Apr 1, 2026 Updated Aug 26, 2026 26 min read

New York Med Spa Medical Director Requirements 2026

Who qualifies, what duties attach, what has to be documented, and what liability follows — with the provisions that actually create each requirement.

Quick Answer

A New York med spa offering anything that meets the Education Law §6521 definition of practising medicine must deliver it through a New York-licensed physician — in practice, a medical director who is an MD or DO with an active licence and current biennial registration. Nurse practitioners, physician assistants and out-of-state physicians cannot hold the role. New York issues no med spa licence, registers no medical directors, and sets no supervision ratio or chart-review percentage; the Office of Professional Medical Conduct judges the arrangement after the fact under Education Law §6530(11) and §6530(25), inside the strictest corporate practice of medicine doctrine in the country.

The medical director question gets asked as a hiring question — who do I need, what do I pay them — when it is really a structural one. In New York the physician, and the professional entity the physician owns, is the medical practice. The brand, the lease, the marketing and the management company are arranged around that fact or are arranged illegally.

That stopped being theoretical in January 2026. The New York Department of State inspected 223 businesses promoting or providing med spa services and cited 87 of them — roughly two in five — for potential violations including the unlawful practice of medicine. Investigators reported expired and suspected counterfeit drugs, controlled substances, unsanitary conditions, used needles and unlicensed individuals performing medical procedures. Outcomes so far include fines, suspensions and revocations.

Does a New York Med Spa Need a Medical Director?

Yes, if the menu includes medicine — and in 2026 almost every med spa menu does.

The Test Is the Service, Not the Signage

Education Law §6521 defines the practice of medicine as "diagnosing, treating, operating or prescribing for any human disease, pain, injury, deformity or physical condition." That definition does all the work: it asks whether a physical condition was treated, not what the business calls itself.

Neuromodulators and fillers, energy-device treatments other than hair removal, GLP-1 weight loss, IV therapy, PRP, medical-depth peels and RF microneedling all clear that bar. All of them therefore need a New York-licensed physician at the top of the clinical structure — the person the industry calls the medical director.

What New York Does Not Require

Four things people expect to find are not there, and each absence gets misread as permission:

  • No med spa licence. No agency issues one and no statute creates one. A Department of State appearance enhancement licence authorises cosmetology and esthetics, not medicine.
  • No medical director registry. You file the director's name with nobody, and no agency approves the appointment.
  • No supervision ratio. New York caps neither the non-physicians a director may oversee nor the facilities one physician may cover. A consultant quoting a ratio is quoting another state.
  • No statutory visit frequency or chart-review percentage. Section 6530(11) requires appropriate supervision, judged on the facts of the particular practice.

The consequence is that New York regulates this role retrospectively. Nothing tells you your arrangement is acceptable, so the only protection is a contemporaneous record.

The Three Regulators You Answer To

  • The Office of Professional Medical Conduct (OPMC), inside the Department of Health, investigates and prosecutes physician misconduct under Public Health Law §230. It decides whether your director supervised or merely signed.
  • The State Education Department, Office of the Professions, licenses every regulated profession, consents to professional entity formation, and disciplines non-physician professions under the Regents rules at 8 NYCRR Part 29.
  • The Department of State licenses and inspects appearance enhancement businesses. It ran the 2026 sweep and is usually the agency that walks in unannounced.

Who Qualifies as a New York Med Spa Medical Director

An Active New York MD or DO Licence

The licence must be issued by the New York State Education Department. Nothing substitutes: not a foreign degree, not board certification, not a licence in an adjacent state. Verify it at the Office of the Professions portal rather than accepting a PDF from the physician, and keep a dated screenshot.

Current Registration — Not the Same as a Licence

This is the cheapest failure in the subject. A New York medical licence is issued for life, but the authority to practise depends on a separate registration renewed biennially, aligned to the licensee's birth month. A physician whose registration has lapsed still holds a licence and is still not authorised to practise — so every standing order they authorised is being executed under a physician who is not currently registered. Diary the expiry, ask for the registration certificate rather than the licence, re-verify annually.

Good Standing, With No Restriction or Pending Action

A licence under suspension, limitation or probation cannot anchor a med spa. Public Health Law §230-a lets the Board limit a licence "to a specified area or type of practice," and a physician limited out of supervisory work is disqualified even though the licence exists. Check the Department of Health's published disciplinary actions, and ask the candidate whether they have ever been the subject of an OPMC complaint.

Specialty and Training — What New York Does and Does Not Demand

New York issues an undifferentiated medical licence. No statute requires a med spa director to be a dermatologist, a plastic surgeon, or board certified in anything, and nothing confines a physician to the specialty of their residency — a family medicine physician may lawfully direct an injectables practice.

