September 8, 2026 26 min read

New Jersey Med Spa SOPs: What Your Manual Must Include (2026)

New Jersey never tells a med spa to write an SOP manual. It does tell you to keep records a certain way and to delegate through named instruments — and none of that survives without paper. This is the New Jersey layer, policy by policy.

Quick Answer

No New Jersey rule requires a medical spa to hold a document called an SOP manual — the state does not license med spas, so nothing is written to them by name. But five things are required in writing: the advanced practice nurse joint protocol (N.J.A.C. 13:35-6.6), the physician assistant delegation agreement (N.J.A.C. 13:35-2B.10), the treatment record kept seven years from the most recent entry (N.J.A.C. 13:35-6.5), controlled dangerous substance records where a CDS registration exists (N.J.A.C. 13:45H-5.4), and the federal exposure control plan reviewed at least annually. The manual exists to make those five defensible.

New Jersey is a hard state to write a med spa manual for, for a counterintuitive reason: there is almost nothing to copy. Tennessee has a registration rule; Indiana passed a comprehensive med spa act; New Jersey passed nothing. No medical spa definition, no facility licence, no registry, no medical director designation — and so no rule saying "your policies shall include the following."

Operators therefore write from national templates and hope the state layer is close enough. It usually is not: the retention period is wrong, the delegation section describes a standing-order framework New Jersey never adopted, and the consent policy asserts a requirement that does not exist here. The underlying craft — what an SOP is, how documents are versioned, how many you need — lives in our complete guide to med spa standard operating procedures and our medical spa policies and procedures manual guide, and is not repeated below.

In short

New Jersey imposes no med spa SOP manual requirement, because it imposes no med spa framework at all. It does impose written instruments and record rules — the APN joint protocol, the PA delegation agreement, a seven-year treatment record, CDS records, waste registration and tracking, and the federal exposure control plan — and those are unmeetable without written procedure behind them. This guide answers eight documentation questions, gives a seven-part manual outline, and separates what the state requires from what is merely good practice.

Does New Jersey Require a Med Spa to Have Written SOPs?

No — and saying otherwise is the most common error in New Jersey med spa compliance material. No rule, statute or board policy requires a medical spa here to keep an SOP manual, a policy and procedure manual, or a protocol binder.

Why no rule names a med spa SOP manual

A written-policy mandate has to be written to somebody — a licensed facility, a registered med spa, a defined cosmetic-services provider. New Jersey has none of those. An aesthetic practice here is a medical practice owned by licensed health care professionals, carrying the duties any physician's office carries: records, delegation instruments, drugs and notification. None is a duty to describe your own operations.

The one rule that does require written policies — and when it reaches you

N.J.A.C. 13:35-4A governs surgery (other than minor surgery), special procedures and anesthesia services in an office setting, and its own section on policies and procedures, N.J.A.C. 13:35-4A.4, sits inside it. The definitions decide whether your menu reaches it. A minor procedure can be safely and comfortably performed on a patient given no more than the maximum manufacturer-recommended dose of local or topical anesthesia. A special procedure involves entering the body with instruments in a potentially painful manner or requires the patient to be immobile. Neurotoxin, filler, laser, microneedling, peels and body-contouring devices sit on the minor side; add sedation, or move beyond minor surgery, and you inherit the whole subchapter at once.

The written documents New Jersey does require by name

Five things are mandated in writing regardless of sedation — the only items on this page you may describe to staff as legal requirements.

📌 Written and required in New Jersey

The APN joint protocol — N.J.A.C. 13:35-6.6, where an advanced practice nurse prescribes or orders medications or devices
The PA delegation agreement — N.J.A.C. 13:35-2B.10, signed separately with each supervising physician who delegates medical services
The professional treatment record — N.J.A.C. 13:35-6.5, contemporaneous and permanent, kept seven years from the most recent entry
CDS inventories and records — N.J.A.C. 13:45H-5.4, where the practice holds a New Jersey controlled dangerous substance registration
The bloodborne pathogen exposure control plan — 29 CFR 1910.1030, federal, reviewed and updated at least annually

Each is a promise about how the practice behaves that somebody can later test against what it did. The manual makes that promise repeatable across staff and shifts; New Jersey enforces the outcomes rather than the mechanism.

What Must a New Jersey Med Spa Document About Delegation and Supervision?

Verdict: two delegation instruments are required in writing — the APN joint protocol and the PA delegation agreement — and every other role requires you to evidence competence rather than file a form.

