GLP-1 Med Spa Compliance 2026: The Complete National Guide to Semaglutide & Tirzepatide Prescribing

GLP-1 receptor agonists — semaglutide (Wegovy, Ozempic), tirzepatide (Mounjaro, Zepbound), and liraglutide (Saxenda, Victoza) — created the largest single revenue category in med spa history. Between 2022 and 2024, hundreds of practices built weight-management programs around compounded semaglutide sourced from 503A pharmacies at a fraction of the branded price. That model rested on a single legal fact: the drugs were on the FDA shortage list, which created a statutory window for compounding under Section 503A.

That window has now closed. The FDA drug shortage database resolved the tirzepatide shortage in October 2024 and resolved the semaglutide shortage on February 21, 2025. Both products are now on the market in adequate supply, and 503A pharmacies can no longer routinely compound essentially-a-copy versions. The legal cliff that compounding lawyers had warned about for two years arrived on schedule, and state medical boards, state pharmacy boards, the FDA, and state attorneys general have all stepped up enforcement.

This guide is the national pillar reference for what GLP-1 compliance looks like in 2026 — what you can still legally prescribe, who can prescribe it, the rules around telehealth, the documentation every chart must contain, the state-by-state enforcement environment, and the marketing pitfalls that draw scrutiny. It supersedes our earlier GLP-1 weight loss compliance overview and pairs with the flagship med spa regulations by state reference.

Important: Regulations and enforcement priorities change frequently. Verify with your state's medical board, board of pharmacy, and a healthcare attorney before relying on this content for compliance decisions. This guide reflects the regulatory environment as of May 2026.

The 2024–2025 Inflection Point — What Changed and Why It Matters

Two FDA actions, twelve months apart, ended the easy era of compounded GLP-1s. Understanding the sequence and the legal mechanics behind it is the first step in everything that follows. The same compounded-semaglutide vial that was legal to dispense to a cash-pay weight-loss patient in early 2024 is, in most circumstances, no longer legal in 2026.

FDA Tirzepatide Shortage Resolved (October 2024)

The FDA first declared the tirzepatide shortage resolved in October 2024 after Eli Lilly increased manufacturing capacity for Mounjaro and Zepbound. Once a drug is removed from the FDA shortage list, the statutory exception under Section 503A that allows compounding of an essentially-a-copy product expires. Compounders pushed back through litigation, and the FDA temporarily paused enforcement while it reconsidered the shortage status. After a brief reinstatement, the agency confirmed in late 2024 that tirzepatide supply was meeting demand and the shortage was closed. The legal compounding window for tirzepatide ended at that point — meaning that as of the end of 2024, 503A pharmacies could no longer routinely compound tirzepatide as a cheaper alternative to branded Mounjaro or Zepbound.

FDA Semaglutide Shortage Resolved (February 21, 2025)

Semaglutide followed a parallel trajectory. The FDA announced on February 21, 2025 that the semaglutide shortage was resolved. Novo Nordisk had ramped manufacturing of Wegovy and Ozempic sufficiently to meet U.S. demand. Once that determination was final, 503A pharmacies and 503B outsourcing facilities lost the shortage-based pathway to compound semaglutide as a copy of the branded product. The FDA's guidance to patients and providers confirmed the change and warned about the safety risks of unapproved compounded products. Practices that had been bulk-purchasing compounded semaglutide vials and selling them under in-house weight-loss programs faced a hard transition deadline.

503A Pharmacy "Essentially-a-Copy" Prohibition Triggered After Delisting

Section 503A of the Federal Food, Drug, and Cosmetic Act permits state-licensed pharmacies to compound medications for individual patients pursuant to a patient-specific prescription. Outside of an FDA-declared shortage, however, 503A compounders may not produce a product that is "essentially a copy" of a commercially available, FDA-approved drug except in narrow circumstances. The legitimate post-shortage exceptions are real but limited: a documented patient-specific clinical need such as a verified allergy to one of the inactive ingredients in the branded product (for example, polysorbate-80 sensitivity), or a clinically required dose strength that the commercial product does not provide. The bar is high, and the documentation must be in the chart before the prescription is written. Section 503B outsourcing facilities operate under a separate federal framework with its own bulks list and exception structure; the post-shortage menu of permissible 503B GLP-1 products is similarly narrow.

