Med Spa Skin & Laser Compliance: The Complete 2026 Guide

Skin and laser services — laser hair removal, IPL, resurfacing, chemical peels, microneedling, and radiofrequency treatments — are the operational core of the modern medical spa, and the category where the gap between what a practice does and what the law allows is widest. An injectables program can run on two or three providers and a tight delegation agreement. A skin and laser program adds estheticians, laser technicians, prescription medical devices, multiple acid depths, and a supervision question that changes at every state line — which is why it produces a disproportionate share of board complaints, malpractice suits, and unlicensed-practice investigations.

This guide is the national pillar reference for skin and laser compliance in 2026. It gives a plain verdict for every role a med spa hires — physician, PA, nurse practitioner, registered nurse, esthetician, laser technician, unlicensed staff — then answers the same question state by state for laser operator authority and chemical peel ceilings, and covers device classification and the Laser Safety Officer requirement, peel scope by depth and acid concentration, microneedling and dermaplaning, the good-faith exam, complications, what happens when the wrong person operates, and how to build a defensible program.

Important: Regulations and enforcement priorities change frequently and vary by state. Verify with your state's medical board, board of nursing, cosmetology board, and a healthcare attorney before relying on this content for compliance decisions. This guide reflects the regulatory environment as of August 2026.

The 2026 Skin and Laser Enforcement Wave

The context for everything that follows is that 2026 is the tightest enforcement year the aesthetics industry has seen. Where a few years ago an out-of-scope laser treatment might have drawn a warning, it now draws a coordinated response from several agencies at once.

Why 2026 Is the Tightest Enforcement Year Yet

Three forces converged. Med spa openings outran the supply of clinicians willing to supervise them properly, leaving a large population of practices running medical devices on thin or fictional supervision. Complications became visible, generating lawsuits and complaints that gave regulators specific cases to pursue. And the legal theory matured: boards and prosecutors now treat out-of-scope laser and peel work as the unlicensed practice of medicine, a framing that carries criminal exposure in several states rather than a licensing fine.

Skin and laser work is also policed by more agencies than any other med spa category, and they overlap: the medical board governs delegation, the board of nursing governs what RNs and NPs may do, the cosmetology board governs estheticians and increasingly refers out-of-scope cases upward, health departments inspect facilities, district attorneys prosecute unlicensed practice, and plaintiff attorneys operate entirely outside the regulatory system. A single out-of-scope laser burn can trigger two or three at once. The federal layer moved too: the FDA's 2025 safety communication on radiofrequency microneedling highlighted nerve damage and scarring risks and underscored strict scope-of-practice compliance, giving boards and plaintiff attorneys a federal reference point to cite.

Corporate Practice of Medicine and Management-Company Interference

A parallel pressure is renewed enforcement of the corporate practice of medicine doctrine, which bars non-clinician owners and management companies from controlling clinical decisions. California's Senate Bill 351, effective January 1, 2026, codified that management entities cannot interfere with clinical decisions — including the selection of medical-grade equipment and the setting of treatment parameters. The device menu and the treatment settings belong to the supervising physician and clinical delegates, not to a non-clinician owner chasing throughput.

The Foundational Rule — Surface vs. Below the Surface

Before any device, depth, or role, there is one organizing principle that resolves most skin and laser scope questions: the line between the surface of the skin and the living tissue beneath it. Internalize this line and the rest of the framework becomes navigable.

The Epidermis Line

In nearly every state, a licensed esthetician is authorized to work on the surface of the skin — the epidermis — and no deeper: cleansing facials, exfoliation, extractions, waxing, superficial peels, and in most states dermaplaning. The moment a procedure penetrates, ablates, wounds, or removes living tissue below the epidermis, it crosses out of esthetics and into the practice of medicine. California, Texas, Arizona and most other state frameworks share that dividing line even where the wording differs.

What "Practice of Medicine" Means for Skin Procedures

Calling a procedure "the practice of medicine" is not rhetorical. It means the procedure may only be performed by a licensed physician, or delegated to a nurse practitioner, physician assistant, or registered nurse acting within their own scope and under the supervision the state requires; that a good-faith examination must precede it; that the supervising physician carries liability for the delegation; and that an esthetician, medical assistant, or unlicensed technician who performs it outside a lawful delegation framework is engaged in the unlicensed practice of medicine — a violation several states classify as a criminal offense.

One corollary is worth stating before the roles, because it is the industry's most dangerous misconception: a device-manufacturer certification or a weekend "laser certification" course does not authorize anyone to perform anything. It verifies training on a device; it says nothing about whether that person's license permits the procedure. License scope, not certification, governs — and "but I was certified" is not a defense.

Who Can Operate a Laser — Supervision and Delegation Nationally

The headline question for most operators is simple to ask and complicated to answer: who is legally allowed to hold the laser handpiece? The answer depends on the device class, the prescriber relationship, and the supervision rules of the patient's state — and, before any of that, on a distinction most practices never write down.