The RN: what N.J.A.C. 13:37-6.2 makes you able to prove

The Board of Nursing delegation rule makes the registered professional nurse responsible for the nature and quality of all nursing care — assessment, plan, implementation, monitoring and evaluation — and permits delegation of selected tasks to licensed practical nurses and ancillary personnel, but not to persons who have not been adequately prepared by verifiable training and education. "Verifiable" is the documentation obligation. The rule also fences off tasks requiring the specialised judgment of a registered nurse, or an understanding of nursing principles needed to recognise and manage complications; write your own non-delegable list against that language.

The physician assistant: a separate signed agreement per supervising physician

Under N.J.A.C. 13:35-2B.10 a physician assistant shall sign a separate written delegation agreement with each supervising physician who delegates medical services; a single-specialty practice may execute one agreement provided all delegating physicians sign it. Supervision is continuous but does not necessarily require physical presence, provided contact is maintained electronically or otherwise, and the ratio is capped at four PAs to one physician at any one time.

The advanced practice nurse: the joint protocol is the delegation instrument

Where an APN prescribes or orders medications or devices, N.J.A.C. 13:35-6.6 requires a written joint protocol with the collaborating physician. The rule names content: the means of direct communication; arrangements assuring the collaborating physician or peer coverage is accessible and available; procedures for the use of medications in emergency situations; and identification of reference materials containing practice guidelines or accepted standards. Critically, failure to establish and implement conforming protocols — or a violation by either party — may be deemed professional misconduct or other grounds for disciplinary sanction. Most aesthetic protocols fail one test: they never name the drug classes in the fridge. Whether the March 2026 law changes anything here is covered in what actually changed in New Jersey in 2026.

The certified medical assistant: the narrowest lane, the thickest file

N.J.A.C. 13:35-6.4 is the only rule describing unlicensed staff giving an injection. A physician may direct a certified medical assistant employed in the practice to give an intradermal, intramuscular or subcutaneous injection or perform venipuncture; the physician shall determine all components of the precise treatment — type, dosage, method, area and sites to avoid — and shall remain on the premises throughout, available to observe, assess and act. The credentialing conditions generate the file: an accredited post-secondary program of at least 330 clock hours including injection training, satisfactory performance of at least 10 intramuscular, 10 subcutaneous and 10 intradermal injections, and current certification. The rule does not authorise cosmetic injectables — see who can inject Botox in New Jersey.

The skin care specialist: documenting the boundary, not the delegation

New Jersey licenses a skin care specialist — the credential the state actually issues, not "esthetician" — through the Board of Cosmetology and Hairstyling. There is no delegation instrument because there is no delegation: N.J.A.C. 13:28-2.15(b)7 bars cosmetology licensees from any service the Board of Medical Examiners has determined to be medical, naming laser hair removal and Botox or Restylane-type injections, and no physician's presence cures it. The documentation is inverse — a written service map of what this credential may and may not perform. The scope analysis is in our New Jersey skin care specialist scope guide.

The delegation matrix your manual should carry

The question is never "may an RN do this" but "under what order, from whom, recorded where."

Role Authorising instrument Authority
Physician (MD/DO)Own licence; owns the practice entity and approves what is delegatedN.J.A.C. 13:35-6.16(f)
Advanced practice nurseWritten joint protocol with the collaborating physician, for prescribing or orderingN.J.A.C. 13:35-6.6
Physician assistantSeparate signed written delegation agreement with each supervising physicianN.J.A.C. 13:35-2B.10
Registered nurseA prescriber's order plus a documented competency file; RN owns the nursing planN.J.A.C. 13:37-6.2
Certified medical assistantPhysician-determined precise treatment, physician on premises; routine injections onlyN.J.A.C. 13:35-6.4
Skin care specialistNo instrument exists; a written service map recording what is out of scopeN.J.A.C. 13:28-2.15(b)7

What Must Be Documented About the Medical Director Relationship in New Jersey?

Verdict: nothing, under that title — New Jersey has no medical director rule, so there is no medical director document to file. An ownership rule, a notification rule and an insurance rule do the work instead.

New Jersey has an ownership rule, not a director rule

Elsewhere the medical director is a defined office with a named holder and an attestation. New Jersey never created the office because it never created the facility that would need one. The functional equivalent is N.J.A.C. 13:35-6.16(f): a medical practice must be owned by licensed health care professionals — so you are papering an ownership and clinical-authority structure, not a service contract. Ownership, including where management companies fit, is covered in who can own a med spa in New Jersey. A manual saying "the medical director approves all protocols" has named a role New Jersey does not recognise and skipped the three instruments it does.