The Legal Cliff for High-Volume Telehealth GLP-1 Shops

The business model that boomed in 2023–2024 — direct-to-consumer telehealth platforms shipping compounded semaglutide nationwide for $200–$400 per month — was always structurally fragile. It depended on the shortage exception, on a patient-specific prescription that often involved no real examination, and on 503A pharmacies operating at a scale and breadth that resembled manufacturing. Every one of those assumptions broke between October 2024 and February 2025. State medical boards in New York, California, Texas, and Florida have all taken disciplinary action against telehealth-only weight-loss prescribers in 2025. The FDA has issued warning letters to compounding pharmacies marketing post-shortage GLP-1 copies. The U.S. Department of Justice has signaled that high-volume cross-state telehealth prescribing without bona fide practitioner-patient relationships is on its enforcement radar. Operators still running this model into 2026 are operating against the regulatory tide.

What Med Spas Can Legally Prescribe Today

The compliant GLP-1 product menu for a U.S. med spa in 2026 has three legitimate categories and one category that no longer fits inside the law. Operators rebuilding their weight-management programs after the delistings should think of this as the new product framework.

Branded FDA-Approved GLP-1s — Wegovy/Ozempic, Mounjaro/Zepbound, Saxenda

The cleanest path is also the most expensive: prescribe branded, FDA-approved products sourced through normal pharmacy channels. Wegovy and Ozempic (semaglutide) from Novo Nordisk are approved for chronic weight management and type 2 diabetes, respectively. Mounjaro and Zepbound (tirzepatide) from Eli Lilly cover the same indications. Saxenda (liraglutide) is a daily-dose alternative. The branded products are FDA-approved, manufactured under cGMP, distributed through authorized wholesalers, and dispensed by licensed pharmacies. They are also the products the patient's insurance may cover, depending on indication, BMI, and prior-authorization criteria. Practices that pivot toward a branded-supply model trade margin for regulatory clarity, and the trade-off increasingly favors compliance.

503B Outsourcing-Facility Compounded Products Under Narrow Exceptions

503B outsourcing facilities — which are FDA-registered and operate under cGMP — can compound certain products in bulk without patient-specific prescriptions, but only when the active pharmaceutical ingredient appears on the FDA bulks list or qualifies under a specific statutory exception. Post-shortage, the menu of permissible 503B compounded GLP-1 products is narrow. Where an exception is available — for example, a clinically required dose strength not commercially marketed, or a specific formulation paired with another approved component — a 503B facility may be a compliant supplier. Operators should require a copy of the facility's FDA registration, recent FDA-483 inspection summaries, and a written legal opinion from the facility's compounding counsel before sourcing.

503A Compounded Products Only With Documented Patient-Specific Clinical Need

503A patient-specific compounding remains lawful when there is a documented clinical reason the patient cannot use the commercial product. The two most common legitimate triggers are a verified allergy to an inactive ingredient in the branded product and a clinically required dose strength not available commercially. The documentation must precede the prescription — an entry in the chart that simply says "patient prefers compounded" is not adequate, and chart audits in 2025 have flagged exactly this language as deficient. The prescribing practitioner must perform a good-faith examination, document the clinical rationale, and write a patient-specific prescription. The pharmacy must verify the prescription and dispense to that specific patient. Bulk-stocking compounded vials in the practice for distribution to whichever patient walks through the door does not meet 503A's patient-specificity requirement.

What's NOT Legal Anymore

The following models, which were widespread in 2023–2024, do not fit inside the current legal framework and are the highest-risk activities for 2026:

• Bulk-stocked compounded semaglutide as a cheaper alternative to the branded product. Without patient-specific clinical justification, this is essentially-a-copy compounding and is no longer permitted post-delisting.
• International API sourcing. Importing semaglutide or tirzepatide active pharmaceutical ingredient from foreign suppliers — particularly through research-chemical and "research only" channels — is illegal regardless of shortage status. The FDA has issued warning letters and import-alert listings against multiple peptide vendors in 2024–2025.
• "Peptide blends" sold as weight-loss therapy. Compounding peptides marketed for weight loss without an FDA-approved indication or 503A patient-specific clinical need is unapproved drug distribution.
• Direct-from-patient bulk reimbursement models that price compounded GLP-1 as an in-practice retail product without a documented patient-specific prescription.

