Ohio Med Spa SOPs: What Your Policy Manual Must Include
Ohio has no med spa license and no rule that names a policy manual. It does have a physician delegation statute, light-based device rules, written-agreement requirements for APRNs and PAs, IV therapy limits and a Board of Pharmacy drug license — and each of them is proven or disproven with documents. The manual is where those documents live.
Quick Answer
We found no Ohio statute or board rule that orders a med spa to keep a policy manual, and Ohio has no med spa facility license to inspect one under. The manual still carries real weight, because the rules that do bind an Ohio practice are proven with paper: a standard care arrangement for each APRN (ORC 4723.431), a supervision agreement for each PA (ORC 4730.19), documented laser training for each delegated procedure type (OAC 4731-18-03), a Terminal Distributor of Dangerous Drugs license with a Responsible Person (ORC Chapter 4729), and a physician who determines the supervision level for every delegated task (OAC 4731-23-02).
An Ohio operator looking for the state's list of required med spa policies comes back empty-handed. The Revised Code has no med spa chapter, and the Ohio Board of Pharmacy licenses your drug stock but not your binder. What Ohio has instead is a set of rules about who may delegate, who may accept a delegation, how close the physician must be, and which drugs may sit on the shelf under whose license — each tested after the fact by asking to see the record.
So an Ohio manual is less a rulebook than an evidence file arranged in advance. For how to write a single procedure well, see our guide to med spa standard operating procedures. For binder structure, version control and sign-off, see our policy and procedure manual walkthrough. This page covers only what changes when the practice sits in Ohio.
In short
Ohio mandates no manual, but its delegation statute, light-based device rules, APRN and PA written-agreement requirements, IV therapy limits and Board of Pharmacy licensing all assume records exist. Below: eight documentation questions answered verdict-first, each claim tagged as a cited Ohio rule or as best practice; an eight-part manual outline; how policies differ across seven roles; and the documentation gaps that most often surface when a complaint reaches an Ohio board. Where we could not verify a rule — patient-record retention above all — we say so.
Sourcing: when this page states an Ohio requirement, the claim traces to a citation in our Ohio regulations dataset (last reviewed July 21, 2026) or to one of our Ohio guides, and the citation is given inline. Everything else is labelled best practice. Ohio government websites could not be opened from the network used to prepare this page, so the cited rule text was not re-read for this article.
Does Ohio Require a Med Spa to Have Written SOPs?
No — we found no Ohio statute or rule that tells a med spa to maintain a policy manual, and Ohio issues no med spa license under which one would be reviewed. Several Ohio rules, though, cannot be satisfied without written documents, so a practice with no written system will struggle to show it met them.
Our dataset records that Ohio has no med-spa-specific licensing, facility permit or registration statute. The state regulates the individual practitioners and the physician delegation behind each medical act, and it prohibits conducting an office for the practice of medicine without a license (ORC 4731.41). Business structure is permissive: physicians may deliver services through corporations, LLCs and multi-discipline entities (ORC 4731.226), which is why a nurse or an investor can own an Ohio med spa. None of that produces an inspection of your binder.
The rules that only work on paper
Read the Ohio rules our dataset cites and a list of documents falls out of them:
- The APRN's standard care arrangement. Our Ohio guides describe APRNs practicing and prescribing under a written standard care arrangement with a collaborating physician (ORC 4723.431).
- The PA's supervision agreement. PAs practice under a written supervision agreement with a supervising physician (ORC 4730.19).
- The delegating physician's supervision decision. For any delegated medical task, the physician must determine the appropriate level of supervision (OAC 4731-23-02(B)(3)). A decision nobody wrote down is hard to prove.
- Laser training records. For delegated non-ablative vascular work, our regulatory-changes guide describes training minimums in OAC 4731-18 with documentation of satisfactory completion maintained by the physician.
- The drug license. A location that stores or administers dangerous drugs holds a Terminal Distributor of Dangerous Drugs (TDDD) license from the Ohio Board of Pharmacy under ORC Chapter 4729, with a designated Responsible Person.
None of these is called a policy. Each is a document an investigator can ask for, and the manual is the place that says where each one lives, who keeps it current, and when it was last checked.