The 21-day notice duty most practices have never filed

N.J.A.C. 13:35-6.19 requires written notice to the Board within 21 days of changes, additions or deletions to a defined list: all practice locations; practitioners directly associated with the practice; affiliated licensed facilities and HMOs, and the malpractice insurer; financial interests acquired in a health care service entity and whether the licensee refers there; and carrier actions declining coverage, assessing a claims-experience surcharge, imposing practice restrictions, or requiring remedial education or office monitoring.

Malpractice coverage, and what a director agreement should say anyway

Under N.J.A.C. 13:35-6.18, being covered means insurance of $1 million per occurrence and $3 million per policy year, with tail coverage for claims-made policies; a letter of credit is the alternative. Record the numbers, and check annually that delegate-performed cosmetic work is not excluded. Then write the director agreement as internal governance: who holds clinical authority and what they accept responsibility for, how they are reachable and within what interval, which services they have approved by name, what they review, and who holds the records if it ends.

What Patient-Record and Consent Documentation Does New Jersey Require, and For How Long?

Verdict: this is where New Jersey is genuinely prescriptive — N.J.A.C. 13:35-6.5 names the record's contents, its corrections, its electronic behaviour and its release, and sets retention at seven years from the date of the most recent entry.

The record rule, element by element

Licensees must prepare contemporaneous, permanent professional treatment records accurately reflecting the services rendered. To the extent applicable the record shall reflect the dates and times of all treatments; the patient complaint; the history; findings on appropriate examination; orders for tests or consultations and their results; the diagnosis or medical impression; treatment ordered including specific dosages, quantities and strengths of medications; recommended follow-up; and the identity of the treatment provider where more than one provider practises in the setting. A med spa is by definition a multi-provider setting, so a chart naming the treatment but not the person misses a named element in exactly the circumstance it was written for.

Seven years from the most recent entry — the only retention number New Jersey gives you

The measuring point matters more than the number. Not seven years from the first visit, from discharge, or from the last purchase: every new entry restarts the clock for the whole record, so a maintenance neurotoxin patient keeps the file live indefinitely. Do not let other periods contaminate it — CDS records run at least two years or the board period if longer; waste tracking forms three years; OSHA training records three years; HIPAA documentation six years. One blanket figure will be wrong about most of them.

The examination rule, corrections, and the electronic-record requirements almost nobody meets

N.J.A.C. 13:35-7.1A requires an examination before drugs are dispensed or a prescription issued, appropriately documented in the patient record, excepting an established patient where sound medical practice permits, a patient examined by a health care professional in collaborative practice with the practitioner, and an emergency. Corrections are permitted provided each change is clearly identified as such, dated and initialled. Computerised records must be contemporaneous, carry the date of service, date of entry and full printed name of the provider, be finalised by confidential personal code with the date of signing, and be posted at least monthly so they cannot be altered. A later correction requires a permanent audit trail showing the original entry, the revised entry, the date, the reason for the change and who authorised it — the field where systems fail, because generic audit logging records that an edit happened without capturing why.

Consent: New Jersey's standard is Largey, not a form

New Jersey keeps no statutory list of procedures requiring a signed consent form. Consent here is common law, set in Largey v. Rothman, 110 N.J. 204 (1988), which discarded the reasonable-physician test for a prudent-patient standard: disclosure is measured by what a reasonable patient would find material, not by what physicians customarily disclose. A form built to professional custom reproduces what the specialty happens to discuss; one built to the New Jersey standard asks what this patient, choosing an elective procedure with no medical necessity behind it, would want weighed — and the chart entry showing the conversation occurred is worth as much as the signature page.

Records requests, and what happens if the practice closes

Within 30 days of a request from a patient or authorised representative you must provide a copy of the treatment or billing records, at a fee capped at $1.00 per page or $100 for the entire record, whichever is less — and you may not withhold a record over an unpaid balance where another professional needs it for care. On ceasing practice you must establish a retrieval procedure, publish notice of the cessation and where records will be held in a newspaper of general circulation in the practice's area once each month for the first three months, and make reasonable efforts to notify every patient treated in the preceding six months.

Stop drafting the manual from scratch.

The Operations & Compliance Kit gives you the policy manual skeleton, delegation and oversight agreements, records and consent SOPs, and staff competency templates — ready to localise to the rules on this page.

View Operations Kit — $197

What Must Be Documented About Drug Handling, Storage and Disposal?

Verdict: New Jersey's drug documentation rules are real but narrower than operators assume, because they follow the controlled substance registration — and the average med spa stocks few controlled substances.