That is where the permissive reading stops. Education Law §6530(2) makes it misconduct to practise beyond the profession's authorised scope or with gross incompetence, and §6530(25) makes it misconduct to delegate to a person the licensee knows or should know is unqualified by training, experience or licensure. Together they mean a cross-specialty director is lawful only while genuinely competent to supervise what they supervise. The working standard is not "any MD" but an MD or DO whose documented training covers your menu — and the CME certificates, device training records and procedure logs belong in the same file as the licence.

Who Cannot Serve, and Why

  • Nurse practitioners. An NP practises nursing, not medicine. The Nurse Practitioner Modernization Act lets an NP with more than 3,600 qualifying hours work without a written practice agreement, and on 28 May 2026 that authority — due to sunset on 1 July 2026 — was extended to 1 July 2030. It is autonomy within nursing scope: it does not convert nursing into medicine, let an NP own a medical entity, or let an NP supervise the practice of medicine. Our NP 3,600-hour guide covers what it does unlock.
  • Physician assistants. A PA practises under physician supervision by definition. A licensee who must be supervised cannot be the supervisor.
  • Registered nurses and LPNs. Nursing scope includes executing a valid medical order, not writing one.
  • Estheticians and cosmetologists. Licensed by the Department of State for appearance enhancement, outside medicine.
  • Out-of-state physicians. An MD in good standing in New Jersey or Florida is, for New York purposes, unlicensed, and a facility relying on one has no qualifying director at all.
  • Chiropractors and dentists. Separate licences and scopes, neither authorising the practice of medicine.

Getting this wrong is not administrative. Education Law §6512 makes unauthorised practice of a profession — and aiding or abetting an unlicensed person to practise one — a class E felony, with a separate provision for knowingly aiding three or more unlicensed persons. A med spa with several people injecting outside their scope sits inside that second provision.

New York's Corporate Practice of Medicine Doctrine

This is where New York is stricter than almost anywhere else. Most operators reach the medical director question having already made the ownership decision, and if that decision was wrong, no agreement repairs it.

What the Doctrine Forbids

A business corporation cannot practise medicine or employ physicians to practise medicine on its behalf. The doctrine is not one statute; it is the combined effect of Education Law Title 8, which restricts practice to licensees, and Business Corporation Law Article 15, which restricts who may own and govern a professional service corporation.

Two provisions carry the weight. Business Corporation Law §1507 permits a professional service corporation to issue shares only to individuals licensed in the profession it is authorised to practise; §1508 requires directors and officers to be licensed as well. A non-physician therefore cannot hold equity in the entity that delivers medicine, sit on its board, or be its officer. There is no minority-stake exception, no non-voting-share workaround in the statute, and no de minimis threshold. The entity that bills for and delivers Botox, filler, laser resurfacing, GLP-1 or IV therapy must therefore be a physician-owned PC or PLLC: a non-physician entrepreneur, investor group, franchisor or private equity sponsor cannot own it, only everything around it.

How New York Courts Test Control — Mallela and Carothers

The doctrine has teeth because the Court of Appeals has twice held that a corporation which is physician-owned on paper but controlled by non-physicians is not entitled to be treated as a valid professional corporation. In State Farm Mutual Automobile Insurance Co. v. Mallela, 4 N.Y.3d 313 (2005), it held that insurers may withhold no-fault reimbursement for services billed by fraudulently incorporated medical corporations — entities that failed to comply with the licensing and incorporation statutes.

In Andrew Carothers, M.D., P.C. v. Progressive Insurance Co., 33 N.Y.3d 389 (2019), the Court went further. A radiologist formed a PC that subleased fully equipped MRI facilities from companies owned and controlled by a non-physician who, in substance, ran the operation. The Court held an insurer may withhold payment where there is a willful and material failure to abide by the licensing and incorporation statutes — without any finding that the corporation acted fraudulently or with fraudulent intent. Nominal physician ownership plus real non-physician control was enough.

Carothers arose in no-fault insurance, so the direct remedy is a payer remedy rather than a licensing sanction. Its significance for a cash-pay med spa is the reasoning: New York courts look past the organisational chart to who actually decides — who hires and fires clinical staff, signs the lease, controls the bank account, owns the equipment, sets prices and the treatment mix. If the honest answer is "the non-physician," the PC is a formality.

What a Management Services Organisation May Do

The MSO is the lawful way a non-physician participates in the economics. It is an ordinary business entity anyone may own, contracting with the physician-owned practice to supply non-clinical inputs at fair market value: premises, equipment, non-clinical personnel, billing administration in the practice's name, marketing, information technology, supplies and general back office.