The practical consequence is that operators must either move to a branded-supply model, build a tightly documented 503A patient-specific compounding workflow, or close the GLP-1 service line. Other paths increasingly carry regulatory risk that exceeds the margin.

Who Can Prescribe GLP-1s — Provider Scope Nationally

Who is legally allowed to prescribe a GLP-1 depends on the prescriber's license type and the state in which the patient is located. The headline is that GLP-1s are not controlled substances — there is no DEA registration requirement specific to GLP-1 prescribing, and the Ryan Haight Online Pharmacy Consumer Protection Act does not apply. State medical practice acts and state nurse practice acts do the heavy lifting.

Physicians (MD/DO) — Full Authority

Licensed physicians (MD or DO) with an active state license and appropriate prescriptive authority can prescribe GLP-1s anywhere in the United States. Because GLP-1s are not Schedule I–V controlled substances, no DEA registration is required to prescribe the GLP-1 itself (a DEA registration is still required to prescribe other controlled substances the practice uses, such as buprenorphine in addiction settings or stimulants for off-label use). Physicians remain bound by their state's good-faith exam requirements and by the standard of care, including pre-treatment workup and informed consent. Multi-state practices require a separate license in each state where the prescriber treats patients.

Nurse Practitioners — Depends on State

Nurse practitioner authority to prescribe GLP-1s independently depends entirely on the practice-environment classification of the state where the patient is located. The American Association of Nurse Practitioners classifies states into three categories:

• Full practice (independent prescribing): Arizona, Colorado, Oregon, Washington, New Mexico, Iowa, Maine, Alaska, and others. NPs with appropriate certification can prescribe GLP-1s independently after meeting the state's licensure requirements. See the Arizona NP full practice authority guide for a worked example.
• Reduced/conditional: California (after AB-890 transition to 104 NP), New York (after 3,600 supervised practice hours), and several others. Independent prescribing kicks in only after specific milestones; before then, a collaborative agreement is required. See California AB-890 and New York's 3,600-hour rule.
• Restricted (collaborative or supervisory only): Florida, Texas, Georgia, Illinois, Ohio, North Carolina, and others. NPs must prescribe under a written collaborative or protocol agreement with a physician. See Georgia's protocol agreement requirements for the structure most restrictive states use.

For multi-state telehealth practices, the binding state is where the patient is located at the time of the visit, not where the NP is physically practicing. An NP licensed in full-practice Arizona who treats a patient located in Florida via telehealth must comply with Florida's collaborative agreement requirements, plus Florida licensure.

Physician Assistants — Under Physician Supervision

Physician assistants can prescribe GLP-1s under the supervision of a physician as required by the state's PA Practice Act. The supervising physician relationship is documented in a written delegation agreement that defines the scope of the PA's prescriptive authority. State requirements vary on chart cosignature percentage, on-site supervision, and the maximum number of PAs a physician can supervise. PAs cannot operate independently in any state.

Registered Nurses — Cannot Prescribe; Can Administer Under Standing Order

Registered nurses cannot prescribe GLP-1s in any state. RNs may administer a GLP-1 injection to a patient under a valid prescription written by an authorized prescriber, or under a standing order — but only after the prescriber has performed a good-faith examination of that specific patient. A standing order alone, without a prescriber-conducted patient assessment, is not legally sufficient. Boards of nursing have disciplined RNs in 2024–2025 for administering GLP-1 injections in practices where the prescriber never saw or assessed the patient. The "RN administers based on intake form" model is a recurring enforcement target.

Pharmacists — Limited Prescribing Under Collaborative Practice Agreements

Pharmacists dispense GLP-1s under a valid prescription. A growing number of states allow pharmacists limited prescribing authority under collaborative practice agreements with a physician — California, Idaho, Montana, New Mexico, North Carolina, Oregon, and Washington have variations. The scope is generally narrow and does not, in most states, encompass weight-management GLP-1 prescribing. Where pharmacist prescribing exists for chronic disease management (HIV PrEP, smoking cessation, hormonal contraception), the GLP-1 expansion would typically require additional authorization. Operators relying on pharmacist prescribing should obtain a written legal opinion before structuring the program.

Telehealth Prescribing — Federal and State Rules

Telehealth GLP-1 prescribing sits at the intersection of federal telehealth law, state medical practice acts, and state nurse practice acts. Because GLP-1s are not controlled substances, the most restrictive federal telehealth law — Ryan Haight — does not apply. The state-level requirements still bind every visit.

