How to Open a Med Spa: Complete Step-by-Step Guide (2026)

The med spa industry generates over $15 billion annually in the United States and is growing at 12–15% per year. It's one of the most attractive small business opportunities in healthcare — combining strong consumer demand, relatively high margins, and recurring revenue from loyal clients.

But opening a med spa is not like opening a hair salon or retail shop. You're operating at the intersection of healthcare, cosmetics, and business — with real regulatory requirements, clinical risks, and professional liability exposure. Getting the compliance foundation wrong doesn't just cost money. It can result in license revocation, malpractice suits, or patient harm.

This guide walks you through every step of opening a med spa: from business structure and licensing through medical directors, SOPs, equipment, and compliance systems.

Step 1: Understand What a Med Spa Actually Is

A medical spa (med spa) is a hybrid between a day spa and a medical clinic. It offers aesthetic treatments that go beyond what a traditional esthetician can legally provide — including injections (Botox, fillers, GLP-1 weight loss medications), laser and energy-based treatments (laser hair removal, RF microneedling), and prescription skin care.

This distinction is critical: because med spas offer treatments that legally constitute the "practice of medicine," they are subject to medical practice laws and regulations in every state. That means:

• You need a licensed physician (medical director) involved in clinical oversight
• Injectors must be appropriately licensed for their scope of practice
• You must have written clinical protocols (SOPs) for every treatment
• Your business structure may need to meet specific ownership rules

Step 2: Choose Your Business Structure Carefully

Corporate Practice of Medicine (CPOM) Laws

Many states have "Corporate Practice of Medicine" (CPOM) laws that restrict who can own a medical practice. Under CPOM, a non-physician cannot own an entity that directly employs physicians or controls clinical decision-making. The practical impact for med spas varies widely by state.

States with strict CPOM: California, New York, Texas, and others require specific ownership structures. In California, for example, the clinical entity must typically be a Professional Medical Corporation (PC) owned by a physician.

States with more flexible rules: Florida, Georgia, and others allow non-physician ownership with appropriate medical director agreements.

Bottom line: Before forming your business entity, consult a healthcare attorney licensed in your state. A $2,000–$5,000 legal consultation upfront is far cheaper than restructuring a business after you've launched.

Common Entity Structures

• LLC (Limited Liability Company): Common for non-clinical business operations (billing, marketing, management)
• Professional LLC (PLLC): Used in some states for licensed professionals
• Professional Corporation (PC): Often required for the clinical entity in CPOM states
• Management Services Organization (MSO): A structure where a non-physician business contracts management services to a physician-owned clinical entity

Step 3: Hire Your Medical Director

Your medical director is the most important compliance relationship in your med spa. This is the licensed physician (MD or DO) who:

• Reviews, approves, and signs all clinical treatment protocols
• Creates or validates standing orders for nurses and mid-level providers
• Is responsible for the clinical standard of care in your practice
• Must be reachable (by phone or on-site per state requirements) whenever the practice is open
• Conducts periodic chart reviews (frequency varies by state)

What to Look for in a Medical Director

• Active, unrestricted medical license in your state
• Experience with aesthetic medicine or willingness to learn
• Clean malpractice history
• Active malpractice insurance that covers the supervision role
• Availability to fulfill state-mandated supervision requirements
• Willingness to sign your treatment protocols

Medical Director Agreement

You will need a written Medical Director Agreement that clearly defines: scope of duties, compensation structure, supervision requirements, protocol review schedule, on-call obligations, and termination terms. This agreement should be drafted or reviewed by a healthcare attorney.

Step 4: Obtain Required Licenses and Permits

Licensing requirements vary by state, but here is the core checklist for most med spas:

Business Licenses

• State business entity registration (LLC, PC, etc.)
• Local business operating license (city/county)
• Employer Identification Number (EIN) from the IRS
• Seller's permit if selling retail products

Healthcare Facility Licenses

• State facility license: Some states require a specific medical clinic or healthcare facility license. Check with your state health department.
• OSHA compliance: Bloodborne pathogen standards apply if you perform any invasive procedures.
• DEA registration: Required if prescribing or storing controlled substances (testosterone, certain anesthetics). The medical director typically holds this registration.

Professional Licenses

• Each clinical staff member must hold a current, active license appropriate for their scope of practice (RN, NP, PA, MD/DO)
• Verify each employee's license before hire using your state's licensing database
• Estheticians have limited clinical scope — understand exactly what they can and cannot do in your state

Step 5: Build Your Clinical Protocol Library (SOPs)

Standard Operating Procedures (SOPs) are the written clinical protocols that define exactly how each treatment is performed at your practice. They are not optional — they are the foundation of clinical compliance and patient safety.

