice policy for clinical services, and the contracts with clinical staff including the NP. It bills patients and collects clinical revenue. It signs the NPA with the delegating physician. The PC's filings with the Georgia Secretary of State and the GCMB are the public face of the clinical practice.

The Management Services Organization (MSO)

The MSO is the administrative entity. It can be a standard LLC owned by the NP. It holds the lease (or sub-leases the clinical space to the PC), owns most equipment and furnishings, employs non-clinical staff (receptionists, marketing, ops, finance), runs the website and booking platform, and collects a management fee from the PC for those services. The MSO is not licensed to practice medicine and does not direct clinical decisions.

The Management Services Agreement (MSA)

The MSA is the contract between the PC and the MSO. It defines: scope of administrative services, fee structure (must be fair-market value and cannot vary with clinical volume in a way that implicates fee-splitting), term and renewal, indemnification, IP and brand allocation, and termination. Georgia healthcare counsel should draft this — it is the document a GCMB or investigator will read first if a complaint surfaces. The MSA is also the document that defines where the NP-owner's authority ends and the physician-owner's clinical authority begins; that boundary cannot be ambiguous.

The Nurse Protocol Agreement (NPA)

The NPA is the clinical-delegation document between the delegating physician (who may or may not be the same person as the PC owner) and the practicing NP. It is filed with the GCMB. It defines scope of delegated services, drug categories, settings, quality assurance, and review cadence — covered in the next section.

One non-obvious point: the physician-owner of the PC does not have to be the delegating physician on the NPA. They can be — and in many smaller practices they are — but the two roles are legally distinct. A practice can have one Georgia physician as PC owner and a different Georgia physician as delegating physician under the NPA. The medical-director side of the structure is detailed in our Georgia medical director requirements guide.

Nurse Protocol Agreements — What GCMB Rule 360-32 Requires and How to File

The Nurse Protocol Agreement is the operational core of an NP's clinical authority in Georgia. Without a current, properly-filed NPA, an APRN cannot prescribe, cannot order delegated procedures, and cannot practice. The agreement is required by statute (O.C.G.A. §43-34-25) and the operational requirements are filled out by GCMB Rule 360-32 (Nurse Protocol Agreements). The text of the rule is on the Georgia Secretary of State rules portal; pull it before drafting.

Required elements

A compliant NPA must define, at minimum:

• Parties. Both the APRN and the delegating physician, with full names, license numbers, and contact information. The physician must be Georgia-licensed and in good standing with the GCMB.
• Scope of delegated services. Specific medical acts the APRN is authorized to perform — not boilerplate. For a med spa, this includes Good Faith Exams, evaluation and treatment for aesthetics indications, ordering of laboratory tests where indicated, and the procedures the APRN will perform or oversee.
• Prescriptive authority and drug categories. The categories of drugs the APRN may prescribe, including controlled substances by schedule (Schedule II–V where appropriate). The DEA registration the APRN will use sits alongside this.
• Practice setting(s). The physical address(es) where the APRN will practice under the NPA. Multi-site arrangements require listing each site or building in flexibility appropriately.
• Quality assurance / chart review. The mechanism, frequency, and documentation standard for the delegating physician's review of the APRN's charts. This is where the GCMB looks first when assessing whether the relationship is genuine versus nominal.
• Periodic review and renewal. A defined schedule for review of the NPA itself — at least annually, with updates whenever scope expands.
• Termination. How either party may terminate the NPA and the practical consequences (patient transfer plan, continuity of care).

Filing and operational mechanics

The NPA must be filed with the GCMB before the APRN begins practice under it. Practice that begins before the filing is final is, on its face, unauthorized practice. Updates — scope expansion, change in delegating physician, change in practice setting — must be filed as they occur. Maintain the filed copy and any updates in the inspection-ready binder; the GCMB and investigators will ask for it.

What "genuine clinical oversight" looks like in practice

The May 7 Position Statement uses the phrase "genuine clinical oversight" deliberately. The delegating physician must be reachable during practice hours, must conduct real and documented chart reviews on a defined cadence, must be available for case consultation, and must be involved in protocol approval. Sign-and-disappear arrangements do not survive scrutiny. The NPA deep-dive lives in our Georgia NP protocol agreement guide. One ratio note: Georgia generally limits a supervising physician to no more than four APPs in active practice without a GCMB exception — relevant when sharing a delegating physician across an MSO portfolio.