Federal: Ryan Haight Act Does Not Directly Apply

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 restricts the prescribing of controlled substances by means of the Internet without an in-person medical evaluation. Because GLP-1 receptor agonists are not on any DEA schedule, Ryan Haight does not directly apply to GLP-1 telehealth prescribing. The DEA Diversion Control Division publishes telemedicine rules that update periodically, but those rules govern controlled substances. For non-controlled GLP-1s, the federal layer that does apply is the broader requirement of a bona fide practitioner-patient relationship — anchored in federal anti-kickback principles, FDA labeling and intended-use rules, and the False Claims Act when federal payors are involved.

State Telehealth Requirements — Bona Fide Relationship Required

Nearly every state requires a bona fide practitioner-patient relationship, with a documented good-faith examination, before a prescription is issued. States diverge on whether the examination can be conducted entirely via real-time audiovisual telehealth, whether an in-person initial visit is required, and what patient-history and physical-exam elements must be documented. A handful of states explicitly require an in-person visit before the first prescription for chronic medications; a larger group accepts audiovisual telehealth provided the examination is substantive. The standard of care does not change because the visit is virtual — vitals must be obtained where clinically necessary, history must be taken, and contraindications must be screened.

The "Cerebral / Hims-Style" Enforcement Risk

Direct-to-consumer telehealth platforms that scaled prescribing in 2022–2024 have drawn substantial regulatory and legal scrutiny. The DOJ has investigated and resolved cases against telehealth platforms whose prescribing patterns — short visits, high prescription rates, financial pressure on prescribers — fell short of bona fide examinations. State attorneys general in multiple states have launched parallel investigations. State medical boards have disciplined individual prescribers practicing on these platforms. The pattern in 2026 is consistent: high-volume, low-touch prescribing models are an enforcement priority across federal and state agencies, and the GLP-1 weight-loss vertical specifically is a primary target.

Cross-State Telehealth — License Where the Patient Is

The prescribing practitioner must be licensed in the state where the patient is located at the time of the visit. The Interstate Medical Licensure Compact (IMLC) speeds the process for physicians seeking additional state licenses. The Nurse Licensure Compact (NLC) allows multi-state practice for RNs and LPNs holding a multi-state license; the APRN Compact (for nurse practitioners) is in early implementation as of 2026 and not all states participate. None of these compacts eliminate the requirement to comply with each state's scope-of-practice and prescribing rules — they only streamline the licensure mechanics. A telehealth practice serving patients in multiple states must map prescriber licensure, NP scope rules, and state-specific telehealth requirements state by state.

The Good Faith Examination — Non-Negotiable

The good-faith examination is the single most enforced documentation requirement in GLP-1 compliance. State medical boards, when they audit a GLP-1 practice, look first for evidence that a qualified prescriber examined the patient and made a clinical decision before the prescription was written. The exam can be in-person or via real-time telehealth where the state permits, but the substance must be there.

For GLP-1 initiation, a defensible good-faith examination contains:

• BMI and anthropometric data, documented contemporaneously — not pulled from a patient self-report from six months prior.
• Comorbidities — type 2 diabetes, hypertension, dyslipidemia, sleep apnea, fatty liver disease, cardiovascular disease — documented and weighted into the treatment decision.
• Weight history — duration of weight gain, prior weight-loss attempts, dietary and behavioral interventions tried.
• Medication review — current prescriptions, OTC medications, supplements; assessment of interactions including with insulin, sulfonylureas, and oral medications affected by delayed gastric emptying.
• Contraindications screen — personal or family history of medullary thyroid carcinoma (MTC) or Multiple Endocrine Neoplasia syndrome type 2 (MEN-2), severe gastroparesis or other severe GI disease, prior pancreatitis, gallbladder disease, severe diabetic retinopathy, pregnancy or pregnancy plans within the next two months.
• Required pre-treatment labs — see below.
• Treatment plan — specific drug, starting dose, titration plan, follow-up cadence, and discontinuation criteria.

