New York Med Spa SOPs: What Your Manual Must Include

New York is the largest aesthetic market in the country with no medical spa statute in it. There is nothing to register, no attestation to file, no renewal date to diarise. Owners arriving from Florida or Tennessee often read that as a lighter regime, and for about a year they are usually right, because nothing arrives in the post to tell them otherwise.

What arrives instead is a question, always in the same form: which licence authorised this, and where is the record proving it. New York regulates people rather than premises, so every duty attaches to a licensee and every defence is documentary. That is the layer this guide covers. Writing a procedure well is the subject of our complete guide to med spa standard operating procedures; assembling and governing the binder itself is handled in our medical spa policies and procedures manual guide.

Does New York Require a Med Spa to Have Written SOPs?

No — and unusually, there is no inspectorate with a checklist a manual could be graded against, because New York never created a med spa licence to inspect. What exists instead is a set of duties landing on individual licensees, each producing a document whether or not anyone files it in a binder. The manual is not the obligation; it is the only practical way to keep the obligations in one place.

Why no New York provision names an SOP manual

Manual mandates appear in states that decided to license facilities. New York's instrument is the professional licence, granted under Education Law Title VIII and held by a person, so obligations attach to the physician, the nurse practitioner, the registered nurse and the esthetician individually. A limited liability company cannot commit professional misconduct; its shareholders can. That is why the enforceable questions here are always about who held which licence and what they recorded, and why our New York regulations profile describes the framework as general practice-of-medicine law rather than med spa law.

The New York documents that genuinely have to exist

Four, before any policy you choose to write. The entity paperwork — the certificate of authority from the Office of the Professions and the formation filings behind the PC or PLLC. The patient record, which Education Law § 6530(32) requires to accurately reflect each patient's evaluation and treatment. The instrument behind every act performed by someone other than the prescriber: an RN executing a regimen under § 6902(1), or a nurse practitioner working under the practice agreement § 6902(3) requires below 3,600 hours. And the compensation arrangement, because fee-splitting is misconduct in itself.

Which New York Agency Actually Regulates Your Med Spa, and Why Is It Not a Medical Board?

Three agencies share the work, and none is a medical board in the sense the phrase carries elsewhere — a standalone body that licenses physicians, writes practice rules and disciplines licensees under one roof. New York split those functions across the State Education Department, the Department of Health and the Department of State. The names matter operationally: each has its own inspection posture and its own consequence.

The Office of the Professions, and what "no medical board" really means

Licensure, registration and scope of practice for some fifty professions, medicine and nursing among them, sit with the State Education Department's Office of the Professions under Education Law Title VIII; the unprofessional conduct rules binding every licensee are the Board of Regents' rules at 8 NYCRR Part 29. There is a State Board for Medicine, but it advises within that departmental structure rather than operating as an independent licensing board — and it is the body whose 2025 determination on energy devices tells you where a laser crosses into medicine. Any document telling you to check with "the New York medical board" was not written for New York.

The exception that catches everyone: OPMC and physician discipline

Here is the twist separating a New York-literate manual from an imported one. The Office of the Professions licenses physicians but does not discipline them. Physician, physician assistant and specialist assistant misconduct is investigated by the Office of Professional Medical Conduct inside the Department of Health, with available sanctions set out at Public Health Law § 230-a; discipline for nurses, nurse practitioners and most other licensees stays with the Office of the Professions. One incident, two disciplinary tracks in parallel — which is why an incident policy should name both destinations rather than "the board".

The Department of State, appearance enhancement and the 2026 task force

The third agency licenses nobody medical. Estheticians, cosmetologists and nail specialists hold appearance enhancement licences issued by the Department of State under General Business Law Article 27, and the Department publishes a med spa procedure licensure chart mapping common treatments to the licence each needs. Since January 2026 it has also led a multi-agency inspection task force with the Department of Health, the Education Department, OPMC and New York City's oversight office; its first published wave reported 223 inspections and 87 citations, covered in our New York regulatory changes guide.