Who actually reads the manual
Four boards touch an Ohio med spa, each with its own lane: the State Medical Board of Ohio (practice of medicine, delegation, light-based devices), the Ohio Board of Nursing (RNs, LPNs, APRNs), the Ohio Board of Pharmacy (the TDDD and drug records), and the Ohio State Cosmetology and Barber Board (estheticians). Our Ohio regulatory profile rates enforcement as moderate and largely complaint-driven, with the TDDD the most checkable point of contact. Your readers are an investigator after a complaint, a pharmacy inspector, your malpractice carrier, a buyer, and a new hire. Write for all five.
What Must an Ohio Med Spa Document About Delegation and Supervision?
Ohio requires a written standard care arrangement for every APRN (ORC 4723.431), a written supervision agreement for every PA (ORC 4730.19), and a physician-made supervision decision for every delegated task (OAC 4731-23-02). Beyond those instruments, the manual should hold the examination record, the order trail for nurses, and a supervision log for light-based device work, which carries the strictest presence rules Ohio applies.
The examination that precedes treatment
Our Ohio guides call this the good-faith exam and assign it to a physician, PA or APRN; an RN does not perform it. Our dataset adds a precise point: Ohio has no statute or rule that uses the phrase "good faith exam." The duty to evaluate before administering a prescription drug instead rests on ORC 4731.22(B)(2) and (B)(6), which make failure to maintain minimal standards for drug selection and administration, and departures from minimal standards of care, disciplinable. Telehealth may establish the evaluation for non-controlled drugs such as neurotoxins, because OAC 4731-37-01 holds a telehealth visit to the same standard of care as an in-person one; the initial in-person exam in OAC 4731-11-09 applies only to Schedule II controlled substances.
The exam-note fields are listed in the records section below. For telehealth, our checklist adds documented telehealth consent and confirmation that the prescriber holds Ohio licensure or authorization, since the patient's location sets the licensing requirement (ORC 4743.09).
The nurse's order trail
Under OAC 4723-4-03, an RN implements orders from an authorized prescriber. Our injector guide reads the Ohio Board of Nursing's interpretive guidance as requiring a valid order from a prescriber who examined the patient, with the prescriber — not the RN — choosing the product and the units. So the chart for every RN injection should be able to show the order, the prescriber, and the date of the underlying exam. A physician does not need to be on site for an RN to inject under that order, which is a sharp contrast with lasers. Our Ohio injector scope guide covers each role in depth.
The APRN file and the standard care arrangement
Ohio is not an independent-practice state for nurse practitioners. Our medical director guide describes the standard care arrangement as defining the services the APRN provides, consultation and chart-review processes, referral criteria and the limits of prescriptive authority, and stresses that it must match what the APRN actually does. The APRN's file therefore holds the signed arrangement, the collaborating physician's name, the date of the last review, and a note of each service added since signing. If the APRN started offering GLP-1 prescribing or laser hair removal after the arrangement was drafted, the document should say so.
One 2026 change makes this concrete. From August 25, 2026, ORC 4731.331 (enacted by House Bill 377) lets an APRN delegate light-based hair removal, but only where the standard care arrangement does not prohibit it. Our regulatory-changes guide recommends amending the arrangement to address hair-removal delegation explicitly rather than relying on silence. Record that amendment with a date.
The PA file and the supervision agreement
The supervising physician remains responsible for the services delegated to a PA. The file should hold the current supervision agreement, the supervising physician's name, and evidence that the agreement names the aesthetic services actually performed. The same HB 377 mechanism applies: from August 25, 2026, a PA may delegate hair removal only with an effective supervision agreement in place (ORC 4731.331). Our dataset also notes that a PA receiving a non-ablative vascular laser delegation does so with a supervision agreement.