Required pre-treatment labs at the standard of care now include:

• Hemoglobin A1c (baseline glycemic status; clinical relevance for diabetic vs. non-diabetic indication)
• Fasting lipid panel
• Comprehensive metabolic panel — captures kidney function (eGFR), electrolytes, and liver function
• TSH where thyroid status is unclear, symptomatic, or where the patient has a personal or family thyroid history
• Pregnancy test (β-hCG) for patients of childbearing potential
• Lipase or amylase where pancreatitis history or current symptoms suggest assessment is appropriate

The lab panel is not a national mandate, but its absence is the single most common chart deficiency cited in 2024–2026 board reviews. Building it into the practice's GLP-1 protocol is the lowest-effort, highest-yield compliance step available.

State-by-State Enforcement Spotlight

Federal rules set the floor; state medical boards, boards of nursing, boards of pharmacy, and state attorneys general drive enforcement. The patterns vary significantly. The following spotlights highlight the dynamics in the six highest-volume states, each linking to the in-state GLP-1 deep dive.

New York — OPMC Discipline Trends

The New York State Office of Professional Medical Conduct (OPMC) has measurably increased disciplinary actions against physicians and physician assistants prescribing GLP-1s outside the bounds of the state's good-faith exam and informed-consent rules. The most common citations involve telehealth-only prescribing without an established practitioner-patient relationship and inadequate contraindications screening. NPs with fewer than 3,600 hours of supervised practice prescribing under independent practice authority are also a category of concern. The full state-specific guide is at New York GLP-1 weight-loss med spa compliance.

California — MBC Stance and AB-890 NP Transition

The Medical Board of California (MBC) has disciplined practitioners for prescribing compounded semaglutide post-delisting without documented patient-specific clinical justification, and the California State Board of Pharmacy has taken parallel action against compounding pharmacies. The interaction with California's AB-890 NP transition is particularly important: only NPs who have completed the 103/104 NP transition and met the supervised-practice requirements may prescribe independently, and the rest must operate under standardized procedures with a physician. The California state hub at /blog/california consolidates the related compliance topics.

Texas — TMB and TSBP Enforcement

The Texas Medical Board (TMB) and the Texas State Board of Pharmacy (TSBP) have run parallel enforcement programs against GLP-1 prescribing and compounding practices. TMB rules require a physician-patient relationship before any prescription, a position-specific scope of delegation to NPs and PAs, and clear standing-orders documentation. TSBP has cited compounding pharmacies that distributed semaglutide as essentially-a-copy after the shortage delisting. See the Texas weight-loss GLP-1 compliance guide and the Texas state hub.

Florida — DOH and Board of Pharmacy

The Florida Department of Health and the Florida Board of Pharmacy have both issued post-delisting guidance and taken action against compounded GLP-1 distribution outside the patient-specific framework. Florida's office-based facility registration rules add a separate compliance dimension for higher-risk service lines. Because Florida is a restrictive NP state, all non-physician prescribing must operate under the state's protocol-agreement structure. The Florida state hub consolidates the Florida-specific GLP-1, NP scope, advertising, and ownership analysis.

Georgia — GCMB + GDNA

The Georgia Composite Medical Board (GCMB) and the Georgia Drugs and Narcotics Agency (GDNA) jointly oversee prescribing and dispensing in Georgia. GCMB has issued guidance on telehealth prescribing standards and on protocol-agreement requirements between physicians and APRNs for weight-management drug therapy. The state's protocol-agreement structure is a model used in several restrictive states. The full Georgia GLP-1 analysis is at Georgia GLP-1 weight-loss med spa compliance and the Georgia state hub.

Arizona — AMB + AZ Board of Pharmacy

Arizona is a full-practice-authority state for nurse practitioners, which means an Arizona-licensed NP can independently prescribe GLP-1s after meeting Arizona Medical Board (AMB) and Arizona State Board of Nursing requirements. The Arizona State Board of Pharmacy regulates compounding within the state. Even with full NP authority, Arizona prescribers face the same federal compounding constraints — the post-delisting essentially-a-copy prohibition — as prescribers in any other state. See the Arizona GLP-1 weight-loss compliance guide and the Arizona state hub.

Documentation Requirements — What Every Chart Must Contain

Documentation is the single most modifiable variable in GLP-1 compliance. Practices that survive board audits and chart reviews look the same: every chart contains the same elements in the same place, the prescriber signed the assessment before the prescription was written, and the consent form includes the GLP-1-specific warnings. Practices that fail audits look the same in the opposite way: missing assessments, generic consent forms, blanket standing orders, no follow-up documentation.

