New York GLP-1 Weight Loss Compliance for Med Spas in 2026

Most New York weight-loss programmes that get into trouble are run by operators who solved one of the four problems — usually sourcing — and assumed the other three followed. New York regulates prescribing, administration, drug supply and recordkeeping through four different bodies of law, enforced by three different agencies, and a programme is only as lawful as its weakest link.

That structural point is the whole reason this guide is organised the way it is: prescribe → administer → compound → monitor. Work through it in that order and you will find your own gap.

The national picture — what changed federally, how other states are reacting, and the general clinical framework — is covered in our complete GLP-1 med spa compliance guide. This page does not repeat it. Everything below is New York: New York statutes, New York regulations, New York agencies, and the specific places where New York is stricter or looser than the national baseline you may have read elsewhere. For the wider state picture, the New York med spa resource hub collects every guide we have written for this state.

The Direct Answer: Can a New York Med Spa Run a GLP-1 Programme in 2026?

Yes — but only the sourcing survived the compounded era intact. What remains is a medical weight-management practice that happens to sit inside a med spa.

The four permissions, stated plainly

Every lawful GLP-1 encounter in New York rests on four independent authorisations, and they attach to different people:

1. Prescriptive authority — held only by a New York-licensed physician, nurse practitioner or physician assistant, exercised after an evaluation and documented.
2. Administration authority — held by the prescriber, an RN or, within limits, an LPN, and only ever pursuant to an order written for that specific patient.
3. Lawful supply — the drug must reach the patient through a licensed, New York-registered channel: a registered pharmacy, or a registered wholesaler if the practice stocks it.
4. Continuing clinical responsibility — monitoring, titration decisions, adverse-event handling and records that survive a chart review years later.

The structure that actually works here

The compliant New York configuration: a professional entity (a PC or PLLC) owned by a licensed physician employs the prescribing clinicians; a management company, if there is one, provides everything non-clinical for a fixed, fair-market fee; the prescriber conducts the evaluation, in person or by video; the prescription goes electronically to a pharmacy licensed or registered in New York; and the patient either self-administers at home after teaching or is injected in clinic under an order naming them.

What is not lawful in any configuration

• A non-clinician screening and approving patients. An owner, manager or medical assistant deciding who qualifies is practising medicine without a licence, however tightly the eligibility criteria are written.
• A clinic-wide standing order authorising GLP-1 injections. New York's non-patient-specific order authority is a closed statutory list and weight-management drugs are not on it — the single most common misunderstanding in the state, and covered in full below.
• Buying vials from a peptide website. Research-use-only material is an unapproved new drug the moment it is intended for a patient, and no New York regulator will treat that transaction as pharmacy sourcing.

What Changed Federally, and What New York Added in the Same Window

Two federal decisions ended the compounded GLP-1 economy, a third is pending, and New York contributed an enforcement wave of its own.

The two delisting dates and the deadlines that followed

The FDA declared the tirzepatide shortage resolved in October 2024 and the semaglutide shortage resolved on 21 February 2025. Delisting is what matters legally: section 503A of the Federal Food, Drug, and Cosmetic Act bars a compounding pharmacy from producing a drug that is essentially a copy of a commercially available FDA-approved product, and an active shortage was the exemption that made the copies lawful.

The FDA then set transition deadlines. For tirzepatide, 503A pharmacies had until 19 February 2025 and 503B outsourcing facilities until 19 March 2025. For semaglutide, the dates were 22 April 2025 and 22 May 2025. A supplier still offering routine compounded semaglutide or tirzepatide in 2026 is not working a grey area; it is working past four expired deadlines.

The April 2026 proposal that is still pending

On 30 April 2026 the FDA proposed to exclude semaglutide, tirzepatide and liraglutide from the 503B bulk drug substances list, having found no clinical need for outsourcing facilities to compound them from bulk absent a shortage. The comment period ran through the end of June 2026 and drew thousands of submissions. As of this update the proposal is not final. Your obligations do not change while it is pending — the delistings already did the work — but if finalised as proposed, the last theoretical bulk-compounding route for these three molecules closes permanently.

Verify shortage status yourself before relying on any compounding-based protocol. The FDA drug shortage database is the primary source, and a dated screenshot of it on the day you made a sourcing decision is worth keeping in the file.

