Med Spa Medical Director Requirements: What the Law Actually Requires Nationally

No topic generates more confusion — and more regulatory violations — in the med spa industry than medical director requirements. Practices are shut down, physicians lose their licenses, and practitioners face board action because the medical director relationship wasn't properly structured or documented.

This guide breaks down what the law actually requires of a med spa medical director at a national level, how supervision requirements vary, and how written SOPs protect both the MD and the practice from liability.

Why Every Med Spa Needs a Medical Director

Med spas exist at the intersection of aesthetic services and healthcare. The treatments that generate the most revenue — Botox, fillers, laser treatments, GLP-1 weight loss drugs — are either prescription-only medications or procedures legally classified as the "practice of medicine" in most states.

This means they can only be legally performed by or under the supervision of a licensed physician (or, in some states, a collaborating NP or PA). The "medical director" is the physician who provides this oversight.

Operating without proper medical oversight is the most cited violation in state medical board enforcement actions against med spas. In 2025–2026, investigations in Florida, California, and New York alone resulted in dozens of practice closures and license revocations.

What a Medical Director Must Be

Licensing Requirements

A med spa medical director must hold:

• An active, unrestricted MD or DO license in the state where the practice is located
• No disciplinary actions, license restrictions, or pending board investigations
• A DEA registration if controlled substances will be prescribed (testosterone, certain anesthetics)
• Active malpractice insurance that specifically covers the supervisory/medical director role

Specialty Requirements

Most states do not require the medical director to be an aesthetic medicine specialist. A board-certified family medicine physician, internal medicine physician, emergency medicine physician, or general surgeon can legally serve as a med spa medical director in most jurisdictions.

However, practical considerations matter. Your medical director should understand aesthetic medicine well enough to review and approve clinical protocols, evaluate complications, and make informed decisions about scope of practice for your specific services. A physician who has no familiarity with injectables or laser treatments cannot meaningfully supervise those services.

What a Medical Director Must Do

1. Review and Sign All Clinical Protocols

The medical director's primary responsibility is to establish, review, and approve all clinical treatment protocols. This includes:

• Signing each clinical SOP indicating review and approval
• Annually reviewing and re-signing protocols to confirm continued accuracy
• Updating protocols when new evidence, FDA guidance, or safety data emerges
• Verifying that protocols match the practice's actual clinical scope

A medical director who signs protocols without reading them — or signs a generic SOP kit that doesn't match what the practice actually does — is exposing themselves and the practice to significant liability.

2. Issue Standing Orders

Standing orders are written physician directives authorizing clinical staff to perform specific treatments within defined parameters. For a med spa where the physician is not physically present during every treatment, standing orders are essential.

Compliant standing orders must:

• Specify exactly what treatments are authorized (e.g., "Administration of botulinum toxin type A [Botox] for cosmetic indications")
• Define the scope and limits (dose ranges, treatment areas, patient eligibility criteria)
• Identify which staff members are authorized to perform which treatments
• Specify when physician consultation is required (before treating a new patient, if a complication arises, if dose exceeds standard range)
• Be signed and dated by the medical director
• Be reviewed and renewed at least annually

3. Conduct Periodic Chart Reviews

Chart review requirements vary by state but are universally expected as evidence of meaningful physician oversight. Key requirements:

• Frequency: Most states require quarterly chart reviews at minimum; some require monthly for high-risk treatments like controlled substance prescriptions
• Scope: Typically 10–20% of charts randomly selected, plus all new patients in many states
• Documentation: The physician must sign and date each chart review, document what was reviewed, and note any findings or corrective actions
• Follow-up: Any deficiencies identified must be addressed and documented

A medical director who is paid a retainer but never actually reviews charts is not fulfilling their legal duty — and the practice is not properly supervised.

4. Be Available When the Practice Is Open

Most states require the medical director (or a supervising physician) to be reachable during practice hours. Requirements vary:

• Some states: Physician must be on-site for specific high-risk treatments (e.g., laser procedures above certain energy levels)
• Most states: Physician must be available by phone and able to respond within a defined time period (typically 30–60 minutes) for emergencies
• All states: There must be a clear escalation protocol so staff know how to reach the physician in an emergency

A medical director in another state, out of the country, or unreachable during treatment hours is not compliant with any state's requirements.

5. Handle Complications and Adverse Events

The medical director must be involved in all significant adverse events:

• Consulted immediately when a complication occurs (vascular occlusion, anaphylaxis, severe adverse reaction)
• Responsible for authorizing and overseeing emergency treatment protocols
• Conducting or participating in post-incident review and corrective action planning
• Updating protocols based on adverse event findings

How Written SOPs Protect the Medical Director

A well-structured SOP library is not just a compliance requirement — it is meaningful protection for the supervising physician. Here's why:

Documented Standard of Care

If a patient suffers a complication and files a malpractice claim, one of the first questions will be: "What was the standard of care, and was it followed?" Written, physician-signed SOPs document exactly what the standard of care is in your practice. A medical director who has signed clinical protocols demonstrating that comprehensive, evidence-based treatment guidelines were in place is in a fundamentally stronger legal position than one supervising a practice with no written protocols.

Delegation Boundaries

SOPs define exactly what staff are authorized to do — and what they are not. If a nurse performs a treatment outside the scope defined in the standing orders and protocol, and a complication results, the documented protocol establishes that the physician-authorized boundaries were exceeded. This is critical to distinguishing between physician liability and employee liability.

Documentation of Supervision Activity

SOPs that include chart review logs, standing order signature pages, and protocol review attestations create an audit trail of meaningful supervision. This documentation is what distinguishes a legitimate medical director relationship from a "ghost MD" arrangement — where a physician signs a contract for a fee but performs no actual oversight.

"Ghost MD" arrangements are explicitly targeted by state medical boards and can result in license revocation for the physician and practice closure for the med spa.

What Triggers Medical Board Investigation

Common patterns that trigger medical board or regulatory investigation of med spa medical director arrangements:

• Patient complaints about complications that weren't properly managed
• A physician supervising an implausibly large number of practices simultaneously (impossible to provide meaningful oversight)
• Treatments being performed outside the supervising physician's scope of competency
• No documented chart reviews over extended periods
• Standing orders that are out of date or not specific to the treatments being performed
• Medical director who is not reachable when the practice is open
• Staff performing treatments not authorized in standing orders

The Medical Director Agreement

The Medical Director Agreement is the foundational legal document governing the relationship between your practice and your physician. At minimum, it should specify:

• Specific duties and responsibilities (not just a generic "provide medical oversight")
• Hours of availability/on-call requirements
• Chart review frequency and documentation requirements
• Protocol review schedule (at minimum annually)
• Compensation structure
• Malpractice insurance requirements for the MD
• Termination provisions (including notice period to allow practice to find replacement)
• Non-compete and confidentiality provisions

Have a healthcare attorney draft or review this agreement. A generic template pulled from the internet is inadequate protection for either party.

Key Takeaways

1. Every med spa offering prescription treatments needs a licensed physician as medical director — this is non-negotiable in all states
2. The medical director must actively fulfill their role: signing protocols, issuing standing orders, reviewing charts, and being available
3. Written, physician-signed SOPs protect both the practice and the medical director in litigation and board actions
4. A "ghost MD" arrangement — where a physician signs a contract but performs no actual oversight — puts both the physician and the practice at serious legal risk
5. Medical Director Agreements should be detailed, specific, and reviewed by a healthcare attorney