The light-based device supervision log
Ohio treats applying a light-based medical device as the practice of medicine (OAC 4731-18-02(A)). Ablative procedures may not be delegated at all. For non-ablative vascular laser work delegated to an RN or LPN, Ohio requires the physician to provide on-site supervision at all times and caps simultaneous supervision at two delegates (OAC 4731-18-03(A)(8)-(9)). Hair removal runs under ORC 4731.33, and HB 377 changed it from August 25, 2026: the simultaneous cap rises to five for hair removal, off-site supervision of a nurse becomes possible once the nurse completes a 40-hour course approved by the physician, and the before-and-after physician evaluation is dropped except where the delegate is a laser hair removal professional.
Because the answer depends on the procedure type, the delegate's classification and the date, every laser chart should record the procedure class (ablative, non-ablative vascular, hair removal), the operator and their category, where the supervising physician was, and how many delegates that physician was covering at the time. Our regulatory-changes guide notes that the OAC 4731-18 rule text still carries the two-delegate figure while the amended statute says five for hair removal, so keep a dated memo recording which authority you relied on. The full device picture is in our Ohio laser safety guide.
Delegation to unlicensed staff
When a physician delegates drug administration to an unlicensed person, on-site supervision is required unless an exception applies (ORC 4731.053(C); OAC 4731-23-02(C)), and a physician may not delegate intravenous drug administration to an unlicensed person (ORC 4731.053(D)(3)). Our Ohio guides go further for med spa injectables and treat medical assistants as never holding the syringe. The manual should say that in plain words and list what unlicensed staff do instead.
What Must Be Documented About the Medical Director Relationship in Ohio?
Ohio has no rule that creates a titled "medical director," but a licensed physician is functionally required, because only a physician may delegate a medical task or the use of a light-based device (ORC 4731.053; OAC 4731-18-02), apart from the narrow hair-removal delegation HB 377 opens to APRNs and PAs from August 25, 2026. The documents that prove the relationship is real — a written agreement, approved protocols, a chart-review log and quality-assurance minutes — are best practice drawn from our Ohio guides rather than items a rule lists by name.
Our Ohio medical director guide covers qualifications, cost, liability and the eight elements of the agreement in depth. In brief: the physician must hold an active Ohio MD or DO license, out-of-state physicians cannot serve, and the State Medical Board pursues "paper" directors who lend a name without supervising.
The ownership page comes first
Ohio does not enforce a corporate practice of medicine doctrine (ORC 4731.226), so the owner and the physician are often different people. The manual should open its governance section with a one-page statement of who owns the business entity, who controls clinical decisions, and where the line runs between them. Our Ohio ownership guide describes the common two-entity split and warns about fee-splitting.
The oversight evidence file
As best practice, keep these together and current:
- The signed medical director agreement, with its term, scope of services, locations and hours of responsibility.
- The protocol approval register: each written protocol, the date the physician approved it, and the next review date.
- The chart-review log: dates, chart identifiers, findings and corrective action. Our medical director guide calls this the duty investigators most reliably ask to see; no Ohio rule we found sets a review percentage, so set your own and keep to it.
- Quality-assurance minutes covering outcomes, complications and adverse events.
- A copy of each standard care arrangement and supervision agreement the physician has signed for this practice.
- Records of the physician's on-site presence, which matter most for any laser day that needs on-site supervision.
Compensation and the exit
Our Ohio guides advise fair-market-value compensation that is not tied to revenue, procedure volume or referrals. Record the basis for the figure. Then write the exit: what happens to protocols, open standard care arrangements and supervision agreements, and laser scheduling the day the physician's agreement ends. Without a successor, the delegations that depend on that physician end with the agreement.
The Operations & Compliance Kit covers the policy manual framework, delegation and supervision records, chart-review logs, training files and incident reporting — ready to adapt to an Ohio practice and its physician.
View Operations Kit — $197Need clinical protocols too? See the Complete Suite — all 62 SOPs.
What Patient-Record and Consent Documentation Is Required, and What Is the Retention Period?
We could not verify an Ohio statute or rule that sets a general retention period for a med spa's patient records, so this page does not state one. What we can point to is the duty to document an evaluation before administering a drug (ORC 4731.22(B)(2) and (B)(6)), the requirement that a telehealth encounter include a medical evaluation (OAC 4731-37-01), and one narrow retention rule our checklist cites for Medicaid records.