The May 7, 2026 GCMB Position Statement — Matchmaker MD Prohibition and What It Means for Sourcing Your Supervising Physician

On May 7, 2026, the Georgia Composite Medical Board issued a Position Statement that re-anchored the delegation framework around three pillars. National Law Review's analysis walks the full text and the enforcement signals around it. Pillar one is the Delegating Physician/APRN relationship. Pillar two is the Supervising Physician/PA relationship. Pillar three is IV Hydration / IV Therapy Requirements. The pillar that most disrupts the existing NP-led med spa model in Georgia is pillar one, specifically the matchmaker prohibition embedded in it.

What the Statement actually prohibits

The Statement expressly prohibits payments to third-party "supervising physician matching services" where the platform collects payment for both access to and compensation of a delegating physician. Read precisely: the prohibition is not on every recruiter or staffing firm. It is on the bundled model in which a single intermediary takes the practice's payment, places a physician with the practice, and continues to take the cut of the physician's ongoing compensation for the supervision role itself. That bundled model is what most online "medical director" platforms have been built on.

Why the Statement targets this specifically

The GCMB's concern is that the matchmaker model corrodes "genuine clinical oversight." When a third party profits from the supervisor relationship itself, the supervisor's economic incentive is tied to the platform rather than the patient. The delegating physician becomes a fungible counterparty rather than a clinical anchor. The Statement reads as the GCMB drawing a structural line: the supervisor's compensation must flow directly between supervisor and practice, not through an intermediary that profits on both sides.

What remains permissible

Direct employment of the delegating physician by the PC is the cleanest model. Direct contract between the PC and the delegating physician at fair-market value is permissible. Locum tenens arrangements where the staffing firm collects a placement fee but the ongoing supervision relationship is between practice and physician are permissible. Recruiting firms that collect a one-time recruitment fee for sourcing the physician, after which the physician is contracted directly by the practice, are permissible. The line is around third-party intermediaries continuously profiting from the supervisor relationship itself.

What this means for sourcing your delegating physician in 2026

For an NP entrepreneur launching in Georgia post-May 7, the delegating physician must be sourced and compensated directly: recruit a Georgia-licensed physician through professional networks, locum and recruiting firms on a placement-fee model, or direct outreach; contract that physician directly at a documented fair-market-value rate. Plan on four to eight weeks — meaningfully longer than matchmaker placement. Existing NP-owned Georgia practices using bundled matchmaker arrangements should restructure before the next compliance review.

IV Hydration / IV Therapy — The Third Pillar and What GA NP-Owned IV Businesses Must Fix

IV hydration has been one of the most aggressively-marketed and most-rapidly-growing service lines in Georgia aesthetics for the last three years. It is also, per the May 7 Position Statement's third pillar, a specific GCMB enforcement priority. NP-led IV businesses operating in Georgia in 2026 need to take the third pillar seriously — the Statement's language about "genuine clinical oversight" applies with particular force here.

Why IV hydration draws attention

The risk profile of IV therapy is meaningfully higher than the public marketing typically conveys: anaphylaxis, fluid overload in cardiac patients, vasovagal events, extravasation injury, infection, and the controlled-substance risk where IV therapy menus extend into NAD or ketamine-adjacent offerings. The arrangements the GCMB has flagged are RN-staffed IV bars with thin or absent supervising-physician involvement, mobile IV services with no in-practice clinical presence, and any IV operation where a Good Faith Exam is checked off as a formality rather than conducted as a clinical encounter.

What the third pillar requires

The Statement's IV pillar — read in conjunction with the delegation pillar — requires that any APRN-led IV practice in Georgia demonstrate:

• A current NPA filed with the GCMB covering IV therapy specifically within the scope of delegated services.
• Documented Good Faith Exams for every patient before IV therapy is administered. The GFE is a clinical encounter, not a checkbox; allergy history, medication review, cardiac history where indicated, and indication-specific assessment all belong in the chart.
• Signed treatment protocols for each IV formulation offered, approved by the delegating physician.
• Physician availability during operating hours for case consultation and emergencies — reachable, not nominal.
• Real and documented chart review by the delegating physician on a defined cadence.
• Direct sourcing of the delegating physician — no matchmaker-platform arrangements after May 7.
• Emergency response capability — anaphylaxis kit, epinephrine, oxygen, AED, and a trained team that has drilled the response. Vascular and IV adverse-event protocols belong in the binder.