Two Legal Acts — Who Orders and Who Fires

Every lawful laser treatment involves two separate legal acts performed by two potentially different people, and collapsing them is the most common source of med spa laser violations. The ordering act belongs to someone with prescriptive authority who decides, on the strength of a good-faith examination, that this patient should receive this treatment — a physician in every state, an NP or PA in most, and several states say so explicitly (New Mexico requires a face-to-face exam and treatment plan by a licensed independent practitioner; North Carolina an exam before the first laser hair or tattoo removal; Washington the physician's own history, exam, diagnosis and consent). The operating act — selecting settings, positioning the handpiece, firing the device — is governed by an entirely different body of law: medical delegation rules, nursing scope rules, the cosmetology act, and in a handful of states a device-specific licensing statute.

A facility can fail either act independently. New York's 2026 med spa inspection program documented unlicensed individuals operating devices — an operating-act failure; absentee medical directors signing standing orders for clinics they never visit are an ordering-act failure. Cases that reach the trade press usually involve both at once, which is why they escalate from a citation to a criminal charge. Build the program around two named people per treatment.

Physicians — Full Authority, and the Authority Everyone Else Borrows

A licensed physician (MD or DO) may operate any aesthetic laser and perform any depth of peel or microneedling within the standard of care, and in several states the physician is the only person who may perform certain categories of work: Ohio makes ablative procedures non-delegable outright, Alabama restricts ablative procedures, endovascular laser ablation, laser-assisted liposuction and laser-assisted surgery to physicians, and Louisiana limits laser surgery to those licensed to practice medicine, with non-physicians operating only under direct on-site supervision.

More consequentially, in most states every other operator in the building works on the physician's authority. Michigan requires a physician to own the entity and either perform or delegate laser procedures; Wyoming treats operating or delegating the responsibility to operate a Class II or III device as practicing medicine. The hiring question is never just whether a person may operate a laser but whether a physician's delegation reaches this person, this device, and this procedure. Where it does not, competence is irrelevant, and the supervising physician who permits it is — in California's formulation — aiding the unlicensed practice of medicine.

Nurse Practitioners and Physician Assistants — Delegated or Independent by State

Both may operate lasers and perform medical-depth skin procedures within their scope in effectively every state, but the terms vary sharply. The NP's authority has expanded fastest: where a state grants full practice authority, an APRN can both order and perform laser treatment with no physician in the chain. Illinois permits delegation of ablative procedures to a full-practice-authority APRN with on-site supervision, New Mexico permits an APRN to perform the required face-to-face exam and treatment plan, and New York's 2025 Board for Medicine determination places energy-device treatment "by or under the order of" a physician, PA, or nurse practitioner. In reduced and restricted states the NP works through a collaborative agreement whose terms control — Mississippi still requires a physician on the premises for laser and IPL generally.

PAs appear in the authorized-operator list of nearly every state, with two conditions attached. Delegation is documentary: Connecticut names the PA in statute as one of three professionals a medical spa must employ or contract; Rhode Island's ablative rule names physicians, PAs and certified NPs as the only permitted operators, with no further delegation; New Jersey, which has no laser-specific rule, supports PA laser operation only through the general signed delegation agreement under N.J.A.C. 13:35-2B.4 and 2B.10, which has to actually cover the service. And a PA cannot exceed the supervising physician's own scope, so one supervised by a physician who does not practice aesthetic medicine is on thin ice whatever their training. For both roles the higher-value question is whether the state also lets them perform the good-faith exam and order the treatment.

Registered Nurses — Delegation Plus Standardized Procedures, With Three Real Exceptions

Registered nurses are the workhorses of most med spa laser programs, and their authority is real but conditional. An RN may operate a laser and perform many delegated skin procedures — including certain peels and microneedling — but only under written standardized procedures approved by the supervising physician, with the physician available as the state requires, and only after a good-faith exam by a physician, NP, or PA. The RN cannot diagnose, set the treatment plan, or perform that exam, and where a practice lets an RN both assess and treat with no clinician involvement the delegation has collapsed. Three state-level exceptions break the assumption that an RN is always a safe default operator.

States where RNs may not operate lasers at all. South Dakota's joint Board of Nursing and Board of Medical & Osteopathic Examiners position limits laser operation to physicians, NPs and PAs, though RNs may use non-ablative, non-laser light-based devices under delegation. Rhode Island's Department of Health scope chart marks registered nurses "No" for both laser hair and tattoo removal. New Jersey never finalized a laser delegation rule — a 2015 proposal permitting delegation to a trained RN died — leaving RN laser operation on materially weaker footing than in neighboring states.

States where RNs may do non-ablative work only — Louisiana, which excludes ablative laser from the RN scope while permitting non-ablative resurfacing and hair removal under a prescriber's order; Kentucky, which requires an advanced-qualified supervisor for ablative or fractionated work; Mississippi, which permits laser hair removal but expressly not vascular-lesion removal; South Carolina, which permits non-ablative delegation under direct supervision. And one state constrains what the RN may decide: North Dakota treats selecting the device or the device setting as an element of prescribing, so the parameters must come from the prescriber's order or the written protocol, not the nurse's judgment at the bedside. An RN who adjusts fluence on their own initiative there has arguably crossed into prescribing even though they were authorized to fire the device.

