GLP-1 Med Spa Compliance 2026: The Complete National Guide to Semaglutide & Tirzepatide Prescribing

GLP-1 receptor agonists — semaglutide (Wegovy, Ozempic), tirzepatide (Mounjaro, Zepbound), and liraglutide (Saxenda, Victoza) — created the largest single revenue category in med spa history. Between 2022 and 2024, hundreds of practices built weight-management programs around compounded semaglutide sourced from 503A pharmacies at a fraction of the branded price. That model rested on a single legal fact: the drugs were on the FDA shortage list, which created a statutory window for compounding under Section 503A.

That window has now closed. The FDA drug shortage database resolved the tirzepatide shortage in October 2024 and resolved the semaglutide shortage on February 21, 2025. Both products are now on the market in adequate supply, and 503A pharmacies can no longer routinely compound essentially-a-copy versions. The legal cliff that compounding lawyers had warned about for two years arrived on schedule, and state medical boards, state pharmacy boards, the FDA, and state attorneys general have all stepped up enforcement.

This guide is the national pillar reference for what GLP-1 compliance looks like in 2026 — what you can still legally prescribe, who can prescribe it, the rules around telehealth, the documentation every chart must contain, the state-by-state enforcement environment, and the marketing pitfalls that draw scrutiny. It supersedes our earlier GLP-1 weight loss compliance overview and pairs with the flagship med spa regulations by state reference.

Important: Regulations and enforcement priorities change frequently. Verify with your state's medical board, board of pharmacy, and a healthcare attorney before relying on this content for compliance decisions. This guide reflects the regulatory environment as of September 2026.

The 2024–2025 Inflection Point — What Changed and Why It Matters

Two FDA actions, twelve months apart, ended the easy era of compounded GLP-1s. Understanding the sequence and the legal mechanics behind it is the first step in everything that follows. The same compounded-semaglutide vial that was legal to dispense to a cash-pay weight-loss patient in early 2024 is, in most circumstances, no longer legal in 2026.

FDA Tirzepatide Shortage Resolved (October 2024)

The FDA first declared the tirzepatide shortage resolved in October 2024 after Eli Lilly increased manufacturing capacity for Mounjaro and Zepbound. Once a drug is removed from the FDA shortage list, the statutory exception under Section 503A that allows compounding of an essentially-a-copy product expires. Compounders pushed back through litigation, and the FDA temporarily paused enforcement while it reconsidered the shortage status. The agency reaffirmed the resolution on December 19, 2024, confirming that tirzepatide supply was meeting demand. It then set firm transition deadlines: 503A pharmacies had to stop compounding tirzepatide by roughly mid-February 2025, and 503B outsourcing facilities by March 19, 2025. From those dates forward, 503A pharmacies could no longer routinely compound tirzepatide as a cheaper alternative to branded Mounjaro or Zepbound.

FDA Semaglutide Shortage Resolved (February 21, 2025)

Semaglutide followed a parallel trajectory. The FDA announced on February 21, 2025 that the semaglutide shortage was resolved. Novo Nordisk had ramped manufacturing of Wegovy and Ozempic sufficiently to meet U.S. demand. The agency set staged transition deadlines: 503A pharmacies had to stop compounding semaglutide by April 22, 2025, and 503B outsourcing facilities by May 22, 2025. The Outsourcing Facilities Association sued to block the delisting in February 2025, but a federal district court denied its motion for a preliminary injunction in April 2025, leaving the deadlines in force. The FDA's guidance to patients and providers confirmed the change and warned about the safety risks of unapproved compounded products. Practices that had been bulk-purchasing compounded semaglutide vials and selling them under in-house weight-loss programs faced a hard transition deadline.

503A Pharmacy "Essentially-a-Copy" Prohibition Triggered After Delisting

Section 503A of the Federal Food, Drug, and Cosmetic Act permits state-licensed pharmacies to compound medications for individual patients pursuant to a patient-specific prescription. Outside of an FDA-declared shortage, however, 503A compounders may not produce a product that is "essentially a copy" of a commercially available, FDA-approved drug except in narrow circumstances. The legitimate post-shortage exceptions are real but limited: a documented patient-specific clinical need such as a verified allergy to one of the inactive ingredients in the branded product (for example, polysorbate-80 sensitivity), or a clinically required dose strength that the commercial product does not provide. The bar is high, and the documentation must be in the chart before the prescription is written. Section 503B outsourcing facilities operate under a separate federal framework with its own bulks list and exception structure; the post-shortage menu of permissible 503B GLP-1 products is similarly narrow.

The Legal Cliff for High-Volume Telehealth GLP-1 Shops

The business model that boomed in 2023–2024 — direct-to-consumer telehealth platforms shipping compounded semaglutide nationwide for $200–$400 per month — was always structurally fragile. It depended on the shortage exception, on a patient-specific prescription that often involved no real examination, and on 503A pharmacies operating at a scale that resembled manufacturing. Every one of those assumptions broke between October 2024 and February 2025. Medical boards in New York, California, Texas, and Florida have since disciplined telehealth-only weight-loss prescribers, and the FDA has issued warning letters to compounding pharmacies marketing post-shortage copies.

Can Med Spas Prescribe Ozempic?

Yes — but the med spa itself does not prescribe; a licensed prescriber working within it does. A physician, NP, or PA with prescriptive authority in the patient's state may prescribe Ozempic after a documented good-faith examination. Ozempic's approved indication is type 2 diabetes, so weight-loss use is off-label.

That distinction between the entity and the practitioner is the one operators most often collapse, and it is where enforcement starts. A business cannot hold prescriptive authority; a person can. Every GLP-1 prescription written in a med spa traces to a named, licensed prescriber who is accountable for the clinical decision, and the chart has to show that prescriber made it. The off-label point matters too: prescribing Ozempic (semaglutide, approved for type 2 diabetes) for weight loss in a non-diabetic patient is lawful off-label prescribing, but it must be disclosed in the informed consent and supported by a charted clinical rationale. Where weight management is the goal, the on-label products are Wegovy and Zepbound, and reaching for them first is the easier position to defend.

