Illinois Med Spa SOPs: What Your Policy Manual Must Include

An Illinois owner looking for a list of required policies will not find one. There is no med spa chapter in the Illinois Compiled Statutes, no facility permit with an inspection checklist, and no IDFPR form called a policy manual. What exists is a set of rules about people and acts: who may examine, who may delegate, who may accept delegation, which devices count as medicine, and who may own the entity. Each of those rules is proven or disproven with paper.

So the Illinois manual is not filed anywhere and nobody grades it on a schedule. It becomes evidence when a complaint or adverse event brings an IDFPR investigator in, because the questions are documentary: show us the exam, the delegation, the training on this device, the owner. For writing individual procedures, see our guide to med spa standard operating procedures; for organising and versioning the binder, our policy and procedure manual walkthrough. This page covers only the Illinois layer.

Sourcing: where we call something an Illinois requirement, it traces to a citation in our Illinois dataset (last reviewed July 21, 2026) or one of our Illinois guides. Otherwise we say "best practice." We could not open Illinois government sites from the network used to prepare this page, so the citations were not re-read this run.

Does Illinois Require a Med Spa to Have Written SOPs?

No — we found no Illinois statute or rule that orders a med spa to keep a policy manual, and there is no med spa licence under which one would be inspected. What Illinois does require is a chain of physician authority behind every medical act, and several links in that chain cannot be shown to exist unless they are written down.

Our dataset records that Illinois has no standalone med spa licence: the practice is organised as a medical corporation, professional service corporation or professional limited liability company, filed with the Illinois Secretary of State and registered with IDFPR, per the IDFPR and IDPH medical spa memo issued December 2, 2024 and updated October 30, 2025. Injectables, lasers, medical-grade peels, microneedling, radiofrequency and drug injections are the practice of medicine, so the regulator is the Illinois Department of Financial and Professional Regulation, which licenses and disciplines the people involved; the Illinois Department of Public Health co-signed the memo.

Which written documents do Illinois rules presuppose?

• The examination record. IDFPR's Statement on Prohibited Practices (April 6, 2026 in our dataset) says the person receiving a delegated medspa service must be a patient of the physician, who must examine them and determine the appropriateness and course of treatment. An uncharted exam cannot be shown to have happened.
• The laser training record. Under 68 Ill. Adm. Code 1285.336, as summarised in our dataset and our Illinois laser safety guide, a delegate needs documented training in each system used.
• The delegation protocol. The Medical Practice Act amendment effective January 1, 2025 lets an APRN rather than an on-site physician perform the exam before a non-ablative laser procedure only where the facility follows a physician delegation protocol, among other conditions.
• The collaborative agreements. An APRN without full practice authority, and a physician assistant, each work under a written collaborative agreement with a physician, as our Illinois injector scope guide and 2026 changes review describe.

Everything else — consent library, incident log, cold-chain sheet, drill record — is best practice. It often makes the required records believable, but we cannot point to an Illinois rule that names it.

Who reads an Illinois manual if no one licenses the facility?

Our Illinois regulatory profile describes enforcement as complaint- and event-driven rather than scheduled. Your readers are therefore an investigator asking whether this patient was examined and this act properly delegated, a plaintiff's lawyer comparing the protocol with what was done, and a new hire asking what they may perform. The manual also has a corporate-practice job: it should show that clinical policy is set by the licensed owner. A binder whose clinical policies are signed by a management company's operations director is evidence against you.

What Must an Illinois Med Spa Document About Delegation and Supervision?

Every delegated treatment should trace on paper to a prescriber's examination, an instruction to a delegate whose licence and training fit the task, and the supervision level the task requires. Delegation is defined by 225 ILCS 60/54.2, the Medical Practice Act section our dataset cites through the memo, and our Illinois compliance checklist covers the rules box by box; this section covers the records they generate.

The examination note that opens every treatment plan

Illinois requires an examination before delegated cosmetic treatment: the IDFPR Statement on Prohibited Practices names Botox, chemical peels, collagen injections, microneedling and radiofrequency, and the memo applies the same rule to lasers. The policy should fix what the note records: examiner and licence, date, modality, history and medications, contraindications screened, area assessed, and the plan with product, dose range and number of sessions. Our laser guide notes that a fresh exam is not required before each session within an established course, so define what a course is and what triggers a new exam: a new indication or device, an adverse reaction, or a material change in health or medication.