Estheticians — Barred in Most States, Permitted in a Nameable Minority

This is where most enforcement happens, because esthetician laser training is widely marketed and vendor certification implies an authority state law does not grant. Michigan is representative of the majority rule: estheticians and cosmetologists may not perform cosmetic laser or IPL procedures regardless of vendor training. Georgia bars estheticians from lasers by statute; Vermont's cosmetology statute excludes "the use of lasers" from esthetics and Connecticut "the use of a prescriptive laser device"; California, Massachusetts, Minnesota, Nebraska, New Hampshire, New Jersey, West Virginia and Wyoming reach the same result.

The exceptions are real, and they are worth knowing precisely because they are where the market is heading:

• Alabama: an aesthetician or cosmetologist may serve as a Level 2 Delegate for non-ablative treatments under a written protocol and required supervision (Ala. Admin. Code Ch. 540-X-11).
• Arizona: cosmetologists and aestheticians may operate lasers if separately laser-certified, under a prescribing health professional's indirect supervision for hair reduction and direct supervision for other cosmetic procedures.
• Nevada: a licensed advanced esthetician may perform non-ablative laser, IPL, and RF procedures under a physician, PA, or APRN reachable in real time and within 60 miles or 60 minutes — and may never perform an ablative procedure.
• North Dakota: the Advanced Esthetician license effective January 1, 2026 permits non-ablative energy procedures under a collaborative agreement with an MD, PA, or APRN, with a written ANSI Z136.3 laser-safety program and a designated Laser Safety Officer.
• Oregon: certified advanced estheticians may perform FDA-registered non-ablative device procedures under ORS 676.630(1).
• Washington: estheticians may use a laser or light-based prescription device only under the supervision of an MD or DO, under a written office protocol.
• Wisconsin: in a licensed cosmetology establishment, an aesthetician or cosmetologist may perform laser or IPL hair removal under a delegating physician's written protocols, direction, and inspection.
• New York: laser and IPL hair removal is carved out of the practice-of-medicine determination and routed to a Department of State license, so trained non-licensed personnel may perform it — while any device reaching the basement membrane or deeper remains medicine.
• Idaho: an esthetician may operate a Class II laser or IPL skin-care device only as directed and supervised by a licensed health care practitioner.
• Kentucky: an esthetician may perform laser treatments only under immediate — in-room — physician supervision.

Every one of those exceptions shares three features: a named supervising clinician, a non-ablative ceiling, and usually a separate certification. None is a general grant of laser authority to an esthetics license — if your state is not on that list, your estheticians should not be operating lasers. The state esthetician-scope deep dives for California, Texas, and Arizona show how widely the surface-work boundary is drawn from state to state.

Laser Technicians — a Genuine License in Five States, a Job Title Everywhere Else

"Laser technician" sounds like a profession, and in five states it is one. Arizona licenses the Certified Laser Technician, working under a prescribing health professional's indirect supervision for hair reduction and direct supervision for other procedures, on a device the prescriber ordered and under protocols reviewed annually. Georgia issues Senior and Assistant Cosmetic Laser Practitioner licenses through the Composite Medical Board; seniors may practice independently and supervise assistants, who work on-site. Iowa recognizes a "qualified laser technician," licensed or unlicensed, with at least 120 training hours at an accredited program, usable only for delegated services in a medical spa under physician supervision. Ohio permits a cosmetic therapist or certified laser hair removal professional to perform hair removal by delegation under ORC 4731.33. Texas requires an individual TDLR certificate plus a facility certificate and a written consulting-physician contract.

Everywhere else the title describes a job, not a license, and the person is legally a licensed clinician within scope, a delegated unlicensed person where the state permits that, or an unauthorized operator. Colorado's Rule 800 allows delegation to a trained unlicensed delegatee, Pennsylvania to a trained delegatee meeting competency standards, Kansas under general written protocols, and Maine as an ordinary delegated medical act. Those are delegation pathways, not licenses, and the physician carries the entire risk.

Unlicensed Staff — Effectively Never, and Where the Prosecutions Come From

Outside those narrow frameworks, unlicensed personnel may not operate medical lasers. Massachusetts permits delegation only to individuals licensed to perform the service; West Virginia excludes unlicensed technicians because they are not licensed health care providers; Nebraska is restrictive about unlicensed delegation generally; Maryland bars estheticians and unlicensed technicians from cosmetic medical devices; New Mexico permits LPN operation under direct supervision while excluding unlicensed medical assistants entirely. Where no pathway exists, an unlicensed person firing a laser is the unlicensed practice of medicine, and the facility faces its own exposure for aiding it.

The Ablative Line — Where the Operator Pool Narrows

One distinction narrows the list of lawful operators more than any other: whether the procedure is ablative — intended to excise, vaporize, or remove living tissue, in Oregon's phrasing to "excise, burn, or vaporize skin," with Rhode Island's statute naming CO2 and erbium devices. Non-ablative treatments heat tissue without removing the epidermal surface. The clinical boundary is not always crisp, but the legal boundary is treated as though it were, so classify every device on the menu explicitly and in writing.