Can Med Spas Sell Semaglutide Directly to Patients?

Usually not. In most states a med spa cannot function as a retail outlet for semaglutide: dispensing a prescription drug requires either a pharmacy license or a state-specific practitioner-dispensing authorization held by the prescriber, and the drug must be labeled and logged accordingly. Bulk-stocked compounded semaglutide sold over the counter is unlawful everywhere.

"Selling" is the wrong frame. In the compliant model the practice bills for the clinical encounter and the program, while a licensed pharmacy dispenses the drug against a patient-specific prescription. Where a state does permit in-office practitioner dispensing, it is a distinct authorization with its own registration, labeling, storage, and recordkeeping requirements — it is not something a facility inherits by employing a prescriber. Check the state board of pharmacy's dispensing-practitioner rules before any product moves through the practice, and note that a state permitting in-office dispensing of branded product does not thereby permit stocking compounded copies.

Can You Get Tirzepatide From a Med Spa?

Yes, if the med spa has a prescriber. A patient can obtain tirzepatide through a med spa when a licensed prescriber examines them, confirms an appropriate indication, and writes a prescription that a licensed pharmacy fills — usually branded Mounjaro or Zepbound. What a med spa cannot lawfully do is hand over compounded tirzepatide without that individualized prescription.

From the patient's side, a compliant program looks like this: an intake and examination with a prescriber, baseline labs, a contraindications screen covering medullary thyroid carcinoma and MEN-2 family history, a signed GLP-1-specific consent, a titration plan, and scheduled follow-up. The reliable warning signs run the other way — a vial handed over the same day with no labs, no examination by a prescriber, pricing quoted per vial rather than per program, or a practice that cannot say which pharmacy prepared the drug and under what authority. Those are the exact fact patterns state boards have been citing since the delistings.

What Med Spas Can Legally Prescribe Today

The compliant GLP-1 product menu for a U.S. med spa in 2026 has three legitimate categories and one category that no longer fits inside the law. Operators rebuilding their weight-management programs after the delistings should think of this as the new product framework.

Branded FDA-Approved GLP-1s — Wegovy/Ozempic, Mounjaro/Zepbound, Saxenda

The cleanest path is also the most expensive: prescribe branded, FDA-approved products sourced through normal pharmacy channels. Wegovy and Ozempic (semaglutide) from Novo Nordisk are approved for chronic weight management and type 2 diabetes, respectively. Mounjaro and Zepbound (tirzepatide) from Eli Lilly cover the same indications. Saxenda (liraglutide) is a daily-dose alternative. The branded products are FDA-approved, manufactured under cGMP, distributed through authorized wholesalers, and dispensed by licensed pharmacies. They are also the products the patient's insurance may cover, depending on indication, BMI, and prior-authorization criteria. Practices that pivot toward a branded-supply model trade margin for regulatory clarity, and the trade-off increasingly favors compliance.

Oral GLP-1s — Oral Wegovy and Rybelsus

The product menu widened in late 2025. On October 17, 2025 the FDA approved oral semaglutide (Rybelsus) for cardiovascular risk reduction in high-risk patients with type 2 diabetes, and on December 22, 2025 it approved oral semaglutide 25 mg — the oral Wegovy pill — for chronic weight management in adults. The oral Wegovy approval is the first time an oral GLP-1 has carried a weight-management indication. In the OASIS-4 trial, the 25 mg oral dose produced roughly 16.6% mean weight loss when taken as directed, comparable to injectable Wegovy 2.4 mg. Novo Nordisk launched the pill in early 2026, with cash pricing through NovoCare starting near $149 per month for the lowest dose and rising to roughly $299 at higher doses.

For compliance purposes, the oral pill is simply another branded, FDA-approved product. It is dispensed through normal pharmacy channels, carries the same boxed thyroid C-cell warning, and is subject to the same prescribing-authority, good-faith-examination, and documentation requirements as the injectables. It does not expand what compounders may lawfully prepare, and it does not create a new compounding pathway. What it does change is the access calculus: a $149–$299 cash-pay branded pill narrows the price gap that once made compounded semaglutide attractive, weakening the economic case for higher-risk compounding models. The operational details — dosing, titration, GI tolerability, and how the oral option fits a med spa weight-management program — are covered in the oral GLP-1 at med spas guide.

503B Outsourcing-Facility Compounded Products Under Narrow Exceptions

503B outsourcing facilities are FDA-registered and compound under cGMP. They may compound in bulk without patient-specific prescriptions, but only where the active pharmaceutical ingredient sits on the FDA bulks list or qualifies under a specific statutory exception — and post-shortage that menu is narrow for GLP-1s. Vetting requirements are covered under pharmacy partnerships below.

503A Compounded Products Only With Documented Patient-Specific Clinical Need

503A patient-specific compounding remains lawful when there is a documented clinical reason the patient cannot use the commercial product. The two most common legitimate triggers are a verified allergy to an inactive ingredient in the branded product and a clinically required dose strength not available commercially. The documentation must precede the prescription — an entry in the chart that simply says "patient prefers compounded" is not adequate, and chart audits in 2025 have flagged exactly this language as deficient. The prescribing practitioner must perform a good-faith examination, document the clinical rationale, and write a patient-specific prescription. The pharmacy must verify the prescription and dispense to that specific patient. Bulk-stocking compounded vials in the practice for distribution to whichever patient walks through the door does not meet 503A's patient-specificity requirement.

Whichever supply model you land on, the good-faith exam, charted clinical rationale, and monitoring schedule all need to be documented before the first dose — our complete med spa compliance SOP library includes GLP-1 charting and monitoring templates built for exactly this.

What's NOT Legal Anymore

The following models, which were widespread in 2023–2024, do not fit inside the current legal framework and are the highest-risk activities for 2026:

• Bulk-stocked compounded semaglutide as a cheaper alternative to the branded product. Without patient-specific clinical justification, this is essentially-a-copy compounding and is no longer permitted post-delisting.
• International API sourcing. Importing semaglutide or tirzepatide active pharmaceutical ingredient from foreign suppliers — particularly through research-chemical and "research only" channels — is illegal regardless of shortage status. The FDA has issued warning letters and import-alert listings against multiple peptide vendors in 2024–2025.
• "Peptide blends" sold as weight-loss therapy. Compounding peptides marketed for weight loss without an FDA-approved indication or 503A patient-specific clinical need is unapproved drug distribution.
• Direct-from-patient bulk reimbursement models that price compounded GLP-1 as an in-practice retail product without a documented patient-specific prescription.

