Ohio Med Spa Compliance Checklist (2026): The Full Guide

Ohio is one of the more attractive states in the country to open a med spa, and also one of the easiest to get wrong. It is attractive because Ohio does not enforce a corporate practice of medicine doctrine, so a nurse, an investor, or a first-time operator can own the business outright. It is easy to get wrong because the clinical work still answers to three separate state boards — the State Medical Board of Ohio, the Ohio Board of Nursing, and the Ohio Board of Pharmacy — and each one polices a different slice of what happens in your treatment rooms.

This checklist is organized around those boards and the questions their investigators ask. Two topics get top billing because they are where Ohio med spas carry the most 2026 exposure and the least clear guidance: how you source compounded weight-loss drugs and how you prescribe over telehealth. We lead with both, then work through delegation, injectable scope, laser supervision, ownership, consent, and records. Use it before you open, before you add a procedure, and before any board inquiry. For the wider picture beyond Ohio, our med spa regulations by state reference compares the frameworks side by side.

The Two Rules Ohio Regulators Ask About First

Most med spa compliance guides open with business licensing and paperwork. In Ohio in 2026, that is not where the risk concentrates. The two areas generating board attention, malpractice-carrier questions, and enforcement chatter are the sourcing of compounded weight-loss injectables and the use of telehealth to establish patients and write prescriptions. Both grew explosively during the GLP-1 boom, both sit at the intersection of the Medical Board and the Board of Pharmacy, and both changed materially in 2025 and 2026.

If you offer semaglutide, tirzepatide, or any telehealth-driven weight-loss program, read the next two sections before anything else. If your program is built on assumptions from 2023 or 2024 — when drug shortages made compounding routine and telehealth rules were looser — those assumptions are now a liability. Everything after these two sections is the foundational compliance work that every Ohio med spa needs regardless of service menu.

1. Compounded Semaglutide & Tirzepatide: Sourcing and Pharmacy Rules

This is the single fastest-changing area of med spa compliance in Ohio, and the one where a practice built on last year's rules is most exposed today. The core problem: the legal basis that made compounded GLP-1s widely available has largely disappeared, while patient demand has not.

Where compounded GLP-1 stands in 2026

During the national shortages, federal law let compounding pharmacies produce copies of semaglutide and tirzepatide. That window is closed. The FDA declared the tirzepatide shortage resolved in December 2024 and the semaglutide shortage resolved in February 2025, and the enforcement grace periods for compounding both drugs ended by around May 2025. Mass compounding of a drug that is "essentially a copy" of an approved product is no longer permitted for either a 503A pharmacy or a 503B outsourcing facility. In 2026 the FDA has gone further, proposing (April 30, 2026, with public comment closing June 29, 2026) to exclude semaglutide, tirzepatide, and liraglutide from the 503B bulks list entirely. Confirm the final status of that proposal before relying on any compounded supply.

The practical takeaway: the clean, defensible source of GLP-1 medication for an Ohio med spa in 2026 is FDA-approved branded product (Wegovy, Ozempic, Zepbound, Mounjaro). Compounded GLP-1 is now legally exposed nationwide, and is defensible only in the narrow case where there is documented individual medical necessity that the approved product cannot meet — a specific documented allergy to an inactive ingredient, or a formulation the patient genuinely needs — and the compound is not essentially a copy. High-volume compounded programs are not covered by that exception. Our deeper explainer on compounded GLP-1s and the 503A/503B distinction walks through the federal side in detail, and the oral GLP-1 landscape covers where the newer options fit.

503A vs 503B: the distinction that matters

Ohio layers its own pharmacy rules on top of the federal framework, and the 503A/503B distinction drives how you may lawfully obtain product:

The general Ohio rule is that a compounded drug must be compounded and dispensed against a patient-specific prescription. A limited quantity may be prepared in anticipation of orders based on an established prescribing pattern, but this is a narrow allowance — not authorization to keep open-ended office stock. When in doubt, route office-use product through a licensed 503B and keep a patient-specific prescription for everything else.

2. Telehealth Prescribing in Ohio

Telehealth is fully legal for Ohio med spas, and it is the engine behind most modern weight-loss programs. What trips practices up is treating telehealth as a lighter standard than in-person care. Ohio does not see it that way.

Establishing the patient relationship online

Ohio's telehealth statute, Ohio Revised Code 4743.09 (effective March 2022), together with the State Medical Board's telehealth rules, lets a physician, PA, or APRN establish a bona fide patient relationship through a telehealth examination and prescribe from it. The governing principle is that the telehealth standard of care equals the in-person standard of care. There is no separate, looser telehealth medicine.