What New York added: the January 2026 med spa sweep

In January 2026 the New York Department of State announced the results of a statewide med spa investigation: of 223 businesses inspected, 87 were cited. Investigators reported expired and suspected counterfeit products, controlled substances on site, unsanitary conditions and used needles, and unlicensed individuals performing medical procedures. Consumers had reported burns, allergic reactions, poisoning and double vision.

The citations cluster around exactly the failure modes below: product provenance, and who was allowed to touch a patient. The Department of State does not discipline physicians, but what it finds gets referred — which is how one visit becomes three files.

PRESCRIBE: Who Holds Prescriptive Authority in New York

Prescribing a GLP-1 for weight management is the practice of medicine. Three licence types may initiate, on different terms, and everyone else is out.

Physicians

A New York-licensed physician (MD or DO) may evaluate, prescribe and manage a GLP-1 programme with no supervisory overlay. The physician is also where exposure concentrates: whoever signs the protocols, employs the clinicians or serves as medical director answers to the Office of Professional Medical Conduct for what happens under those protocols, whether or not they saw the patient. If that role is not defined in writing, start with our guide to New York med spa medical director requirements.

Nurse practitioners and the 3,600-hour line

Under Education Law §6902(3), an NP diagnoses and treats within the specialty area in which the NP is certified, and prescribes within that specialty. The structure turns on experience:

• Fewer than 3,600 hours of qualifying experience: the NP must hold a written practice agreement with a collaborating physician qualified in the NP's specialty area, plus written practice protocols. The agreement must address referral and consultation, coverage during absences, resolution of disagreements over diagnosis or treatment — where the physician's view prevails if the agreement is silent — and peer review of patient records at least every three months.
• 3,600 hours or more: the written practice agreement requirement ends and the NP maintains a documented collaborative relationship with a physician or hospital instead.

Two consequences. If your NP is under the threshold, weight-management prescribing must sit inside the written protocols and the three-month record review has to actually happen and be documented — protocols naming only aesthetics do not cover a semaglutide prescription. And the specialty limit is real: an NP certified in a paediatric or neonatal population treating adult weight-loss patients has a scope problem independent of the medicine. The threshold and what counts toward it are covered in the New York NP 3,600-hour guide.

Physician assistants

Under Education Law §6542, a PA performs medical services only under physician supervision, and only services within the supervising physician's own scope. Supervision must be continuous but does not require physical presence at the time and place of service, and a physician may not employ or supervise more than six PAs in private practice at one time.

New York's 2023 amendment allowing certain experienced PAs to practise unsupervised does not reach med spas: it is limited to PAs with more than 8,000 hours working in primary care, or employed by a hospital or health system that has qualified them under its medical staff bylaws. Assume a PA in a med spa is always supervised, and that the supervising physician's own scope must cover weight management.

Who cannot initiate, in any configuration

Verdict: registered nurses, licensed practical nurses, medical assistants, estheticians, health coaches and owners cannot prescribe. They also cannot make the medical-necessity decision, choose a starting dose, or approve an escalation. An intake questionnaire scored by non-clinical staff with a prescriber counter-signing a batch afterwards is prescribing by unlicensed staff with a signature attached — which is how it will be characterised if it is examined.

The Evaluation New York Expects Before the First Prescription

This is where practices most want a citation, and where honesty matters more than confidence.

What New York actually requires — and what it does not

New York has no statute or regulation defining a good-faith examination for weight-loss prescribing, and no state board has issued GLP-1-specific guidance. Anyone citing a New York GLP-1 examination rule is repeating something that does not exist. What exists is a set of general provisions that bite hard when an evaluation was inadequate:

• Education Law §6530(3) — practising with negligence on more than one occasion.
• Education Law §6530(4) — practising with gross negligence on a particular occasion.
• Education Law §6530(32) — failing to maintain a record for each patient that accurately reflects the evaluation and treatment of the patient.
• For nurses, NPs and other non-physician professions, the parallel provision is 8 NYCRR §29.2(a)(3).

The requirement is therefore the standard of care, proven through the record — a harder target than a checklist, because the question at review is never whether you ticked boxes but whether the chart shows a clinician evaluated this patient before starting a drug carrying a boxed warning.