Which of your products are actually controlled substances

Sort the inventory first. Neurotoxins, dermal fillers, hyaluronidase, lidocaine, GLP-1 receptor agonists and most injectable vitamins are prescription drugs but not controlled dangerous substances, so the CDS scheme does not reach them. What is controlled and does appear in these practices: phentermine and certain other weight-management agents, testosterone, and any benzodiazepine kept for anxiolysis. Write the sort in as a one-page schedule.

CDS records, and the NJPMP obligations a weight-loss programme creates

Where the practice holds a New Jersey CDS registration, N.J.A.C. 13:45H-5.4 requires every inventory and record to be kept and available for at least two years from its date — or the period required by the registrant's own licensing board, whichever is longer — for inspection by the Drug Enforcement Administration and the Drug Control Unit, with Schedule I and II records held separately. That clause is why a flat two-year policy is unsafe. The New Jersey Prescription Monitoring Program under N.J.S.A. 45:1-45 et seq. separately requires prescribers and dispensers of monitored drugs to enrol and use it, with a check the first time a Schedule II substance is prescribed for acute or chronic pain and at least every three months thereafter.

Sharps and regulated medical waste: registration and the three-year tracking file

Small practices are most often caught out here. Under N.J.A.C. 7:26-3A.8(a) all regulated medical waste generators — no matter how small the amount produced, excepting home self-care waste — must register with the New Jersey Department of Environmental Protection and pay the applicable fees. There is no volume threshold exempting a two-room injectable practice. Generators must also keep each tracking form for at least three years from the date the waste was accepted by the initial transporter, under N.J.A.C. 7:26-3A.21.

What Training and Competency Records Should a New Jersey Med Spa Keep for Each Role?

Verdict: New Jersey mandates competency evidence without mandating a competency file — except in one federal instance where the record itself is required.

The one training record that is genuinely required

Under 29 CFR 1910.1030 an employer with occupationally exposed staff must maintain a written exposure control plan, review and update it at least annually and whenever new or modified tasks affect exposure, and document annually its consideration and implementation of appropriate commercially available safer medical devices. Training records must be kept three years from the date of training and must include a summary of the session, the names and qualifications of those conducting it, and attendees' names and job titles; employee medical records under the standard run for the duration of employment plus 30 years.

What each role's file has to contain

For the RN, because N.J.A.C. 13:37-6.2 forbids delegation to anyone not prepared by verifiable training: licence verification, device training certificates for every modality used, a supervised-practice record showing who observed and signed off, and dated reassessment for infrequent procedures. For the CMA: the accredited program, the 330 clock hours, the 10 intramuscular, 10 subcutaneous and 10 intradermal injections, and current certification. For the PA: licence, the signed delegation agreement with each supervising physician, and evidence the delegated services sit within that physician's scope. For the APN: licence and certification, the current joint protocol and its review record. For the skin care specialist: licence, a signed acknowledgment of the service map, and modality training.

What a competency record must contain, and when to review it

"Completed filler training" proves attendance. A record proving competence names the procedure and technique, the date, the trainer and their qualification, the supervised cases and their outcomes, the assessor's sign-off, and the dates competence was granted and is next reviewed. New Jersey sets no review cadence, so adopt one and pair the calendar date with a trigger list: a new service or device, a new role, a change of collaborating or supervising physician, an adverse event, a complaint, or an amendment to any rule cited.

What Incident and Adverse-Event Documentation Is Expected in New Jersey?

Verdict: New Jersey has no adverse-event reporting regime for a medical spa, so nothing routine goes to a board — but two documentation duties do reach you.

No med spa reporting regime — start there

The entity reporting obligations under the Health Care Professional Responsibility and Reporting Enhancement Act — the 2005 statute usually called the Cullen Law — attach to health care entities licensed under the state's facility licensing law, along with health maintenance organisations and managed care carriers. A physician-owned aesthetic practice is generally not a licensed facility, so those duties do not fasten onto it, and there is no New Jersey cosmetic-complication registry. Say that plainly: a policy promising to report events to a board that does not receive them creates an obligation you invented and will eventually breach.

The reporting duty that does reach an individual clinician

The same Act imposes a duty on individual professionals, with no facility gateway. A health care professional who knows that another health care professional has demonstrated impairment, gross incompetence or unprofessional conduct presenting an imminent danger to a patient or to the public health, safety or welfare must notify the Division of Consumer Affairs, and failure to notify exposes them to disciplinary action and civil penalties. It is a colleague-conduct duty rather than an outcome-reporting one, and it is personal to the licensee rather than delegable to the owner.