Corporate practice of medicine, and the documents entity structure generates

New York enforces the corporate practice doctrine strictly and grants no med spa exception, so the clinical entity must be a professional service corporation or PLLC owned by licensed physicians: Business Corporation Law § 1503 requires the incorporation certificate to name each shareholder with a certificate from the licensing authority attached. Our New York med spa ownership guide works that analysis through. The documentation point is contained: keep the certificate of authority, the formation filings, the current shareholder list and any management services agreement, with the clinical chain of command written separately from the commercial one.

What Must a New York Med Spa Document About Delegation and Supervision?

Enough that the chart shows, unaided, which licensed person evaluated the patient, which instrument authorised the person who treated them, and that the second never exceeded the first. New York gives each licence a different instrument and does not let supervision manufacture authority a licence lacks. The workable unit is the service line: for every menu item, name the licence that may perform it, the licence that must authorise it, and the record proving both.

The evaluation New York declines to call a good-faith examination

No New York statute uses that phrase, and anyone quoting you a New York good-faith examination rule is repeating something that does not exist. The duty arrives from two directions instead. Treating or prescribing without an adequate evaluation is misconduct under Education Law § 6530 — negligence at subdivisions (3) and (4), inaccurate records at (32) — and the State Board for Medicine's energy-device determination expressly calls for assessment of the patient before, during and after the procedure. The chart is therefore the whole defence: who evaluated, what was found, what was ordered, and under whose signature.

The RN order under Education Law § 6902(1)

A registered nurse may execute a medical regimen prescribed by an authorised prescriber, and the same subdivision adds the line deciding most New York cases: a nursing regimen shall not vary any existing medical regimen. So the order must be patient-specific and must precede the treatment, the nurse may not select the product or adjust the dose, and a standing instruction covering "all filler patients" is not an order. Our New York injector scope guide works that boundary treatment by treatment.

The nurse practitioner file, above and below 3,600 hours

New York is one of the few states where a single licence produces two entirely different documentation burdens. Below 3,600 hours of qualifying practice, Education Law § 6902(3) requires a written practice agreement and written protocols with a collaborating physician, with periodic peer review of records that our own research puts at not less than every three months. Above the threshold, under § 6902(3)(b) as made permanent in 2022, the agreement requirement falls away. So the file holds the dated hours attestation plus whichever instrument currently applies, and a diary entry for the crossing. Our 3,600-hour rule guide covers it in full.

The physician assistant file, and the supervision New York calls continuous

A physician assistant performs medical services delegated by a supervising physician, and only services inside that physician's own scope. Education Law § 6542(3) states that supervision shall be continuous but shall not be construed as necessarily requiring the physical presence of the supervising physician when the services are performed, and Article 131-B limits a private-practice physician to six PAs. Record those three facts: the named supervising physician, the delegated service list checked against that physician's practice, and the count. "Continuous" is the word doing the work — it describes a real review pattern, and an empty review log turns it into an argument.

Energy devices, the basement-membrane line and the service matrix

The State Board for Medicine determined in 2025 that using any energy device or laser affecting the basement membrane or deeper tissue to treat a physical condition is the practice of medicine under Education Law § 6521. Such treatment must be performed by, or under the order of, a physician, PA or nurse practitioner, and among non-physician staff only a registered nurse may execute those orders. Laser and IPL hair removal is expressly carved out; our New York laser safety guide covers the device classes.

What Must Be Documented About the Medical Director Relationship in New York?

Everything except the title, because New York creates no medical director role for a med spa and no provision requires you to designate one. Accountability arrives structurally: medical services run through a physician-owned entity, so an owning or supervising physician is already answerable and OPMC is already the forum. In a state that registers nothing, the only proof your physician was genuinely responsible is what they did and you recorded. Our New York medical director requirements guide and the companion medical director agreement guide cover the drafting; what follows is the file.