Why SOPs matter:

• Legal protection: SOPs document that your practice meets the standard of care
• Medical director sign-off: Your MD needs written protocols to review and approve
• Staff consistency: SOPs ensure every practitioner follows the same procedures
• Insurance: Malpractice carriers increasingly ask for written protocols at underwriting
• State inspections: Regulators may request to see written protocols during audits

What SOPs Do You Need?

You need an SOP for every service you offer, plus operational SOPs covering:

• Patient intake, consent, and Good Faith Exam
• Staff training and competency verification
• Medical director supervision and chart review
• HIPAA compliance and privacy policies
• Emergency response (anaphylaxis, vascular occlusion, syncope)
• Infection control and sterilization
• Medication storage and inventory management

Writing clinical SOPs from scratch is time-consuming and requires expertise. Many new med spa owners use pre-written, professionally authored SOP kits and then have their medical director customize and approve them for the practice — this approach can save 40–80 hours of development time.

Step 6: Select Your Services and Equipment

Choose Your Service Menu Strategically

New med spas often make the mistake of trying to offer everything on day one. Start with 3–5 high-demand, high-margin services and build from there. Top-performing med spa services by revenue include:

• Neuromodulators (Botox/Dysport/Xeomin): Highest demand, fastest treatments, excellent repeat business
• Dermal fillers: Higher per-treatment revenue, strong patient retention
• GLP-1 weight loss programs: Recurring monthly revenue, strong demand in 2025–2026
• RF microneedling: Premium pricing, strong clinical results
• Laser hair removal: High treatment volume, consistent recurring revenue

Equipment Considerations

• Buy vs. lease: Leasing allows newer equipment without large capital outlay; buying is better long-term for high-utilization devices
• FDA clearance: Only use FDA-cleared devices for the indications you're treating
• Training: Device manufacturers typically provide initial training; ensure your SOP documents the parameters your team is trained on
• Service agreements: Budget for annual maintenance on laser and energy-based devices

Step 7: Set Up Your Compliance Infrastructure

HIPAA Compliance

Any practice that creates, receives, or transmits Protected Health Information (PHI) is covered by HIPAA. Requirements include:

• Privacy Notice posted in office and provided to all patients
• Authorization forms for sharing patient information
• Staff HIPAA training (documented annually)
• Business Associate Agreements with vendors who access PHI
• Breach notification procedures
• Secure electronic health record system

Malpractice Insurance

Every clinical staff member needs professional liability (malpractice) insurance. Common structures include:

• Individual policies: Each practitioner carries their own coverage
• Group practice policy: Practice-wide policy covering all clinical staff
• Coverage amounts typically range from $1M/$3M to $3M/$5M per practitioner
• Confirm your insurer covers the specific treatments you offer — some exclude certain aesthetic procedures

Emergency Preparedness

Before your first patient walks through the door, you must have:

• Written emergency response protocols for all likely adverse events
• Emergency medications and supplies on-site (epinephrine, hyaluronidase, AED)
• Staff trained in CPR/AED and emergency response
• Clear 911 activation criteria documented in your protocols

Step 8: Build Your Team

Your team's licenses and training directly determine what services you can legally offer. Common med spa clinical roles include:

• Nurse Practitioner (NP) or Physician Assistant (PA): Can prescribe medications and perform most aesthetic treatments (scope varies by state)
• Registered Nurse (RN): Can administer injections under physician orders/supervision in most states
• Licensed Practical Nurse (LPN): More limited scope; check your state's rules for aesthetic injections
• Licensed Esthetician: Restricted to non-invasive, non-prescription treatments (facials, dermaplaning, some chemical peels)
• Front Desk/Patient Coordinator: Non-clinical; handles scheduling, intake paperwork, and patient experience

Step 9: Marketing and Launch

Once your compliance infrastructure is in place, focus on:

• Google Business Profile: Essential for local search; optimize with photos, services, and reviews
• Website with SEO: Clear service pages, before/after photos, patient education content
• Instagram/social media: Visual treatments perform extremely well; before/after content with patient consent
• Grand opening promotions: Introductory pricing on hero services drives initial patient acquisition
• Referral programs: Word-of-mouth is the highest-converting channel for aesthetic services

Summary: Your Med Spa Opening Checklist

1. Consult a healthcare attorney on business structure and CPOM in your state
2. Form your business entity (LLC, PLLC, PC, or MSO as appropriate)
3. Hire and contract a qualified medical director
4. Obtain all required business, facility, and professional licenses
5. Build your clinical SOP library for every service you'll offer
6. Establish HIPAA policies, staff training, and emergency preparedness
7. Purchase or lease clinical equipment (only FDA-cleared devices)
8. Hire and credentialing your clinical team
9. Set up your EHR, consent forms, and intake processes
10. Launch with marketing and a strong patient experience focus