What we verified about retention, and what we did not
Our Ohio compliance checklist states plainly that Ohio has no universal retention period for private-practice records. The one Ohio citation it gives is ORC 2913.40(D), for a six-year Medicaid retention requirement — a rule about Medicaid claims, which few cash-pay aesthetic practices submit. The same checklist reports a State Medical Board recommendation and a Medicare figure, but cites no source for either, and we could not open the Board's site to confirm them.
So the manual should not tell staff that a particular number of years is "Ohio law." Write the retention policy as a practice decision: set the period with your healthcare attorney and malpractice carrier, state a longer period for minors' records, add a litigation-hold rule that suspends destruction when a claim is threatened, and name who authorizes destruction. Our national medical records retention guide sets out the factors. Drug records are a separate question, covered in the next section.
What an Ohio aesthetic chart should contain
As best practice, each treatment record should hold:
- The evaluation: who performed it, the method (in person or telehealth), history, medications and contraindications.
- The order: prescriber, product, dose or parameters, and date.
- The performer: name, license category, and the protocol or standing order relied on.
- For light-based work: device, settings, procedure class, operator category and the supervising physician's location.
- Product lot numbers for every injectable used.
- Post-treatment instructions given and any follow-up scheduled.
- Any complication and the response, cross-referenced to the incident record.
For GLP-1 programs, our GLP-1 guide adds the verified BMI, the treatment plan, each follow-up visit and, for any compounded product, the patient-specific justification.
Consent and photographs
Our checklist notes that Ohio has no single cosmetic informed-consent statute; the obligation comes from the standard of care and the Medical Board's disciplinary authority under ORC 4731.22. As best practice, use a procedure-specific consent covering risks, benefits and alternatives, signed before the treatment begins, plus a separate telehealth consent where telehealth is used. Clinical photographs belong in the record under the treatment consent; any marketing use needs a separate written authorization, and the checklist recommends a HIPAA-compliant system with business associate agreements for vendors handling patient information.
What Must Be Documented About Drug Handling, Storage and Disposal?
Ohio requires a location that stores or administers dangerous drugs to hold a Terminal Distributor of Dangerous Drugs license from the Ohio Board of Pharmacy (ORC Chapter 4729), with a designated Responsible Person, and a prescriber possessing compounded dangerous drugs needs that license as well (ORC 4729.541). Storage temperatures, lot tracking and waste disposal procedures are best practice; our sources do not cite an Ohio rule that sets them.
The license page and the Responsible Person
Our checklist and profile describe the TDDD as covering essentially every prescription drug a med spa touches — neurotoxins, fillers, lidocaine, GLP-1 medications — and as requiring a separate license per location. The Responsible Person is a licensed health professional who supervises the drugs on site, and a Category III TDDD is needed if controlled substances are kept. The manual's drug section should open with the license number and expiry for each location, the Responsible Person's name and license, and a standing instruction that the license is updated when the location, ownership or Responsible Person changes.
Administration records and their retention
Our regulatory-changes guide and our profile both report that records of dangerous-drug administration must be kept for at least three years from the date of last administration. Neither page names the rule section, and we could not open the Ohio Administrative Code to confirm it. Treat three years as the figure our Ohio pages report, not as a verified citation, and have counsel confirm the governing rule. The same guide notes that med spas account for the large majority of recent Ohio pharmacy board summary suspensions of terminal distributor licenses — reason enough to keep these records complete.
Sourcing and compounded products
Our GLP-1 guide and checklist set out the Board of Pharmacy's position: FDA-approved branded product is the default; a 503A compound requires a patient-specific prescription; office-use stock should come from a 503B outsourcing facility licensed in Ohio (ORC 4729.52); and any compounded GLP-1 needs a documented individual medical necessity. The sourcing file should hold each supplier's license verification, invoices, and the patient-specific justification for every compounded order. Our Ohio GLP-1 compliance guide covers the rest.
IV therapy orders
If IV hydration or vitamin infusions are on the menu, Ohio requires a prescriber's order and limits who may administer: an RN under that order, an LPN only for limited IV therapy at the direction of an RN or physician and without IV push other than heparin or saline flush (ORC 4723.18), and never an unlicensed person (ORC 4731.053(D)(3)). The IV policy should list the formulary, the ordering prescriber, and which licensed role may hang, push or flush.