The elements a defensible New York chart contains

1. Indication and history — weight history, previous interventions and outcomes, current medications including prior GLP-1 exposure, allergies, surgical history including bariatric surgery, family history.
2. Verified measurements — height, weight and calculated BMI measured by the practice or, for a telehealth start, an explicit note of how the values were obtained and why they were accepted. A self-reported number recorded silently as though measured is the weakest line in most charts.
3. Comorbidity assessment — type 2 diabetes or prediabetes, hypertension, dyslipidaemia, sleep apnoea, cardiovascular disease, hepatic steatosis. These establish medical necessity and drive drug choice and monitoring.
4. Contraindication screen — documented explicitly, including the negatives.
5. Mental health and eating-disorder screen — with a named instrument or a substantive narrative.
6. Informed consent — covering common and serious adverse effects, the boxed thyroid C-cell warning, pregnancy implications, expected duration, the likelihood of weight regain after discontinuation, and off-label status where applicable.
7. Written treatment plan — starting dose, titration schedule, monitoring plan, follow-up interval, and pre-stated criteria for changing or stopping.

Baseline laboratory work

No New York rule mandates a panel. The defensible baseline is HbA1c; a comprehensive metabolic panel covering renal and hepatic function; a lipid panel; TSH where thyroid disease is suspected; lipase if there is any pancreatitis history; and a pregnancy test for patients of childbearing potential. If you deliberately omit an element — the patient had a full panel with their primary care physician six weeks ago and brought the results — record the reasoning and the source document. Omission with an explanation is a clinical judgement; omission without one is a gap.

Telehealth, E-Prescribing, and How the Prescription Gets Written

Two rule sets govern the mechanics. New York is permissive on one and strict on the other, and practices routinely get this backwards.

Can the first GLP-1 consult be virtual? Yes

Verdict: yes. No New York statute or regulation requires an in-person visit before prescribing a non-controlled drug, and GLP-1 receptor agonists are not controlled substances. A first semaglutide or tirzepatide prescription may lawfully follow a telehealth encounter.

Be careful with the statute usually cited for this. Public Health Law article 29-G (§§2999-cc and 2999-dd) defines telehealth and telemedicine and addresses the delivery and reimbursement of services; §2999-cc defines telemedicine as synchronous two-way audio-visual communication. It is not a prescribing-authority statute and it creates no good-faith examination requirement. Citing it as the source of a New York telehealth prescribing rule, as a good deal of med spa marketing does, misstates what it says.

Where New York does impose an in-person rule

Effective 21 May 2025, 10 NYCRR §80.63(d)(1) provides that no controlled substance may be prescribed before an in-person medical evaluation, except where prescribing by telemedicine is consistent with state law and DEA rules. Federally, the DEA and HHS extended the pandemic-era telemedicine flexibilities for controlled substances through 31 December 2026.

None of this touches semaglutide or tirzepatide. It matters the moment a programme adds phentermine or another scheduled anorectic: you are then inside the controlled-substance regime, with its in-person default, registry consultation obligations and official prescription requirements. Many med spas add phentermine as a cheaper adjunct without noticing they have changed regulatory categories.

Telehealth consent: required, or best practice?

The honest answer depends on the payer, and for a cash-pay med spa no published New York rule settles it. Consent to telehealth is an established expectation in New York's Medicaid programme and is treated as standard of care by carriers and health systems. We are not aware of a New York statute or regulation imposing a separate written telehealth consent on a private-pay practice, and earlier versions of this page overstated that point. Obtain it anyway: one signature documents that the patient understood the limits of a remote evaluation.

New York's e-prescribing mandate reaches GLP-1s

This is the rule most weight-loss programmes do not know applies to them. Since 27 March 2016, under Education Law §6810, New York has required prescriptions to be transmitted electronically — controlled and non-controlled alike. Few states mandate e-prescribing this broadly, and a GLP-1 is squarely inside it.

The exceptions sit in 10 NYCRR §80.64 and are narrow: technological failure, circumstances where an electronic prescription was impractical in a timeframe that would adversely affect the patient, and — importantly here — prescriptions to be dispensed by a pharmacy located outside New York. Practices using an out-of-state mail-order pharmacy therefore often fall within a genuine exception, which is a reason to know which one you rely on rather than to ignore the mandate: a fax to a Brooklyn pharmacy because the EHR integration was never finished is not an exception.