Initial Assessment Template

Every initial GLP-1 visit should generate a single chart note containing: chief complaint, BMI and weight history, comorbidities, medication and supplement review, contraindications screen (including MTC/MEN-2 family history), allergy history, social history (alcohol, tobacco, substance use), prior weight-loss interventions, treatment plan with specific drug and titration schedule, and prescriber signature. A checklist-style template ensures uniformity and is the form most defensible in audit. State boards reviewing charts in 2025–2026 specifically check whether the contraindications screen and informed consent occurred at the same visit as the prescription.

Pre-Treatment Labs and Rationale

Document which labs were ordered, when results were received, and what each result meant for the treatment decision. If the patient declined a recommended lab, document that decision and the discussion. If a lab was clinically unnecessary for a specific patient, document the rationale — never assume the audit reviewer will infer it.

Informed Consent Specific to GLP-1

A generic procedure consent does not cover GLP-1 therapy. The GLP-1-specific consent must address: off-label use where applicable (e.g., Ozempic prescribed for weight loss), the boxed warning regarding thyroid C-cell tumors observed in rodent studies and the contraindication in MTC/MEN-2, common GI side effects (nausea, vomiting, diarrhea, constipation), risk of pancreatitis and gallbladder disease, hypoglycemia risk when combined with insulin or sulfonylureas, contraception and pregnancy considerations, and the discontinuation policy. The consent must be signed before the first dose is dispensed or administered.

Standing Orders / Protocol Agreements

Where the practice uses standing orders to authorize RN or LPN administration, the standing order must be specific to the drug, route, dose range, and conditions of use; cannot substitute for an individualized prescriber assessment of each patient; and must be signed and dated by the medical director. Where the practice uses an NP/PA protocol or collaborative agreement, the agreement must define the scope of GLP-1 prescribing, the supervisory or collaborative structure required by the state, the chart cosignature requirements, and the periodic review schedule. Update and re-sign annually at minimum.

Refill Criteria and Follow-Up Cadence

Document the follow-up cadence appropriate for the drug — typically a 4-week follow-up for the first refill to assess tolerability and titration, then quarterly for stable patients. Refill criteria should include weight progress, adverse-event screening, vital signs check, and any indicated repeat labs. A refill issued without contemporaneous documentation of patient status is the second-most-common chart deficiency cited by state boards, after a missing initial good-faith exam.

Pharmacy Partnerships — Choosing a 503A vs 503B vs Branded Supply

The pharmacy side of GLP-1 compliance is as important as the prescribing side. Choosing a partner that operates inside the law protects the practice; choosing one that does not creates joint exposure.

503A Compounding Pharmacies — Patient-Specific Rx

503A pharmacies are state-licensed traditional compounding pharmacies. They prepare medications for individual patients pursuant to a patient-specific prescription. Post-shortage, their permissible GLP-1 compounding is limited to documented patient-specific clinical needs as described above. A practice that partners with a 503A pharmacy should: verify the pharmacy's state license is current, ask about its policy on essentially-a-copy compliance post-shortage, request copies of recent state inspection reports, and obtain the pharmacy's written acknowledgment that it will only compound when patient-specific clinical need is documented.

503B Outsourcing Facilities — Bulk; FDA-Registered

503B outsourcing facilities are FDA-registered and operate under cGMP. They can compound in bulk without patient-specific prescriptions but only for products that meet narrow statutory criteria. Post-shortage, the menu of permissible 503B GLP-1 products is limited. A practice partnering with a 503B should verify FDA registration status, request the most recent FDA-483 inspection summary, and obtain a written legal opinion supporting the specific products being supplied.

Branded Sourcing — Direct from Authorized Distributors

The cleanest supply chain is FDA-approved branded product sourced through Novo Nordisk's or Eli Lilly's authorized wholesalers, dispensed by a licensed pharmacy directly to the patient. The practice does not handle inventory, and the pharmacy bears the dispensing-side compliance burden. The cost per patient is higher and insurance coverage variable, but the regulatory exposure is the lowest available.

Non-Resident Pharmacy Registration

When a compounding pharmacy ships into a state where it is not physically located, most states require a non-resident pharmacy registration with that state's board of pharmacy. Verify that any pharmacy supplying the practice or shipping to its patients is registered as a non-resident pharmacy in each state where patients reside. A pharmacy that is unregistered in a state into which it ships is operating in violation of that state's pharmacy practice act, and the prescribing practitioner can face derivative discipline.