The practical consequence is that operators must either move to a branded-supply model, build a tightly documented 503A patient-specific compounding workflow, or close the GLP-1 service line. Other paths increasingly carry regulatory risk that exceeds the margin.

Are GLP-1 Medications Controlled Substances?

No. Semaglutide, tirzepatide, and liraglutide are not controlled substances — none appears on any DEA schedule under the federal Controlled Substances Act. No DEA registration is required to prescribe them, and the Ryan Haight Act's in-person examination rule for internet prescribing of controlled substances does not apply to GLP-1s.

The operative federal schedules are the DEA's, published at 21 C.F.R. Part 1308, and no GLP-1 receptor agonist appears anywhere in them. That is a substantive regulatory difference, not a technicality. It is why a GLP-1 service line can be built without a DEA number, why telehealth initiation is not blocked at the federal level by the DEA Diversion Control Division's prescribing rules, and why the compliance weight sits almost entirely on state medical practice acts rather than federal drug-diversion law.

Two caveats matter operationally. First, "not a controlled substance" is not the same as "not a prescription drug." GLP-1s are Rx-only, so every state rule about who may prescribe, who may administer, and what makes a prescription valid still applies in full — being unscheduled removes a federal layer, not the state layer. Second, a weight-management program that also uses genuinely scheduled drugs — phentermine, for example, is a Schedule IV stimulant listed at 21 C.F.R. § 1308.14 — does need a DEA registration for those drugs, plus the controlled-substance storage, recordkeeping, and state PDMP reporting that come with them. Practices frequently assume the GLP-1 rules and the phentermine rules are the same. They are not.

Who Can Prescribe GLP-1s — Provider Scope Nationally

Who is legally allowed to prescribe a GLP-1 depends on the prescriber's license type and the state in which the patient is located. Because the federal controlled-substance layer is absent, state medical practice acts and state nurse practice acts do all of the heavy lifting.

Physicians (MD/DO) — Full Authority

Licensed physicians (MD or DO) with an active state license and appropriate prescriptive authority can prescribe GLP-1s anywhere in the United States. Physicians remain bound by their state's good-faith exam requirements and by the standard of care, including pre-treatment workup and informed consent. Multi-state practices require a separate license in each state where the prescriber treats patients.

Can Nurse Practitioners Prescribe GLP-1s?

Sometimes — it depends on the state where the patient is located. In full-practice-authority states an NP with the right certification can prescribe GLP-1s independently. In reduced and restricted states, an NP must prescribe under a written collaborative, protocol, or supervisory agreement with a physician.

The American Association of Nurse Practitioners classifies states into three practice-environment categories, and GLP-1 prescribing tracks them exactly:

• Full practice (independent prescribing): Arizona, Colorado, Oregon, Washington, New Mexico, Iowa, Maine, Alaska, and others. NPs with appropriate certification can prescribe GLP-1s independently after meeting the state's licensure requirements. See the Arizona NP full practice authority guide for a worked example.
• Reduced/conditional: California (after AB-890 transition to 104 NP), New York (after 3,600 supervised practice hours), and several others. Independent prescribing kicks in only after specific milestones; before then, a collaborative agreement is required. See California AB-890 and New York's 3,600-hour rule.
• Restricted (collaborative or supervisory only): Florida, Texas, Georgia, Illinois, Ohio, North Carolina, and others. NPs must prescribe under a written collaborative or protocol agreement with a physician. See Georgia's protocol agreement requirements for the structure most restrictive states use.

For multi-state telehealth practices, the binding state is where the patient is located at the time of the visit, not where the NP is physically practicing. An NP licensed in full-practice Arizona who treats a patient located in Florida via telehealth must comply with Florida's collaborative agreement requirements, plus Florida licensure.

Physician Assistants — Under Physician Supervision

Physician assistants can prescribe GLP-1s under the supervision of a physician as required by the state's PA Practice Act. The supervising physician relationship is documented in a written delegation agreement that defines the scope of the PA's prescriptive authority. State requirements vary on chart cosignature percentage, on-site supervision, and the maximum number of PAs a physician can supervise. PAs cannot operate independently in any state.

Registered Nurses — Cannot Prescribe; Can Administer Under Standing Order

Registered nurses cannot prescribe GLP-1s in any state. RNs may administer a GLP-1 injection to a patient under a valid prescription written by an authorized prescriber, or under a standing order — but only after the prescriber has performed a good-faith examination of that specific patient. A standing order alone, without a prescriber-conducted patient assessment, is not legally sufficient. Boards of nursing have disciplined RNs in 2024–2025 for administering GLP-1 injections in practices where the prescriber never saw or assessed the patient. The "RN administers based on intake form" model is a recurring enforcement target.

Pharmacists — Limited Prescribing Under Collaborative Practice Agreements

Pharmacists dispense GLP-1s under a valid prescription. A growing number of states allow pharmacists limited prescribing authority under collaborative practice agreements with a physician — California, Idaho, Montana, New Mexico, North Carolina, Oregon, and Washington have variations. The scope is generally narrow and does not, in most states, encompass weight-management GLP-1 prescribing. Where pharmacist prescribing exists for chronic disease management (HIV PrEP, smoking cessation, hormonal contraception), the GLP-1 expansion would typically require additional authorization. Operators relying on pharmacist prescribing should obtain a written legal opinion before structuring the program.

Telehealth Prescribing — Federal and State Rules

Telehealth GLP-1 prescribing sits at the intersection of federal telehealth law, state medical practice acts, and state nurse practice acts. Because GLP-1s are not controlled substances, the most restrictive federal telehealth law — Ryan Haight — does not apply. The state-level requirements still bind every visit.