Storage, cold chain, lot tracking and waste
As best practice: log refrigerator temperatures with an excursion procedure; record reconstitution date, time and person for every vial; record lot and expiry against each patient; separate expired stock; and write a disposal procedure for partial vials, sharps and pharmaceutical waste naming who witnesses. An inspector should be able to trace a vial from invoice to patient to disposal.
What Training and Competency Records Should an Ohio Med Spa Keep Per Role?
For delegated non-ablative vascular laser work, Ohio sets documented training minimums, maintained by the physician, in OAC 4731-18-03; for hair removal, HB 377 adds a 40-hour physician-approved course as the condition for off-site nurse supervision. For injectables, our Ohio guides describe Board of Nursing interpretive guidance expecting documented training, but they cite no Ohio rule that dictates a personnel file, so the rest of the file is best practice.
The license layer
Every clinical file starts with the license: type, number, expiry, and a dated verification printout from the relevant board. Track expiration dates and confirm renewals before they lapse.
The laser training record
Our regulatory-changes guide reports the OAC 4731-18 floors for delegated non-ablative vascular work: eight hours of basic education, observation of at least fifteen procedures and performance of at least twenty under the physician's direct physical oversight, counted separately for each specific type of procedure. Training on one procedure type does not carry over to another. For laser hair removal professionals, our laser guide describes a dedicated course and examination; for cosmetic therapists, it notes the State Medical Board stopped issuing new licenses in April 2021. For off-site nurse hair removal after August 25, 2026, file the 40-hour course certificate together with the physician's dated written approval of that specific curriculum.
The injector competency record
Our injector guide describes the Board of Nursing's expectation that an RN injecting cosmetic products has documented education in facial and neck anatomy, indications and contraindications, and infection control, and suggests a physician preceptor's return demonstration as the sign-off. As best practice, record one competency check per product class and per new technique, signed by the evaluator, with a re-check date.
What each personnel file should hold
- Every clinician: license verification, CPR or basic life support certificate, bloodborne pathogens and hazard training, HIPAA training, and signed acknowledgement of the practice's policies.
- Prescribers: the standard care arrangement or supervision agreement, prescriptive authority, and telehealth licensure where relevant.
- Laser operators: device-specific and procedure-type-specific training, competency sign-offs, and laser eyewear and hazard training, which our laser guide places under OSHA.
- IV-capable nurses: IV competency, and for LPNs a written note of the ORC 4723.18 limits.
- Estheticians: cosmetology license and a signed scope statement, with any documentation used for peels above the default limits.
- Unlicensed staff: a job description listing permitted tasks and the tasks they never perform.
Our national med spa staff training guide covers the general content of each module.
Get the Free Med Spa Compliance Checklist
The full practice-readiness audit — the yes/no checkpoints behind this guide, delivered to your inbox so you can find your gaps before a board does.
It usually lands in your Promotions tab (or spam) — move it to your inbox and add MedSpa Standards to your contacts.
No spam. Unsubscribe anytime.
What Incident and Adverse-Event Documentation Is Expected?
For light-based hair removal from August 25, 2026, Ohio requires a delegate to report any clinically significant side effect, or any treatment that fails to progress as expected, immediately to the supervising physician, who must then evaluate the patient as soon as practicable (ORC 4731.33 as amended by HB 377). Outside that pathway, we could not establish a general Ohio duty for a med spa to report clinical adverse events to a state board, and we do not assert one.
The hair-removal reporting protocol
Our regulatory-changes guide recommends writing this protocol before the first off-site shift: what counts as clinically significant, who the delegate calls, how quickly, and how the physician's evaluation is recorded. As best practice, use the same protocol for every hair-removal delegate, on-site or off, so there is one procedure rather than two.
The internal incident record
As best practice, every incident — clinical complication, near miss, exposure, device fault, drug discrepancy, complaint — gets a written record within the shift: date and time, patient or staff member, what happened, who responded, what was given or done, physician notification time, follow-up plan, and a cross-reference to the chart. The medical director reviews the log at each QA meeting and records any protocol change it prompts.