Ohio makes ablative procedures non-delegable entirely; Alabama restricts them to physicians; North Dakota limits them to physicians, PAs and APRNs, and Rhode Island to physicians, PAs and certified NPs with no further delegation. Illinois permits ablative delegation but requires on-site supervision where non-ablative work allows the physician to be available by phone. Louisiana and Kentucky exclude or heavily condition RN ablative work, and Nevada bars any esthetician from ablative work outright. Most med spas run a mixed menu from one pool of operators, which is the arrangement most likely to produce an inadvertent violation: the operator who is lawful on Monday's IPL patient may not be lawful on Tuesday's CO2 patient. Build the distinction into the scheduling rules, not just the policy binder.

The Supervision Spectrum — On-Site, Available, or Absent

Being authorized is only half of it: an authorized operator working without the required supervision is still a violation, and proximity requirements vary more than operator lists do. At the strictest tier the supervisor must be physically present — the District of Columbia requires a present medical director, Mississippi a physician on the premises, Louisiana direct on-site supervision for any non-physician operator, Washington the physician on the premises during the initial treatment, Kentucky in-room supervision for an esthetician. A middle tier requires immediate availability or a defined radius: Nevada demands a supervisor reachable in real time and within 60 miles or 60 minutes; Virginia requires the supervisor readily available and personally evaluating any patient who develops complications; Florida permits telehealth supervision within 150 miles, capped at four electrologists per physician.

The most permissive tier is general supervision under standing orders — Pennsylvania and Maine impose no on-site requirement, and Illinois permits phone availability for non-ablative procedures. This is where "absentee medical director" arrangements take root, and where regulators have tightened hardest. A physician who has never visited the facility, cannot describe its devices, and reviews no charts is not supervising; they are lending a signature. Whatever the state's nominal requirement, the supervising physician must have a real, documented, recurring relationship with the program.

Laser Operator Rules in All 51 Jurisdictions

The table below is the operator answer for every state and the District of Columbia: who may lawfully operate a cosmetic laser, whether estheticians are anywhere in the picture, and the authority that says so. It reflects primary-source review current to mid-2026. Rules move, so treat it as a starting point and confirm with the board before changing a staffing model — the state regulations database carries the citations in full.

Where estheticians and licensed laser technicians fit is set out in the two lists above — the ten states permitting esthetician laser work and the five licensing a technician outright. Two caveats. Several states have no laser-specific rule at all, Kansas, Maine, Missouri, Pennsylvania and Utah among them, so the operator answer is inferred from general delegation law rather than read off a statute; there the physician's competency judgment does the legal work and documentation is the only defense. And Indiana is genuinely unsettled: SB 282 swept cosmetic laser use into the registered med-spa framework in 2026 without setting a minimum operator credential. Where a state's position is unclear, record that and adopt the stricter reading.

Laser Device Classification and the Laser Safety Officer

Compliance does not stop at who holds the handpiece. The device itself carries a safety framework that applies regardless of who operates it, anchored in the FDA's device classification and the ANSI Z136.3 standard for safe use of lasers in health care.

Class IIIb and Class IV — What Aesthetic Lasers Actually Are

The lasers used in medical spas are almost all Class IIIb or Class IV devices. Class IV lasers — most hair-removal, resurfacing, and vascular lasers — are the highest hazard class, capable of eye and skin injury from direct, reflected, or scattered beams and of igniting materials in the beam path. The FDA regulates them as prescription medical devices, which is the legal hook making their operation a medical act. There is no meaningful population of "cosmetic, non-medical" aesthetic lasers.

ANSI Z136.3 and the LSO Requirement

ANSI Z136.3, the American National Standard for safe use of lasers in health care, is the governing safety framework for any facility operating health-care laser systems, explicitly including medical spas. The standard requires every facility using Class IIIb or Class IV lasers to designate a Laser Safety Officer. Because virtually every aesthetic laser falls in those classes, the LSO requirement is effectively mandatory for any med spa that runs lasers. The current edition of the standard, ANSI Z136.3-2024, is the reference operators should hold and follow.

What the Laser Safety Officer Actually Does

ANSI does not require any particular license for the role — medical director, nurse practitioner, registered nurse, or another trained staff member — but the person must have documented LSO training, typically a multi-day course from an organization such as the Laser Institute of America, and the authority within the facility to enforce safety procedures. In an inspection or a lawsuit, the absence of a designated, trained LSO is a documentation gap that magnifies every other safety failure.

Eyewear, Controlled Areas, and Plume Controls

The controls the LSO administers are concrete and auditable: wavelength-specific protective eyewear worn by the operator, the patient and anyone in the room; the treatment room designated a laser controlled area with signage and window coverings; smoke evacuation for procedures that generate plume; device logs showing maintenance and calibration. These are the elements an inspector checks and the gaps a plaintiff attorney exploits after an injury.

Chemical Peels — Scope by Depth

Chemical peels are the most-requested facial treatment and the most misunderstood scope question in the industry, because a "peel" spans everything from a mild epidermal exfoliation to a surgical-grade dermal wound. The same room, the same client, the same word on the booking screen — and depending on how deep the acid goes, it is either a cosmetic service a licensed esthetician may lawfully perform or a medical procedure requiring a physician, a good-faith exam, and a delegation instrument. Nothing on the bottle tells you which one you are about to do.