The oversight evidence file, which is what a supervision case turns on

Alongside the agreement, the licence verification with its check date, and evidence that this physician's own scope covers what is being delegated, build the oversight record monthly and cumulatively: protocol approvals showing real revisions rather than an identical page re-signed each year, chart reviews with their sample size and findings, sign-off on each new device before it goes live, complication debriefs attended, and a visit log describing what was inspected. Because supervision here is judged after the event, the less a physician did the stronger a case against them becomes — and a file assembled retrospectively looks exactly like one.

Compensation, fee-splitting, and what the file must show

This is where New York manuals most often contain an unlawful arrangement described in cheerful language. Education Law § 6530(19) makes it misconduct for a physician to permit anyone to share in fees for professional services other than a partner, employee, associate, subcontractor or consultant authorised to practise medicine; § 6509-a applies the parallel prohibition across the other health professions, and Public Health Law § 238-a adds a further layer. A percentage of collections, a per-treatment payment or a per-patient management fee is the classic defect. Keep a flat retainer or a documented hourly rate, the fair-market-value basis you set it on, and the time records if the rate is hourly.

What Patient-Record and Consent Documentation Does New York Require, and What Is the Retention Period?

At least six years on the sources available to us, from Education Law § 6530(32) for physicians and 8 NYCRR § 29.2(a)(3) for the other health professions — with a minor's record kept at least six years and until one year after that patient turns 18. We could not read either text in the original, and say so rather than let a number travel unchallenged. Consent contents, by contrast, New York leaves to the standard of care, which does not make them optional.

The retention answer, and exactly how far we could verify it

Education Law § 6530(32) makes it professional misconduct for a physician to fail to maintain a record for each patient accurately reflecting that patient's evaluation and treatment; 8 NYCRR § 29.2(a)(3), within the Board of Regents' unprofessional conduct rules, carries the same obligation for the non-physician health professions. Our own vetted New York research puts the floor at six years from the last entry, with the minor extension above. The honest accounting: six years is consistent across our research and the secondary sources we could reach, and it is the number we would write into a manual today — but this network cannot open New York state domains, so we could not confirm the subsection structure or the precise formulation of the minor extension against the rule text.

What a New York aesthetic chart has to contain

There is no state chart template, so build it from the duties that produce it. Per encounter: the evaluation with its finding and plan, signed by whoever performed it and identifying their licence; the patient-specific order naming product and dose, or device and parameters; the signed consent; who actually treated and under which instrument; lot number and expiry, or device settings; post-treatment instructions given; and any complication with what was done about it. Photographs belong to the record, with the same retention and release rules as the notes.

Consent, photography and the telehealth variant

We are aware of no New York statute prescribing the contents of a med spa consent form and will not invent one. Ordinary informed-consent law applies: procedure-specific written consent covering risks, benefits and alternatives including declining, one form per service, naming the product and saying where a use is off-label. Marketing use of images needs separate, dated, revocable authorisation. For remote encounters, note what Public Health Law Article 29-G does not do — § 2999-cc defines telemedicine as synchronous two-way audio-visual communication. Record the modality, how identity was verified, and what could not be assessed remotely.

What Must Be Documented About Drug Handling, Storage and Disposal?

Almost none of this is New York-specific, and a manual earns credibility by saying so — but two things here are genuinely local: counterfeit and expired product is a leading inspection finding in this state, and a prescription monitoring check belongs in any controlled-substance record. Most aesthetic binders invert the emphasis, padding the voluntary pages and thinning the ones an inspector opens first.

Sourcing, counterfeits and the purchase record

The 2026 inspection wave found expired neuromodulator vials, expired filler and packaging inconsistent with legitimate supply chains, and counterfeit product draws a citation on sight. That makes the purchase record a compliance document rather than an accounting one. Buy only through manufacturer-authorised distributors, keep the invoices with the products they cover, and record the verification step — who confirmed the distributor's authorisation, and when.