Record the modality every time. Our dataset found no Illinois primary source that expressly authorises a physician's good-faith exam for cosmetic injectables by telehealth, while our Illinois GLP-1 guide describes the Illinois Telehealth Act route for non-controlled prescribing through a synchronous encounter. Treat any remote exam for injectables as a decision your attorney signs off on, not a default.

The delegation instrument for nurses

The file for an RN injector or laser operator should hold three things together: the written protocol signed by the delegating physician, the patient-specific order that came out of the exam, and the delegate's training record for that procedure. Our injector guide stresses that an RN does not select the product or units, so each RN chart entry should cite the order it executes. A protocol letting a nurse "select dose within manufacturer range" is not a delegation record.

For LPNs our Illinois pages split by service. The laser rule names licensed practical nurses among permitted delegates for ablative and non-ablative work, with documented device training. For injectables our checklist and injector guide counsel caution, because the LPN scope is dependent and prevailing practice treats cosmetic injecting as RN-and-above. Write that split into the service matrix so nobody infers injector authority from laser authority.

The on-site record when unlicensed staff are involved

Illinois requires a licensed health care professional to be on site when a physician delegates a patient care task to an unlicensed person, under 225 ILCS 60/54.2 as described in the memo. That makes the staffing schedule a compliance document: if a medical assistant performs any delegated support task, the day sheet should show which licensed professional was present. Our injector guide adds that injectable administration cannot be delegated to unlicensed staff at all.

The APRN file: full practice authority or a collaborative agreement

APRN prescriptive and administration authority sits at 225 ILCS 65/65-43, which our dataset cites. For an APRN without full practice authority, the file holds the current written collaborative agreement, describing the aesthetic services actually provided; our injector guide warns that an expired or generic agreement is the first gap an investigator finds. For an APRN with full practice authority, the file holds evidence of status: per our checklist, the pathway in 68 Ill. Adm. Code 1300.465 requires attestation to at least 4,000 clinical hours and 250 hours of continuing education or training, and a prescribing APRN also needs a practitioner licence under the Illinois Controlled Substances Act. Add national certification and population focus, which our GLP-1 guide treats as a real boundary, and a reference to the delegation protocol if the APRN performs exams under the 2025 non-ablative route.

The physician assistant file

A PA works under a written collaborative agreement with a physician under the Physician Assistant Practice Act (225 ILCS 95), as our changes review and injector guide describe. File the agreement, naming the physician and reflecting the aesthetic services, with licence verification and procedure training. The PA act carries a January 1, 2028 repeal date under the sunset schedule, so calendar a review of every PA agreement against whatever renews it.

The supervision tier on every laser chart

Illinois requires on-site physician supervision when ablative laser procedures are delegated, while non-ablative procedures may be supervised on site or by a physician available by telephone or electronic means, under 68 Ill. Adm. Code 1285.336 as summarised in the memo; eye-risk procedures may not be delegated at all. Each laser chart should therefore record ablative or non-ablative, the supervision mode and the supervising physician that day. Without that field, nobody can later tell compliant days from non-compliant ones.

If you use the 2025 non-ablative route, record all four conditions: the protocol followed, the APRN who examined, the trained RN or LPN who performed, and the physician who was reachable. Our laser guide warns that operators who drop the exam altogether have misread the amendment; four mandatory chart fields make that misreading impossible to carry out quietly.

What Must Be Documented About the Medical Director Relationship in Illinois?

Illinois has no statute that titles a "medical director," so what must be documented is physician ownership and control of the medicine, plus evidence that the physician actually examines, delegates and supervises. Our Illinois medical director guide covers qualifications, duties, liability and cost; here we cover only what the binder should hold.

Why the ownership papers come first

Our dataset records, from the memo, that only physicians may organise under the Medical Corporation Act; physicians or APRNs may use the Professional Service Corporation or Professional Limited Liability Company Acts; and anyone else cannot be a shareholder, member, officer, director or manager. The governance section should hold the articles, ownership register and officer list, so the question of who controls the medicine is answered by a document. Our Illinois ownership guide walks through the structures. If a management services organisation handles non-clinical work, file its agreement with a one-page boundary statement listing what it does and does not do; our medical director guide warns that an MSO controlling clinical decisions or taking a revenue share can be treated as a corporate-practice violation.