Federal: Ryan Haight Act Does Not Directly Apply

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 added subsection (e) to Section 309 of the Controlled Substances Act, codified at 21 U.S.C. § 829(e). It conditions a valid internet prescription for a controlled substance on at least one in-person medical evaluation, subject to a set of telemedicine exceptions. Because GLP-1s are unscheduled, that provision does not reach them. The federal layer that does apply to GLP-1 telehealth is the broader requirement of a bona fide practitioner-patient relationship — anchored in federal anti-kickback principles, FDA labeling and intended-use rules, and the False Claims Act when federal payors are involved.

State Telehealth Requirements — Bona Fide Relationship Required

Nearly every state requires a bona fide practitioner-patient relationship, with a documented good-faith examination, before a prescription is issued. States diverge on whether the examination can be conducted entirely via real-time audiovisual telehealth, whether an in-person initial visit is required, and what patient-history and physical-exam elements must be documented. A handful of states explicitly require an in-person visit before the first prescription for chronic medications; a larger group accepts audiovisual telehealth provided the examination is substantive. The standard of care does not change because the visit is virtual — vitals must be obtained where clinically necessary, history must be taken, and contraindications must be screened.

The "Cerebral / Hims-Style" Enforcement Risk

The pattern regulators keep citing in direct-to-consumer platforms is the same one: short visits, very high prescription rates, and financial pressure on prescribers, adding up to examinations that were not bona fide. Federal investigators, state attorneys general, and state medical boards have all acted on it, and the boards discipline the individual prescriber, not the platform. In 2026 the high-volume, low-touch weight-loss model is a primary enforcement target at every level.

Cross-State Telehealth — License Where the Patient Is

The prescribing practitioner must be licensed in the state where the patient is located at the time of the visit. The Interstate Medical Licensure Compact (IMLC) speeds the process for physicians seeking additional state licenses. The Nurse Licensure Compact (NLC) allows multi-state practice for RNs and LPNs holding a multi-state license; the APRN Compact (for nurse practitioners) is in early implementation as of 2026 and not all states participate. None of these compacts eliminate the requirement to comply with each state's scope-of-practice and prescribing rules — they only streamline the licensure mechanics. A telehealth practice serving patients in multiple states must map prescriber licensure, NP scope rules, and state-specific telehealth requirements state by state.

The Good Faith Examination — Non-Negotiable

The good-faith examination is the single most enforced documentation requirement in GLP-1 compliance. State medical boards, when they audit a GLP-1 practice, look first for evidence that a qualified prescriber examined the patient and made a clinical decision before the prescription was written. The exam can be in-person or via real-time telehealth where the state permits, but the substance must be there.

For GLP-1 initiation, a defensible good-faith examination contains:

• BMI and anthropometric data, documented contemporaneously — not pulled from a patient self-report from six months prior.
• Comorbidities — type 2 diabetes, hypertension, dyslipidemia, sleep apnea, fatty liver disease, cardiovascular disease — documented and weighted into the treatment decision.
• Weight history — duration of weight gain, prior weight-loss attempts, dietary and behavioral interventions tried.
• Medication review — current prescriptions, OTC medications, supplements; assessment of interactions including with insulin, sulfonylureas, and oral medications affected by delayed gastric emptying.
• Contraindications screen — personal or family history of medullary thyroid carcinoma (MTC) or Multiple Endocrine Neoplasia syndrome type 2 (MEN-2), severe gastroparesis or other severe GI disease, prior pancreatitis, gallbladder disease, severe diabetic retinopathy, pregnancy or pregnancy plans within the next two months.
• Required pre-treatment labs — see below.
• Treatment plan — specific drug, starting dose, titration plan, follow-up cadence, and discontinuation criteria.

Required pre-treatment labs at the standard of care now include:

• Hemoglobin A1c (baseline glycemic status; clinical relevance for diabetic vs. non-diabetic indication)
• Fasting lipid panel
• Comprehensive metabolic panel — captures kidney function (eGFR), electrolytes, and liver function
• TSH where thyroid status is unclear, symptomatic, or where the patient has a personal or family thyroid history
• Pregnancy test (β-hCG) for patients of childbearing potential
• Lipase or amylase where pancreatitis history or current symptoms suggest assessment is appropriate

The lab panel is not a national mandate, but its absence is the single most common chart deficiency cited in 2024–2026 board reviews. Building it into the practice's GLP-1 protocol is the lowest-effort, highest-yield compliance step available.

Body Composition, Muscle Preservation, Maintenance, and Off-Ramping

The clinical conversation around GLP-1s has matured past "how much weight did the patient lose." In 2026 the standard of care increasingly addresses the quality of that weight loss — how much of it is fat versus lean mass — and what happens to the patient when the drug stops. Med spas that build these considerations into their protocols not only deliver better outcomes; they document a defensible, contemporary standard of care that a board reviewer will recognize.

How Much Lean Mass Do Patients Actually Lose?

Body-composition substudies of the pivotal trials have made it clear that a meaningful fraction of GLP-1-induced weight loss is lean mass, not fat. A 2025 analysis of the SURMOUNT-1 tirzepatide trial reported that body weight fell about 21.3%, fat mass about 33.9%, and lean mass about 10.9% over 72 weeks — meaning roughly a quarter of the total weight lost was lean tissue (some dose-stratified analyses put the lean fraction at 29–33%). A DEXA substudy of the STEP-1 semaglutide trial reported lean mass at roughly 39% of total weight lost. These figures are broadly consistent with what is expected during any rapid weight loss, but the magnitude matters clinically — particularly for older adults, who start with less reserve and are at higher risk of sarcopenia and functional decline.

Protecting Lean Mass — Protein, Resistance Training, and Monitoring

A defensible program does not track the scale alone. The interventions with the best evidence base are unglamorous: an adequate daily protein target (commonly framed around 1.2–1.6 g/kg of reference body weight, individualized to the patient), progressive resistance training, and periodic reassessment of body composition or functional status where feasible. Documenting baseline body composition, the protein and activity counseling provided, and any monitoring for functional decline converts a generic "weight-loss shot" into a clinically supervised program. The full clinical workflow — including how to counsel patients, what to measure, and how to chart it — is detailed in the GLP-1 muscle loss and body composition guide.