Controlled substances, the monitoring check, and what we could not source

New York operates a prescription monitoring registry under the I-STOP framework, and our own New York compliance checklist treats a documented registry check as a required step for each controlled-substance prescription. We could not verify the section number of the consultation statute from this network and will not print one we have not read — put that to counsel before writing a citation into a policy. The policy itself is unaffected: name who performs the check, when it happens relative to prescribing, and where in the chart it is recorded.

Storage, cold chain, lot tracking and disposal

Write the manufacturer's actual temperature range for each product rather than a general instruction to refrigerate, assign the daily reading to a named person, and state the excursion rule concretely — what temperature for what duration triggers quarantine, who decides disposition, where that is recorded. Maintain a lot log running in both directions, patient to product and recalled lot to patients, because a recall arrives as a lot number and nothing else. Compounded products need their own page, particularly in weight management, where the 503A and 503B distinction now decides what may lawfully be dispensed — our New York GLP-1 compliance guide works through that analysis.

What Training and Competency Records Should a New York Med Spa Keep Per Role?

New York mandates far less here than most manuals claim — no device certification requirement, no injectable competency rule, no aesthetic training standard — yet the credentialing file is the document inspectors have most often asked for and practices have most often failed to produce. The honest version of this section is also the more useful one.

What is citable, and what is expectation

The citable part is licensure itself: every clinical person must hold a current New York licence and registration authorising the specific procedures they perform, and each profession sets its own continuing education, which the practice should verify rather than assume. Beyond that we can point to no New York provision prescribing device certification, injectable sign-off, annual reassessment or emergency drills for an aesthetic practice. Each is worth doing, so include them under your own authority with a sentence saying they are practice standard rather than state mandate.

What each licence file should hold

Give every person the same spine: current licence and registration with verification date and expiry; the delegation, order or agreement instrument they work under; scope boundaries written in the negative as well as the positive; device and product training evidence; competency sign-offs; continuing education; and a signed acknowledgement of the current manual version. In New York the negative boundary carries unusual weight — an esthetician's file should say on its face that the appearance enhancement licence authorises no injections, no microneedling and no dermal-depth energy work.

What a competency record has to prove, and why the binder must be producible

A certificate shows someone attended something. A competency record shows that this person, on this device, in this practice, was watched performing the procedure to standard by somebody qualified to judge, on a stated date — so name the procedure, the verifier, the outcome and the next review, and set review triggers by event as well as by calendar. Then solve the logistics problem the task force exposed: facilities cited for credentialing failures were rarely staffed by unqualified people, they simply could not produce current verifications on the day.

What Incident and Adverse-Event Documentation Is Expected?

One hard New York reporting duty exists, and it applies to a category most med spas sit below: office-based surgery under Public Health Law § 230-d. For an injectable-and-laser practice beneath that threshold we could not establish any state-specific filing obligation, and will not assert either that one exists or that none does. What is certain is that the event will still be read — through the misconduct provisions, and through a record written before anyone knew it mattered.

The one hard duty, and who it actually applies to

Public Health Law § 230-d governs office-based surgery, which turns on the use of more than minimal sedation or anaesthesia. A practice inside that definition must hold full accreditation and report defined adverse events to the Department of Health within three business days — a patient death within thirty days, an unplanned hospital or emergency department transfer within seventy-two hours for reasons related to the procedure, and an unscheduled admission within seventy-two hours lasting longer than twenty-four hours. A subcutaneous injection does not cross that line.

What we could not establish, and the routes that apply anyway

We could not find, from a source we would rely on, any med spa-specific adverse-event filing duty below the § 230-d threshold; the sources asserting the negative were uncited commercial blogs, which is not evidence. So map the routes existing regardless of state law and frequently missed: serious adverse drug reactions to the FDA's MedWatch programme, device-related injuries through the federal device reporting pathway, and your liability carrier's notice window, usually the tightest of the three. Put the state question to New York counsel, and record the answer with its date.