The sharps log, the incident record, and complaints

Under 29 CFR 1910.1030(h)(5) an employer must establish and maintain a sharps injury log of percutaneous injuries from contaminated sharps, kept for the period 29 CFR 1904.33 requires. It does not substitute for an internal incident record — date and time, patient identifier, product and lot, clinician, what was observed and done, who was contacted, the outcome, the change made — which should stay separate from the chart. Treat a complaint as an incident even without clinical harm: with no scheduled inspection cycle, a dissatisfied patient contacting the Division is how your paperwork gets read. What regulators examine once that door opens is the subject of our New Jersey med spa inspection guide.

Get the Free Med Spa Compliance Checklist

The full practice-readiness audit — the yes/no checkpoints behind this guide, delivered to your inbox so you can find your documentation gaps before anyone else does.

No spam. Unsubscribe anytime.

What Should a New Jersey Med Spa's Emergency Protocols Cover?

Verdict: standard of care, not New Jersey rule — with one exception written into the joint protocol requirement. The obligation is not softened, only relocated: from a rule a board enforces to a standard an expert testifies to.

Standard-of-care territory, and the one provision New Jersey names

Absent a facility licence there is no checklist asking whether your epinephrine is in date. The test comes later: whether a reasonably prudent practitioner would have been prepared for the complication that occurred, and whether the written protocol matched what the practice did. An unwritten protocol leaves the standard to the plaintiff's expert; a written one that was not followed defines it against you. The exception sits inside N.J.A.C. 13:35-6.6: a joint protocol must include procedures for the use of medications in emergency situations and identify the conditions requiring direct consultation — so where an APN injects, the emergency protocol is a component of a required document.

The events your menu generates, and what must be written before one happens

Injectables generate anaphylaxis and, for hyaluronic acid filler, vascular occlusion — the shortest clock in aesthetics, where response depends on hyaluronidase being physically present rather than orderable. Neurotoxin generates distant spread and dysphagia; lasers generate burns and ocular injury; deeper peels generate systemic toxicity; weight-loss and IV programmes generate hypoglycaemia and vasovagal events. A usable protocol names the recognition signs in the words a nurse would use, the immediate actions in order, the drug with dose and route, who is called, the transfer decision, and where supplies are and who checks them. No rule requires a drill; run them twice a year anyway.

The Section-by-Section New Jersey Med Spa SOP Manual Outline

Seven parts, thirty named policies, each written to a New Jersey authority where one exists and marked as a practice standard where none does. Authority comes first, because everything downstream derives from it.

Part 1 — Authority and structure

1.1 Practice ownership and clinical authority. The owning licensed professionals, the entity form, and who holds final clinical decision-making authority, against N.J.A.C. 13:35-6.16(f). 1.2 Scope of services. The full menu, each item classified as a medical or cosmetology-side service. 1.3 Change-in-status notification. The N.J.A.C. 13:35-6.19 trigger list, the 21-day clock, and who owns the filing. 1.4 Professional liability coverage. The $1 million / $3 million standard from N.J.A.C. 13:35-6.18, tail obligations, and the annual check that delegate-performed work is covered. 1.5 Regulatory monitoring. Who watches the New Jersey Register, and how a change reaches the manual.

Part 2 — Clinical governance and delegation

2.1 Service-to-role-to-instrument matrix. The table above, maintained as a controlled document. 2.2 APN joint protocol policy. Who holds a protocol, its required content under N.J.A.C. 13:35-6.6, the review cadence, and the emergency-medication provision. 2.3 PA delegation agreement policy. An agreement per supervising physician under N.J.A.C. 13:35-2B.10, the four-to-one ratio, and how the delegated-services list stays aligned to the menu. 2.4 RN delegation policy. The verifiable-training standard and the non-delegable task list, against N.J.A.C. 13:37-6.2. 2.5 Medical assistant policy. The N.J.A.C. 13:35-6.4 conditions, including the on-premises requirement. 2.6 Skin care specialist service map. What is in scope and what is not, against N.J.A.C. 13:28-2.15(b)7.

Part 3 — The patient record

3.1 Record content standard. The N.J.A.C. 13:35-6.5 element list mapped to your chart template, including provider identity in a multi-provider setting. 3.2 The examination and its documentation. The N.J.A.C. 13:35-7.1A requirement, who performs it, which exception you rely on, and how it is recorded. 3.3 Retention and destruction. Seven years from the most recent entry, alongside the separate CDS, waste, OSHA and HIPAA periods, each labelled with its own authority. 3.4 Corrections and electronic records. Identified, dated and initialled corrections; contemporaneous entry, confidential personal code, monthly posting, and the five-component audit trail. 3.5 Records access and closure. The 30-day response, the fee caps, and the cessation notice sequence.