ADMINISTER: Who May Physically Inject a GLP-1 in New York

Administering is a different permission from prescribing, and it is where staffing models break. Every verdict below assumes a valid patient-specific order exists — without one, none of these people may inject.

Registered nurses

Verdict: yes, on a patient-specific order. Education Law §6902(1) defines registered professional nursing to include executing medical regimens prescribed by a physician, nurse practitioner, physician assistant or other authorised prescriber. Administering a subcutaneous GLP-1 is executing a medical regimen and sits squarely within RN scope, provided the RN is trained and competent in the injection, the teaching and the recognition of adverse reactions.

What the RN may not do is exercise the judgement the prescriber owns: escalating a dose, holding one after a reported adverse effect, or deciding whether a new patient qualifies. The RN gathers and reports; the decision comes back as an order.

Licensed practical nurses

Verdict: qualified yes, and rarely worth the complexity. Under Education Law §6902(2) an LPN practises under the direction of an RN, physician, NP, PA, dentist, midwife or other authorised practitioner. LPNs may administer most medications where trained and competent, and New York guidance expects the directing practitioner on the premises in most circumstances. A subcutaneous GLP-1 under a patient-specific order, with a directing clinician on site, fits that frame.

Medical assistants, estheticians and unlicensed staff

Verdict: never. New York does not license medical assistants, and unlicensed personnel may not perform tasks restricted to a licensed profession. An MA administering an injection is engaged in unauthorised practice under Education Law §6512 — a criminal offence — and exposes the supervising physician to professional misconduct for aiding it. An injector-academy certificate, an out-of-state credential or an internal competency sign-off changes nothing. This was among the findings in the January 2026 Department of State sweep, and it is the violation most likely to turn an inspection into a referral.

The patient injecting at home

Self-administration is normal and is not delegation — the patient is not your staff. What the practice owes is documented teaching: injection technique, site rotation, storage and cold-chain handling, sharps disposal, missed doses, and when to call. Record who taught it, when, and with what materials. If the practice hands over the pen or vial directly, Education Law §6807 permits prescribers who are not pharmacy owners or employees to dispense to their own patients — but the container must be labelled with the dispenser's and patient's name and address, directions for use, the date, and the drug's brand name and strength. In-house dispensers usually get the labelling wrong before anything else.

Why a standing order is not a patient-specific order here

This is the New York point that out-of-state operating manuals get wrong. An RN's authority to act without a patient-specific order comes from Education Law §6909, and it is a closed, enumerated list: specified immunisations; anaphylaxis treatment agents including epinephrine in an emergency; PPD and other tuberculosis screening, HIV, hepatitis C, COVID-19, influenza and pregnancy tests; treatment of suspected opioid overdose; screening of persons at increased risk for syphilis, gonorrhoea and chlamydia; and a small number of newborn and emergency services.

Weight-management injections are not on that list, and there is no residual category. A clinic-wide GLP-1 standing order is not weaker authority in New York — it is no authority at all, and an RN injecting under one is executing a regimen never prescribed for that patient.

A valid order names the patient, drug, dose, route, frequency and duration; it is signed and dated by the prescriber; and it changes when the dose changes. A protocol still has a role — standardising technique, screening questions, hold criteria and escalation — but it operates underneath the patient-specific order, never in place of it.

COMPOUND: 503A, 503B, and What New York May Still Source

Sourcing is where the money was, so it is where the temptation remains. The mechanics of 503A versus 503B compounding, the clinical-difference exemption, salt forms and how to vet a compounding pharmacy are covered in our guide to compounded GLP-1 sourcing under 503A and 503B; this section does not reproduce it.

The federal frame, in one paragraph

A 503A pharmacy compounds for an identified individual patient on a prescription; a 503B outsourcing facility registers with the FDA and may compound without patient-specific prescriptions under stricter manufacturing standards. Both are barred from producing what is essentially a copy of a commercially available approved drug, the shortage exemption having lapsed. What remains for a 503A pharmacy is a preparation that differs from the approved product in a way that produces a clinical difference for a specific patient — a documented excipient allergy, or a strength genuinely unavailable commercially — determined and recorded by the prescriber before the order is placed. Cost is not a clinical difference; convenience is not; neither is "our protocol has always used compounded".