The internal incident record, and the two disciplinary destinations

Design one internal form and use it every time, including for complaints involving no clinical harm. Capture the date, patient identifier, product and lot or device and settings, the clinician and the instrument authorising them, what was observed, what was done, who was notified, and the change the debrief produced. Then add the New York line: if the clinician is a physician or PA, the disciplinary forum is OPMC; if a nurse or other Education Department licensee, it is the Office of the Professions.

What Should a New York Med Spa's Emergency Protocols Cover?

The complications your own menu can actually produce, each written as a single page someone can follow while frightened — and none of it is New York law, which the manual should state rather than dress up. The state connection is indirect but real: an emergency handled badly by a delegate becomes a supervision question, and supervision questions here are decided on the facts after the event.

The complications a New York aesthetic menu generates

Write one page per credible complication rather than a general chapter nobody opens under pressure. Filler brings vascular occlusion and the visual compromise pathway, each needing a recognition description, an action sequence, hyaluronidase with its location and expiry, and an explicit transfer decision point. Any injectable or infusion brings anaphylaxis, with epinephrine, dose and location named on the page. Then the rest on the same pattern: neuromodulator spread, laser burns and ocular injury, peel complications, vasovagal syncope.

The kit, the log, and the drill that found something

Specify emergency equipment by contents, location and check schedule, with a named owner and a log recording every check: expired hyaluronidase is the aesthetic equivalent of an empty extinguisher, and the log is the only thing proving it was not. Run drills and record the date, scenario, participants, what went badly and what changed as a result; a drill with no recorded defect was not a drill. Write the transfer decision on the same page — which hospital, who calls, who stays with the patient, and who telephones the supervising physician, since a physician off the premises cannot be the plan for a time-critical complication. State plainly what the practice deliberately does not stock.

The Section-by-Section New York Med Spa SOP Manual Outline

Seven parts, each policy named, ordered so that entity and authority sit at the front — because in New York the first question is never about your binder, it is about who was licensed to do what. Adapt the rest to your practice, but keep Part 1 where it is.

Part 1 — Entity, authority and the agency map

The certificate of authority and formation filings for the PC or PLLC, the current shareholder list, and any management services agreement with the clinical chain of command written separately. Then the one-page agency map: Office of the Professions, OPMC, Department of State, and the type of matter each one takes.

Part 2 — Delegation and supervision instruments

The supervising physician agreement and the oversight evidence file. The nurse practitioner practice agreement and protocols, or the dated hours attestation replacing them. The PA delegated-service list with the named supervising physician and the count. The RN order framework. The service-by-licence matrix covering every menu item.

Part 3 — The patient record

Chart contents by service type. The evaluation policy, including the telehealth variant. Order documentation. Treatment records carrying product, lot, expiry, device parameters and performing clinician. Photography standards. Retention with the six-year floor cited and your own chosen period stated separately. Release handling under Public Health Law § 18, and chart custody on a clinician's departure or a sale.

Part 4 — Consent, privacy and communication

Service-specific consent forms with off-label disclosure. Separate revocable marketing authorisations for images. Notice of privacy practices and a named privacy officer. Breach response. Business associate agreements. Telehealth consent and identity verification. Advertising review, which must cover physician identification and the false-or-misleading prohibition at Education Law § 6530(27) — our New York advertising rules guide has the detail.

Part 5 — Drugs, devices and waste

Inventory categories and authorised-distributor sourcing with purchase records and the verification step. The compounded preparation policy. Storage, security and cold chain with logs and a written excursion rule. The controlled-substance and monitoring-check policy. Lot tracking and recall. Device maintenance records. Sharps and regulated waste contracts, and expired stock destruction.

Part 6 — Personnel, training and competency

Role definitions with scope boundaries stated positively and negatively. Licence and registration verification schedule. Orientation and manual acknowledgement. Device and product training evidence. Competency verification with named verifiers and event-based review triggers. Continuing education tracking. The producible credentialing binder.