The oversight evidence file

Illinois fixes no chart-review percentage. Our medical director guide reports industry practice of 10% to 25% of charts monthly, weighted toward new injectors, new procedures and complications, and stresses that the log matters more than the number. By month, record charts reviewed and findings, protocols approved or revised, training sign-offs witnessed, adverse events reviewed, and availability and cover. This is best practice, and it is what defeats the "paper medical director" finding our Illinois pages identify as the classic enforcement case.

Compensation and the exit

File compensation terms as a flat fair-market-value retainer or documented hourly rate, never a revenue share or per-treatment fee, as our medical director guide explains. Because the physician may control the licensed entity itself, also name the backup physician arrangement and state the rule plainly: no medical services on any day without active physician coverage.

What Patient-Record and Consent Documentation Is Required, and What Is the Retention Period?

We could not verify an Illinois statute or rule that sets a record-retention period for a private physician practice or med spa, so we are not stating one. What we can say is that the Illinois rules above require the exam, the delegation and the laser training to be documented, and that our own Illinois checklist recommends keeping adult records for at least ten years as a conservative internal standard — a best practice, not a cited rule.

What we could verify about retention, and what we could not

Neither our Illinois dataset nor any of our Illinois guides cites a retention rule that reaches a med spa. Our compliance checklist states that Illinois has no universal retention period fixed for every private-practice record, and our national records retention guide lists a roughly ten-year figure for Illinois hospitals with a note to confirm the rule for your facility type. A hospital rule is not a med spa rule. Search results offered other year counts for private practices, but none with a primary source we could open, so we have not published them.

Set the period by written policy and have counsel confirm it: the adult period, longer handling for minors, what counts as the record (photos, consents, device logs, messages), storage, who may authorise destruction, and how destruction is logged.

What an Illinois aesthetic chart should contain

Build the chart so each visit shows its own lawful basis:

• The examination note, with examiner, licence, date and modality.
• The treatment plan or order: product, dose or units, area, device and settings, and number of sessions in the course.
• The delegate who performed the treatment, their licence type, and a reference to the protocol they followed.
• For laser work: ablative or non-ablative, the supervision mode, and the supervising physician that day.
• Lot numbers and expiry dates for every injectable and drug administered.
• Before-and-after photographs, labelled and dated.
• Adverse reactions and follow-up, including calls after the patient left.

No Illinois rule names those fields; they are what let the chart prove the rules were followed.

Consent, photography and privacy

Our checklist notes that Illinois has no single cosmetic informed-consent statute; the duty comes from the standard of care and IDFPR's disciplinary authority. As best practice, use procedure-specific written consent covering risks, benefits and alternatives, signed before treatment, and re-consent when the procedure, product or device changes.

Photographs need two permissions: one for the clinical record and a separate, revocable one for marketing. Our national testimonial and photo-consent guide flags the Illinois Biometric Information Privacy Act, which carries a private right of action and whose reach to ordinary photos versus facial-geometry scans has been contested; we could not open the statute. If any tool performs facial mapping or automated skin analysis, get Illinois-specific advice before writing that consent. Keep records on a HIPAA-compliant system with business associate agreements, as our checklist recommends.

What Must Be Documented About Drug Handling, Storage and Disposal?

The Illinois rules we can cite govern who may prescribe, order and administer a drug, not how a med spa stores or disposes of it; storage, cold chain, lot tracking and waste handling are best practice built around the manufacturer's labelling and federal rules. So the drug section of an Illinois manual has a cited spine and a best-practice body.

The order trail, which is the citable part

Our dataset records that injecting botulinum toxin, dermal fillers, and weight-loss or vitamin injections is the practice of medicine in Illinois; that a physician may prescribe and administer these; that an APRN may do so within authority under 225 ILCS 65/65-43; and that an RN or PA administers under physician delegation. It also records that IV hydration and vitamin injections are drug administration, with no IV-specific statute, requiring a physician or APRN order after an examination. Each administration should trace in the chart to a named prescriber's order, and standing orders should authorise administration only to patients already examined; our GLP-1 guide calls a standing order used in place of an individual exam unlicensed practice dressed up as a protocol.