What that means for a New York practice

Assume branded product — Wegovy, Zepbound, Ozempic, Mounjaro or Saxenda — is your supply, and treat any compounded prescription as an individually justified exception, with the reasoning in the chart before the vial is ordered. If more than a handful of your patients are on compounded product, the pattern itself is the problem: at volume, individual justification stops being credible.

Research peptides and non-pharmacy suppliers

Verdict: unlawful, and uniquely dangerous. Vials marketed as "research use only" or "not for human consumption" are unapproved new drugs once intended for patients. In warning letters issued 31 March 2026 and published 7 April 2026, the FDA told seven online peptide sellers that the research-use disclaimer was irrelevant where the product pages themselves described appetite suppression, weight loss and glucose regulation. Enforcement has escalated sharply through 2025 and 2026, extending beyond semaglutide and tirzepatide to retatrutide, BPC-157 and similar compounds.

For a New York med spa the exposure is not only federal. Product of unknown provenance in the treatment room is exactly what the Department of State sweep flagged, the practitioner administering it has no lawful prescription behind it, and there is no pharmacy in the chain to absorb any of the liability.

The New York Pharmacy Side: What to Demand in Writing

Your supplier's licence status is your compliance problem too. New York polices the boundary through registration, and the documents are easy to collect before the first order and unpleasant to reconstruct afterwards.

The nonresident establishment registration

Under Education Law §6808-b, any pharmacy, manufacturer, wholesaler or outsourcing facility located outside New York that ships, mails or delivers prescription drugs or devices to establishments, authorised prescribers or patients in New York must register as a nonresident establishment with the State Education Department. The definition expressly reaches internet pharmacies; in-state pharmacies and wholesalers are separately registered under the same article.

So the question for a prospective mail-order partner is not "are you licensed?" — everyone says yes — but "what is your New York nonresident establishment registration number?" Verify it through the Office of the Professions verification search yourself rather than accepting a PDF, and re-verify annually.

The document set to collect before the first order

• Licence or registration evidence — New York pharmacy registration, or nonresident establishment registration number, plus the home-state licence.
• 503B registration status, if the supplier is an outsourcing facility, and its most recent FDA inspection outcome.
• Product identity in writing — the specific NDC or preparation you will receive, confirming FDA-approved branded product where that is what you are buying.
• Drug Supply Chain Security Act transaction documentation for any product the practice stocks itself, showing the chain from the manufacturer.
• Cold-chain commitments — shipping validation, temperature monitoring, and the procedure when a shipment arrives out of range.
• Recall and adverse-event contacts, named, with a stated response time.
• Certificates of analysis for any compounded preparation, including potency and sterility testing.

MONITOR: Baseline, Titration, Follow-Up and Off-Ramping

Monitoring is where a weight-loss programme either becomes a medical practice or reveals itself as a subscription. New York prescribes no interval, so the standard of care and your own written plan set the bar — and you are held to it.

Titration documentation

Every dose change is a prescribing decision and needs its own entry: current dose, tolerability since the last change, adverse effects and severity, whether the response is on track, the new dose, and the rationale. Escalating on a fixed calendar regardless of tolerance is a common failing — the label's schedule is a maximum pace, not something you owe the patient. "Held at 0.5 mg due to persistent nausea, re-assess in four weeks" is defensible; a silent jump from 0.25 mg to 1 mg is not.

Follow-up cadence

A defensible cadence: a tolerability contact around four weeks after initiation; a clinical encounter before each escalation; a documented review at least every three months once the dose is stable; and repeat laboratory work matched to comorbidities, typically HbA1c and a metabolic panel annually, more often in diabetes or renal impairment. Our GLP-1 monitoring schedule template sets out a visit-by-visit structure to adapt.

The interval matters far less than whether refills track it. Twelve months of prescriptions with two encounters behind them reads, in any review, as prescribing without evaluation — and the record shows exactly that, month by month, without anyone needing to interpret it.