Depth, Not Percentage, Is the Legal Unit

Owners want one number, and about a dozen states oblige with a percentage — which is why the percentage is the wrong thing to look at first. Every state's rule is a proxy for one anatomical fact: whether the peel injures living tissue. California limits estheticians to procedures that do not remove, destroy, incise, or pierce the skin beyond the epidermis; Texas allows superficial peels that remove dead skin cells without piercing the dermis; Ohio permits exfoliation of stratum corneum cells only, barring any service that ablates, damages, or alters living cells; Montana confines cosmetology licensees to the non-living stratum corneum; Maine defines permitted exfoliation as that "not intended to elicit viable epidermal or dermal wounding, injury, or destruction." Five drafting styles, one rule: dead tissue is cosmetology, living tissue is medicine.

Concentration is only one variable that determines how deep a product goes. The acid itself matters — glycolic, salicylic, mandelic, lactic, TCA and phenol behave very differently at identical strengths — as do the formulation's pH and free-acid value, the number of layers, contact time before neutralization, and skin preparation such as degreasing with acetone. A 30 percent glycolic buffered to near-neutral pH is a different treatment from a 30 percent glycolic at low pH with a high free-acid value, which is why several states pair their number with a pH floor. Train the team on the question rather than the number: is this product intended to injure living tissue? If the manufacturer's materials describe it as reaching the papillary dermis, if it is marketed as "medical-grade," if the protocol calls for frosting, or if expected recovery involves days of sheeting rather than light flaking, the answer is yes and the treatment belongs to a medical provider.

Superficial Peels — and the Ceilings States Actually Publish

Superficial peels exfoliate the epidermis and at most reach the dermo-epidermal junction without injuring living dermal tissue: low-concentration glycolic, lactic, mandelic and salicylic acids, enzyme preparations, and Jessner's solution in limited passes. Because they do not wound living tissue they are generally within a licensed esthetician's scope, subject to the state's limits, and this is where most med spa peel volume sits. The states publishing a number cluster tightly around 30 percent with a pH floor of 3.0:

Two features of the numeric model catch practices out. The pH floor is as binding as the percentage — a 25 percent product formulated below pH 3 fails Ohio's, Oklahoma's, Kentucky's, Tennessee's and Utah's rules even though the concentration is under the cap. And the cap limits the licensee, not the product: North Dakota sets separate limits for AHAs, BHAs, resorcinol and TCA, so one number in your head will not survive a menu that mixes acid families.

Medium-Depth Peels

A medium peel reaches the papillary dermis — the upper layer of living dermal tissue, roughly 0.45 to 0.6 mm down — usually with TCA at around 35 percent, or sequential combinations such as Jessner's solution followed by TCA that give more control over depth than a single high-strength application. Because it deliberately injures the dermis it is a medical procedure in essentially every state, and several say so in terms: Illinois lists peels "other than superficial" among the procedures constituting the practice of medicine; Massachusetts treats medium and deep peels by an aesthetician as the unauthorized practice of medicine punishable under M.G.L. c. 112 § 6; New York's Department of State determinations permit superficial peels under the appearance-enhancement license and prohibit medium and deep peels outright; Alaska makes it unprofessional conduct to permit below-the-dermis peels by anyone who is not an appropriately trained and licensed health care provider.

Saying a medium peel is "medical" answers only half the question. Whether an RN may perform one under delegation turns on the same nursing-scope rules that govern any delegated act: states that let a physician delegate broadly to trained licensed personnel — Pennsylvania, Kansas, Maine and Tennessee among them — generally reach RN peel delegation through that route, provided the standing orders are specific about depth and product, while states restricting delegation to a named list reach a different answer. Name the delegate role explicitly and confirm the nursing board agrees before staffing a medium-peel service that way. Misclassifying a medium-depth TCA peel as a superficial one, and letting an esthetician perform it, remains one of the most litigated scope violations in the industry.

Deep Peels

Deep peels — phenol-croton oil emulsions and very high TCA concentrations — penetrate to the mid-reticular dermis and carry systemic risk including cardiac arrhythmia from phenol absorption, prolonged healing, scarring and permanent pigment change. They are effectively surgical and belong with a physician personally, in a setting with cardiac monitoring. No state's esthetics scope reaches the reticular dermis and no advanced or master tier extends there. Some states foreclose it from the cosmetology side explicitly — Missouri's 10 percent phenol cap, Maine's exclusion of TCA and phenol — but even where the act is silent, the medical practice act supplies the answer.

The Advanced and Master Esthetician Tier States Are Building

The most consequential development in peel scope is not a new restriction but a new license, and each state draws its own boundary. Nevada has gone furthest, naming medium-depth peels in statute as advanced esthetic procedures performable by a licensed advanced esthetician under a physician, PA or APRN — never a plain RN — under NRS 644A.012. North Dakota's Advanced Esthetician license, effective January 1, 2026, permits advanced and combination peels with board-approved certification and a collaborative agreement for deeper procedures. Utah's master esthetician, at 1,200 training hours, may perform advanced chemical exfoliation beyond the basic 30 percent limit. Virginia's and Minnesota's advanced tiers stay within the epidermis; Washington's master estheticians work independently but may not use FDA prescription products without MD or DO supervision; Oregon's certified advanced esthetician adds device work rather than deeper peels.