Sourcing and the purchase record

Keep invoices showing every drug came from a legitimate distributor or pharmacy, matched to charted lot numbers. Our Illinois GLP-1 guide explains why branded FDA-approved product is the 2026 default and compounded product is defensible only on documented individual clinical need, recorded in the chart.

Controlled substances

Most aesthetic menus involve none. If yours does, the prescriber needs Illinois controlled-substance licensure: our checklist notes that a prescribing APRN needs a practitioner licence under the Illinois Controlled Substances Act, and our changes review records that IDFPR issues APRN and APRN-FPA controlled substance licences. We have not verified Illinois record-keeping rules for controlled substances in a med spa setting; have counsel review before you stock any.

Storage, cold chain, lot tracking and disposal

As best practice: a daily, initialled temperature log for every product refrigerator with an out-of-range procedure; reconstitution dates on vials and a discard rule from the labelling; a lot-to-patient index so a recall becomes a list of names within an hour; locked, access-logged storage; and a disposal procedure for expired product, sharps and contaminated waste that follows the labelling and your waste hauler's contract. We could not trace an Illinois rule specific to med spa storage or sharps disposal, so cite the labelling and contracts as authority, not an invented state rule. Our laser guide notes OSHA obligations; cover bloodborne-pathogen exposure in your infection-control policy.

What Training and Competency Records Should an Illinois Med Spa Keep Per Role?

One training record is a cited Illinois requirement: documented training on each laser or energy system a delegate operates, under 68 Ill. Adm. Code 1285.336. Beyond that, the delegation statute requires delegates to be trained for what they do, and the training file is how a practice shows they were. The specific contents per role are best practice.

The licence layer, checked against IDFPR

Every clinical file should start with a licence verification printout from IDFPR, dated, with the expiry date entered into a renewal calendar. Our 2026 changes review shows why the calendar needs an owner: IDFPR moved the 2026 renewal deadline for RN, APRN and APRN-FPA licences (and associated controlled substance licences) to June 30, 2026, and gave physicians until August 31, 2026 to renew without a late fee, while the continuing-education deadline for physicians stayed at July 31, 2026. Re-verify after every renewal cycle, not just at hire.

The device-specific laser record

Our laser guide is precise about what the rule demands: training on one manufacturer's diode laser does not authorise a delegate to run a different device, wavelength or IPL platform. Record the device (manufacturer, model, serial), operator, trainer, date, content and competency sign-off, filed with the device's clearance paperwork, and renew it before anyone treats on a replacement or upgraded system.

What each personnel file should hold

As best practice, give every file the same structure:

• Licence and authority: IDFPR verification and expiry; for APRNs, full practice authority evidence or the collaborative agreement; for PAs, the collaborative agreement.
• Scope statement: what the person may do in this practice, and in the same document what they may not. For an esthetician, state on its face that the role includes no injections, no lasers and no microneedling.
• Procedure training: course, date and content for each procedure performed, with device-specific records for laser staff.
• Competency sign-off: a supervised return demonstration witnessed by a physician or qualified APRN, as our injector guide suggests, with the verifier named.
• Emergency training: resuscitation certification, anaphylaxis and vascular-occlusion drills attended.
• Policy acknowledgement: signed for the current manual version, and again after each revision.

Our national staff training requirements guide covers curriculum; the Illinois point is that each file must be producible on request.

The misconduct-reporting briefing

Add a signed acknowledgement of the Public Act 104-0764 reporting duty, discussed below, to every licensed person's file; the duty is personal to each licensee.

What Incident and Adverse-Event Documentation Is Expected?

We could not establish a general Illinois duty for a med spa to report clinical adverse events to the state, and we do not assert one; the one 2026 reporting duty we can cite is narrower and personal. Public Act 104-0764, signed August 7, 2026, requires licensed health care professionals to report allegations of inappropriate sexual conduct and unjustified intimate conduct to IDFPR within 24 hours, as described in our Illinois 2026 changes review.

The 24-hour misconduct duty, and the policy it needs

Our changes review describes the duty as attaching to licensees, not facility types, so it reaches the physician, APRN, PA and RN in a med spa exactly as it would in a hospital, with penalties up to $10,000 for failing to report. It also recommends confirming the Act's operative date before announcing a start date, which we repeat here because we could not re-verify it. The policy is short: a named recipient and backup, a one-page script on what triggers the duty and who files, a rule that reporting is not delayed for an internal investigation because the trigger is reasonable cause to believe, and record-preservation instructions.