What an MSO May Not Do

The line is control over medicine. An MSO crosses it when it:

  • Owns equity in the professional entity, or holds a board or officer position in it
  • Hires, fires, credentials or disciplines clinical staff, or sets their clinical duties
  • Selects, writes or edits treatment protocols and standing orders
  • Owns or controls the medical record, or restricts the physician's access to it
  • Sets prices so as to dictate the clinical mix, or imposes sales quotas on clinicians
  • Directs which patients are treated, with what, or how often
  • Controls the practice's bank accounts or sweeps receipts without the physician's authority
  • Holds the right to appoint a replacement physician-owner, or to force the current one out

That last defect is the most common one imported from structures drafted elsewhere: a succession arrangement letting the management company choose who owns the professional entity puts ownership in its hands in substance.

Fee-Splitting — the Second Half of the Constraint

Education Law §6530(19) makes it professional misconduct for a physician to permit any person to share in the fees for professional services, other than a partner, employee or associate in a professional firm or corporation, a professional subcontractor or consultant authorised to practise medicine, or a legally authorised trainee under supervision. Section 6530(18) separately prohibits offering, giving, soliciting or receiving any fee or other consideration to or from a third party for the referral of a patient or in connection with professional services. The parallel rule for other professions sits at 8 NYCRR §29.1(b)(4).

Two consequences. Medical director compensation cannot be a percentage of revenue, a per-procedure fee, or a bonus tied to volume or referrals — those pay a share of professional fees, and the agreement becomes the evidence. And the MSO's management fee faces the same analysis, because a fee calculated as a percentage of professional collections looks a great deal like sharing in the fees for professional services.

Here honesty matters more than confidence. New York has no statute saying in terms that percentage-based management fees are illegal. What exists is §6530(19), §6530(18), and a body of guidance and case law in which regulators and courts examine substance over form. Many New York health care lawyers therefore steer clients to flat, cost-plus or fair-market-value fees and treat percentage-of-collections arrangements as carrying real risk rather than as unlawful per se. Anyone saying this question is settled either way is overstating it.

The 2026 Legislative Picture — Pending, Not Law

New York's 2025–2026 session saw Senate Bill S8442 introduced, which would bar non-physician-owned MSOs and private equity firms from holding majority voting shares in, or controlling the board of, a professional medical corporation. As of August 2026 it is a bill, not a statute, and nothing in it binds your structure — but attention of this kind signals that friendly-PC structures assembled over the last decade are under scrutiny. For the ownership question in full, see our guide to who can own a med spa in New York.

Professional Entity Mechanics: PC, PLLC and NYSED Consent

The doctrine says who may own the practice. Business Corporation Law Article 15 and Limited Liability Company Law Article 12 say how to build it — and both routes run through the Education Department before they reach the Department of State.

PC or PLLC — How to Choose

Both are restricted to licensees and neither is more compliant than the other; the choice turns on tax treatment, owner count and profit allocation. Single-physician med spas commonly use a PLLC; multi-physician practices more often use a PC, where share mechanics and buy-sell provisions are better developed.

Education Department Consent and the Certificate of Authority

You cannot simply file a professional entity with the Department of State. BCL §1503 requires the certificate of incorporation to state the profession to be practised and to name every original shareholder, director and officer, with a certificate from the licensing authority attached certifying each is authorised to practise it. The Office of the Professions is that authority for medicine; LLC Law §1203 imposes the parallel requirement for a PLLC. Plan calendar time for it, and note that the consent is a snapshot of the owners at formation — changing ownership later is a regulated event.

Who May Hold Shares or Membership Interests

BCL §1507 restricts share issuance to licensed individuals and §1508 restricts directors and officers the same way. LLC Law §1207 restricts membership to licensed persons, and §1211 restricts the sale or assignment of a membership interest. The professional entity's cap table therefore has physicians on it and nobody else — not a non-physician spouse, not a silent investor, not the management company.

Triennial Statements and the Owner Exit Problem

The triennial statement. BCL §1514 requires a professional service corporation to furnish a statement to the licensing authority at least once every three years listing the name and residence address of each shareholder, director and officer and certifying that all are authorised to practise the profession. A missing triennial is the gap that turns a routine inquiry into a closer look at who really owns the entity.

Death or disqualification of an owner. BCL §1510 requires the corporation to purchase or redeem a shareholder's shares on death or disqualification — within six months after the appointment of the executor, administrator or other legal representative of the estate, or within six months after the disqualification, at book value as of the end of the month immediately preceding. If it fails to, a successful plaintiff suing for the purchase price is also awarded reasonable attorneys' fees and costs. That converts the death of a physician-owner into a corporate deadline with a fixed clock and a fee-shifting penalty — so if your med spa has one physician on its cap table, ask who buys the shares, and with what money.

The Medical Director's Duties, Duty by Duty

New York publishes no duty list for med spa medical directors. It publishes a misconduct standard — §6530(11) for failing to exercise appropriate supervision over persons authorised to practise only under the licensee's supervision, and for permitting, aiding or abetting an unlicensed person to perform activities requiring a licence; and §6530(25) for delegating to someone unqualified by training, experience or licensure. The duties below are what discharging that standard looks like, and each produces an artefact.