Marketing & Advertising Compliance for GLP-1 Services

Marketing GLP-1 weight-loss services is one of the most heavily scrutinized advertising categories in healthcare in 2026. The federal floor — the FTC — applies in every state, and state medical board advertising rules add layered restrictions on top.

FTC Endorsement Guides

The FTC Endorsement Guides require clear and conspicuous disclosure of any material connection between an endorser and the advertiser. For med spa testimonials and influencer content, this means disclosing paid relationships, free or discounted services, and any other compensation. Before/after weight-loss photos are subject to substantiation requirements — the depicted result must be typical of what consumers can expect, or the advertisement must clearly disclose that results are atypical. "Lost 30 pounds in 8 weeks" claims, in particular, must be backed by reliable scientific evidence and a typical-results disclosure.

State Medical Board Advertising Rules

State medical boards maintain advertising rules that go beyond FTC standards. Common requirements include disclosure of the prescriber's name and credentials, prohibition on superlative claims ("the best," "the safest"), prohibition on guarantees of outcome, and restrictions on the use of "before/after" photographs. See the state-specific advertising guides for California, New York, Georgia, and Arizona.

HIPAA + State PHI Rules for Testimonials

Patient testimonials and before/after photos involve protected health information. HIPAA permits use of PHI for marketing only with a signed, HIPAA-compliant patient authorization that specifies the use, the duration, and the patient's right to revoke. Some states impose additional consent requirements. The authorization must be on file before the testimonial or photo is used in any external communication. Stock-photo simulation of weight-loss results is rarely acceptable when presented as an actual patient outcome — substantiation rules still apply.

Off-Label and "Miracle" Claims That Draw Scrutiny

Marketing that promotes off-label uses (Ozempic for weight loss in non-diabetics, GLP-1s for cosmetic body contouring, "wellness" or anti-aging claims) draws FDA, FTC, and state board scrutiny. The most enforced categories are claims of guaranteed weight loss, unsubstantiated rapid-result claims, and any framing that suggests the GLP-1 is a cosmetic or lifestyle product rather than a prescription drug. "Lose weight while you sleep," "the secret Hollywood is using," and "skinny shot" framings are reliable triggers for board complaints.

2026 Enforcement Trends — What to Watch

The regulatory environment is moving faster on GLP-1s than on any other med spa service line. The trends below are the ones operators should track over the next 12–18 months.

FDA Action Against Unapproved Imported Peptide Vendors

The FDA has issued warning letters and import alerts against multiple peptide vendors selling semaglutide, tirzepatide, and other "research chemicals" online. The pattern is accelerating, with actions in 2025 against vendors that supplied the early gray-market segment. Med spas that source from these vendors — even indirectly through a rebranded distributor — face FDA action and derivative state board discipline.

State AG Actions Against Telehealth Weight-Loss Shops

State attorneys general in California, Texas, New York, Massachusetts, and several other states have launched investigations into direct-to-consumer telehealth weight-loss platforms. The theories include unauthorized practice of medicine, deceptive trade practices, and consumer-protection violations. Settlements typically include disgorgement, monetary penalties, and injunctive limits on prescribing practices.

Insurance Carrier Prior-Authorization Tightening

Commercial insurers have tightened prior-authorization criteria for Wegovy and Zepbound through 2025–2026, often requiring documented BMI thresholds, comorbidity criteria, prior failed weight-loss attempts, and ongoing lifestyle-modification documentation. Practices that bill insurance must build PA workflows and documentation that meet each major payer's criteria. Self-pay practices are insulated from PA dynamics but not from the standard-of-care implications when major payers tighten criteria.

Compounding Industry Contraction

The compounding pharmacy industry is contracting on the GLP-1 side. Pharmacies that built their volume on essentially-a-copy compounding are exiting the line, consolidating into general compounding, or moving toward genuinely individualized 503A products. Practices should expect their long-time pharmacy partners to either pivot or close their GLP-1 offerings; replacement supply chains should be vetted before dependency develops.

Common GLP-1 Compliance Mistakes

Five mistakes account for the majority of citations and disciplinary actions in 2024–2026. Each is correctable; each correction is more affordable than the resulting enforcement.