The internal incident record

For clinical adverse events the record is best practice, and the document most likely to be read later by someone hostile. Record facts in time order: patient, date and time, procedure, product and lot or device and settings, the delegate and the supervising physician, the signs observed, each intervention with its time, who was called and when, the outcome, and follow-up contacts. Keep opinions about fault out of the clinical record; the physician's review goes in a separate quality entry. Our checklist calls for protocols to be reviewed after any adverse event, so end each record with whether a protocol was reviewed and what changed.

The routes that apply regardless

Three outside routes may apply to a serious event: voluntary reporting of a drug or device problem to the FDA, your malpractice policy's notice provision, and any reporting term in a supplier agreement. Put all three on the incident form as checkboxes so the decision is recorded.

Because Illinois enforcement usually starts with a complaint, log every clinical complaint with date, substance, response and outcome.

What Should an Illinois Med Spa's Emergency Protocols Cover?

We found no Illinois rule that specifies the contents of a med spa emergency protocol, so the content is set by the standard of care; what is Illinois-specific is that the protocol must fit the supervision tier and physician availability the delegation rules require. Our checklist and medical director guide both treat written emergency protocols, trained staff and in-date supplies as part of genuine physician oversight.

The complications an Illinois menu generates

Write one protocol per complication your menu can cause, posted where the treatment happens. For a typical menu that means anaphylaxis (injectables, peels and some topicals, per our checklist), vascular occlusion after filler, laser and energy-device burns, eye exposure during laser work, vasovagal syncope, and local anaesthetic reactions. For IV and weight-loss services, add infusion reactions and the escalation path for severe gastrointestinal symptoms. Our anaphylaxis protocol guide and vascular occlusion guide cover the clinical steps.

The Illinois staffing question inside every emergency page

On a non-ablative laser day the physician may be reachable rather than present. That is a supervision rule, not an emergency plan: the protocol must still say who on site gives epinephrine under the standing emergency order, who calls emergency services and the physician, and what the delegate does meanwhile. If only the physician can manage an occlusion, filler cannot run on days the physician is offsite.

The kit, the log and the drill

As best practice, keep a kit list matched to the protocols, with epinephrine and, where fillers are used, hyaluronidase in date, as our checklist recommends; a monthly check log initialled by a named person; and a drill schedule with a written debrief. Review protocols at least annually and after any real event, and record what changed.

The Section-by-Section Illinois Med Spa SOP Manual Outline

Eight parts, each policy named. Parts 1 and 2 carry most of the Illinois-specific weight. Mark each policy in your index as "Illinois rule" or "best practice."

Part 1 — Entity, ownership and governance

• Entity and ownership statement: entity type, articles, owners, officers and managers, confirming each is a physician or, for services within scope, an APRN.
• Management services boundary policy, with the MSO agreement attached.
• Salon registration record, if cosmetology or esthetics services are offered: our dataset records a separate shop or salon registration under 225 ILCS 410/3D-5 and no "medical" terminology in the salon name.
• Local licensing record: for Chicago locations, the city business licence and zoning approval our checklist describes.

Part 2 — Examination, delegation and supervision

• Good-faith examination policy: who may examine for each service, required content, modality, and when a new exam is triggered.
• Physician delegation policy under the Medical Practice Act, with the service matrix attached.
• Unlicensed delegate policy: permitted tasks and the on-site licensed professional rule.
• APRN policy: full practice authority verification or collaborative agreement, certification and population focus.
• Physician assistant policy: collaborative agreement and scope.
• Laser delegation and supervision policy: ablative versus non-ablative tiers, the 2025 non-ablative exam route and its four conditions, and the non-delegable eye-risk procedures.
• Physician oversight policy: chart review cadence, protocol approval, availability and coverage.

Part 3 — Clinical protocols by service

• One protocol per service: indications, contraindications, products or settings, physician-set dose ranges, aftercare and complication triggers.
• Standing order policy: what standing orders may authorise, and the rule that they cover only patients already examined.
• IV and injection therapy protocol, where offered, built on the physician or APRN order.