What these tiers share is a training-hours threshold, a board-approved certification for the specific procedure, and — at the deeper end — a named supervising clinician. What they do not share is a common ceiling, and the credential does not travel: an advanced or master license from one state means nothing in another, because the titles are similar and the scopes are not.

Where States Publish No Number at All

Most states publish no percentage but a depth standard, and the operative question is whether the product is intended to reach living tissue — a judgment you make and document rather than look up. California's "beyond the epidermis," Texas's "without piercing the dermis," Montana's germinative and basal layers and Iowa's "not intended to wound the dermis" are written this way. There, record the intended depth of every product from the manufacturer's technical documentation.

A third group is effectively silent on peels within the cosmetology act — Kansas, Indiana, South Carolina, Vermont and West Virginia among them — and silence is not permission: where the act does not affirmatively authorize a procedure, the medical practice act supplies the default, and injuring the dermis is medicine. Put the question to the board in writing, describing the acid, concentration, pH and intended depth, and keep the answer on file. A dated response naming your actual product is worth more in an investigation than any general reading of the statute.

Reading a Peel Label Against Your State's Rule

The daily work is matching a product in your hand to a rule on the page, and four data points settle almost every case. Record the acid, concentration, pH and free-acid value from the manufacturer's technical documentation, not the marketing copy. Fix the intended depth and protocol design in writing, because depth is a function of use as much as content — Jessner's is superficial alone and routinely used to deepen a subsequent TCA application. Treat "medical-grade" and its cousins as marketing words with no legal meaning but reliable prompts to verify. And put the parameters in the chart: product, concentration, pH, passes, contact time and neutralization.

Microneedling, RF Microneedling, and Dermaplaning

Energy and needle-based treatments occupy the same surface-versus-dermis framework as peels, with their own depth thresholds. Our RF microneedling protocol covers the procedure detail.

Traditional Microneedling — the Depth Threshold

Traditional microneedling creates micro-channels with fine needles. At very shallow depths — roughly 0.25 to 0.3 mm — some states treat it as within esthetician scope; as needle depth increases into the dermis it becomes a medical act, and several states treat all microneedling as medical regardless of depth. Know the specific state threshold, document the device's depth setting, and never assume a national rule.

RF Microneedling — a Medical Procedure

Radiofrequency microneedling combines dermal needle penetration with thermal energy below the skin surface, at depths clinical references put as high as 2.0 mm depending on the facial region. Both elements place it firmly in the practice of medicine in essentially every state: it must be performed by a physician or delegated to an NP, PA, or RN within scope, under supervision, after a good-faith examination. The 2025 FDA safety communication reinforces that it is a delegated medical act, not an esthetic service.

Dermaplaning — the Esthetician-Scope Exception

Dermaplaning — physical exfoliation of the stratum corneum and vellus hair with a blade — is the instructive counterexample. Because it acts on the surface and does not penetrate living tissue, most states place it within esthetician scope; California brought it into esthetician scope in 2022. The question is never the tool's drama but whether the procedure breaches the epidermis: a blade that stays on the surface is esthetics, a needle or laser that reaches the dermis is medicine.

The Good-Faith Examination — the Gateway to Every Device Treatment

If there is a single document a board reviewer looks for first in a skin and laser chart, it is evidence of a good-faith examination before the treatment — the legal gateway that converts a delegated medical procedure from unlicensed practice into lawful care.

What a Defensible Exam Contains

A defensible good-faith examination is performed by a physician, NP, or PA and documents relevant history, current medications (with attention to photosensitizing drugs and recent isotretinoin), skin assessment including Fitzpatrick type, a contraindication screen covering active infection, keloid tendency and recent sun exposure, the indication, and the specific device, depth or agent and parameters ordered. The examining clinician — not the treating RN or esthetician — owns that assessment and the order flowing from it.

Telehealth and the Good-Faith Exam

Some states permit the exam by real-time audiovisual telehealth; others require an in-person encounter for device procedures, particularly for new patients. Even where telehealth is allowed the substance must be present — a skin assessment adequate to the procedure, a contraindication screen, and a specific order. A telehealth "exam" that rubber-stamps an intake form is exactly the pattern boards cite; the standard of care does not relax because the clinician is remote.

The exam is also not the same instrument as the standing orders that authorize the delegate. RN-performed laser and peel treatments run under standardized procedures approved by the supervising physician, and a standing order is the framework within which the delegated treatment occurs after the exam, never a substitute for it. Orders authorizing "laser treatments per protocol" without specifying devices, parameters, contraindications, and the exam requirement are too broad to be defensible.

Complications and Adverse-Event Management

Complications are what convert a scope or supervision defect into a lawsuit. The laser and chemical peel complications guide covers prevention and response in depth; these are the categories that drive claims.

What Actually Goes Wrong

Burns are the most common laser complication and the most common laser lawsuit, usually tracing to a mismatch between device parameters and the patient's skin — a darker Fitzpatrick type treated with settings calibrated for lighter skin, stacked pulses, or unaccounted recent sun exposure. Post-inflammatory hyperpigmentation disproportionately affects darker skin types, follows both lasers and peels, and is a leading source of complaints because it is visible and persistent. Both are largely preventable with candidate screening, appropriate wavelength selection, a test spot, conservative starting parameters, and an operator who understands the device.