What must be charted at every visit

• Weight, BMI and percentage change from baseline
• Current dose, adherence and any missed doses
• Adverse effects, graded, and what was done about them
• Blood pressure and pulse
• Nutrition and activity counselling actually delivered, including protein and resistance-training guidance
• Screening for new contraindications — pregnancy plans, gallbladder symptoms, severe abdominal pain
• The plan until the next visit, with the next contact date

Stop criteria, off-ramping and maintenance

Write the stopping rules before you start; deciding them mid-course looks like improvisation. Common criteria: inadequate response, conventionally under 5% weight loss after full titration to a therapeutic dose over about twelve weeks; intolerable adverse effects; suspected pancreatitis; pregnancy or planned pregnancy; a new contraindication; or the patient's decision.

Off-ramping deserves its own protocol: weight regain after discontinuation is the expected course rather than a failure, and patients must be told so at consent and again at the exit. Taper, transition and maintenance planning are covered in our guide to GLP-1 maintenance and off-ramping. Document the plan, the counselling and the follow-up interval after the last dose — patients who disappear without a recorded ending are a chart problem as well as a clinical one.

Contraindications, Screening, and Proving the Screen Happened

These drugs carry a boxed warning. A chart that never mentions it invites the obvious question of whether anyone read the label.

Absolute contraindications

• Personal or family history of medullary thyroid carcinoma — the boxed warning for semaglutide, tirzepatide and liraglutide products, based on rodent thyroid C-cell tumour findings.
• Multiple endocrine neoplasia syndrome type 2 — same warning, same exclusion.
• Known hypersensitivity to the molecule or any excipient.
• Pregnancy — and the weight-loss indications call for discontinuation in advance of a planned pregnancy; counsel patients using oral contraceptives about absorption during titration on tirzepatide.

Relative and situational cautions

History of pancreatitis; gallbladder disease; severe gastrointestinal disease or gastroparesis; diabetic retinopathy, where rapid glycaemic improvement warrants monitoring; significant renal impairment, particularly with dehydration from vomiting or diarrhoea; concurrent insulin or sulfonylurea use, where hypoglycaemia risk requires dose adjustment by whoever manages the diabetes; active or historical eating disorder; and any planned procedure requiring sedation or general anaesthesia, given delayed gastric emptying and current anaesthesia guidance on holding the drug beforehand. That last item matters in a med spa that also performs procedures under sedation — the two services need to know about each other.

Proving the screen happened

Screening you cannot evidence is screening you did not do, as far as any review is concerned. Three practices make the difference: record negatives explicitly rather than leaving fields blank, because "no personal or family history of MTC or MEN2 reported" is unambiguous and an empty field is not; keep the signed screening instrument in the chart, not only its conclusion; and re-screen at intervals, since pregnancy plans, gallbladder symptoms and new diagnoses all appear after the first visit.

Adverse Events: Recognition, Management and Reporting

Most GLP-1 adverse events are gastrointestinal and self-limiting. The programme's job is to catch the small number that are not, and to be reachable when they happen.

What staff must be able to recognise

Severe or persistent abdominal pain radiating to the back, suggesting pancreatitis. Right upper quadrant pain, fever or jaundice, suggesting gallbladder disease. Dehydration and acute kidney injury after prolonged vomiting or diarrhoea. Hypoglycaemia in patients also taking insulin or a sulfonylurea. Hypersensitivity and injection-site reactions. Vision changes in diabetic retinopathy. Every front-line staff member — including the non-clinical ones answering the phone — needs a written triage script naming which calls go straight to a clinician and which go to an emergency department.

Managing and documenting

Hold or reduce the dose per protocol, arrange evaluation, and document the event, its grading, the action taken, the advice given and the follow-up. Keep an adverse event log across the programme rather than entries scattered through individual charts: a log is what lets you notice that three patients on the same lot reacted the same way.

What to report, and to whom

Report serious adverse events to the FDA through MedWatch, and to the manufacturer or, for a compounded preparation, the compounding pharmacy. Suspected quality problems — particulate matter, discoloration, a failed cold chain — go to MedWatch too.

On the state side, be precise rather than reassuring: New York has no general med spa adverse-event reporting scheme. Public Health Law §230-d and the office-based surgery reporting regime apply to procedures using more than minimal sedation or anaesthesia, which a subcutaneous injection is not. That absence is not permission to be casual — the same event will be examined through the negligence and recordkeeping provisions if a complaint follows — and if a patient is seriously harmed, notify your carrier and counsel before deciding what is reportable.