Part 7 — Safety, emergencies, incidents and review

Emergency protocols by complication. Equipment contents, location and check logs. Drill records. Infection control, sharps handling and instrument reprocessing. The reporting map covering MedWatch, device reporting, carrier notification and § 230-d where it applies. The internal incident form and complaint log naming both disciplinary destinations. Version control for the manual itself.

How the Policies Change by Role: Physician, NP, PA, RN, LPN, Esthetician, Medical Assistant

Seven licence categories, seven authorising instruments, and two disciplinary agencies across them — so one shared staff policy will be wrong for most of the people reading it. Give each role its own page, with the negative boundary written as explicitly as the positive one.

Physician: the origin of authority and the only permitted owner

The MD or DO is where delegation begins and, under corporate practice rules, the only person who may own the clinical entity. The file carries the licence and registration with verification date, the shareholder or employment documents, and the oversight record. Note the disciplinary forum on the page: OPMC, not the Office of the Professions.

Nurse practitioner: full clinical authority, no ownership

An NP may evaluate, prescribe and inject, and above 3,600 hours may do so without a collaborative agreement. What the licence cannot do is own the PC — the point that catches many New York NP-led practices, which end up in a friendly-PC and management company structure instead. The file holds the licence, the hours attestation or the current practice agreement, and the peer-review records where the agreement applies.

Physician assistant: delegation, scope and the count

A PA performs only services delegated by a named supervising physician and falling within that physician's own scope, under supervision that is continuous without requiring physical presence. Record the supervising physician, the delegated service list, the review pattern making "continuous" true, and the count against the six-PA private-practice limit.

Registered nurse: the executor of an order, never its author

An RN administers and injects under a patient-specific order from a prescriber who evaluated the patient, and may not vary the medical regimen. State the boundary on the same page as the capability, so nobody mistakes it for a comment on skill: no evaluation, no product or dose selection, no candidacy decision, and no standing order in place of a patient-specific one.

Licensed practical nurse: a directed scope supervision does not widen

An LPN practises a directed scope under the supervision of an RN or an authorised prescriber. Practices sometimes assume a physician in the building enlarges what the licence permits; it does not, because the limit sits on the licence rather than on the supervision arrangement. Write this page mostly in the negative, and keep aesthetic injection off it.

Esthetician and cosmetologist: a different agency entirely

The page New York owners most often get wrong, because the licence comes from the Department of State under General Business Law Article 27 rather than from the Office of the Professions. The scope covers surface skin care — facials, cleansing, exfoliation, masks, superficial peels, microdermabrasion, dermaplaning — plus laser and IPL hair removal. It excludes injections, medium and deep peels, microneedling and dermal-depth energy devices. Our New York esthetician scope guide and microneedling and PRP scope guide take the treatments one by one.

Medical assistant: support only, and no delegated medical act

New York does not license medical assistants, so the role carries no independent authority and no scope of its own. The work is supervised support — rooming, vitals, documentation assistance, stock handling — and the page is almost entirely what is not assigned: no injecting, no energy device operation, no assessment, no treatment decision. Finish with the service-by-role matrix.

The Documentation Failures That Most Often Surface in New York Complaints and Inspections

New York now generates enforcement from two directions — the traditional complaint after a bad outcome, and since January 2026 the unannounced multi-agency inspection — and the same documentary failures account for most of what both find. All of them are cheap to prevent and expensive to explain.

The procedure performed by the wrong licence

The most-cited category in the 2026 wave was unlawful practice of medicine: appearance enhancement licensees or unlicensed staff performing treatments requiring a medical licence under Education Law § 6521. It is a service menu that outgrew the staffing model, with nobody re-auditing licence against treatment. The prevention is the service-by-licence matrix, re-checked against the Department of State's procedure chart whenever a treatment is added — and note that § 6512 makes unauthorised practice, and aiding it, a class E felony rather than a fine.