Device and drug incidents
A laser fault or a suspect vial is an incident even if no patient was hurt. Our laser guide gives the laser safety officer, under ANSI Z136.3 rather than any Ohio rule, responsibility for investigating device incidents. Drug discrepancies go to the Responsible Person the same day.
The complaint file
As best practice, keep a complaint log linking each patient complaint to the chart, the incident record, the response sent and the closing date.
What Should an Ohio Med Spa's Emergency Protocols Cover?
We found no Ohio rule that specifies the contents of a med spa's emergency protocols, so their scope is set by the standard of care and the services on your menu. Our checklist recommends a written protocol for each procedure with adverse-event risk, trained staff, in-date supplies and at least annual review.
Complications an Ohio menu can produce
- Anaphylaxis from injectables, peels or topicals, with early-symptom recognition and epinephrine. See our anaphylaxis protocol guide.
- Vascular occlusion after filler, with hyaluronidase on hand. See our vascular occlusion guide.
- Laser burns and ocular exposure, which our laser guide names as complications needing immediate physician judgment.
- GLP-1 red flags such as signs of pancreatitis or gallbladder disease, which our GLP-1 guide tells programs to screen for at every visit.
- IV complications such as infiltration or a reaction during infusion, handled by licensed nursing staff only.
- Syncope and delayed reactions, including a patient who becomes unwell after leaving.
Who is in the building
Ohio's supervision rules mean the physician may be on site for some services and off site for others on the same day. The physician need not be present for an RN injecting under a valid order, but must be on site for delegated non-ablative vascular laser work (OAC 4731-18-03). Each protocol should work when the physician is out of the building: name who leads, what they may give under standing orders, and when 911 is called. Our standing orders guide covers how those authorizations are written.
The kit, the log and the drill
As best practice: a kit list with expiry dates checked monthly, a drill log, a post-event review in the QA minutes, and a one-page protocol posted in each treatment room.
The Section-by-Section Ohio Med Spa SOP Manual Outline
Eight parts, each listing the named policies it holds. Items tagged with a citation rest on an Ohio rule in our dataset or guides; the rest are best practice.
Part 1 — Entity, ownership and governance
- Ownership and clinical-control statement (ORC 4731.226).
- Management services boundary policy, including the fee-splitting rule.
- Medical director agreement and succession policy.
- Policy approval, version control and annual review policy.
Part 2 — Evaluation, delegation and supervision
- Patient evaluation policy, in person and by telehealth (ORC 4731.22(B)(2) and (B)(6); OAC 4731-37-01).
- Delegation and supervision-level policy (ORC 4731.053; OAC 4731-23-02).
- APRN standard care arrangement register (ORC 4723.431).
- PA supervision agreement register (ORC 4730.19).
- RN order policy (OAC 4723-4-03).
- Light-based device supervision policy (OAC 4731-18-02 and 4731-18-03; ORC 4731.33 and 4731.331).
- Service matrix: each service, who may perform it, supervision level, and the rule relied on.
Part 3 — Clinical protocols by service
- Neurotoxin protocol and filler protocol, each physician-approved.
- Laser and IPL protocols by procedure class, with ablative work marked physician-only.
- Chemical peel protocol separating esthetician-scope peels from medical peels (OAC 4713-8-04).
- GLP-1 weight-loss protocol: eligibility, titration, monitoring and stopping criteria.
- IV therapy protocol and formulary (ORC 4723.18).
Part 4 — Patient records, consent and privacy
- Medical record content policy.
- Record retention and destruction policy, with the retention period set by counsel and the Medicaid rule noted where relevant (ORC 2913.40(D)).
- Informed consent policy and procedure-specific consent library.
- Telehealth consent policy (ORC 4743.09).
- HIPAA privacy, security and business associate policy.
Part 5 — Drugs, devices and waste
- TDDD license and Responsible Person policy (ORC Chapter 4729).
- Compounded drug sourcing policy (ORC 4729.541; ORC 4729.52).
- Drug administration record policy, with the three-year figure our guides report flagged for counsel to confirm.