OPMC, Overprescribing, and the Defensible Chart

Enforcement here is fragmented: one complaint about one patient can produce parallel files at three agencies, each looking at a different licence.

Who investigates whom

The Office of Professional Medical Conduct at the Department of Health investigates and prosecutes misconduct by physicians, physician assistants and specialist assistants under Public Health Law §230, applying the definitions in Education Law §6530, with adjudication before the Board for Professional Medical Conduct. Nurse practitioners, registered nurses, LPNs and pharmacists are not OPMC's jurisdiction — they are disciplined by the State Education Department through the Office of Professional Discipline under the Regents rules in 8 NYCRR Part 29. The Department of State separately inspects the business as an appearance-enhancement establishment.

The provisions that reach weight-loss prescribing

There is no GLP-1 misconduct rule. The provisions that do the work are general: negligence on more than one occasion and gross negligence (§6530(3) and (4)); incompetence; failure to maintain accurate records (§6530(32)); ordering excessive treatment not warranted by the patient's condition; permitting an unlicensed person to perform activities requiring a licence; and fee-splitting barred by §6509-a. Note how many are documentation failures rather than clinical ones — in weight-management practice, the record is usually the case.

Patterns that attract scrutiny

Being candid about what is verifiable: OPMC does not publish GLP-1-specific enforcement statistics, and claims circulating in med spa marketing about waves of New York GLP-1 discipline are not something we can substantiate from primary sources. What is substantiated is the shape of the provisions above and the January 2026 Department of State findings. Read together, the exposed patterns are:

• Prescriptions issued after an intake form with no clinician encounter of any kind
• Months of refills with no documented follow-up
• Charts with no contraindication screen and no mention of the boxed warning
• Injections given by unlicensed staff, or by nurses under a clinic-wide standing order
• Compounded product supplied at volume with no patient-specific justification
• An NP prescribing outside their certification population, or under expired or aesthetics-only protocols
• Advertising promising specific pound or dress-size outcomes

What a defensible chart looks like

Open a chart at random and ask whether a stranger reading it in three years could reconstruct: who evaluated this patient and when; what was measured versus reported; which contraindications were excluded; what the patient consented to; who wrote the order and who administered the drug; what happened at each contact; and why the dose is what it is today. If it takes three tries to find such a chart, you already know where the gap is.

Advertising a GLP-1 Programme in New York

Marketing is where compliant clinical practice most often comes undone, because whoever writes the ad copy is rarely whoever read the label.

The professional-conduct rule

Under the Regents rules at 8 NYCRR §29.1(b)(12), advertising or soliciting for patronage that is not in the public interest is unprofessional conduct. The rule reaches false, misleading or deceptive claims, guarantees of results, and unsubstantiated claims of superiority; where testimonials or portrayals of practice are used, conditions apply, including written authorisation from the patient, disclosure preventing misleading impressions, and reasonable disclaimers about results in a particular case. Fictional patient testimonials are not permitted. This attaches to the licensee, so the physician or NP whose name is on the practice owns the marketing whether or not they wrote it.

Consumer protection and the federal overlay

General Business Law §§349 and 350 prohibit deceptive acts and false advertising, enforced by the Attorney General with a private right of action attached. Federally, the FTC's health-products guidance requires competent and reliable scientific evidence for health claims and treats endorsements and typicality disclaimers strictly, and the FDA constrains promotion of compounded drugs — which cannot be advertised as though approved. Manufacturer trademarks are also not yours: naming Ozempic or Zepbound in a service list is one thing, building a brand around the mark another.

The weight-loss-specific notices

Two consumer statutes sit outside the professional rules and are routinely missed. General Business Law article 30-B requires providers of weight loss services to give consumers a notice covering matters such as rapid weight loss risks and consumer rights. In New York City, 6 RCNY §5-72 requires a "Weight Loss Consumer Bill of Rights" to be conspicuously posted, in prescribed type sizes, in every room where a presentation is made or a product or treatment is offered, plus a palm-sized card for consumers who ask about the programme.

Whether a physician-supervised medical weight-loss programme inside a med spa falls within these consumer provisions or within their professional-practice exemption is genuinely unsettled, and we are not aware of published guidance resolving it. For a New York City operator the pragmatic answer is that posting a compliant sign costs almost nothing and removes the question. Our New York med spa advertising guide covers claims, before-and-after photographs and disclaimers in more detail.