The credentialing binder nobody could produce

Facilities were cited for being unable to show current licence verifications for clinical staff on the day of the visit — the purest paperwork failure on the list, since the qualifications existed and only the evidence was missing. The same pattern applies to product: no invoice tying a vial to an authorised distributor, and no lot log, leaves you unable to evidence good product rather than merely unable to find a form.

The medical director who is a signature

A physician who signed an agreement, took a monthly fee, and never approved a protocol, reviewed a chart or saw the menu is exactly the arrangement OPMC treats as ceding clinical control — and the exposure lands on that physician's own licence, with the corporate structure offering no shelter. The remedy is not better contract language but a dated record of the physician doing things. Our New York regulatory profile sets that expectation out alongside the other dimensions.

What New York Requires, and What Is Only Best Practice

Keep the separation visible in the manual, ideally as a column in the policy index. It is the fastest way to show a reader the document was written by somebody who actually checked.

Requirements we can cite: medical services delivered through a physician-owned professional corporation or PLLC, with the incorporation certificate naming each shareholder and a certificate from the licensing authority attached (Business Corporation Law §§ 1503 and 1507); a record for each patient accurately reflecting evaluation and treatment (Education Law § 6530(32); 8 NYCRR § 29.2(a)(3) for the other health professions), retained at least six years, and for a minor at least six years and until one year after that patient turns 18; patient access to records (Public Health Law § 18); a registered nurse acting only by executing a prescriber's regimen, without varying it (§ 6902(1)); a written practice agreement and protocols for a nurse practitioner below 3,600 hours, with independent practice above it (§ 6902(3) and (3)(b)); PA services delegated within the supervising physician's own scope, supervision continuous but not requiring physical presence, with a six-PA limit in private practice (§ 6542(3); Article 131-B); dermal-depth energy and laser treatment as the practice of medicine (§ 6521, with the State Board for Medicine's 2025 determination); appearance enhancement licensure and its scope limits (General Business Law Article 27); no fee-splitting (§§ 6530(19) and 6509-a; Public Health Law § 238-a); advertising that is not false or misleading (§ 6530(27); 8 NYCRR § 29.1); accreditation and three-business-day adverse event reporting for office-based surgery (Public Health Law § 230-d); and unauthorised practice, or aiding it, as a class E felony (§ 6512).

Best practice, not a New York mandate: an SOP manual as such; a designated medical director title; a written delegation matrix; consent contents beyond ordinary informed-consent law; competency verification schedules; device-specific training certification; emergency kit contents and drill schedules; cold chain logging; lot tracking and recall procedure; an internal incident form and complaint log; retention beyond the six-year floor; any adverse-event filing below the § 230-d threshold, which we could neither confirm nor rule out. None of these belongs in your binder behind the words "New York requires".

Summary: The New York Documentation Layer in One Page

New York will never ask to see your manual. It has no med spa licence to suspend, no register to fall off, and no inspector whose job is to grade a binder as a binder. What it has is a framework in which every duty belongs to a person, every person answers to one of two disciplinary bodies, and the only thing standing between a licensee and a finding is a record made before anyone was looking.

So build in that order. Entity and authority first. Make the evaluation a real encounter with a real record, and put a patient-specific order behind every delegated act. Cite the section beside every claim and mark everything else as practice standard — an over-claimed manual is worse than a short one, because it teaches staff rules that do not exist. Then take the unsettled parts to a New York healthcare attorney. More guides sit on our New York med spa compliance hub, and the step-by-step version is our guide to opening a med spa in New York.

This guide is for informational purposes only and does not constitute legal or medical advice. New York aesthetic practices are regulated through the State Education Department's Office of the Professions and the State Board for Medicine, the Department of Health's Office of Professional Medical Conduct, and the Department of State's Division of Licensing Services. Citations here were assembled from our own vetted New York research and from secondary legal sources; they could not be checked against New York state websites from the network used to prepare this page. Consult a New York healthcare attorney before applying this to your practice.

Frequently Asked Questions