- Cold chain, reconstitution and lot tracking policy.
- Controlled substance policy, if a Category III TDDD is held.
- Pharmaceutical waste and sharps disposal policy.
Part 6 — Personnel, training and competency
- Credentialing and license verification policy.
- Role-based training matrix.
- Laser training records by procedure type (OAC 4731-18-03), and the 40-hour hair-removal course approval record (HB 377).
- Injector competency policy.
- Scope statements for estheticians and unlicensed staff.
Part 7 — Safety, emergencies and incidents
- Emergency protocols by complication.
- Emergency kit and drill policy.
- Hair-removal adverse-event reporting protocol (ORC 4731.33 as amended).
- Incident reporting and investigation policy.
- Laser safety program and laser safety officer appointment.
- Complaint handling policy.
Part 8 — Review and audit
- Chart-review policy and log.
- Quality-assurance meeting policy and minutes.
- Quarterly reconciliation: each APRN and PA's actual services against their written agreement, each laser operator against their training record, each location against its TDDD.
- Annual manual review, signed by the medical director and the owner.
How Do Policies Shift by Role: Physician, APRN, PA, RN, LPN, Esthetician, Medical Assistant?
The same manual reads differently depending on whose name is on the file. These summaries follow our Ohio guides; our injector and laser guides have the detail.
Physician: delegator and evaluator
The physician evaluates, orders, approves protocols, signs standing orders, decides the supervision level for each delegated task, holds the standard care arrangements and supervision agreements, and personally performs any ablative laser procedure. The physician's policies are mostly evidence of oversight.
APRN: the arrangement defines the edge
A certified nurse practitioner may evaluate, prescribe within the arrangement, and inject without the physician on site, under a standard care arrangement (ORC 4723.431). From August 25, 2026, an APRN may also delegate hair removal where the arrangement does not prohibit it (ORC 4731.331). The APRN's policies point back to the arrangement at every step, and our medical director guide confirms an APRN cannot be the practice's sole clinical authority.
Physician assistant: the agreement sets scope
A PA may evaluate, order and inject under a supervision agreement (ORC 4730.19), may receive delegated non-ablative vascular laser work, and from August 25, 2026 may delegate hair removal with an effective supervision agreement (ORC 4731.331). The PA's file is the agreement plus evidence it matches the services actually performed.
Registered nurse: carries out the order
An RN injects, administers IV therapy and performs delegated laser work, but always against a prescriber's order (OAC 4723-4-03) and never selecting the drug or dose. RN policies centre on the order trail, documented competency, and — for laser — on-site physician supervision or, for hair removal after August 25, 2026, the 40-hour course route.
Licensed practical nurse: narrower in every lane
Our dataset lists LPNs among permitted delegates for non-ablative vascular laser work with prescribed training and on-site supervision, and allows limited IV therapy at RN or physician direction without IV push beyond flushes (ORC 4723.18). For injectables, our Ohio guides advise treating cosmetic injecting as an RN-and-above function unless the Ohio Board of Nursing confirms otherwise in writing. Write each limit into the LPN's scope statement.
Esthetician: surface services only
Under OAC 4713-8-04, as our dataset summarizes it, Ohio estheticians exfoliate only the stratum corneum, may not alter living cells, and are held to peels of 30% and pH 3 or above unless documented exceptions are met. They do not inject, microneedle or operate lasers. Our Ohio esthetician scope guide covers the line in detail; the manual should state it as a list of what estheticians never do.
Medical assistant: support, not treatment
Medical assistants handle intake, vitals, room turnover, photography and documentation support. Our Ohio guides state that MAs do not inject in a med spa, and ORC 4731.053(D)(3) bars delegating IV drug administration to any unlicensed person. The MA's job description should say both.
Which Documentation Failures Most Often Surface in Ohio Complaints?
These patterns come from our Ohio guides' descriptions of where investigations start. None is a statistic; they are the gaps our sources repeatedly name.
The TDDD that lapsed or never existed
Our guides call the TDDD the box first-time Ohio operators most often miss, and report that med spas made up most recent pharmacy board summary suspensions. A Responsible Person who left without the license being updated is the quieter version of the same failure.