Ownership, Corporate Practice, Records and Retention

The last two failure modes are structural — the ones a buyer will find even if no regulator does.

Who may own the programme

New York enforces the corporate practice of medicine doctrine: a medical practice must be owned by licensed physicians, through a professional service corporation or professional limited liability company, and a lay-owned business may not employ physicians to practise medicine on its behalf. A GLP-1 programme is medical practice, so it must sit inside the professional entity — not inside the LLC that owns the spa's chairs and lasers.

The MSO structure and fee-splitting

The workable arrangement pairs the professional entity with a management services organisation supplying premises, equipment, non-clinical staff, marketing and administration. The constraint is Education Law §6509-a, which makes fee-splitting with unlicensed persons or entities professional misconduct. Management fees must be fixed, set in advance in writing, and reflect fair market value for services actually rendered. A percentage of GLP-1 revenue, a per-patient fee or a per-injection payment to the management company is the classic defect — and paying a medical director a percentage of injection revenue has the same problem.

Consent documents to keep on file

At minimum: general treatment consent; GLP-1-specific informed consent naming the boxed warning, adverse effects, pregnancy implications, expected duration and the likelihood of weight regain after stopping; off-label consent where a diabetes product is used for weight management; telehealth consent for remote encounters; a HIPAA acknowledgement; separate revocable photography consent if you use images; and financial consent covering cost, refunds and mid-course stops.

Retention periods and patient access

For physicians, Education Law §6530(32) requires records accurately reflecting the evaluation and treatment of each patient, retained at least six years; records of minor patients are retained at least six years and until one year after the minor reaches 18. The parallel obligation for other health professions sits at 8 NYCRR §29.2(a)(3). Patients have access rights under Public Health Law §18, which governs how requests are handled and what may be charged. Practically: keep records at least six years after the last encounter, longer where a minor or a potential claim is involved, ensure your EHR can export a complete chart including telehealth documentation, and never let a departing clinician take the only copy of anything.

The Build-It Checklist: What You Must Produce on Demand

If an inspector, a plaintiff's lawyer or a buyer asked for your GLP-1 programme file tomorrow, this is what should be in it. Every item traces to something above.

1. Written GLP-1 SOP, signed and dated by the medical director, covering eligibility, contraindications, titration, monitoring, adverse events, stop criteria and off-ramping
2. Evaluation template capturing history, verified measurements, comorbidities, screening and the treatment plan
3. Contraindication screening instrument, with space for documented negatives, plus a re-screening prompt at each review
4. Consent set — GLP-1 informed consent, off-label consent, telehealth consent, HIPAA acknowledgement, photography and financial consents
5. Prescriber credentials file — New York licences, NP practice agreement and protocols or 3,600-hour collaborative relationship documentation, PA supervision arrangements, specialty certifications
6. Order templates proving patient-specific orders, plus the administration protocol that operates beneath them
7. Nursing competency records for every clinician who administers, with training dates
8. Pharmacy and supplier file — New York registration or nonresident establishment registration numbers, verified and dated, product documentation and cold-chain terms
9. E-prescribing evidence, or a documented basis for whichever 10 NYCRR §80.64 exception you rely on
10. Follow-up and recall workflow showing scheduled contacts, with a report of patients overdue for review
11. Adverse event log across the programme, with MedWatch submission records
12. Advertising review file — approved claims, testimonial authorisations and disclaimers, with a named reviewer
13. Corporate documents — PC or PLLC formation, the management services agreement with its fixed fee schedule, and medical director agreement
14. Records retention policy naming custodian, retention period and the patient access procedure under PHL §18

Work through it honestly and most practices find two or three gaps. Fixing them is a week of administrative work; discovering them mid-investigation is not. The broader version of this exercise, across every service a New York med spa offers, is our New York med spa compliance checklist, and the MedSpa Standards SOP library covers the underlying documents if you would rather adapt templates than draft from scratch.

Disclaimer: This article is for educational purposes only and does not constitute legal or medical advice. GLP-1 prescribing involves federal and state regulatory considerations that change frequently. Verify current FDA shortage status and consult with a New York healthcare attorney and your medical director before establishing or modifying a weight-loss program.