Scarring — including keloid formation in predisposed patients — and infection are lower-frequency but higher-severity, and they underscore why the good-faith exam's contraindication screen matters: a documented keloid history or active infection should change or stop the treatment. When either occurs, prompt clinician evaluation, appropriate wound care, and documentation are the difference between a managed complication and a negligence finding.

The Adverse-Event SOP and Consent

A defensible program addresses complications twice: before, in the informed consent, which must disclose burns, pigment changes, scarring and infection in plain language; and after, in an adverse-event SOP defining immediate response, clinician evaluation, photographic documentation, follow-up and any required reporting, feeding a log the medical director reviews. A practice that cannot produce its consent and adverse-event log on demand has converted a survivable complication into an indefensible one.

When the Wrong Person Operates — Four Exposures That Arrive Together

A scope or supervision failure is not one risk but four, and they arrive together — which is what makes this a hiring question rather than a paperwork question.

Criminal. An unauthorized operator can be charged with the unlicensed practice of medicine: in Florida a med spa worker faced twenty felony counts after an unlicensed laser procedure left a patient with necrotic tissue, and New York has made clear that a facility allowing an unlicensed individual to operate a Class IIIb or IV device risks being charged with aiding and abetting it. The exposure runs to the business, not only to the person holding the handpiece.

Board, in both directions. The delegating physician's license is at stake for inadequate or absentee delegation, and a medical director facing discipline resigns immediately, leaving the practice unable to operate. Meanwhile the cosmetology board acts against the licensee, on the fact of the out-of-scope service rather than on whether the treatment went well — Massachusetts states that limit directly in its Board of Cosmetology and Barbering policy amended in May 2025, and Mississippi's Board of Nursing bars APRNs and RNs from delegating aesthetic procedures to aestheticians at all, reasoning that a delegation cannot expand a license the delegator did not issue.

Civil. The plaintiff's first document request is the operator's credentials and the delegation paperwork; an unauthorized operator converts a defensible adverse outcome into a straightforward negligence case, because the breach is established before the clinical facts are reached. Insurance. Carriers routinely exclude coverage for treatments performed by unauthorized persons or outside written protocol, and the denial arrives exactly when the policy is most needed.

Most staff who cross the line do not know they crossed it: they were trained by a manufacturer, handed a device by an employer, and given no reason to think this treatment differed legally from last week's. Scope is a competency to teach and document — see our guide to med spa staff training requirements.

Building a Defensible Skin and Laser Program

Compliance is not a binder; it is an operating system. A defensible program turns the rules above into a few concrete artifacts an inspector, a medical director and a plaintiff attorney would all recognize as real.

The Device-by-Device Delegation Matrix

The foundational artifact is a matrix that maps every device and procedure on the menu — each laser, classified ablative or non-ablative, each peel product with its acid, concentration, pH and intended depth, microneedling and RF microneedling — to the roles permitted to perform it in your state and the supervision required. Each staff member is then mapped to the procedures their license and training authorize. Where a state sets a number, record the number: Virginia's ten proctored patient cases, Iowa's 120 training hours, Washington's roughly 150-hour operator pathway, Arizona's protocols reviewed at least annually. This single document answers the question every investigation asks: who is allowed to do what here, and how do you know. If a product or device has no lawful operator on your staff, it comes off the menu — that is the decision the matrix exists to force.

The Four Ways a Program Drifts Out of Scope

Almost no practice decides to breach scope; it drifts, in four patterns, each caught by a different control. Menu creep: a deeper product or more aggressive device is added and handed to the operator already doing the lighter version — no single step feels like the moment scope broke, because the operator never changed. Product drift: the menu stays the same but the product behind it changes through reformulation or substitution; the booking screen is identical and the depth is not, and only a written matrix catches it. Title inflation: an esthetician is described as a "medical esthetician" and the title starts doing work the license cannot support — New Mexico prohibits the title as deceptive, Wyoming bars it, South Dakota does not recognize it, Iowa does not license it, and Illinois provides that a person performing a physician-delegated procedure may not hold themselves out as an esthetician while doing so. Cross-state expansion: a menu is copied to a second state, when a 30 percent product lawful in Tennessee exceeds the District of Columbia's 20 percent cap. Treat every new state as a fresh audit.

Documentation the Board Looks For

Beyond the matrix, the set a board expects includes the medical director agreement and evidence of genuine involvement, standardized procedures and standing orders signed and current, good-faith exam records, device-specific informed consents, the LSO designation and training certificate, maintenance and calibration logs, the adverse-event log, and staff training and competency records. The goal is that any chart pulled at random tells a complete story from exam to order to treatment to follow-up. Competency in particular must be verified rather than assumed — documented initial training on each device plus periodic re-verification, signed off by the medical director or LSO. Vendor training is a starting point, not the record.

State-by-State Patterns

The federal floor — prescription-device classification, ANSI Z136.3, FDA oversight — is constant. Fifty-one rows of variation above it resolve into only four models, and once you can name which one your state uses, you can predict most of its answers and, more usefully, predict what changes when you open a second location across a state line. For the same map applied to needle-depth thresholds, see our microneedling laws by state pillar.

