Illinois Med Spa Compliance Checklist (2026): The Full Guide

Illinois is one of the largest med spa markets in the country and one of the strictest states to operate one. The market is real: Chicago is a top-five U.S. metro for aesthetic medicine, and demand across the collar counties and downstate has never been higher. The strictness is just as real. Illinois enforces the corporate practice of medicine doctrine, which shapes who may even own the business, and in a joint memo dated December 2, 2024, the Illinois Department of Financial and Professional Regulation (IDFPR) and the Illinois Department of Public Health (IDPH) put med spas on formal notice that the delegation and supervision rules would be enforced.

This checklist is organized around the questions IDFPR investigators actually ask. Two topics get top billing because they are where Illinois med spas carry the most exposure and where the December 2024 memo focused: physician delegation and the good-faith exam, and who is legally allowed to own the practice. We lead with both, then work through the Chicago market, medical director oversight, injectable scope, laser supervision, APRN authority, GLP-1 prescribing, consent, records, and emergency readiness. Use it before you open, before you add a procedure, and before any board inquiry. For the picture beyond Illinois, our med spa regulations by state reference compares the frameworks side by side, and our roundup of 2026 state regulatory changes tracks what is moving this year.

The Two Rules Illinois Regulators Ask About First

Most med spa guides open with business paperwork. In Illinois, that is not where the risk concentrates. The two areas driving IDFPR attention, the December 2024 joint memo, and most enforcement chatter are how you delegate medical procedures and who actually owns the practice. Both are structural — get them wrong and the problem is baked into the business, not fixable with a form.

If you are opening, buying, or restructuring an Illinois med spa, read the next two sections before anything else. A staffing model or ownership cap table built on the assumption that "a nurse can run a med spa" or "a physician just signs off" is the kind of arrangement the December 2024 memo was written to stop. Everything after these two sections is the foundational compliance work every Illinois med spa needs regardless of service menu.

1. Physician Delegation and the Good-Faith Exam

Delegation is the legal engine of a med spa: it is what lets a nurse or trained staffer perform a procedure the physician is ultimately responsible for. In Illinois the framework comes from the Illinois Medical Practice Act of 1987 (225 ILCS 60), and it has hard edges. Delegation is not a blank check, and it always begins with the physician establishing a relationship with the patient.

The good-faith exam requirement

Before any treatment or prescription, Illinois requires a genuine physician-patient relationship established through a good-faith examination. A physician (or an authorized advanced practitioner) must examine the patient and determine an appropriate course of treatment before injectables or laser procedures are performed. A med spa cannot skip straight to a nurse injecting a walk-in who was never evaluated by a delegating provider. The exam determines what is medically appropriate; the delegation flows from it. This is the single most common finding in Illinois enforcement — treatment delivered with no real exam behind it.

What a physician may delegate

Within an established physician-patient relationship, an Illinois physician may delegate patient care tasks — but only tasks that fall within the delegating physician's own scope, education, and training. The Medical Practice Act lets a physician delegate to a licensed practical nurse, a registered professional nurse, or another licensed person acting within the scope of their own individual licensing act. The physician remains responsible for the outcome, so the delegation has to be real supervision, not a rubber stamp.

Delegating to unlicensed staff — the on-site rule

Delegation to an unlicensed person is narrower and specific. A physician may delegate a patient care task to an unlicensed person only when a health care professional — someone practicing within the scope of their own licensing act — is on-site to provide assistance, the task is within the delegating physician's scope, and it is within a physician-patient relationship. In every case, the delegated authority to perform a procedure must be backed by documented training. Illinois also lets a med spa employ a cosmetologist or esthetician, but that employee may not hold themselves out as practicing under their cosmetology or esthetics license while performing delegated medical procedures — the medical work is delegated physician work, not esthetics.

2. Corporate Practice of Medicine: Who Can Own an Illinois Med Spa

Here is Illinois's biggest differentiator from permissive states, and the ownership trap that catches the most first-time operators. A med spa that offers medical procedures is a medical practice, and Illinois enforces the corporate practice of medicine (CPOM) doctrine. That means a lay person — a non-physician investor, a spa entrepreneur, or a registered nurse — generally cannot own a med spa that provides medical services.

The physician-ownership rule and entity structure

Illinois recognizes specific professional entities that may lawfully practice medicine: a medical corporation (organized under the Illinois Medical Corporation Act, which only physicians may form), a professional service corporation, or a professional limited liability company (PLLC) — all licensed and regulated by IDFPR. The ownership of the entity has to line up with who is permitted to practice. A management-services structure, where a non-clinical company handles the business side while a physician-owned entity holds the medical practice, is common — but it has to be structured carefully so it does not become de facto lay ownership of medicine.