Part 4 — Consent and communication

4.1 Informed consent standard. Drafted to the prudent-patient test in Largey v. Rothman, with the material-risk set defined per procedure. 4.2 Consent documentation. Which form covers which service, who conducts the discussion, and the chart entry evidencing it. 4.3 Photography and image use. A separate authorisation from clinical consent, with scope, duration and withdrawal — a practice standard, not a requirement. 4.4 Advertising and claims review. Who approves marketing copy, and how claims are substantiated before publication.

Part 5 — Drugs, devices and waste

5.1 Product schedule. Every stocked product classified CDS or non-CDS, reviewed whenever the menu changes. 5.2 Controlled substance records. The N.J.A.C. 13:45H-5.4 two-years-or-longer rule and the Schedule II separation requirement. 5.3 NJPMP use. Enrolled prescribers, authorised delegates, the check obligations for monitored drugs, and where the lookup is recorded. 5.4 Storage, receiving and reconciliation. Temperature and expiry controls, lot tracking and vial-to-chart reconciliation — practice standards, clearly labelled. 5.5 Sharps and medical waste. NJDEP generator registration under N.J.A.C. 7:26-3A.8(a) regardless of volume, and three-year tracking-form retention.

Part 6 — Personnel and competency

6.1 Credentialing and verification. Primary-source licence verification at hire and at renewal, with the verification record retained. 6.2 Competency standard. Initial training, documented supervised practice, named sign-off and reassessment interval, for every role. 6.3 Role-specific file contents. The RN, PA, APN, CMA and skin care specialist lists set out above. 6.4 Onboarding and attestation. What a new clinician reads, and the signed acknowledgment that it happened.

Part 7 — Safety, emergencies, incidents and review

7.1 Exposure control plan. The written 29 CFR 1910.1030 plan, annual review, safer-device evaluation, three-year training records and the sharps injury log. 7.2 Emergency protocols. One page per credible complication, with supplies, checks and the transfer decision — cross-referenced from the joint protocol where an APN injects. 7.3 Incident and complaint handling. The internal record structure, its separation from the chart, and the individual Cullen Law duty. 7.4 Review and version control. The annual review date, the trigger list, and who signs each revision.

✅ Build-order checklist

Week 1 — Parts 1 and 2. Nothing else can be written correctly until authority and instruments are settled
Week 2 — Parts 3 and 4. Audit ten real charts against the element list first
Week 3 — Parts 5 and 7. Confirm the NJDEP generator registration exists before you write that it does
Week 4 — Part 6, then sign-off. Build the files, then have every clinician attest to the finished manual
Mark every policy as either a New Jersey requirement with its citation, or a practice standard — no unlabelled assertions

Which Policies Change When a Skin Care Specialist, an RN, or a CRNP Performs the Service?

Verdict: the clinical protocol barely changes; the authorising instrument, the record and the supervision policy change completely. Ask three questions of every line item: what authorises this person, what must exist before they start, and what must the record show.

When a skin care specialist performs it

The threshold question is scope, not supervision, because N.J.A.C. 13:28-2.15(b)7 forecloses any service the Board of Medical Examiners has determined to be medical and no physician's presence cures that. The policy that changes is the service map: the item is either inside the cosmetology-side scope or off the menu entirely. There is no instrument to draft and no prescriber in the chain.

When an RN performs it

Now a prescriber enters the picture. The service must be ordered by someone with authority to order it; N.J.A.C. 13:35-7.1A attaches where a prescription drug is involved; and the RN's accountability under N.J.A.C. 13:37-6.2 attaches to the nursing plan and to anything handed on to an LPN or ancillary staff. The competency file becomes load-bearing, because the RN's authority rests on preparation rather than a filed instrument.

When a CRNP performs it, and the three-column rewrite

A certified registered nurse practitioner — an advanced practice nurse in New Jersey's terms — can carry the ordering function, which is why the joint protocol governs wherever prescribing or ordering is involved, and why it must be shown to be implemented rather than merely signed. Authority to order and authority to perform sit in one person, and one document carries both. The fix across the manual is mechanical: add three columns to every protocol header — who may perform it, under what instrument, and what must be in the record.

The Documentation Failures That Most Often Surface in New Jersey Complaints

Verdict: nearly all are drafting failures rather than clinical ones — a rule met in practice and lost on paper, or a document written for a different state.

The retention period borrowed from somewhere else

Manuals routinely state a flat rule of six years, or ten, or "per HIPAA," picked up from a national template. New Jersey's rule is seven years from the most recent entry, and the measuring point matters as much as the number. The fix is Policy 3.3: carry every applicable period side by side with its own authority.