Model 1 — Practice of Medicine Plus General Delegation

The most common model: a statute, rule, or board position declares that using a laser to alter tissue is the practice of medicine or surgery, and ordinary physician-delegation law then decides who may operate. New Hampshire and West Virginia write lasers into the statutory definition of surgery; Minnesota into the definition of the practice of medicine; Arkansas, Hawaii, Michigan, Mississippi and South Carolina reach the same result by board position. California and New York anchor the strict end, confining medical-depth procedures to physicians and their clinical delegates, with New York treating unlicensed practice as a criminal matter — see the California laser safety guide and the New York laser safety guide. These states look permissive on paper and still produce enforcement actions, because the rule is not "anyone trained may operate" but "anyone the physician may lawfully delegate to may operate."

Model 2 — Device-Specific Delegation Rules

A smaller group writes rules for the device itself, distinguishing ablative from non-ablative work and naming the permitted delegates for each: Ohio, Illinois, Alabama, Colorado, New Mexico, Maryland and Washington. Texas belongs here too, delegating to qualified non-physician personnel while holding certain duties nondelegable — the Texas laser safety and cosmetic procedures guide covers how that delegation must be documented. These are the most navigable states and the most unforgiving: a rule naming four permitted roles has by implication excluded everyone else.

Model 3 — Operator Licensure

Georgia, Arizona, Texas, Iowa and Ohio (for hair removal) have built real credentials for non-clinician operators. This model produces the broadest operator pool and the heaviest paperwork: a state certificate, defined training hours, and usually facility registration plus a named consulting physician. Arizona also represents the full-practice-authority pattern, where an NP may order and perform independently once licensing requirements are met — the Arizona laser safety guide shows how an NP-led program is structured.

Model 4 — Cosmetology Carve-Outs, and the States That Say Nothing

A few states solve the question from the cosmetology side, creating an advanced esthetics tier that may perform non-ablative energy work under clinical supervision: Nevada, North Dakota, Oregon and, more narrowly, Wisconsin and Washington. It is the fastest-moving model in the country — North Dakota's license only took effect on January 1, 2026 — and the most misread, because an advanced esthetics license is not a laser license. Then there is the residue: states that say little about med-spa lasers at all. Operators read that silence as permission; it is the opposite. Where the statutes are quiet the medical practice act still governs, and the standard of care and the plaintiff's attorney fill the vacuum. Florida is the instructive case — the Florida med spa laser safety guide explains why thin oversight is a liability trap, not a green light.

The 2026 Skin and Laser Deep-Dive Series

This pillar is the hub of our 2026 skin and laser cluster; each guide takes one slice further than this overview can:

• Laser and chemical peel complications — prevention, patient selection, and the adverse-event SOPs and consent that protect a practice.
• California esthetician and advanced skin scope — peels, microneedling, dermaplaning, and the medical line in a strict framework.
• California laser safety for med spas — supervision and standardized procedures in California.
• Texas esthetician and advanced skin scope — the Texas surface-work boundary.
• Arizona esthetician and advanced skin scope — esthetician scope in a full-practice-authority state.
• Texas laser safety and cosmetic procedures — the delegation model and its nondelegable duties.
• Arizona laser safety for med spas — structuring an NP-led laser program.
• Georgia laser safety for med spas — delegation and the cosmetic laser practitioner license.
• New York laser safety for med spas — the strict framework and its criminal exposure.
• Florida med spa laser safety — why thin regulation is a liability trap.
• RF microneedling protocol — depth settings and why RF microneedling is a delegated medical act.

Summary — 7 Actionable Takeaways

This pillar consolidates the federal floor and the cross-state framework, but it cannot replace state-specific verification: map your menu against your state's medical practice act, nurse practice act and cosmetology rules, build the matrix, and have a healthcare attorney review the delegation structure before it goes live. Pair it with the flagship med spa regulations by state reference and the medical director requirements guide.

1. The epidermis is the line. Surface work is esthetics; breaching the dermis with a needle, laser, or medium/deep peel is medicine. Almost every scope question resolves to which side a procedure sits on.
2. Aesthetic lasers are prescription medical devices. Operating one is a medical act requiring a physician or a lawful delegate, not a certification.
3. ANSI Z136.3 requires a Laser Safety Officer. Designate a trained LSO and maintain eyewear, controlled-area, plume and maintenance controls.
4. The good-faith exam gates every device treatment. A physician, NP, or PA must assess the patient and order the treatment before a delegate performs it. An intake form is not an exam.
5. Peel and microneedling scope is set by depth. Superficial peels and shallow microneedling can be esthetician work; medium and deep peels and RF microneedling are delegated medical acts almost everywhere.
6. Complications drive the lawsuits. Burns, PIH, scarring and infection trace to patient selection and parameter errors. Prevent with screening and test spots; manage with a written adverse-event SOP.
7. Verify by patient-location state. California and New York are strict, Texas delegates with structure, Arizona allows NP independence, and quiet states are risk rather than freedom.

Frequently Asked Questions

This article is for educational purposes only and does not constitute legal or medical advice. Skin, laser, and chemical peel scope rules vary by state and change frequently. Always confirm current requirements with your state medical board, state board of nursing, state cosmetology or esthetics board, and a licensed healthcare attorney before making compliance decisions for your practice.