1. Protocol Authorship and Approval

Every procedure needs a written protocol the director authored or approved: indication, patient selection criteria, contraindications, required pre-treatment assessment and consent, product and device parameters with permitted ranges, technique standard, and the response to each foreseeable complication. Approval means the director read it, changed what needed changing, and signed and dated it under their own name and licence number. A vendor protocol nobody opened is not approved, and one approved by a previous director is not this director's.

2. Standing Orders for Non-Physician Staff

The standing order is what makes it lawful for an RN to draw up and inject a prescription product without the physician present for each patient. New York prescribes no standing-order content for aesthetic practice by statute or regulation — worth saying plainly rather than citing a rule that does not exist; what follows is derived from what §6530(11) and §6530(25) require the physician to have decided. An order that holds up identifies the authorising physician by name and New York licence number; names the specific drug, product or device; defines the patient population and exclusion criteria; states permitted dose, concentration or device-setting ranges; names who may execute it, by licence type and by identified individual whose competency the director verified; states an expiry or review date; and carries a signature and date. Two failure modes recur: the perpetual order nobody has re-signed in three years, and the order naming a licence type rather than a person whose competence was assessed, which leaves §6530(25) wide open.

3. The Patient Evaluation Before Treatment

The industry calls this the good faith exam. New York has no statute or regulation using that phrase for aesthetic medicine, and no codified New York good-faith-exam standard exists. Anyone selling you a "New York GFE requirement" is describing a norm borrowed from other states.

What New York does have creates the duty anyway. Treating a physical condition is the practice of medicine under §6521, so the patient must be evaluated by someone authorised to evaluate and to authorise treatment, and §6530(32) makes it misconduct to fail to maintain a record accurately reflecting that evaluation. Where a controlled substance is involved, 10 NYCRR §80.63 requires an in-person medical evaluation by the prescribing practitioner before the prescription issues — which reaches phentermine but not semaglutide or tirzepatide, since those are not controlled substances. A weight-loss practice running both through one telehealth intake is applying a single standard to two legal regimes; our New York GLP-1 compliance guide covers that side. The director decides in writing who performs the evaluation for each service — physician, PA under supervision, or NP within nursing scope. An RN may not perform the evaluation that authorises treatment; an esthetician certainly may not.

4. Delegation Decisions and Competency Sign-Off

Most directors treat delegation as a policy; New York treats it as an individual judgement. Section 6530(25) asks whether the licensee knew that this person was unqualified, which no job title answers. The workable process is a competency file per clinician: dated licence verification, documented device training, a supervised-case log, and a dated authorisation naming which procedures that individual may perform. The boundaries are set by law, not by the practice — see our guides to who can inject Botox in New York and the New York esthetician skin scope.

5. Chart Review

There is no New York chart-review percentage, so the director sets one in writing and then meets it — the writing plus the meeting is the entire defence. A defensible baseline: every chart involving a complication; the first several cases for any newly authorised clinician; first-time GLP-1 or hormone starts; and a fixed monthly sample of routine charts, commonly 10–25%, selected so every clinician appears. What makes it evidence is specificity — date, clinicians reviewed, chart identifiers, findings, and what was fed back to whom.

6. Adverse-Event Review

Every complication gets a review with the director's name on it: what happened, contributing factors, whether the protocol was followed and whether it was adequate, what changed, who was told. Patterns matter more than incidents — three bruising complaints against one injector in a quarter is a supervision finding waiting to happen.

If the practice performs office-based surgery within the meaning of Public Health Law §230-d, that review sits on top of a hard reporting duty: adverse events go to the Department of Health's patient safety centre within three business days. Reportable events include patient death within thirty days, an unplanned hospital or emergency department transfer within seventy-two hours for reasons related to the surgery, and an unscheduled admission within seventy-two hours lasting longer than twenty-four hours. Section 230-d also requires the setting to hold full accreditation. Most injectable-and-laser med spas sit below that threshold because they use no anaesthesia beyond minimal sedation — but adding sedation crosses into that regime, and that is a decision the director makes in writing before the service launches.

7. Emergency Availability and Response Time

New York sets no response-time standard, so the director sets one the practice can prove it met: reachable within a defined interval — fifteen minutes by phone is a common commitment — during all operating hours, with a named covering physician carrying the same obligation when the director is away. The director also owns site preparedness: current vascular occlusion and anaphylaxis protocols, hyaluronidase and epinephrine in date and in a known location, a documented drill cadence, and staff who can name the escalation path without looking it up — because after an occlusion the first three questions are what was on the shelf, who knew where it was, and how fast the physician was reached. Our emergency protocols kit covers the clinical documents behind that.