Controlled substances and GLP-1s

Ohio's rules allow the Medical Board to require an initial in-person visit before a Schedule II controlled substance is prescribed to a new patient (with exceptions for hospice, medication-assisted treatment, certain mental-health conditions, and emergencies). This matters less for weight-loss programs than people assume, because GLP-1 drugs like semaglutide and tirzepatide are not controlled substances. That Schedule II in-person requirement generally does not bar telehealth GLP-1 prescribing. If your program touches any actual controlled substance, the federal DEA telehealth framework governs and is stricter than the GLP-1 case.

Out-of-state providers

A common shortcut in national telehealth models is to route Ohio patients to providers licensed elsewhere. In Ohio, the patient's location controls: a provider treating an Ohio patient by telehealth must hold appropriate Ohio licensure or authorization, whether a full Ohio license or the physician interstate compact. A provider cannot treat Ohio patients on another state's license alone, and cannot see patients in person in Ohio on a telehealth credential. Confirm the current out-of-state telehealth pathway with the State Medical Board, as Ohio reworked this framework in 2022.

3. Physician Oversight and the Medical Director Role

Everything a med spa does that qualifies as the practice of medicine — injectables, laser and energy treatments, microneedling, IV therapy, weight-loss prescribing — must sit under a licensed Ohio physician who owns the medical decision-making. Ohio does not have a med-spa licensing statute that names a titled "medical director," so the term is industry shorthand. But the substance behind it is real: a physician must approve protocols, delegate procedures, and provide quality oversight, and the State Medical Board of Ohio can discipline a physician who lends their name without providing genuine supervision.

For a national view of how this role is defined and paid, see our guide to med spa medical director requirements. A "paper" medical director — someone listed but absent — is the classic finding that turns a routine complaint into a disciplinary case.

4. Delegation and the Good-Faith Exam

Ohio physicians work through a delegation framework (ORC 4731.053 and the Medical Board's delegation rules). Delegation is what allows a nurse or assistant to perform a task the physician is ultimately responsible for — but it has hard limits, and it always starts with a patient evaluation.

The good-faith exam requirement

Before any treatment or prescription, Ohio requires a bona fide provider-patient relationship established through an examination. That good-faith exam must be performed by a physician, PA, or APRN (a PA or APRN acting under delegated authority). A med spa cannot skip straight to a nurse injecting a walk-in who was never evaluated. The exam can be in person or, as covered above, via telehealth that meets the in-person standard.

What a physician cannot delegate

The State Medical Board is explicit that a physician may not delegate a task outside their own training and normal practice, and may not delegate to an unlicensed person the administration of anesthesia, controlled substances, or drugs administered intravenously. That last point matters for med spas offering IV therapy: an unlicensed staffer cannot push an IV drug, full stop.

5. Who Can Inject in Ohio: Scope of Practice by Role

Injectable scope is where the Board of Nursing and the Medical Board overlap, and where staffing mistakes are most common. The short version: injecting neurotoxins and fillers is a registered-nurse-and-above function in practice, always downstream of a provider's order. For the national provider-by-provider breakdown, see who can inject Botox across the United States.

Physicians, PAs, and APRNs

Physicians inject on their own authority. Physician assistants inject under their supervision agreement and delegated authority. APRNs — certified nurse practitioners — inject within their scope under a standard care arrangement with a physician; on-site physician presence is not required for the APRN to work. These three roles can also perform the good-faith exam and order the medication.

Registered nurses

An RN may administer Botox and filler, but only pursuant to a valid order from a physician or other authorized prescriber who has evaluated the patient. The RN does not independently select the drug or the dose — the ordering provider specifies both. The Ohio Board of Nursing's interpretive guidance for cosmetic injections also expects the RN to be trained in facial and neck anatomy, indications and contraindications, and infection control. An RN "medical spa" running without a real ordering provider behind each patient is operating outside that framework.

LPNs, medical assistants, and estheticians

LPNs practice at the direction of an RN or an authorized provider and cannot practice independently; prevailing Ohio compliance practice treats cosmetic injecting as a registered-nurse-and-above function, so do not build a staffing model on LPN injectors without confirming it directly with the Board of Nursing. Medical assistants and other unlicensed staff cannot inject these medications at all. Estheticians cannot inject — cosmetology scope excludes medical procedures, and no amount of physician supervision changes that.

6. Laser and Energy-Based Device Oversight

Laser and light-based treatment is delegated medical practice in Ohio, governed by ORC 4731.33 and the Medical Board's light-based-device rules. The most important thing to know is a 2023 change that many practices missed.