Part 4 — Patient record, consent and privacy

• Chart content standard, including the laser supervision fields.
• Informed consent policy, with the procedure-specific consent library.
• Clinical and marketing photography policy, including the biometric-privacy review.
• Record retention and destruction policy, with the counsel-confirmed period.
• HIPAA privacy and security policies, with business associate agreements.

Part 5 — Drugs, devices and waste

• Drug sourcing and purchasing policy, including the compounded-product rule.
• Storage, temperature monitoring and reconstitution policy.
• Lot tracking and recall policy.
• Controlled substance policy, if any are stocked.
• Device inventory, maintenance and laser safety programme, including the laser safety officer designation our laser guide recommends under ANSI Z136.3.
• Sharps and medical waste policy.

Part 6 — Personnel, training and competency

• Credentialing and licence verification policy, with the renewal calendar.
• Training and competency policy, with device-specific laser records.
• Scope-of-role statements for every job title.

Part 7 — Safety, emergencies and incidents

• Emergency protocols, one per complication, with the kit list, check log and drill schedule.
• Adverse event documentation and review policy.
• Misconduct reporting policy under Public Act 104-0764.
• Complaint handling policy and log.
• Infection prevention and exposure control policy.

Part 8 — Review and audit

• Quarterly reconciliation of the service matrix against the live menu, staff and devices; annual review signed by the owning physician; version control.
• Regulatory watch: the sunset dates our changes review lists for the Medical Practice Act (January 1, 2027, with a pending bill to extend it) and for the Nurse Practice Act and Physician Assistant Practice Act (January 1, 2028).

How Do Policies Shift by Role: Physician, APRN, PA, RN, LPN, Esthetician, Medical Assistant?

Each role's scope statement should be written from the Illinois sources below and checked against our injector and medical director guides.

Physician: the source of every delegation

The physician examines, writes or approves every protocol, delegates within their own scope and training, supervises ablative laser work on site, and signs the oversight log. Because a physician may delegate only within their own competence, their file should include their own aesthetic training.

APRN: two different files depending on authority

An APRN with full practice authority may examine, prescribe and treat within their certification, and our dataset records that APRNs may own a professional entity for services within their scope. An APRN without full practice authority does the same work under a written collaborative agreement. Either way the APRN's policies should state their population focus, whether they perform exams under the 2025 non-ablative laser route, and who they escalate to. How an APRN-owned practice relates to physician-delegated services is a structural question our medical director and injector guides each address; settle it with counsel before you write the APRN's scope statement.

Physician assistant: the agreement sets the edge

A PA examines, orders and treats within a written collaborative agreement with a physician. The scope statement should mirror the agreement, and the agreement must be updated before a new service is added, not after.

Registered nurse: performs an order, never writes one

An RN injects or operates a laser under delegation, following a protocol and an order that came from a prescriber's examination. Our injector guide states plainly that the RN does not select the product, the dose or the units. The scope statement should say so and list the delegated services and device training.

Licensed practical nurse: laser yes by rule, injectables with caution

The laser rule names LPNs as permitted delegates for ablative and non-ablative procedures, with documented training on each device, and the 2025 non-ablative route lets a trained RN or LPN perform after an APRN exam. For injectables, our Illinois pages advise against building an injector roster on LPNs without confirming the position with IDFPR in writing. The LPN scope statement should draw that line explicitly.

Esthetician: surface only, written in the negative

Our dataset records that cosmetologists and estheticians may not use any technique, product or practice intended to affect the living layers of the skin (225 ILCS 410/3-1 and 3A-1), and that IDFPR lists Botox, non-superficial chemical peels, collagen injections, microneedling and radiofrequency among procedures outside their scope. Lasers are outside it too. An individual performing physician-delegated medical procedures may not hold themselves out as an esthetician while doing so. The scope statement should list permitted services — our Illinois esthetician scope guide covers the surface-level menu — and name the excluded ones.

Medical assistant: support only, with a licensed professional on site

A medical assistant is unlicensed. Our injector guide states that MAs cannot administer injectables, and our laser guide that they cannot be the treating laser operator. Any delegated support task requires a licensed health care professional on site. List the support tasks — intake, vitals, room turnover, photography, documentation — and state that an MA never holds the syringe or fires the device.

Which Documentation Failures Most Often Surface in Illinois Complaints?