8. Drug and Device Oversight

The director owns the product chain: purchase from licensed sources; compounded preparations from a compliant 503A or 503B facility with paperwork retained; storage temperature, expiry monitoring and lot tracking; reconstitution and labelling per protocol; documented disposal. The January 2026 Department of State findings — expired and suspected counterfeit drugs, controlled substances on site, used needles — are all failures of this duty, and every one is visible in a fifteen-minute walkthrough. On the device side, the New York State Board for Medicine treats energy-device treatment as the practice of medicine — laser skin rejuvenation, tattoo removal, lesion removal and spider vein removal must be performed by or on the order of a physician, PA or NP. Laser hair removal is the exception the Department did not adopt, which is why appearance enhancement licensees may provide it and nothing else with a laser or IPL. Device selection, permitted settings, maintenance records and operator authorisation are therefore the director's decisions, not the manufacturer's; our New York laser safety guide and microneedling and PRP scope guide cover where those lines fall.

9. Training Sign-Off

The director defines what training is required before a clinician touches a modality, verifies it happened, and signs the record. Vendor certificates are an input, not a substitute — a manufacturer certifies familiarity with a device, not competence in a patient. Set an annual minimum too: emergency refresher, infection control, modality updates, and re-verification of every licence on staff.

10. Annual Policy and Protocol Review

Every protocol, standing order and clinical policy is reviewed at least annually, plus on any trigger: new device, new product, new clinician, change in law, or an adverse event that exposed a gap. Version-control them — version number, effective date, review date, director's signature — so anyone can tell which version was in force on the day of a given treatment. A stack of undated protocols cannot answer that question, and it gets asked more often than operators expect.

Need the supervision protocols, delegation forms and review logs behind these duties?

Our Operations & Compliance Kit includes medical director supervision protocols, delegation and competency forms, chart-review and site-visit logs, and the documentation set described in this guide — ready to customise for a New York practice.

View Operations Kit

What Reasonable Supervision Means in Practice

What the Statute Says, and What It Leaves Open

Education Law §6530(11) makes it misconduct to fail to exercise appropriate supervision. No frequency, ratio, percentage or checklist is attached to that word, and the omission is deliberate: it lets OPMC evaluate each arrangement against the risk of the particular practice. Supervision adequate for a one-room practice doing three neuromodulator appointments a day is not adequate for four locations running lasers, GLP-1 and IV therapy with twelve clinicians. It is appropriate when the director's involvement is proportionate to the risk delegated and the practice can show it: involvement without a record is unprovable, and a record without involvement documents a claim the facts will contradict.

Is Physical Presence Required?

For a general med spa, no — New York imposes no across-the-board requirement that the director be present while delegated treatments are performed, and claims to the contrary usually import another state's supervision tiers. Two qualifications keep that from being a licence to stay away: the standard is adequacy for the task delegated, so a procedure whose foreseeable complications need immediate physician intervention is not appropriately delegated to a remote-only arrangement; and a practice performing office-based surgery under §230-d is in a different regime entirely. Presence is not a legal minimum, but a dated visit log describing what was inspected — med room, sharps handling, consents, charts, a live observation — is the most legible evidence a director can generate.

How a Remote or Fractional Director Is Judged After an Incident

Nobody assesses supervision in the abstract. It starts with an injury, a complaint or an inspection finding and works backwards: who performed the treatment, were they authorised and by whom, what protocol governed it, who approved it and when, was it followed, had the patient been evaluated and by whom, when did the director last review this clinician's charts, when did they last visit, and how fast were they reached. A fractional director who answers all of that from a dated file is defensible even if they were two hundred miles away. A director who cannot is in trouble regardless of how often they were in the building, because the file is the only version of events that exists.

What the Job Takes Month to Month — and What It Costs

A Realistic Cadence

  • Monthly: the defined chart-review sample completed and written up; adverse-event log reviewed; a site visit with a dated note; new competency items signed
  • Quarterly: licence and registration re-verification for all clinical staff; med room inspection; emergency drill; complication trend review
  • Annually: every protocol and standing order re-read, re-signed and re-dated; policy set reviewed; website and menu checked against what staff can lawfully deliver; malpractice and entity documents refreshed
  • On trigger: new device, product or clinician, a change in law, or any adverse event — protocol work before the service runs

For a single site that typically lands between four and twelve hours a month, weighted to the higher end early in an engagement. A director quoting one hour a month is quoting for a role they do not intend to perform.

Compensation — the Short Version

New York part-time engagements price above the national range, with New York City and its metro at the top and upstate markets materially lower. Rather than restate the numbers, we keep them in one place: our consolidated medical director cost and agreement hub carries current market rates and the compensation structures that work, and our New York medical director agreement guide handles the drafting questions this page deliberately leaves alone. The requirements point that belongs here: whatever the number, it cannot be a share of revenue, a per-procedure fee, or a volume or referral bonus. Education Law §6530(19) and §6530(18) put those on the wrong side of the line, and unlike much of this subject, that part is not ambiguous.