Maintenance and Off-Ramping — Planning for Discontinuation

GLP-1 therapy is increasingly understood as chronic-disease management rather than a finite course. When patients stop, trial data show most regain a substantial share of the weight they lost within about a year, because the appetite-suppressing and metabolic effects reverse once the drug clears. That reality has compliance implications: the informed consent should disclose the high likelihood of weight regain on discontinuation, and the chart should document a maintenance or off-ramping plan — whether the patient tapers to a lower maintenance dose, transitions off entirely with intensified lifestyle support, or pauses for pregnancy or surgery. A discontinuation decision charted with the same rigor as the initiation decision protects both the practice and the patient. The GLP-1 maintenance and off-ramping guide covers dose tapering, monitoring cadence, and the documentation a board reviewer expects to see.

State-by-State Enforcement Spotlight

Federal rules set the floor; state medical boards, boards of nursing, boards of pharmacy, and state attorneys general drive enforcement. The patterns vary significantly. The following spotlights highlight the dynamics in the six highest-volume states, each linking to the in-state GLP-1 deep dive.

New York — OPMC Discipline Trends

The New York State Office of Professional Medical Conduct (OPMC) has increased disciplinary actions against physicians and PAs prescribing GLP-1s outside the state's good-faith exam and informed-consent rules. The common citations: telehealth-only prescribing without an established relationship, and inadequate contraindications screening. NPs prescribing independently before completing 3,600 supervised hours are a separate concern. Full detail: New York GLP-1 weight-loss med spa compliance.

California — MBC Stance and AB-890 NP Transition

The Medical Board of California has disciplined practitioners for prescribing compounded semaglutide post-delisting without documented patient-specific justification, and the State Board of Pharmacy has acted against the supplying pharmacies. California's AB-890 NP transition layers on top: only NPs certified in the 103 or 104 categories may prescribe independently, and the rest work under standardized procedures. See the California GLP-1 compliance guide and the California hub.

Texas — TMB and TSBP Enforcement

The Texas Medical Board and the Texas State Board of Pharmacy run parallel enforcement programs. TMB rules require a physician-patient relationship before any prescription, a specific scope of delegation to NPs and PAs, and clear standing-orders documentation; TSBP has cited pharmacies distributing semaglutide as essentially-a-copy post-delisting. See the Texas GLP-1 compliance guide and the Texas hub.

Florida — DOH and Board of Pharmacy

The Florida Department of Health and Board of Pharmacy have both issued post-delisting guidance and acted against compounded GLP-1 distribution outside the patient-specific framework. Office-based facility registration adds a separate dimension, and because Florida is a restrictive NP state, all non-physician prescribing runs through the protocol-agreement structure. See the Florida GLP-1 compliance guide and the Florida hub.

Georgia — GCMB + GDNA

The Georgia Composite Medical Board and the Georgia Drugs and Narcotics Agency jointly oversee prescribing and dispensing. GCMB has issued guidance on telehealth standards and on physician–APRN protocol agreements for weight-management drug therapy; that protocol-agreement structure is the model several restrictive states use. See Georgia GLP-1 compliance and the Georgia hub.

Arizona — AMB + AZ Board of Pharmacy

Arizona is a full-practice-authority state, so an Arizona-licensed NP meeting Board of Nursing requirements can prescribe GLP-1s independently. That authority does not change the federal layer: Arizona prescribers face the same post-delisting essentially-a-copy prohibition as everyone else, and the state Board of Pharmacy regulates compounding within the state. See the Arizona GLP-1 compliance guide and the Arizona hub.

Documentation Requirements — What Every Chart Must Contain

Documentation is the single most modifiable variable in GLP-1 compliance. Practices that survive board audits and chart reviews look the same: every chart contains the same elements in the same place, the prescriber signed the assessment before the prescription was written, and the consent form includes the GLP-1-specific warnings. Practices that fail audits look the same in the opposite way: missing assessments, generic consent forms, blanket standing orders, no follow-up documentation.

Initial Assessment Template

Every initial GLP-1 visit should generate one chart note containing chief complaint, BMI and weight history, comorbidities, medication and supplement review, contraindications screen including MTC/MEN-2 family history, allergies, social history, prior weight-loss interventions, a treatment plan naming drug and titration schedule, and the prescriber's signature. Boards reviewing charts specifically check whether the contraindications screen and consent occurred at the same visit as the prescription.

Pre-Treatment Labs and Rationale

Document which labs were ordered, when results were received, and what each result meant for the treatment decision. If the patient declined a recommended lab, document that decision and the discussion. If a lab was clinically unnecessary for a specific patient, document the rationale — never assume the audit reviewer will infer it.

Informed Consent Specific to GLP-1

A generic procedure consent does not cover GLP-1 therapy. The GLP-1-specific consent must address off-label use where applicable, the boxed warning on thyroid C-cell tumors and the MTC/MEN-2 contraindication, common GI effects, pancreatitis and gallbladder risk, hypoglycemia risk alongside insulin or sulfonylureas, pregnancy and contraception, and the discontinuation policy — signed before the first dose.

Standing Orders / Protocol Agreements

A standing order authorizing RN or LPN administration must name the drug, route, dose range, and conditions of use; it cannot substitute for an individualized prescriber assessment; and it must be signed and dated by the medical director. An NP or PA protocol agreement must define the scope of GLP-1 prescribing, the structure the state requires, cosignature obligations, and the review schedule. Re-sign annually at minimum.

Refill Criteria and Follow-Up Cadence

Document the follow-up cadence — typically 4 weeks before the first refill to assess tolerability and titration, then quarterly for stable patients. Refill criteria should cover weight progress, adverse-event screening, vitals, and any indicated repeat labs. A refill issued without contemporaneous documentation of patient status is the second-most-common deficiency boards cite, after a missing good-faith exam.

How Do You Add GLP-1s to a Med Spa Menu?

