Med Spa Medical Director Board Complaints: What Happens Next

Every med spa medical director signs the agreement hoping this day never comes: an envelope from the state medical board, or an email with the word complaint in the subject line. It names a patient — sometimes one the director never met — and it puts the director's personal license, the credential behind an entire career, at the center of an investigation into a facility the director may only oversee a few hours a month.

This is the risk that makes the medical director role fundamentally different from any other job in a med spa. The owner risks the business. The injector risks their own license and their own conduct. The medical director risks their license for what everyone else does — for the protocols that were or weren't written, the charts that were or weren't reviewed, and the delegation that was or wasn't documented. A board complaint is where that exposure becomes real.

This article explains the board-complaint process from the first notice to the final resolution: how complaints start, what the investigation looks like, what the director and the practice are each exposed to, how to respond in the critical first thirty days, and — the part that actually decides most cases — why documentation separates a dismissal from discipline. It is general educational information, not legal advice. But understanding the process is the first step to surviving it, and preventing it.

Why a Board Complaint Is the Medical Director's Biggest Risk

Med spa operators tend to think of legal risk as a lawsuit — a patient suing for damages after a bad outcome. That risk is real, and we cover it in depth in our guide to med spa medical director liability. But a board complaint is a different animal, and for the physician whose name is on the wall, it is often the more dangerous one.

The License, Not Just the Paycheck, Is on the Line

A malpractice lawsuit threatens money, and money is usually covered by insurance. A board complaint threatens the license itself — the thing that makes the physician a physician. A director can carry excellent malpractice coverage and still lose the ability to practice if a board concludes they failed to supervise adequately. The two tracks run independently: a case can be dismissed in civil court and still result in board discipline, or settle quietly in civil court while the board opens a separate file on the same facts.

Boards discipline physicians for the supervision failures that are specific to the medical director role: not maintaining written clinical protocols, not performing or documenting chart reviews, and not verifying that delegated procedures were performed by qualified, authorized staff. These are exactly the duties and responsibilities a medical director agrees to when they sign on — and exactly the duties that are easiest to neglect when the relationship is arm's-length and part-time.

"Paper Director" Arrangements Collapse Under Scrutiny

The most dangerous version of this risk is the arrangement regulators call the paper director — or, less politely, the ghost director: a physician whose name is on the contract and whose signature is on file, but who provides essentially no real oversight. For a fee, the physician lends their license; in exchange, they promise supervision they never actually deliver.

These arrangements work fine until a complaint or an inspection arrives — and then they fail completely. As one law firm that defends med spa directors puts it, complaints expose exactly the gap between the supervision a director promised and the supervision they provided (Weitz & Morgan). When investigators find no protocols, no chart-review logs, and no documented delegation, the physician cannot point to anything showing they did the job. Disciplinary actions against absentee directors and improper compensation arrangements have risen every year since 2022, and the sentence "I never met my medical director" recurs throughout board enforcement files. The paper-director model is not just risky; in a complaint, it is close to indefensible.

How Med Spa Complaints Start

Complaints do not arrive at random. They come from a handful of recurring sources, and understanding them tells you where your practice is most exposed. Anyone can file a complaint against a med spa or its medical director — most state boards accept them online, from anyone, at any time.

Patient Injury and Adverse Outcomes

The most common trigger is a patient who was harmed or believes they were. A laser burn, a scar, an infection, a filler vascular occlusion that wasn't managed in time, an allergic reaction, or simply a cosmetic result far worse than what was promised — any of these can push a patient to the board's website. Notably, it is often not the injury itself that generates the complaint but how it was handled: a patient whose complication was recognized quickly, treated per protocol, and documented honestly rarely files. A patient who felt dismissed, misled, or abandoned almost always does.

Unlicensed-Practice and Scope Reports

A second major source is the report that unqualified staff performed procedures that require a licensed provider — the unlicensed practice of medicine, or practice outside a provider's authorized scope. A medical assistant injecting neurotoxin, an esthetician running a device reserved for licensed clinicians, or a nurse operating without valid delegation all fall here. These complaints are especially dangerous for the director because they go straight to the heart of the supervision duty: if the wrong person was treating patients, the board wants to know why the supervising physician allowed it.