The Evidence File That Proves the Director Is Doing the Job

The Documents

  1. The signed medical director agreement, current, naming the facilities covered and the term
  2. Licence verification and current biennial registration for the director, dated, plus a malpractice certificate showing the policy responds to medical director services
  3. Entity documents: certificate of incorporation or articles of organisation, the Education Department consent, and the latest triennial statement
  4. Treatment protocols, one per service, signed and dated by the current director with a version and review date
  5. Standing orders, current, naming the authorising physician, the authorised individuals and an expiry date
  6. Chart review logs, monthly, naming charts, clinicians, findings and feedback
  7. Site visit records, dated, describing what was inspected
  8. Competency and delegation files, one per clinician, with licence verification, training evidence and dated authorisations
  9. The adverse event log and the director's review note for each entry
  10. Med room records: purchase sources, compounding documentation, temperature and expiry logs, disposal records, and DEA registration if controlled substances are stocked

What Makes an Artefact Count

Named. "Reviewed by MD" is not a review. The director's name and licence number belong on anything they approved, so a reader can tell which physician stood behind which decision.

Dated. An undated protocol cannot be matched to a treatment, so it cannot exonerate anyone.

Contemporaneous. Records assembled after a complaint arrives are worse than missing ones — sequencing and staff recollection give it away, and the finding shifts from a supervision failure to a candour problem.

What Investigators Ask For First

The Department of State Inspection

This one arrives unannounced and is about the business and its people. Expect, roughly in order: what services are advertised; who is on site and what licence does each hold; who performed the treatment in progress; where is the med room; where are the sharps; and who is the supervising physician.

The OPMC Path

An OPMC matter usually begins with a complaint — from a patient, a competitor, a former employee or another agency — reviewed by the office's investigative and medical staff. Matters raising possible misconduct go to an investigator, with medical coordinators supplying clinical guidance, and complainants, the physician and others are interviewed. If the investigation develops sufficient evidence the case goes to an investigation committee drawn from the Board for Professional Medical Conduct — two physicians and one lay member. If that committee finds evidence suggesting misconduct, charges are filed and a disciplinary hearing follows. Either side may appeal to the Administrative Review Board, three physicians and two lay members, which decides within forty-five days after briefs are filed.

The document requests in a supervision matter are predictable, in this order: the medical director agreement; the protocols and standing orders for the procedure at issue, with signature dates; the patient's complete chart including evaluation and consent; the treating clinician's licence and competency file; chart review logs covering that clinician; site visit records; the adverse event log and the director's review; the staff roster with licences; and the advertising in force at the time. That is the evidence file above, requested one item at a time. A practice that built it answers in an afternoon; a practice that did not spends weeks explaining each gap, and every gap reads the same way.

The Penalties Behind It

Public Health Law §230-a sets out what the Board may impose: censure and reprimand; suspension wholly or partially, for a fixed period or until retraining, treatment or compliance with a board order is complete; limitation of the licence to a specified area or type of practice; revocation; annulment of the licence or registration; a fine not to exceed ten thousand dollars upon each specification of charges; and up to five hundred hours of public service. The phrase to sit with is "upon each specification of charges" — supervision cases are rarely one specification, and fine exposure scales with them.

Free Download — No Credit Card

Get the Free Med Spa Compliance Checklist

A printable checklist of every SOP category, emergency protocol, and record your practice needs to pass a state board inspection. Enter your email and we'll send it over.

Join 200+ med spa professionals. Unsubscribe anytime.

Liability: Personal, Entity, and Insurance

Personal Exposure for the Director

Three exposures run at once. The licence: an OPMC matter puts the physician's own ability to practise at issue under §230-a, and supervision findings under §6530(11) and delegation findings under §6530(25) are ordinary charges. Civil: a supervising physician can be named in a malpractice action arising from a treatment they never performed, on the theory that the protocol was inadequate or the supervision absent — and the chart review log is both the primary defence and the plaintiff's first discovery request. Criminal, which nobody expects: Education Law §6512 makes aiding or abetting an unlicensed person to practise a class E felony, and a physician whose name authorised a facility where unlicensed staff were injecting is inside that language.

Entity Exposure

The business faces unauthorised practice exposure of its own, Department of State enforcement against the licensed establishment, and — where the structure is defective — the Mallela and Carothers reasoning, under which a professional corporation that willfully and materially fails to abide by the licensing and incorporation statutes can be denied the benefits of valid incorporation.