Our Illinois pages and dataset point to the same handful of failures, each the absence of a record a rule assumes exists.

Treatment with no examination behind it

Our checklist and medical director guide both call treatment delivered with no real exam the single most common finding in Illinois med spa enforcement. In documentation terms, it looks like a chart that starts with the injection note, or a GLP-1 intake approved by a standing order with no individual prescriber exam.

The medical director who exists only on paper

Our Illinois profile records that the December 2024 memo rejected the argument that a physician "was the medical director" if that physician never examined the patient or properly delegated the act. Its evidence is an empty oversight log: no chart reviews, no signed protocols, no record of availability.

The procedure performed under the wrong licence

Our dataset records IDFPR's October 2025 enforcement report: an $8,500 civil penalty for unlicensed practice of nursing, and a cease-and-desist order against an individual for unlicensed practice of medicine that included Botox injections. In a binder, this failure shows up as a service matrix that does not exist, or a scope statement that never told an esthetician or assistant what they could not do.

Training that does not match the device

Our laser guide describes undocumented or device-mismatched training as one of the cleanest violations to prove, because the record either exists or it does not. It is usually created by a new device purchase that nobody connected to the training file.

An agreement that no longer matches the practice

A collaborative agreement signed for injectables only, never updated when lasers or weight loss were added, undermines itself. The quarterly reconciliation in Part 8 exists to catch it.

What Illinois Requires, and What Is Only Best Practice

Keep this separation visible in your policy index.

Cited in our Illinois dataset or Illinois guides: an examination before delegated treatment (IDFPR Statement on Prohibited Practices; IDFPR and IDPH memo); delegation only within a physician-patient relationship and the delegating physician's scope, with an on-site licensed professional when delegating to unlicensed persons (225 ILCS 60/54.2); a physician exam before laser procedures, documented training on each system, on-site physician supervision for delegated ablative work and on-site or reachable supervision for non-ablative work, and no delegation of eye-risk procedures (68 Ill. Adm. Code 1285.336); the non-ablative APRN exam route and its four conditions, effective January 1, 2025; APRN authority under 225 ILCS 65/65-43, the full practice authority pathway at 68 Ill. Adm. Code 1300.465, and Illinois Controlled Substances Act licensure for prescribing APRNs; written collaborative agreements for APRNs without full practice authority and for PAs (225 ILCS 65; 225 ILCS 95); entity and ownership limits under the Medical Corporation, Professional Service Corporation and Professional Limited Liability Company Acts; esthetician scope limits (225 ILCS 410/3-1, 3A-1) and salon registration (225 ILCS 410/3D-5); and the 24-hour misconduct reporting duty in Public Act 104-0764.

Best practice, not an Illinois rule we could trace: the manual itself; the title "medical director"; a chart-review percentage; a written MSO boundary statement; the record-retention period; specific chart fields; consent form contents; storage, cold chain, lot tracking and disposal procedures; per-role personnel file contents beyond laser training; an internal incident form and complaint log; any state-level clinical adverse-event filing, which we could neither confirm nor rule out; and emergency kit contents and drill frequency. Each is worth doing. None should be presented to staff as a statutory command.

Summary: The Illinois Documentation Layer in One Page

Illinois licenses no med spa and will not inspect your manual. It regulates people and acts, and asks for proof when something goes wrong: who owns the medicine, who examined this patient, who delegated to whom, what training the delegate had on this device, and where the physician was. A good manual already holds those answers.

Build it in that order. Ownership and governance first. Then examination, delegation and supervision, with a service matrix that names the rule behind each row. Then the records, drugs, training and safety layers, labelled honestly as best practice where they are. Take the open points — retention, telehealth exams for injectables, APRN-owned structures, controlled substances — to an Illinois healthcare attorney. More guides are on our Illinois med spa compliance hub, and our regulations by state reference sets Illinois beside other states.

This guide is for informational purposes only and does not constitute legal or medical advice. Illinois med spa rules are administered by the Illinois Department of Financial and Professional Regulation, with the Illinois Department of Public Health a co-author of the medical spa memo, and they change over time. Citations on this page come from our Illinois dataset and Illinois guides; we could not re-open Illinois government sources from the network used to prepare it, and we say so where it matters. Consult an Illinois healthcare attorney before relying on any of it for your practice.

Frequently Asked Questions