Employee and Competitor Tips

A large share of complaints come from people who know precisely where the bodies are buried: former employees and competing practices. A disgruntled ex-injector knows whether chart reviews actually happened. A competitor down the street knows the medical director hasn't set foot in the building in a year. These insider complaints are often the most detailed and the most damaging, because they arrive pre-loaded with the specific compliance failures an investigator would otherwise have to discover. There is no defense for this other than actually running a compliant practice — which is the whole point.

Inspections and Referrals From Other Agencies

Finally, complaints and investigations increasingly originate from proactive government enforcement rather than any single patient. State health departments, licensing divisions, and medical boards now run coordinated med spa sweeps. New York's Department of State, working with the state Department of Health and other agencies, inspected more than 200 businesses advertising med spa services, citing dozens for violations including the unlawful practice of medicine and referring matters for discipline (NY Department of State). An inspection that finds missing protocols or unlicensed practice becomes a referral, and a referral becomes a complaint against the director. Our guide to why med spas get shut down covers how these enforcement patterns escalate.

The Investigation Process Step by Step

Every state's board has its own procedures, but the arc of a physician disciplinary investigation is remarkably consistent across the country. Physicians are entitled to due process, and the process moves through predictable stages (FSMB, Complaint and Disciplinary Processes). Knowing the stages tells you what to expect — and where the decisive moments are.

Step 1: The Notice of Complaint

The process begins with written notice. The board informs the physician (and often the facility) that a complaint has been received, usually describing the general nature of the allegation. Some early notices are labeled "informal" and invite a preliminary response; others open a formal investigation immediately. Either way, the notice is not something to file away and worry about later — the clock starts the moment it lands.

Step 2: The Records Request

Close behind the notice — sometimes in the same letter — comes a request for records. This is where a board investigation becomes concrete. Investigators ask for the documents that let them evaluate compliance, supervision, and the standard of care: the treatment chart for the patient at issue, the written protocol for the procedure performed, chart-review logs, the delegation or standing-order agreement, license verifications for the staff involved, the signed consent form, and often training and QA records. What you can produce here effectively defines the case.

Step 3: The Written Response Window

The physician then receives a deadline to submit a written response — commonly 21 to 30 days from the notice, though it varies by state and can sometimes be extended through counsel. This is the single most important stage of the entire process. Your written answer, and the records you attach, shape the board's initial assessment and become a permanent part of the file (American Med Spa Association). A strong, well-documented, counsel-reviewed response is where many complaints quietly end. A weak, defensive, or late one is where many escalate.

Step 4: Investigation, Interview, and Expert Review

If the response doesn't resolve the matter, the board investigates further. It may interview the physician, the staff who performed the treatment, and the patient. For clinical questions, the board typically obtains an opinion from an expert in the same specialty about whether the care met the standard. It may request additional records or conduct a facility visit. Some states hold an informal settlement conference at this stage — a meeting where the physician and counsel discuss the case with board representatives and explore resolution before anything formal is filed.

Step 5: Resolution — Dismissal, Settlement, or Hearing

The case ends one of three ways. The board may close it with no action (or with a confidential advisory letter) when the documentation shows the standard of care was met. It may offer a settlement or consent order — a negotiated resolution that might include a fine, additional training, or practice conditions, without a full hearing. Or, for serious cases, it may file a formal complaint that proceeds to a hearing, where evidence is presented and a disciplinary decision — up to suspension or revocation — is rendered. Simple matters can resolve in three to six months; contested cases with formal hearings can run one to three years.

What the Medical Director Is Exposed To

When a complaint names the medical director, the range of possible outcomes is wide — and even the best outcome carries a cost. Understanding the exposure clarifies why the response matters so much.

The Range of Disciplinary Outcomes

If the board finds a supervision deficiency, the discipline it can impose spans a broad spectrum (FSMB, About Physician Discipline):

• Non-disciplinary resolution — the case is closed, sometimes with a confidential advisory or educational letter that is not public discipline.
• Reprimand or fine — a formal, often public, censure and monetary penalty.
• Probation with conditions — the license stays active but subject to monitoring, required CME, chart audits, or a practice monitor.
• Practice restrictions — limits on what the physician may do, such as a cap on the number of facilities they may supervise or a bar on certain delegation.
• Suspension — the license is paused for a defined period.
• Revocation — the license is terminated, ending the physician's ability to practice in that state.