The APRN exception

There is one meaningful exception. An advanced practice registered nurse (APRN) with full practice authority may own and operate a facility limited to services within their own practice authority — sometimes described as an "aesthetic nursing practice" rather than a physician-owned med spa. That APRN entity is typically a professional service corporation or PLLC, not a physician medical corporation. Importantly, an APRN with full practice authority cannot co-own a medical practice with a physician, so mixed physician-plus-nurse ownership structures need careful legal design. If you are a nurse or NP weighing ownership, our guide to nurse practitioner med spa ownership covers the national landscape, and Illinois is on the restrictive end of it.

3. The Chicago Market: City Licensing and Zoning

Illinois med spas concentrate in metropolitan Chicago, and the city adds a layer the state rules do not cover. The medical practice itself is regulated by IDFPR, but the storefront is a business operating in Chicago, and that triggers city obligations through the Department of Business Affairs and Consumer Protection (BACP).

Business license and zoning

Most Chicago med spas fall under a Limited Business License, the catch-all license for businesses not otherwise specifically covered. Every business-license application — and every location change or expansion — must be reviewed and approved by the BACP Zoning division before it can be processed, because each zoning district regulates which activities are permitted at a given address. Confirm your use is allowed at your location before you sign a lease; a med spa in a space zoned only for certain uses can stall at the city level even when the state side is clean.

When a Massage Establishment license also applies

If the spa offers massage services alongside its medical menu, Chicago requires a separate Massage Establishment license, which includes a fingerprint-based background check for owners and officers holding a 5% or greater interest. None of this replaces the state medical, nursing, and delegation requirements — Chicago licensing sits on top of them. Because city requirements change and vary by ward and zoning district, confirm the current picture with the City of Chicago's Small Business Center before you open.

4. Physician Oversight and the Medical Director Role

Everything a med spa does that qualifies as the practice of medicine — injectables, laser and energy treatments, microneedling, IV therapy, weight-loss prescribing — must sit under a licensed Illinois physician who owns the medical decision-making. Illinois has no standalone med-spa statute naming a titled "medical director," so the term is industry shorthand. But because Illinois enforces CPOM, the reality is stronger than in permissive states: the physician usually owns or controls the entity itself, not merely a supervision contract, and IDFPR can discipline a physician who lends their name without providing genuine oversight.

For a national view of how this role is defined and paid, see our guide to med spa medical director requirements. A "paper" medical director — someone listed but absent — is the classic finding that turns a routine complaint into a disciplinary case, and in a CPOM state it also puts the ownership structure itself in question.

5. Who Can Inject in Illinois: Scope of Practice by Role

Injectable scope is where the Medical Practice Act and the Nurse Practice Act overlap, and where staffing mistakes are most common. The short version: injecting neurotoxins and fillers is a physician procedure that may be delegated to qualified clinicians — never to estheticians. For the national provider-by-provider breakdown, see who can inject Botox across the United States.

Physicians, APRNs, and PAs

Licensed physicians (MD/DO) have the broadest authority and may inject on their own or delegate. Physician assistants inject under their supervising physician's delegation and a written supervision agreement. APRNs inject within their scope; an APRN without full practice authority works under a written collaborative agreement with a physician, while an APRN with full practice authority may prescribe and administer independently within their scope. These roles can also perform the good-faith exam and order the medication.

Registered and licensed practical nurses

A registered nurse may administer Botox and filler, but only under a valid delegation from a physician or other authorized prescriber who has established the patient relationship and set the treatment. The RN does not independently select the drug or dose — that is the ordering provider's call. A licensed practical nurse has a narrower, dependent scope and practices under the direction of an RN or authorized provider; do not build an injector model on LPNs without confirming it against the Nurse Practice Act. Prevailing Illinois practice treats cosmetic injecting as a registered-nurse-and-above function performed under delegation.

Estheticians, cosmetologists, and unlicensed staff

Estheticians and cosmetologists are strictly prohibited from injecting Botox or fillers, performing microneedling, or operating lasers — those are medical procedures, and no amount of physician supervision moves them into a beauty license. Medical assistants and other unlicensed staff cannot inject these medications. A med spa may employ estheticians for the services their license actually covers, but the moment a procedure crosses into medicine, it must be performed by a qualified clinician under delegation.

6. Laser and Energy-Based Device Oversight

Laser and light-based treatment is delegated medical practice in Illinois, and the December 2024 IDFPR–IDPH memo addressed it directly. The starting point: a procedure using a laser the FDA classifies as a medical device is the practice of medicine. The physician examines the patient, determines the appropriate course of treatment, and may then delegate the performance of the procedure to a qualified assistant.

Ablative vs. non-ablative supervision

Illinois draws a line by procedure depth. A physician may delegate ablative procedures only with on-site supervision by the physician. Non-ablative procedures may be delegated with on-site supervision, or where the physician is available by phone or other electronic means to respond promptly. In every case, the person performing an ablative or non-ablative laser procedure must have documented training. If your laser program assumes a single "physician is somewhere reachable" standard for everything, it is misreading the ablative rule.

Who may operate the device

Because laser treatment is delegated medical practice, the operator must be a person to whom the physician can lawfully delegate — a licensed clinician under delegation, backed by training. Estheticians may not operate lasers in Illinois. For the practical safety side of building a laser program, our national med spa inspection guide covers the documentation an inspector expects to see.