The oversight instruments that describe a different practice

An APN joint protocol drafted from a primary-care template and never updated for aesthetics is common and consequential, because N.J.A.C. 13:35-6.6 makes failure to implement conforming protocols a disciplinary matter for both the nurse and the physician. Multi-physician practices also hold a single PA delegation agreement signed by whoever was there at hire, where N.J.A.C. 13:35-2B.10 requires one with each delegating supervising physician. Both gaps surface the moment someone asks who was supervising on a specific date.

The chart that never names the injector, and the system with no reason-for-change

Multi-provider settings are exactly where the record rule requires the identity of the treatment provider, yet aesthetic charting often records the service and the units without pinning the person — the easiest element to fix and the most damaging to be missing. Software marketed to aesthetic practices also logs edits without capturing the reason for the change or who authorised it, two of the five components the audit-trail provision names.

The consent form, the waste registration, and the manual that over-claims

Forms reciting a state mandate for written consent misstate New Jersey law and tend to be built to professional custom rather than the prudent-patient standard Largey set. Small injectable practices assume a volume exemption from waste registration; there is none. The most corrosive failure is over-claiming: a manual asserting that New Jersey requires annual competency reassessment, or a written med spa policy manual, or adverse-event reporting to a board, invites the obvious question about everything else it says. For an operational run-through, our New Jersey med spa compliance checklist works box by box, and the underlying rule set with primary sources sits on our New Jersey med spa regulations page.

What New Jersey Requires, and What Is Only Good Practice

If a policy in your manual is not in the left-hand column, do not describe it as a legal requirement to your staff or to a regulator.

Document or record Status in New Jersey Authority
SOP or policy manual, as suchNot required — unless the practice is within the office surgery subchapterN.J.A.C. 13:35-4A.4 (scope-limited)
APN joint protocolRequired in writing where the APN prescribes or ordersN.J.A.C. 13:35-6.6
PA delegation agreementRequired, signed, separately per supervising physicianN.J.A.C. 13:35-2B.10
Patient treatment recordRequired; contents named; seven years from most recent entryN.J.A.C. 13:35-6.5
Documented pre-prescription examinationRequired, appropriately documented in the recordN.J.A.C. 13:35-7.1A
Change-in-status noticeRequired in writing within 21 days of a listed changeN.J.A.C. 13:35-6.19
CDS inventories and recordsRequired where registered; two years or board period, whichever longerN.J.A.C. 13:45H-5.4
Medical waste registration and trackingRegistration required at any volume; tracking forms kept three yearsN.J.A.C. 7:26-3A.8, 7:26-3A.21
Exposure control plan and training recordsRequired federally; annual review; training records three years29 CFR 1910.1030
HIPAA policies and documentationRequired federally for covered entities; documentation six years45 CFR 164.316
Written informed consent formNot mandated by statute; measured by the prudent-patient standardLargey v. Rothman (1988)
Competency and training files by rolePractice standard — but delegation depends on verifiable preparationN.J.A.C. 13:37-6.2 (indirect)
Incident and adverse-event logPractice standard; no med spa reporting regime existsStandard of care
Emergency protocols and drillsPractice standard, except emergency medications inside a joint protocolStandard of care; N.J.A.C. 13:35-6.6

Summary: The New Jersey SOP Layer in Plain Terms

New Jersey will never ask to see your SOP manual, because it does not know your med spa exists as a category. It will ask for a chart, an oversight instrument, a credential file and a drug record — through a complaint rather than a scheduled visit. The manual's job is to make sure those four say the same thing as each other and as the practice's actual behaviour. Mark every policy as a citation-backed requirement or a practice standard, and resist promoting the second into the first.

This guide is for informational purposes only and does not constitute legal or medical advice. New Jersey aesthetic practices are governed by the Board of Medical Examiners, the Board of Nursing and the Board of Cosmetology and Hairstyling within the Division of Consumer Affairs, and rules change. Citations here were verified against published rule text at the time of writing; confirm current requirements with the Division of Consumer Affairs and the relevant board, and consult a New Jersey healthcare attorney before relying on this for your practice.