Crucially, the director carries this exposure even though they did not perform the treatment. The board's theory is not "you injected the patient." It is "you were the physician responsible for ensuring this was done safely, and here is where your supervision fell short."

Collateral Consequences Beyond the Board

The board action is rarely the end of it. Public discipline is reported to the National Practitioner Data Bank and shared among states through the Federation of State Medical Boards, which means a single action can trigger reviews of the physician's licenses in every other state where they hold one. It can affect hospital privileges, malpractice premiums and insurability, participation in insurance networks, and the physician's standing with employers. And even when a complaint is ultimately dismissed, the investigation itself is time-consuming, stressful, professionally disruptive, and expensive to defend. There is no such thing as a "free" complaint, which is why prevention is worth so much more than any defense.

What the Med Spa (and Owner) Is Exposed To

The medical director is the primary target of a board complaint, but the practice and its owner face their own parallel exposure — often through different agencies acting on the same facts.

Facility Citations, Fines, and Closure

Where the director answers to the medical board, the facility answers to the health department, the licensing division, or the state agency that regulates medical facilities. A complaint or inspection can generate citations for operating without required protocols, for unlicensed practice, or for facility-standard violations — each carrying fines that can reach thousands of dollars per violation, corrective-action plans, and in serious cases suspension or revocation of the facility's ability to operate. In coordinated enforcement actions, a single incident can produce simultaneous proceedings against the director's license and the facility. Our med spa inspection guide details what facility inspectors look for and how citations are issued.

Civil Liability and the Owner's Personal Exposure

Running alongside the regulatory track is the civil one. The same adverse event that generated the board complaint frequently generates a malpractice or negligence lawsuit, and in states with corporate-practice-of-medicine rules, an improperly structured ownership arrangement can strip away the liability protection the owner assumed they had. When the business is found to have been practicing medicine without proper physician ownership or supervision, the owner's personal assets can be exposed. The board complaint, the facility citation, and the civil suit are three arrows that often fly from the same bow — and documentation is the shield against all three.

How to Respond to a Complaint (the First 30 Days)

The first month after a notice arrives determines the trajectory of the entire case. What you do — and, just as importantly, what you avoid doing — in those weeks matters more than almost anything that follows.

Retain Counsel Before You Write a Word

The most important early decision is to engage a healthcare attorney experienced in board defense before drafting any response. The written response is a legal document that becomes a permanent part of the record, and physicians routinely damage their own cases by responding personally — over-explaining, admitting things that weren't asked, or adopting a defensive tone that reads as evasive. Counsel knows what the board is actually evaluating, how to frame the documentation, and how to keep the response tight and responsive. Do not treat the first notice as something you can handle yourself because it looks informal; the informal-looking letter is often the one that decides the case.

Do Not Ignore, Alter, or "Explain It Away"

Three mistakes turn a survivable complaint into a serious one. The first is ignoring the notice — a non-response can itself become an independent ground for discipline, and it forfeits the one stage where you have the most control. The second is altering records — backdating a protocol, "cleaning up" a chart, or adding a note after the fact. Investigators are exceptionally good at detecting this, and a records alteration transforms a defensible standard-of-care question into an integrity violation that boards punish severely. The third is treating the response as a conversation — trying to talk the investigator out of it informally instead of building a documented, counsel-reviewed record. Respond in writing, on time, with evidence.

Produce Clean, Complete Documentation

The heart of a strong response is the documentation you attach. This is the moment your compliance system either pays off or fails you, because you cannot create it now — you can only produce what already exists. A complete production typically includes the physician-signed protocol for the procedure at issue, the full treatment chart, the chart-review log showing oversight occurred, the delegation or standing-order agreement, license verification for the staff involved, the signed informed-consent form, any incident report documenting how a complication was managed, and training records for the provider. When these arrive as a clean, organized package, they tell the board a story: this practice defined a standard, supervised to it, and can prove it.

Why Documentation Decides the Outcome

Here is the single most important thing to understand about a board investigation: the board evaluates the director's documented actions, not just the patient's outcome. Two practices can have the identical bad result — the same burn, the same occlusion, the same infection — and reach opposite ends of the process purely on the strength of what they can document.