How Insurance Actually Responds

Assume nothing without reading the policy. Medical director and supervisory services frequently fall outside a standard individual professional liability policy, which is written around care the physician personally renders; covering supervisory work often needs a specific endorsement. Regulatory and licensing defence — responding to an OPMC investigation — is usually a modest sublimit that exhausts quickly, and on a claims-made policy tail coverage is a term someone has to pay for. Ask the carrier in writing whether the policy responds to medical director services at a facility the physician does not own, what the licensing-defence sublimit is, and what happens to prior-acts coverage when the engagement ends. Our medical director liability guide goes deeper on coverage.

The Specific Risk of Lending Your Name

The worst arrangement in this field is the physician who signs, banks the retainer and never appears. That physician usually reasons that they were not there and therefore did nothing — and the reasoning is inverted. The absence is not a defence; it is the charge. Section 6530(11) is violated by failing to supervise, so the less the physician did, the stronger the case, while the retainer, the signed protocols and the advertising naming them establish that they accepted the responsibility. One test before signing: if a patient is injured tomorrow by a clinician I have never met, following a protocol I have not read, at a location I have not visited, can I produce a file showing I was doing this job? If not, the retainer is not compensation. It is the purchase price of the licence.

Replacing or Terminating a Medical Director

The Sequence That Works

  1. Identify the successor before you serve notice. The notice period — commonly sixty to ninety days — is your recruitment window, and it is shorter than the market takes.
  2. Have the incoming director re-sign every protocol and standing order under their own name and licence, dated on or before their effective date. Not adopted by reference — re-signed.
  3. Re-issue the competency authorisations for every clinician — §6530(25) asks what the new director knew about each person's qualifications.
  4. Handle the entity if the departing director is an owner. A death triggers the BCL §1510 six-month purchase or redemption clock at book value, with fee-shifting if the corporation misses it.
  5. Update everything public — website, menus, consent forms, directory listings. A page still naming last year's director is a live misrepresentation.
  6. Retain the outgoing director's records. Their protocols, chart reviews and visit logs are the evidence for every treatment performed during their term.

The Coverage Gap Nobody Plans For

Here is the failure: the director resigns on the fifteenth, the practice keeps treating while it looks for a replacement, and staff keep executing standing orders signed by a physician who is no longer the supervising physician. A standing order is an authorisation from a specific physician, and when that engagement ends the authorisation ends with it. Every treatment performed afterwards on that order is delegated medicine without a valid authorising physician. The rule is simple and unpopular: no qualifying director, no medical services — which is why the successor is identified before notice goes out, and why any practice depending on one physician should keep a vetted backup on file long before it needs one.

Red Flags That a Directorship Is Nominal

Whether you are hiring a director or being offered the role, these signal a decorative arrangement.

  • The fee is far below the New York market, or the physician offers to do it as a favour
  • They say site visits are not really necessary, or will not commit to a cadence in writing
  • They cover many facilities and cannot say how many charts they reviewed last month
  • Nobody can produce a chart review log, or the logs contain no chart identifiers and no findings
  • Protocols are unsigned, undated, or carry a previous director's signature
  • Standing orders name a licence type rather than named, competency-verified individuals
  • Compensation is proposed as a percentage of revenue or a per-procedure fee
  • The management company, not the physician, decides who is hired into clinical roles
  • The website names a physician the staff have never met

What New York Charges When It Decides a Directorship Was Nominal

The charges come from Education Law §6530, and one matter typically draws several:

  • §6530(11) — failing to exercise appropriate supervision, and permitting, aiding or abetting an unlicensed person to perform activities requiring a licence
  • §6530(25) — delegating professional responsibilities to a person the licensee knew or had reason to know was unqualified
  • §6530(2) — practising the profession fraudulently or beyond its authorised scope, or with gross incompetence or negligence
  • §6530(32) — failing to maintain a record for each patient accurately reflecting the evaluation and treatment
  • §6530(19) — permitting a person outside the permitted categories to share in the fees for professional services
  • §6530(18) — giving or receiving consideration for referrals or in connection with professional services

Each is a specification, and §230-a prices fines per specification — the arithmetic behind why a nominal directorship is a bad trade at any retainer.

Myths New York Operators Still Believe

"We need to get our med spa licensed." There is no New York med spa licence to get. What you need is a properly formed professional entity with Education Department consent, a qualifying physician, and — if you also provide appearance enhancement services — the Department of State establishment licence for those.

"Our NP has over 3,600 hours, so she can be the medical director." That threshold removes the written practice agreement requirement for autonomous nursing practice, and now runs to 1 July 2030. It does not make an NP a physician, let an NP own a medical entity, or authorise an NP to supervise the practice of medicine.

"Laser hair removal needs a physician order." The one myth running in the operator's favour, and still worth correcting: the Department did not adopt the medical determination for laser hair removal, which is why appearance enhancement licensees may provide it. Every other energy-device treatment is on the medical side.