Adding GLP-1s requires five things in place before the first prescription: a prescriber licensed in the patient's state, a compliant supervisory or collaborative structure if that prescriber is an NP or PA, a written GLP-1 protocol and standing orders, a vetted pharmacy sourcing route, and GLP-1-specific consent and charting templates. Nothing about this service line is cosmetic.

The sequence below is the order the pieces actually have to be built in. Practices that launch out of order — marketing first, protocol later — generate the chart gaps that boards cite.

1. Confirm who may prescribe, state by state. Map every state you intend to serve against the prescriber's license type. A physician is portable with licensure; an NP or PA is only as portable as the state's collaborative, protocol, or supervisory requirements allow. The binding state is where the patient sits at the time of the visit.
2. Put the physician relationship in writing before you open. Most med spas need a medical director, and many also need a separate supervising or collaborating physician for the NP or PA who will actually write the prescriptions — the two roles are not interchangeable, and one document rarely satisfies both. See medical director vs. supervising or collaborating physician and the medical director requirements guide.
3. Settle the supply model before you market a price. Branded product dispensed by a pharmacy, 503A patient-specific compounding with documented clinical need, or a narrow 503B exception — each carries a different cost, a different margin, and a different level of exposure. Committing to a price point before the supply chain is verified is how practices end up bulk-stocking compounded vials to protect a margin they already advertised.
4. Write the clinical protocol. Eligibility criteria, contraindications screen, baseline lab panel, titration schedule, monitoring cadence, dose-hold and discontinuation criteria, adverse-event escalation, and a body-composition and protein plan. The GLP-1 monitoring schedule template covers the follow-up side.
5. Build the chart pack. Good-faith examination template, GLP-1-specific informed consent with the thyroid C-cell boxed warning and pancreatitis disclosure, standing order naming drug and dose range, refill criteria, and an adverse-event log. These are the documents an audit asks for first.
6. Resolve the ownership question before signing a lease. In corporate-practice-of-medicine states, who may own the entity that delivers prescription weight-management services is a threshold legal question, not a formality. See who can own a med spa by state.
7. Audit the marketing before it goes live. Every claim, testimonial, before/after image, and price comparison should clear FTC substantiation and your state board's advertising rules before publication, not after a complaint.

Practical sequencing note: steps one, two, and six are legal-structure work that a healthcare attorney should sign off on, and they gate everything else. Steps three through five are operational and can run in parallel. Broader launch mechanics beyond the GLP-1 line are covered in how to open a med spa.

What Does a Clinic GLP-1 Partnership Require?

A clinic GLP-1 partnership requires a written agreement that assigns clinical authority to a licensed prescriber and keeps business functions with the non-clinical partner. At minimum it defines who prescribes, who supervises or collaborates under state law, who owns the chart, how the pharmacy is sourced, and how the partner is paid without splitting professional fees.

Three different arrangements all get called a "GLP-1 partnership," and they carry different obligations:

• A prescriber engagement. A practice contracts a physician, NP, or PA to provide the clinical service. The agreement should name the licensure and states covered, the scope of GLP-1 prescribing delegated, chart cosignature and review obligations, malpractice coverage and tail, availability expectations, and the review cadence for protocols and standing orders. Where the prescriber is an NP or PA, the collaborative or supervisory document the state requires is a separate instrument from the service contract.
• A management arrangement. In corporate-practice-of-medicine states, a non-clinical company typically provides administrative services — staffing, billing, marketing, premises, technology — to a professional entity that owns the clinical practice. What regulators examine is substance, not form: who actually sets clinical protocols, who decides patient volume and visit length, who controls the medical record, and whether the management fee is fair market value for identifiable services rather than a share of professional revenue. Fee arrangements pegged to a percentage of clinical collections invite fee-splitting and anti-kickback scrutiny in many states.
• A pharmacy sourcing relationship. Covered in detail in the next section. The partnership question here is what the agreement says about legal basis: which products, under which statutory pathway, with what documentation flowing back to the practice.

Two provisions are worth negotiating hard in any of the three. The first is records: the medical record belongs to the professional practice, and a partner who can restrict access to charts holds leverage that no clinician should concede. The second is unwind — what happens to patients mid-titration if the partnership ends. A GLP-1 patient stopped abruptly because a contract lapsed is both a clinical problem and a board complaint waiting to happen, so the agreement should specify notice, records transfer, and continuity of care. Have a healthcare attorney paper all of it; template partnership documents pulled from general business sources routinely miss the state-specific clinical provisions entirely.

Can You Start a GLP-1 Business With No License Required?

No. There is no lawful route to prescribing, dispensing, or administering a GLP-1 without professional licensure and a valid prescriber-patient relationship. A non-clinician may own or fund a business that supports a GLP-1 practice in some states, but the prescribing must be done by a licensed prescriber. Programs sold as "no license required" describe unauthorized practice of medicine.

This deserves a blunt answer because the search demand for a license-free version of this business is real and the offers marketed to it are not. The recurring pitches are a "wellness coaching" or "peptide consulting" front that ships product without a prescriber, a turnkey kit sold with API sourced through research-chemical channels, and an arrangement in which a prescriber's name appears on prescriptions they never actually reviewed. Each is a distinct violation: unauthorized practice of medicine and, for whoever supplied the license, aiding it; distribution of unapproved new drugs; and, in the third case, a sham examination that draws fraud exposure on top of the scope citation. State attorneys general have brought consumer-protection actions on exactly these theories, and the buyer of a turnkey program is not insulated by having bought it from someone else.

What is genuinely available to a non-clinician is narrower but real: owning or investing in a non-clinical entity where state law permits it, employing or contracting licensed prescribers, and providing management services to a professional practice under an arrangement that leaves clinical control with the clinicians. Whether that structure is available at all depends on the state's corporate-practice-of-medicine posture — some states bar non-physician ownership of practices delivering prescription services outright. Start with who can own a med spa by state, then have a healthcare attorney confirm the structure before capital moves.

Pharmacy Partnerships — Choosing a 503A vs 503B vs Branded Supply

The pharmacy side of GLP-1 compliance is as important as the prescribing side. Choosing a partner that operates inside the law protects the practice; choosing one that does not creates joint exposure. For a deeper, side-by-side breakdown of the two compounding pathways and how to vet a sourcing partner post-delisting, see the compounded GLP-1: 503A vs 503B sourcing guide.