What Separates a Dismissal From Discipline

A bad outcome is not, by itself, a violation. Medicine has complications; boards know this. What the board is really asking is whether the practice met the standard of care and can show it. Consider the same vascular occlusion at two practices. At the first, there is a signed filler protocol, a documented good-faith exam, a consent form listing occlusion as a risk, an incident report showing hyaluronidase was administered per protocol within minutes, and a chart-review log proving the director's oversight was real. At the second, none of that exists — just a chart entry and a physician who hasn't reviewed a record in a year. The clinical event is identical. The first practice is looking at a dismissal; the second is looking at discipline, because the absence of documentation is read as the absence of a standard of care.

This is why the documentation cannot be assembled after the complaint arrives. Its entire value lies in the fact that it existed before — that it is contemporaneous, dated, and genuine. A protocol signed the week the notice arrived proves nothing; a protocol signed and reviewed annually for the last three years proves everything. The work of surviving a complaint is done long before the complaint is filed.

What a Well-Run Practice Can Show an Investigator

So what, concretely, does a defensible practice hand over when the records request arrives? The table below maps the documents an investigator typically asks for to what each one proves — and to the compliance duty behind it.

Notice that every row is a document, not an argument. When these exist, the director's attorney isn't asking the board to take anyone's word for anything — the file speaks for itself. This is the entire premise of a defensible practice: the answer to "how do you know you were compliant?" is a stack of paper with dates and signatures on it. Building that stack is the job of a well-organized operations and compliance system, maintained continuously rather than assembled in a panic.

Preventing Complaints Before They Happen

The best board-complaint strategy is never receiving one. Prevention has two halves, and a practice needs both: run a genuinely safe operation, and be able to prove it. Neither alone is enough — a safe practice that can't document its safety still loses the investigation, and perfect paperwork can't save a practice that actually harms patients.

Build Real Oversight, Not a Paper Relationship

The structural fix is to make the medical director relationship real. That means a director who is actually reachable, who actually reviews charts on a defined schedule, who actually signs and updates protocols, and who actually knows the staff and the services. If your director's involvement would embarrass you in front of an investigator, that is the gap to close first — before a complaint forces the issue. This is not just an ethical point; it is the difference between an arrangement that holds up under scrutiny and one that collapses. If you are structuring or restructuring this relationship, our complete guide to med spa medical directors walks through what genuine oversight requires.

Close the Documentation Gaps Now

The proof side is more mechanical, which makes it more fixable. Most complaints trace back to a small number of preventable gaps: an unscreened contraindication, a provider working outside their scope, a complication that wasn't managed per protocol, or a director who was never really there. Each of those has a documentary counterpart — a consent form, a delegation agreement, an emergency protocol, a chart-review log — that both prevents the event and proves the standard was met if it happens anyway. Maintaining those records before you need them is the highest-leverage compliance work a med spa can do. It is far cheaper than a defense, and it is the only version of the documentation that actually works, because it is the only version that existed before the complaint.

After a Complaint: Remediation and Rebuilding

If a complaint has already arrived — or already resolved — the work isn't finished. Whatever gap the complaint exposed is almost certainly still there, and boards look far more favorably on practices that demonstrably fixed the underlying problem than on ones that treated the complaint as a one-off to be survived. Remediation is both the right thing to do and a mitigating factor in the outcome.

Concretely, that means going back through the failure the complaint revealed and closing it systematically: if protocols were missing, put a complete, physician-signed protocol library in place and schedule annual reviews. If chart review wasn't happening, build a real, dated review cadence and stick to it. If delegation was undocumented, execute proper agreements and verify every provider's scope and license. If a complication wasn't handled well, adopt genuine emergency protocols and train staff on them. A consent order that includes corrective conditions is often satisfied precisely by this kind of documented remediation — and a practice that rebuilds its compliance system after a scare is dramatically less likely to face a second complaint.

The throughline of this entire process is simple, if uncomfortable: a board complaint judges what you can prove, and what you can prove depends on decisions you made long before the envelope arrived. The practices that survive are the ones that were already running a documented, genuinely supervised operation. That is a system you build once and maintain, and it is far less expensive than the alternative.