A director who exists only on paper
No chart-review log, no QA minutes, no visits. Our medical director guide calls this the most-cited pattern in med spa enforcement, and it exposes the physician and the owner together.
An arrangement that never mentions aesthetics
A standard care arrangement or supervision agreement drafted for another practice, never updated for injectables, GLP-1 prescribing or hair-removal delegation. Our injector guide names an expired or generic agreement as a finding waiting to happen.
Laser supervision that cannot be shown
A delegate running a vascular laser with the physician off site, or more delegates running at once than the rule allows, with no record of where the physician was. After HB 377, the related risk is reading the hair-removal relief as covering other light-based procedures.
RN injections with no order behind them
A chart that shows the injection but not the exam, the prescriber or the specified dose. Our injector guide stresses that the order is what makes an RN's injection lawful.
What Ohio Requires, and What Is Only Best Practice
Keep this split visible in your policy index so staff know which lines are statutory.
Cited in our Ohio dataset or Ohio guides: evaluation before drug administration and telehealth (ORC 4731.22(B)(2), (B)(6); OAC 4731-37-01; OAC 4731-11-09); delegation and supervision (ORC 4731.053; OAC 4731-23-02); APRN and PA agreements (ORC 4723.431; ORC 4730.19); RN orders (OAC 4723-4-03); light-based devices (OAC 4731-18-02, 4731-18-03; ORC 4731.33, 4731.331); IV limits (ORC 4723.18); drugs (ORC Chapter 4729, 4729.541, 4729.52); esthetician scope (OAC 4713-8-04); ownership and unlicensed practice (ORC 4731.226, 4731.41); Medicaid records (ORC 2913.40(D)).
Best practice, or reported without a rule we could verify: the manual itself; the title "medical director"; chart-review frequency; the patient-record retention period; the three-year drug-record figure; chart fields and consent contents; storage and disposal procedures; personnel files beyond laser training; incident and complaint logs; any general state adverse-event filing; and emergency kits and drills. None should be presented to staff as an Ohio statute.
Summary: The Ohio Documentation Layer in One Page
Ohio does not license med spas and will not grade your manual. It licenses people and a drug inventory, and when something goes wrong it asks for proof: who evaluated, who ordered, which agreement authorized the prescriber, where the physician was, whether the delegate was trained on this procedure type, and whether a TDDD was held that day.
Build it in that order: governance and ownership; evaluation, delegation and supervision, with a service matrix that names the rule behind each row; then records, drugs, training and safety, labelled honestly where they are best practice. Take the open items — record retention, the drug-record rule section, the HB 377 rule conformance, and LPN injecting — to an Ohio healthcare attorney. More guides are on our Ohio med spa compliance hub, our Ohio regulatory changes guide tracks HB 377, and our regulations by state reference compares Ohio with other states.
This guide is for informational purposes only and does not constitute legal or medical advice. Ohio med spa rules are administered by the State Medical Board of Ohio, the Ohio Board of Nursing, the Ohio Board of Pharmacy and the Ohio State Cosmetology and Barber Board, and they change over time. Citations on this page come from our Ohio dataset and Ohio guides; we could not re-open Ohio government sources from the network used to prepare it, and we say so where it matters. Consult an Ohio healthcare attorney before relying on any of it for your practice.
Frequently Asked Questions
Does Ohio require a med spa to have a written SOP manual? + −
How long must an Ohio med spa keep patient records? + −
What must an Ohio standard care arrangement cover for a med spa APRN? + −
Does a physician need to be on site for laser treatments at an Ohio med spa? + −
What drug records does an Ohio med spa need? + −
Does Ohio require med spas to report adverse events? + −
Can a medical assistant inject or start an IV at an Ohio med spa? + −
Can an LPN perform laser or IV work at an Ohio med spa? + −
What training records does Ohio require for laser delegates? + −
Every Protocol, Ready to Adapt
Building an Ohio binder? Start from finished SOPs.
The Operations & Compliance Kit holds the manual framework, delegation records, oversight logs and incident policies. The Complete Suite adds every clinical protocol — 62 SOPs in all.
View Operations Kit — $197