Stocking Compounded Semaglutide as Primary Product Without 503A Patient-Specific Rx

The single most common failure pattern: bulk inventory of compounded semaglutide vials labeled with the practice's logo, dispensed to whichever patient the prescriber decides should have a "weight loss shot." This was tolerated under shortage conditions; it is essentially-a-copy compounding without patient-specific need post-shortage and is a primary FDA, state board of pharmacy, and state medical board target.

Skipping the Good-Faith Exam for Telehealth Patients

Practices that scaled telehealth visits to 5- or 7-minute intake-form-only encounters, with the prescriber rubber-stamping prescriptions, do not have defensible good-faith exams. Even where state law permits real-time audiovisual examination, the substance of the exam — history, contraindications screen, treatment plan — must be present in the chart. Sham documentation is worse than no documentation; it draws fraud allegations alongside scope-of-practice citations.

RNs Administering Rx-Only Injections Without Prescriber's Documented Assessment

RNs administering GLP-1 injections under standing orders, where the prescriber never assessed the specific patient, is a recurring nursing board target. The defense — "it was under standing order" — is not legally sufficient in any state for a prescription medication where individualized clinical judgment is required.

Standing Orders Too Broad to Cover Individualized GLP-1 Prescribing

Standing orders that authorize "GLP-1 administration to any appropriate patient" or "weight-loss injectables per protocol" without specifying the drug, dose range, contraindications, and prescriber-assessment requirement are not enforceable as substitutes for individualized prescribing. Tighten the language, sign annually, and ensure the standing order references the patient-specific assessment requirement.

Inadequate Adverse Event Tracking

GLP-1 adverse events — pancreatitis, gallbladder disease, severe gastroparesis, thyroid concerns — must be tracked, reported through MedWatch where appropriate, and reflected in patient charts. A practice that cannot produce its adverse-event log on demand has a documentation gap that compounds every other compliance issue. Build the log into the EHR or maintain it as a separate signed register reviewed monthly by the medical director.

How to Use This Guide

This guide consolidates the federal floor and the cross-state framework for GLP-1 compliance, but it cannot replace state-specific verification. The next practical step is to map the guide against your state's medical practice act, nurse practice act, pharmacy practice act, and recent state board guidance. Use the relevant state hub as the entry point: California, Florida, Texas, New York, Georgia, or Arizona. Each hub consolidates GLP-1, NP scope, advertising, and ownership analysis for that state.

For broader state-level compliance variables beyond GLP-1, see the flagship med spa regulations by state reference. For the parallel scope-of-practice question across the injectables category, see who can inject Botox in the United States. For practice-level GLP-1 protocols, see the GLP-1 injection protocol, the tirzepatide protocol, and the weight-loss injections compliance overview.

Summary — 7 Actionable Takeaways

1. The shortage exception is closed. Tirzepatide came off the FDA shortage list in October 2024; semaglutide came off on February 21, 2025. Routine essentially-a-copy compounding is no longer permitted under Section 503A.
2. Three legitimate supply paths remain. Branded FDA-approved products, narrow 503B exceptions, and 503A patient-specific compounding with documented clinical need. Everything outside that framework carries elevated regulatory risk.
3. GLP-1s are not controlled substances. No DEA registration is required to prescribe them, and Ryan Haight does not apply. State medical practice acts and the bona fide practitioner-patient relationship requirement do.
4. NP scope is the single biggest cross-state variable. Full-practice states allow independent prescribing; restrictive states require collaborative agreements; conditional states require milestones first. Map by patient location, not prescriber location.
5. The good-faith exam is non-negotiable. BMI, comorbidities, contraindications screen, pre-treatment labs, informed consent, and a treatment plan — all in the chart, all signed by the prescriber, before the prescription is written.
6. Marketing draws scrutiny. FTC endorsement guides, state board advertising rules, HIPAA testimonial authorizations, and off-label claim restrictions all apply. Audit marketing material against the same standard a state board would.
7. Verify with state boards before making decisions. Federal rules set the floor, but state boards drive the day-to-day enforcement reality. The state hubs are a starting point; a healthcare attorney is the final authority.

Frequently Asked Questions

This article is for educational purposes only and does not constitute legal or medical advice. GLP-1 prescribing rules vary by state and change frequently. Always confirm current requirements with your state medical board, state board of nursing, state board of pharmacy, and a licensed healthcare attorney before making compliance decisions for your practice.