What NP-owned IV businesses should fix this month

For existing practices: audit the supervising-physician arrangement (matchmaker platform?), pull the NPA on file (current? covers IV therapy?), pull a sample of recent charts (GFEs documented? protocols signed?), and confirm emergency posture. Each gap is a finding waiting to surface. For new launches: build the IV service line with the third pillar as the design specification, not as a retrofit.

The 75–120 Day Launch Playbook for a Georgia NP-Owned Med Spa

Georgia NP-owned launches consistently run 75–120 days end to end in the post-May-7 environment, with the long pole now being direct physician sourcing rather than entity formation. The matchmaker model could place a "medical director" in days; direct sourcing takes weeks. Plan for it, build the rest of the sequence in parallel, and the timeline holds.

Days 1–30 — Physician sourcing and entity formation in parallel

• Begin direct physician outreach immediately — alumni networks, professional referrals, locum and recruiting firms that operate on a placement-fee model (not a bundled supervision model). Allow four to eight weeks for a quality match. The physician will serve as PC owner and may also be the delegating physician under the NPA.
• Engage Georgia healthcare counsel for the structure work; the MSA and NPA both need GA-specific drafting.
• Form the Professional Corporation with the Georgia Secretary of State (1–2 weeks). PC ownership is the Georgia-licensed physician's.
• Form the NP-owned MSO as an LLC, in parallel (1–2 weeks).
• Verify the NP's Georgia APRN license is active and in good standing with the GA Board of Nursing.

Days 31–60 — Agreements, NPA, and licensing

• Draft and execute the Management Services Agreement between the PC and the MSO (2–3 weeks of counsel time). Fair-market value fee, clear scope of administrative services, no clinical-decision authority bleeding into the MSO.
• Draft and execute the Nurse Protocol Agreement (3–4 weeks total). Scope of delegated services, prescriptive authority and controlled-substance categories, practice settings, quality assurance and chart review, periodic review, termination.
• File the NPA with the GCMB before practice begins.
• Apply for the NP's individual DEA registration if not already held and controlled substances will be stored on site (4–6 weeks).
• Register with the Georgia Drugs and Narcotics Agency where applicable.

Days 61–90 — Clinical infrastructure and staffing

• Stand up the EHR with built-in Good Faith Exam and order-and-delegation workflow. The chart must show GFE → delegating-physician-approved protocol → APRN order → procedure → documentation, with the delegating physician's chart review logged on the agreed cadence.
• Approve treatment protocols for every service. The delegating physician signs.
• Vet pharmacy and supply sources. Compounded GLP-1 must come from a verified 503A/503B facility on a patient-specific basis — no bulk-stocked compounded vials. See our Georgia GLP-1 compliance guide.
• Hire clinical staff with GA license verification (RNs, additional APRNs). Build the delegation matrix — who can perform what, under whose order — and train against it.
• Procure emergency supplies: epinephrine, anaphylaxis kit, hyaluronidase, oxygen, AED, and the rest of the supply list keyed to the service mix.

Days 91–120 — Inspection-ready binder, soft launch

• Assemble the inspection-ready binder: PC and MSO entity docs, MSA, NPA on file with the GCMB, delegating-physician contract, physician and APRN licenses, DEA registrations, signed treatment protocols, GFE and order templates, chart-review logs, emergency response SOPs, HIPAA policies, advertising and consent forms.
• Run friends-and-family appointments end to end. Audit the first dozen charts before opening to the public.
• Confirm advertising complies with GCMB Rule 360-3 and FTC Endorsement Guides.

For the broader open-a-med-spa sequence, see how to open a med spa in Georgia. For the line-by-line audit version, see our Georgia compliance checklist.

Service Mix Decisions — What NPs Typically Launch With First in Georgia (IV-Led Models Common Post-May 7)

Service mix in Georgia post-May-7 is less about what an NP can deliver under an NPA — the NPA can authorize a broad menu — and more about which services are operationally cleanest to launch given the supervising-physician sourcing constraints and the IV-pillar scrutiny. The pragmatic move for most NP-led Georgia launches is to open with a tight, high-margin, scope-clean menu, prove the GFE-and-order workflow on it, then expand.