The 2023 on-site supervision change

Effective April 30, 2023, Ohio eliminated off-site physician supervision for light-based medical devices. The delegating physician must now provide on-site supervision whenever a delegate applies a light-based device — meaning the physician is physically present in the same location (the same office suite, though not necessarily the same room). The older "travel-time" off-site standard is gone. If your laser program still relies on a physician who is merely reachable by phone, it is out of date.

The cosmetic therapist pathway

Ohio historically licensed "cosmetic therapists," but the State Medical Board stopped issuing new cosmetic therapist licenses on April 12, 2021 (under HB 442). A physician may delegate laser hair removal to a cosmetic therapist licensed on or before April 11, 2021, or to a person who has completed a cosmetic therapy course of at least 750 clock hours and passed the Certified Laser Hair Removal Professional Examination. Estheticians may not operate lasers. Because the exact treatment of pre-2021 licensees versus the newer course-and-exam pathway is nuanced, confirm the current rule before hiring.

7. Terminal Distributor of Dangerous Drugs (TDDD) Licensing

This is the Ohio-specific licensing box most new operators forget. Any location that stores, administers, or distributes "dangerous drugs" — which includes essentially every prescription drug a med spa touches, from Botox and lidocaine to GLP-1s — must hold a Terminal Distributor of Dangerous Drugs license from the Ohio Board of Pharmacy (ORC Chapter 4729). Without it, your entire drug inventory is unlawfully held.

The Responsible Person requirement is easy to overlook: the Board expects a qualified licensee physically present to control the drugs. If your Responsible Person leaves, the license status is at risk until it is updated.

8. Ownership: Ohio Has No Corporate Practice of Medicine Doctrine

Here is Ohio's biggest differentiator from strict states. Ohio does not enforce a corporate practice of medicine (CPOM) doctrine — the State Medical Board's position is that CPOM "no longer exists in Ohio," and physicians may be employed by corporations and LLCs (ORC 4731.226). That means a registered nurse, a nurse practitioner, or a non-clinical entrepreneur can own an Ohio med spa outright, which is not true in California, New York, or Texas.

What non-physician owners still cannot do

Ownership of the business is not ownership of the medicine. A licensed physician must still control all medical decisions, protocol approval, and delegation, because the aesthetic services themselves are the practice of medicine. Guidance also cautions that non-physician owners should not profit directly from the practice-of-medicine component, which is why many arrangements separate a management-services function from the clinical practice. If you are a nurse or NP weighing ownership, our guide to nurse practitioner med spa ownership covers the structures in depth. Ohio is permissive, but "permitted" is not "unstructured" — get healthcare counsel before you form the entity.

9. Informed Consent and Medical Records

Ohio does not have a single tidy "cosmetic informed consent" statute; the obligation flows from the standard of care and the Medical Board's disciplinary authority (ORC 4731.22). Practically, that means documented, procedure-specific informed consent for every treatment, obtained before the procedure — not scribbled while the patient is on the table.

How long to keep records

There is no universal Ohio retention period for private-practice records, but the State Medical Board recommends keeping records for at least six years, and overlapping mandates set effective floors — Medicaid requires six years (ORC 2913.40(D)) and Medicare five. The safe practice for a med spa is to retain adult records for at least six to seven years, and longer for minors (typically to the age of majority plus the limitations period).

10. Emergency Preparedness and Adverse-Event Response

Every procedure that carries a risk of anaphylaxis, vascular occlusion, or another serious adverse event needs a written response protocol — not a plan to "call 911." Anaphylaxis is the most common med spa emergency, arising from injectables, peels, and certain topicals, and staff must recognize early symptoms, not just severe reactions. A patient who reacts in the parking lot after leaving is still your liability event.

The Complete Ohio Med Spa Compliance Checklist

Run this summary table before opening, before adding a procedure, and before any board inquiry. Each row maps to a section above. If any row is a "no," fix it before you treat the next patient — and if you would rather not build the underlying documentation from scratch, our ready-to-use med spa compliance SOPs cover the policy and protocol side of every row here.

This checklist is for informational purposes only and does not constitute legal or medical advice. Ohio rules are enforced by three separate boards and change frequently — and several 2026 items here, especially compounded GLP-1 policy and out-of-state telehealth pathways, were still moving as of publication. Confirm current requirements with the State Medical Board of Ohio, the Ohio Board of Nursing, and the Ohio Board of Pharmacy, and consult an Ohio healthcare attorney before acting on your specific situation.

Frequently Asked Questions