For the whole New York picture, our New York med spa compliance checklist runs through every requirement in inspection order, the 2026 regulatory changes guide tracks what moved this year, our duties and responsibilities guide covers the role outside New York, and California's requirements are the closest analogue among strict corporate-practice states. Everything we publish is indexed from the MedSpa Standards homepage, and the state hub lives at our New York resource centre.

Disclaimer: This article is for educational purposes only and does not constitute legal advice. Medical director arrangements involve complex regulatory considerations specific to your practice, location, and procedure mix. Statutes, regulations and agency positions change, and several questions discussed here are genuinely unsettled in New York. Consult a New York healthcare attorney before entering into any medical director arrangement.

Frequently Asked Questions

Does a New York med spa need a medical director? +
Yes, if the menu includes anything meeting the Education Law §6521 definition of practising medicine — neuromodulators, dermal fillers, energy-device treatment other than laser hair removal, GLP-1 injections, IV therapy, PRP, or medical-depth peels. Only a licensed physician may practise medicine in New York, so a New York-licensed MD or DO must sit at the top of the clinical structure.
Who can be the medical director of a New York med spa? +
An MD or DO holding an active New York licence issued by the State Education Department, with current biennial registration and no restriction, probation or pending disciplinary action. New York issues an undifferentiated medical licence, so there is no statutory specialty or board-certification requirement — but §6530(2) and §6530(25) make competence the operative limit, so the director needs documented training covering the modalities they oversee.
Can a nurse practitioner be the medical director of a New York med spa? +
No. A nurse practitioner practises nursing, not medicine. New York's Nurse Practitioner Modernization Act lets an NP with more than 3,600 qualifying practice hours work without a written practice agreement with a physician, and on 28 May 2026 that authority was extended from its 1 July 2026 sunset to 1 July 2030 — but it is autonomy within nursing scope, and does not authorise an NP to supervise the practice of medicine or to own a medical professional entity.
Can a physician licensed in another state serve as a New York medical director? +
No. The director must hold an active New York licence issued by the New York State Education Department. Credentials and board certifications elsewhere are irrelevant to the question. A facility operating under an out-of-state physician has no qualifying medical director at all, and Education Law §6512 makes unauthorised practice — and aiding or abetting it — a class E felony.
Does New York require the medical director to be on site? +
Not as a general rule. New York imposes no across-the-board requirement that a med spa medical director be physically present while delegated treatments are performed. What Education Law §6530(11) requires is supervision appropriate to what was delegated, judged on the facts after the event — so a procedure whose foreseeable complications need immediate physician intervention is not appropriately delegated to a remote-only arrangement. Office-based surgery under Public Health Law §230-d is a separate and stricter regime.
How many charts must a New York medical director review? +
New York sets no chart-review percentage, no visit frequency and no supervision ratio. Because no number exists, the director defines the standard in writing and then has to meet it. A defensible baseline is every chart involving a complication, the first several cases for any newly authorised clinician, and a fixed monthly sample covering every clinician — logged with dates, chart identifiers and findings.
Does New York license or register med spas or medical directors? +
No. New York has no med spa licence and no medical director registry — no agency approves the appointment or keeps a list of directors. Regulators evaluate the business by what it does and who does it. The registrations that do exist are different things: the Education Department consents to formation of the professional entity, physicians renew a biennial registration, and the Department of State licenses appearance enhancement establishments.
Can a management company own a New York med spa? +
It cannot own the entity that delivers medicine. Business Corporation Law §1507 limits share issuance to licensed individuals and §1508 limits directors and officers the same way, with parallel restrictions for a PLLC under Limited Liability Company Law §1207. A management services organisation may supply premises, equipment, non-clinical staff, billing administration, marketing and IT at fair market value — but it cannot hold equity, control clinical hiring, write the protocols, or decide who owns the professional entity. In Carothers v. Progressive the Court of Appeals looked past nominal physician ownership to actual control.
What does New York charge a physician with when supervision was only on paper? +
Typically several specifications at once under Education Law §6530: subdivision 11 for failing to exercise appropriate supervision and for permitting or aiding an unlicensed person to perform licensed activities; subdivision 25 for delegating to someone unqualified by training, experience or licensure; subdivision 32 for patient records that do not reflect the evaluation and treatment; and subdivisions 18 and 19 where compensation or referral arrangements are improper. Public Health Law §230-a allows censure, suspension, limitation, revocation, annulment, and a fine of up to ten thousand dollars upon each specification of charges.

New York-Compliant Templates

Get the Operations & Compliance Kit

Our Operations & Compliance Kit includes a Medical Director Agreement template, supervision and delegation protocols for RNs/NPs/PAs, chart-review and site-visit logs, and full compliance documentation — written for New York CPOM and OPMC standards.

View Operations Kit