503A Compounding Pharmacies — Patient-Specific Rx

A practice partnering with a 503A pharmacy should verify the state license is current, ask directly about its post-shortage essentially-a-copy policy, request recent state inspection reports, and obtain written acknowledgment that it will compound GLP-1s only where patient-specific clinical need is documented in the chart.

503B Outsourcing Facilities — Bulk; FDA-Registered

A practice partnering with a 503B facility should verify its FDA registration status, request the most recent FDA-483 inspection summary, and obtain a written legal opinion supporting the specific products supplied — plus a contingency plan for what happens if the pending bulks-list exclusion is finalized.

Branded Sourcing — Direct from Authorized Distributors

The cleanest supply chain is FDA-approved branded product sourced through Novo Nordisk's or Eli Lilly's authorized wholesalers, dispensed by a licensed pharmacy directly to the patient. The practice does not handle inventory, and the pharmacy bears the dispensing-side compliance burden. The cost per patient is higher and insurance coverage variable, but the regulatory exposure is the lowest available.

Non-Resident Pharmacy Registration

Most states require a non-resident pharmacy registration when a pharmacy ships in from out of state. Verify that any pharmacy supplying the practice or shipping to its patients holds that registration in every state where patients reside. A pharmacy shipping into a state where it is unregistered violates that state's pharmacy practice act, and the prescriber can face derivative discipline.

Marketing & Advertising Compliance for GLP-1 Services

Marketing GLP-1 weight-loss services is one of the most heavily scrutinized advertising categories in healthcare in 2026. The federal floor — the FTC — applies in every state, and state medical board advertising rules add layered restrictions on top.

FTC Endorsement Guides

The FTC Endorsement Guides require clear and conspicuous disclosure of any material connection between an endorser and the advertiser — paid relationships, free or discounted services, any other compensation. Before/after weight-loss photos carry substantiation requirements: the depicted result must be typical, or the ad must disclose that it is not. "Lost 30 pounds in 8 weeks" claims need reliable scientific evidence behind them.

State Medical Board Advertising Rules

State medical boards maintain advertising rules that go beyond FTC standards. Common requirements include disclosure of the prescriber's name and credentials, prohibition on superlative claims ("the best," "the safest"), prohibition on guarantees of outcome, and restrictions on the use of "before/after" photographs. See the state-specific advertising guides for California, New York, Georgia, and Arizona.

HIPAA + State PHI Rules for Testimonials

Testimonials and before/after photos involve protected health information. HIPAA permits marketing use of PHI only with a signed authorization specifying the use, the duration, and the patient's right to revoke, and some states add requirements on top. The authorization must be on file before anything is published. Stock-photo simulations presented as actual patient outcomes fail substantiation.

Off-Label and "Miracle" Claims That Draw Scrutiny

Marketing that promotes off-label uses (Ozempic for weight loss in non-diabetics, GLP-1s for cosmetic body contouring, "wellness" or anti-aging claims) draws FDA, FTC, and state board scrutiny. The most enforced categories are claims of guaranteed weight loss, unsubstantiated rapid-result claims, and any framing that suggests the GLP-1 is a cosmetic or lifestyle product rather than a prescription drug. "Lose weight while you sleep," "the secret Hollywood is using," and "skinny shot" framings are reliable triggers for board complaints.

2026 Enforcement Trends — What to Watch

The regulatory environment is moving faster on GLP-1s than on any other med spa service line. The trends below are the ones operators should track over the next 12–18 months.

FDA Moves to Permanently Close the 503B Bulks-List Door (April 2026)

On April 30, 2026 the FDA proposed to exclude semaglutide, tirzepatide, and liraglutide from the 503B Bulks List — the list of bulk drug substances that outsourcing facilities may use to compound under Section 503B, codified at 21 U.S.C. § 353b. The notice published in the Federal Register on May 1, 2026 under docket FDA-2015-N-3469. The agency's stated rationale is that it identified no clinical need for outsourcing facilities to compound these drugs from bulk active pharmaceutical ingredient now that adequate FDA-approved supply exists. Comments were originally due June 30, 2026; the FDA extended the comment period in a notice published June 26, 2026, moving the deadline to July 30, 2026. As of September 2026 the comment period has closed and the agency has not issued a final determination or announced a timeline for one, so the proposal is not yet binding. If finalized, it would foreclose one of the last theoretical bulk-compounding pathways for these molecules and cement the post-shortage status quo regardless of future supply conditions. Operators relying on any 503B-sourced compounded GLP-1 should treat the proposal as a strong signal of where the federal floor is heading and re-confirm their supply chain's legal basis with counsel now rather than after a final rule lands.

FDA Action Against Unapproved Imported Peptide Vendors

The FDA has issued warning letters and import alerts against multiple peptide vendors selling semaglutide, tirzepatide, and other "research chemicals" online. The pattern is accelerating, with actions in 2025 against vendors that supplied the early gray-market segment. Med spas that source from these vendors — even indirectly through a rebranded distributor — face FDA action and derivative state board discipline.

State AG Actions Against Telehealth Weight-Loss Shops

State attorneys general in California, Texas, New York, Massachusetts, and several other states have launched investigations into direct-to-consumer telehealth weight-loss platforms. The theories include unauthorized practice of medicine, deceptive trade practices, and consumer-protection violations. Settlements typically include disgorgement, monetary penalties, and injunctive limits on prescribing practices.

Insurance Carrier Prior-Authorization Tightening

Commercial insurers tightened prior-authorization criteria for Wegovy and Zepbound through 2025–2026, typically requiring documented BMI thresholds, comorbidities, prior failed attempts, and ongoing lifestyle-modification notes. Practices that bill insurance need PA workflows matching each major payer. Self-pay practices are insulated from PA mechanics but not from the standard-of-care expectations those criteria signal.