7. APRN Full Practice Authority and Scope

Illinois expanded advanced practice nursing authority in recent years, and it changes what is possible for nurse-led aesthetic practices. Understanding the pathway matters both for staffing and for the ownership exception discussed above.

The full practice authority pathway

An Illinois-licensed APRN — certified as a nurse practitioner, nurse-midwife, or clinical nurse specialist — may be granted full practice authority (FPA) and practice without a written collaborative agreement. The pathway (set out in the administrative rules at 68 Ill. Admin. Code 1300.465) requires attestation to completing at least 4,000 hours of clinical experience in collaboration with a physician plus at least 250 hours of continuing education or training in the APRN's area of certification. To prescribe as an FPA APRN, the nurse must also obtain a practitioner license under the Illinois Controlled Substances Act.

What FPA does and does not allow

An APRN with FPA can evaluate, diagnose, prescribe, and treat within their scope without a collaborating physician, and — as covered in the ownership section — can own an aesthetic nursing practice limited to their own scope. What FPA does not do is turn an APRN into a physician: an FPA APRN cannot serve as the legal medical authority for services that require a physician, and cannot co-own a medical practice with a physician. An APRN without FPA still needs a written collaborative agreement with a physician to practice and prescribe. Confirm the current requirements with IDFPR before relying on any FPA-based structure.

8. GLP-1 Weight-Loss Prescribing and Compounding

Weight-loss injectables are the fastest-growing service on most Illinois med spa menus, and the 2026 sourcing landscape shifted under everyone's feet. Any GLP-1 program still built on 2023–2024 assumptions is now a liability.

Where compounded GLP-1 stands in 2026

During the national shortages, federal law let compounding pharmacies produce copies of semaglutide and tirzepatide. That window has closed: the FDA declared the tirzepatide shortage resolved in December 2024 and the semaglutide shortage resolved in February 2025, and the enforcement grace periods ended in 2025. Mass compounding of a drug "essentially a copy" of an approved product is no longer permitted for either a 503A pharmacy or a 503B outsourcing facility. In 2026 the clean, defensible source for an Illinois med spa is FDA-approved branded product (Wegovy, Ozempic, Zepbound, Mounjaro); compounded GLP-1 is defensible only in the narrow case of documented individual medical necessity the approved product cannot meet, and only where it is not essentially a copy.

Prescribing and the good-faith exam

The same physician-patient-relationship rule that governs injectables governs weight-loss prescribing: a qualifying provider — physician, PA, or APRN within scope — must establish the relationship and evaluate the patient before prescribing. GLP-1 drugs are not controlled substances, which simplifies the analysis, but the exam, documentation, and consent still have to be real. Telehealth is permitted where the standard of care is met, but it is not a shortcut around the exam. Our national ready-to-use med spa compliance SOPs include the intake, screening, and monitoring documentation a defensible GLP-1 program needs.

9. Informed Consent and Medical Records

Illinois does not have a single tidy "cosmetic informed consent" statute; the obligation flows from the standard of care and IDFPR's disciplinary authority under the Medical Practice Act. Practically, that means documented, procedure-specific informed consent for every treatment, obtained before the procedure — not scribbled while the patient is on the table.

How long to keep records

Illinois has no universal retention period fixed for every private-practice record, but the practical floors are long. Illinois's medical-malpractice statute of repose generally runs four years for adults and up to eight years for injuries to minors, and prudent practice is to keep records well past the repose window. The safe practice for a med spa is to retain adult records for at least ten years, and longer for minors — to the age of majority plus the limitations period. Store everything on a HIPAA-compliant system, and treat consent, photos, and the good-faith exam note as part of the permanent record.

10. Emergency Preparedness and Adverse-Event Response

Every procedure that carries a risk of anaphylaxis, vascular occlusion, or another serious adverse event needs a written response protocol — not a plan to "call 911." Anaphylaxis is the most common med spa emergency, arising from injectables, peels, and certain topicals, and staff must recognize early symptoms, not just severe reactions. A patient who reacts in the parking lot after leaving is still your liability event.

The Complete Illinois Med Spa Compliance Checklist

Run this summary table before opening, before adding a procedure, and before any IDFPR inquiry. Each row maps to a section above. If any row is a "no," fix it before you treat the next patient — and if you would rather not build the underlying documentation from scratch, our ready-to-use med spa compliance SOPs cover the policy and protocol side of every row here.

This checklist is for informational purposes only and does not constitute legal or medical advice. Illinois rules are enforced by IDFPR and IDPH and change frequently — and several 2026 items here, especially compounded GLP-1 policy, APRN full practice authority details, and Chicago city licensing, were still moving as of publication. Confirm current requirements with the Illinois Department of Financial and Professional Regulation, the Illinois Department of Public Health, and the City of Chicago, and consult an Illinois healthcare attorney before acting on your specific situation.

Frequently Asked Questions