The reliable opening menu

• IV therapy and vitamin injections. Despite — or in some ways because of — the third-pillar scrutiny, IV-led models remain common for NP-led Georgia launches. The clinical training is a natural fit, the capital expenditure is modest, and a well-designed IV workflow is the proof-of-concept the GCMB wants to see for genuine clinical oversight. Build out anaphylaxis and IV-reaction emergency posture before the first appointment.
• Neuromodulators (Botox, Dysport, Xeomin, Daxxify). The reliable anchor for any aesthetics launch — high demand, repeat visits, clean fit with NP training under proper delegation. Pair with the documented training the NPA should reference.
• Dermal fillers. Higher margin and the natural pairing with neuromodulators. Vascular occlusion is the most consequential aesthetic emergency and a hyaluronidase-ready protocol is non-negotiable. Document advanced filler training.
• GLP-1 weight management. A natural fit for the NP's clinical assessment training and one of the highest-revenue lines. Compliance load is significant — source only from a verified 503A/503B on a patient-specific basis, maintain documented GFE and longitudinal monitoring, keep no bulk-stocked compounded vials.
• Medical-grade skincare and microneedling. Rounds out the menu and supports retail revenue with modest delegation complexity.

What to layer in once the workflow is proven

• RF microneedling and laser-based services. Higher delegation complexity and laser-specific safety posture. Laser delegation in Georgia is detailed; build the workflow against it. See our Georgia laser safety guide.
• Hormone therapy / BHRT. The clinical complexity is real; lab-driven titration and longitudinal monitoring distinguish a defensible practice from a cash-grab.
• Threads, PDO, and advanced injection planes. Training-intensive; layer in once volume and confidence justify them.

One framing note unique to Georgia: an IV-led model is not a workaround for the NPA requirement — it is a service-mix choice that happens to play well to the NP's training while the rest of the menu is built out. The NPA, supervising-physician sourcing, and chart-review cadence requirements apply identically across the service mix.

Ongoing Compliance: NPA Review, Physician Availability, GDNA Audit Posture

Launching is the first 75–120 days. Staying compliant is every day after, and in the post-May-7 environment the ongoing burden has more discrete components than most NP entrepreneurs anticipate. The good news is that the GCMB, the GA Board of Nursing, and the Georgia Drugs and Narcotics Agency are reasonably predictable about what they ask to see. Build the systems against the predictable asks.

NPA review and renewal

Treat the NPA as a living document. Review it at least annually with the delegating physician on a documented date. Update it as scope changes — new services, new sites, expansion of controlled-substance categories. Re-file with the GCMB when scope or parties change.

Delegating physician availability and chart review

The delegating physician should be reachable during the practice's operating hours; document the availability protocol and log consultations when they occur. The NPA specifies a chart-review cadence; the practice has to actually run it. A defined percentage of charts (commonly 10–25% per month) reviewed by the delegating physician, with findings logged. The chart-review log is the single most-asked-for artifact in a GCMB review.

GDNA audit posture

The Georgia Drugs and Narcotics Agency oversees controlled-substance handling. For any Schedule II–V agents on site, maintain a complete log, secure DEA-compliant storage, reconciliation on a defined cadence, and a documented destruction policy. For compounded GLP-1 or HRT, keep a full sourcing record — pharmacy name and licensure, dated invoices, lot numbers, beyond-use dates, and patient-specific prescription records. GDNA audits look first for bulk-stocked vials and second for the sourcing chain.

Annual posture

At least annually: re-sign treatment protocols (dated current), verify staff licenses, refresh the delegation matrix against current service mix, audit advertising for GCMB Rule 360-3 and FTC compliance, and exercise emergency response protocols — anaphylaxis simulation and vascular occlusion drill at minimum. The AmSpa Georgia summary is a useful cross-check; the GCMB site is where new Position Statements appear first.

The cohort sibling for the autonomous-ownership contrast is the Arizona NP playbook; the national medical-director risk frame is in our medical director liability guide; the national GLP-1 compliance frame is in our GLP-1 compliance guide.

Disclaimer: This article is for educational purposes only and does not constitute legal advice. NP ownership architecture in Georgia under O.C.G.A. §43-34-25, GCMB Rule 360-32, the May 7, 2026 GCMB Position Statement on the Delegating Physician/APRN Relationship and IV Hydration Requirements, and the Corporate Practice of Medicine doctrine all involve complex, fact-specific regulatory considerations. Consult a Georgia healthcare attorney and confirm your current licensure and the current GCMB enforcement posture before forming entities, executing a Management Services Agreement, signing a Nurse Protocol Agreement, or launching a med spa.

Primary sources and further reading: the Georgia Composite Medical Board, GCMB Rule 360-32 on Nurse Protocol Agreements, National Law Review on the GCMB May 7 Position Statement, and the American Med Spa Association Georgia legal summary.