Compounding Industry Contraction

The compounding industry is contracting on the GLP-1 side. Pharmacies that built volume on essentially-a-copy compounding are exiting, consolidating, or moving to genuinely individualized 503A products. Expect a long-time partner to pivot or close its GLP-1 line, and vet the replacement before dependency develops.

Common GLP-1 Compliance Mistakes

Five mistakes account for the majority of citations and disciplinary actions in 2024–2026. Each is correctable; each correction is more affordable than the resulting enforcement.

Stocking Compounded Semaglutide as Primary Product Without 503A Patient-Specific Rx

The single most common failure pattern: bulk inventory of compounded vials labeled with the practice's logo, dispensed to whichever patient the prescriber decides should have a "weight loss shot." Tolerated under shortage conditions; post-shortage it is essentially-a-copy compounding without patient-specific need.

Skipping the Good-Faith Exam for Telehealth Patients

A 5-minute intake-form-only encounter with the prescriber rubber-stamping the prescription is not a defensible good-faith exam, even where state law permits audiovisual examination. Sham documentation is worse than none — it draws fraud allegations alongside the scope citation.

RNs Administering Rx-Only Injections Without Prescriber's Documented Assessment

RNs administering GLP-1 injections under standing orders, where the prescriber never assessed the specific patient, is a recurring nursing board target. The defense — "it was under standing order" — is not legally sufficient in any state for a prescription medication where individualized clinical judgment is required.

Standing Orders Too Broad to Cover Individualized GLP-1 Prescribing

Standing orders that authorize "GLP-1 administration to any appropriate patient" or "weight-loss injectables per protocol" without specifying the drug, dose range, contraindications, and prescriber-assessment requirement are not enforceable as substitutes for individualized prescribing. Tighten the language, sign annually, and ensure the standing order references the patient-specific assessment requirement.

Inadequate Adverse Event Tracking

GLP-1 adverse events — pancreatitis, gallbladder disease, severe gastroparesis, thyroid concerns — must be tracked, reported through MedWatch where appropriate, and charted. A practice that cannot produce its adverse-event log on demand has a gap that compounds every other issue. Build it into the EHR or keep a signed register reviewed monthly by the medical director.

How to Use This Guide

This guide sets the federal floor and the cross-state framework, but it cannot replace state-specific verification. Map it against your state's medical practice act, nurse practice act, pharmacy practice act, and recent board guidance, using the relevant state hub as the entry point: California, Florida, Texas, New York, Georgia, or Arizona.

Beyond GLP-1, the flagship med spa regulations by state reference covers the wider compliance map, and who can inject Botox in the United States covers the parallel scope question on the injectables side. At practice level, see the GLP-1 injection protocol, the tirzepatide protocol, and the weight-loss injections compliance overview.

The 2026 GLP-1 Deep-Dive Series

This pillar is the hub of a six-part 2026 deep-dive series. Each guide takes one slice of GLP-1 compliance further than this overview can, with the same federal-floor-plus-state-layer framework:

• Oral GLP-1 at med spas — how the newly approved oral Wegovy pill and Rybelsus fit a weight-management program, including dosing, tolerability, and the compliance implications of a branded oral option.
• GLP-1 and muscle loss / body composition — the lean-mass data from SURMOUNT and STEP, and how to build protein, resistance-training, and monitoring guidance into a defensible protocol.
• GLP-1 maintenance and off-ramping — dose tapering, weight-regain risk on discontinuation, and the documentation a board reviewer expects when a patient stops or pauses therapy.
• Compounded GLP-1: 503A vs 503B sourcing — a side-by-side breakdown of the two compounding pathways post-delisting and how to vet a sourcing partner without inheriting its exposure.
• California GLP-1 compliance — the Medical Board of California stance, AB-890 NP transition, and Board of Pharmacy enforcement applied specifically to GLP-1 programs.
• Florida GLP-1 compliance — Florida Department of Health and Board of Pharmacy expectations, protocol-agreement requirements, and office-based facility rules for GLP-1 service lines.

Related GLP-1 Guides

Three companion guides go deeper on a single axis each:

• GLP-1 Enforcement Actions Against Med Spas: 2026 Guide — which agency does what, what the warning letters actually cite, and how an investigation unfolds.
• GLP-1 Patient Screening & Eligibility at Med Spas (2026) — BMI and comorbidity criteria, contraindications, medical necessity, and how to decline a patient properly.
• Lipotropic & B12 Weight Loss Injections: Med Spa Rules 2026 — the non-GLP-1 side of the menu: MIC, B12, HCG, and what is defensible.

Summary — 7 Actionable Takeaways

1. The shortage exception is closed. Tirzepatide came off the FDA shortage list in October 2024; semaglutide came off on February 21, 2025. Routine essentially-a-copy compounding is no longer permitted under Section 503A.
2. Three legitimate supply paths remain. Branded FDA-approved products, narrow 503B exceptions, and 503A patient-specific compounding with documented clinical need. Everything outside that framework carries elevated regulatory risk.
3. GLP-1s are not controlled substances. No DEA registration is required to prescribe them, and Ryan Haight does not apply. State medical practice acts and the bona fide practitioner-patient relationship requirement do.
4. NP scope is the single biggest cross-state variable. Full-practice states allow independent prescribing; restrictive states require collaborative agreements; conditional states require milestones first. Map by patient location, not prescriber location.
5. The good-faith exam is non-negotiable. BMI, comorbidities, contraindications screen, pre-treatment labs, informed consent, and a treatment plan — all in the chart, all signed by the prescriber, before the prescription is written.
6. Marketing draws scrutiny. FTC endorsement guides, state board advertising rules, HIPAA testimonial authorizations, and off-label claim restrictions all apply. Audit marketing material against the same standard a state board would.
7. Verify with state boards before making decisions. Federal rules set the floor, but state boards drive the day-to-day enforcement reality. The state hubs are a starting point; a healthcare attorney is the final authority.

Frequently Asked Questions

This article is for educational purposes only and does not constitute legal or medical advice. GLP-1 prescribing rules vary by state and change frequently. Always confirm current requirements with your state medical board, state board of nursing, state board of pharmacy, and a licensed healthcare attorney before making compliance decisions for your practice.