Frequently Asked Questions

Does New Jersey require a med spa to have written SOPs? + −
No rule requires a medical spa to hold a document called an SOP manual, because New Jersey does not license or define medical spas at all. The one Board of Medical Examiners rule mandating written policies and procedures, N.J.A.C. 13:35-4A.4, sits inside the subchapter on surgery other than minor surgery, special procedures and anesthesia services in an office setting, and most aesthetic services fall outside it as minor procedures. What New Jersey does require in named rules is a set of written instruments: the APN joint protocol, the PA delegation agreement, the treatment record, CDS records and the federal exposure control plan.
How long must a New Jersey med spa keep patient records? + −
Under N.J.A.C. 13:35-6.5, professional treatment records shall be maintained for seven years from the date of the most recent entry — measured from the last entry rather than the first visit, so an ongoing neurotoxin or weight-loss patient resets the clock at every appointment. Other periods reach a med spa from other bodies and none replaces it: controlled dangerous substance records run at least two years under N.J.A.C. 13:45H-5.4 or the licensing board's period if longer; waste tracking forms three years under N.J.A.C. 7:26-3A.21; OSHA training records three years; HIPAA documentation six years under 45 CFR 164.316.
What written documents does New Jersey actually require a med spa to have? + −
Five categories are named in rule rather than recommended. A written joint protocol between an advanced practice nurse and the collaborating physician under N.J.A.C. 13:35-6.6, without which the APN may not prescribe or order. A separate signed delegation agreement between a physician assistant and each supervising physician who delegates medical services under N.J.A.C. 13:35-2B.10. The contemporaneous, permanent professional treatment record under N.J.A.C. 13:35-6.5. Controlled dangerous substance inventories and records under N.J.A.C. 13:45H-5.4 where a CDS registration is held. And the federal bloodborne pathogen exposure control plan under 29 CFR 1910.1030, reviewed at least annually.
Does New Jersey require a written informed consent form for cosmetic treatments? + −
No New Jersey statute lists the cosmetic procedures for which a signed consent form must be obtained. Consent is measured by a common-law standard set in Largey v. Rothman, 110 N.J. 204 (1988), which replaced the reasonable-physician test with a prudent-patient test: what matters is what a reasonable patient would find material to the decision, not what practitioners customarily disclose. That makes the form a matter of evidence rather than a filing requirement, and the chart entry showing the conversation happened matters as much as the signature. Separately, N.J.A.C. 13:35-7.1A requires the examination preceding a prescription to be documented in the record.
What must a New Jersey med spa document about delegation to an RN? + −
N.J.A.C. 13:37-6.2 makes the registered professional nurse responsible for the nature and quality of all nursing care — assessment, plan, implementation, monitoring and evaluation — and permits delegation of selected tasks to licensed practical nurses and ancillary personnel only where the delegate has been adequately prepared by verifiable training and education. The word verifiable is the documentation requirement: the practice should be able to produce the training file behind every delegated task. The rule also makes tasks non-delegable where they require the specialised judgment of a registered nurse or an understanding of nursing principles needed to recognise and manage complications.
Does a New Jersey med spa need a written joint protocol for a nurse practitioner? + −
Where the advanced practice nurse prescribes or orders medications or devices, yes. N.J.A.C. 13:35-6.6 requires the APN and the collaborating physician to develop a written joint protocol, and failure to establish and implement conforming protocols, or a violation by either party, may be deemed professional misconduct or other grounds for disciplinary sanction. The rule names content: the means of direct communication, arrangements assuring the collaborating physician or peer coverage is accessible and available, procedures for the use of medications in emergency situations, and identification of reference materials containing practice guidelines or accepted standards of practice.
What drug records must a New Jersey med spa keep? + −
It depends on whether the products are controlled dangerous substances. Neurotoxins, dermal fillers and GLP-1 receptor agonists are prescription drugs but not controlled substances, so the CDS scheme does not reach them and the governing record is the patient treatment record under N.J.A.C. 13:35-6.5, which requires the specific dosage, quantity and strength administered to be reflected. Where the practice holds a New Jersey CDS registration — to stock phentermine or a benzodiazepine, say — N.J.A.C. 13:45H-5.4 requires inventories and records kept at least two years, or the licensing board's period if longer, with Schedule II records held separately.
Does New Jersey require a med spa to report an adverse event? + −
There is no New Jersey adverse-event reporting regime for a medical spa. The entity reporting duties under the Health Care Professional Responsibility and Reporting Enhancement Act, the 2005 statute usually called the Cullen Law, attach to health care entities licensed under the state facility licensing law, and a physician-owned aesthetic practice is generally not one. What reaches every clinician individually is the professional duty in the same Act: a health care professional who knows another has demonstrated impairment, gross incompetence or unprofessional conduct presenting an imminent danger must notify the Division of Consumer Affairs, on pain of discipline and civil penalties.

Every Protocol, Ready to Adapt

Writing a New Jersey med spa manual? Start from 62 SOPs.

Injectables, laser, weight loss, hormones, operations and emergencies — drafted, versioned, and ready to localise to the New Jersey rules on this page.

View Complete Suite — $997

More New Jersey compliance guides on the New Jersey med spa compliance hub.