Telehealth Prescribing at Med Spas by State: Remote Exams, Remote Oversight and What Crosses a State Line

The phrase we do it by telehealth is doing an enormous amount of work in the aesthetics industry, and it is usually being asked to answer two questions at once. The first is whether a prescriber may evaluate a patient and issue an order without being in the room. The second is whether a physician may hold the medical director role for a practice they rarely visit. These are different rules, written by different parts of a state's code, and a state can say yes to one and no to the other. Florida does exactly that.

This guide takes the remote-delivery axis and follows it through both questions, using what our own sixteen state guides already establish, and then adds the layer that almost no aesthetics content handles correctly: the prescribing rules. Which federal law reaches which drug, what the Drug Enforcement Administration's 2026 position actually is, why a GLP-1 programme is not touched by any of it, and where the compounded-product and pharmacy-board questions sit. If you want the mechanics of remote directorship itself — what it means, what documentation proves it, how often the physician should appear — that has its own home in our remote and telehealth medical director guide, and this page does not duplicate it.

Why Remote Prescribing and Remote Supervision Are Two Different Questions

Most compliance failures here begin with a category error rather than a rule anyone broke. An operator establishes that their state permits telehealth, concludes the remote arrangement is therefore fine, and stops. Telehealth permission answers one narrow question; a med spa depends on at least two.

The prescription is a discrete legal event

Every prescription-only product a med spa administers exists because a prescriber decided, for one identified patient, that it was indicated. That decision carries its own requirements: an evaluation sufficient to support it, a prescriber authorised to make it in that jurisdiction, and a record. Whether the prescriber was physically present is one attribute of that event, not the event itself. This is why states write telehealth rules as modifications to the prescribing rule rather than as separate permissions — Virginia's sits inside Va. Code § 54.1-3303, and California's alongside Business and Professions Code § 2242.

Supervision is a continuing relationship

Medical direction is not an event. It is a standing relationship in which a physician takes responsibility for protocols, delegation, competence, adverse outcomes and availability across every treatment the practice performs, including the ones they never saw. A rule about whether a video call can substitute for an in-person examination says nothing about whether that relationship can be run from three hundred miles away. Different statutes, different tests — and in New York a different framing entirely: Education Law § 6530(11) asks whether supervision was appropriate to what was delegated, judged after the fact.

Where the conflation actually bites

The costly version of this error is a practice that hires a remote physician, has that physician run video good faith exams, and treats the exams as the supervision. As our remote-director guide puts it, a telehealth exam clears a patient; it does not supervise a practice. The inverse error is just as common: a compliant local director alongside evaluations generated by a questionnaire nobody clinically reviewed. Both boxes are ticked separately, and a board that finds one satisfied will still ask about the other.

The Two Layers: Federal Controlled-Substance Law and State Board Rules

Before any state comparison is useful, be precise about which rule comes from where. The two layers are constantly conflated in industry commentary, and the conflation runs in the direction of making operators more frightened than the law requires.

What the federal layer governs

The federal layer is narrow and specific. It concerns controlled substances — drugs in Schedules I through V under the Controlled Substances Act — and is administered by the DEA. Its telemedicine content sits in the Ryan Haight Online Pharmacy Consumer Protection Act of 2008, codified at 21 U.S.C. § 829(e), which provides that a controlled substance may not be delivered, distributed or dispensed by means of the Internet without a valid prescription, and defines that as one issued by a practitioner who has conducted at least one in-person medical evaluation, subject to the practice-of-telemedicine exceptions at 21 U.S.C. § 802(54). Nothing in it reaches neurotoxins, fillers, or an evaluation for a non-scheduled drug.

What the state layer governs

The state layer is where aesthetics actually lives. Each state's medical practice act, nursing act and board rules decide who may prescribe, what evaluation must precede a prescription, whether it may be conducted remotely, on what technology, with what consent, and where the prescriber must be licensed. It also decides supervision and delegation, and it is the layer that generates enforcement against aesthetic practices. Boards do not typically bring DEA cases; they bring unprofessional-conduct cases about evaluations that did not happen.

Why the state layer is almost always the answer

Put the two together and a useful rule emerges: for the overwhelming majority of what a med spa prescribes, the federal telemedicine rules are irrelevant and the state rules are decisive. Content that leads with the DEA gets the emphasis backwards and gives operators a false sense that an extended federal flexibility makes their model safe. It does not, because the flexibility was never what authorised the model. A state that permits remote evaluation permits it; a state that conditions it conditions it. The layers interact only where a practice carries a scheduled product, and there the stricter rule controls.

Ryan Haight, the DEA Flexibilities and the 2026 Position

Because the federal position has changed repeatedly since 2020 and a great deal of what is written about it online is stale, it is worth stating the current position precisely and dating it.

What the statute requires by default

Absent an exception, Ryan Haight requires at least one in-person medical evaluation by the prescribing practitioner before a controlled substance may be prescribed by means of the Internet. The statute's telemedicine exceptions are narrow and mostly institutional — treatment in a DEA-registered hospital or clinic, in the physical presence of another registered practitioner, through an Indian Health Service or Veterans Affairs practitioner, in a declared public health emergency, or under a special registration DEA has never fully stood up. A commercial telehealth weight-management service fits none of them.

The fourth temporary extension

Rather than let the default snap back, DEA and the Department of Health and Human Services have repeatedly extended the COVID-era flexibilities. The current instrument is a fourth temporary extension published on 31 December 2025, running 1 January 2026 through 31 December 2026, under which DEA-registered practitioners may continue to prescribe controlled substances via telemedicine to patients who have not had a prior in-person evaluation. It adds no new conditions; its stated purpose is to prevent an abrupt loss of access while DEA finalises a permanent rule and the special-registration framework meant to accompany it.

What the extension does not do

Three limits are routinely missed. First, it is temporary and dated: a workflow built on it has a known expiry, and anyone prescribing scheduled products remotely should watch for the permanent rule rather than assume continuity. Second, it does not pre-empt state law — a state requiring an in-person evaluation before a controlled-substance prescription still requires it, and New York's 10 NYCRR § 80.63 survives every federal extension. Third, it does nothing for non-scheduled drugs, which were never in scope. If your practice carries no scheduled product, the expiry is not an event in your calendar.

Why Most Aesthetic Prescribing Never Touches the DEA Layer

This is the section most operators need and least often get, because it converts an anxious question into an inventory exercise. Sort your formulary by schedule and the federal question answers itself.

The non-scheduled majority

Botulinum toxin in all its branded forms is a prescription drug and is not a controlled substance. Neither are hyaluronic acid fillers, biostimulators, hyaluronidase, deoxycholic acid, most sclerosants, or the prescription topicals a medical aesthetics practice dispenses. Nor — the commercially significant one — are the GLP-1 receptor agonists. For all of these, Ryan Haight has nothing to say, the 2026 extension is not what permits your model, and the only questions are state questions.

The scheduled products a med spa may actually carry

The exceptions cluster in three service lines. Weight management brings phentermine, a Schedule IV anorectic and the single most likely scheduled drug in an aesthetics-adjacent practice. Hormone programmes bring testosterone, Schedule III. Practices offering procedural sedation or anxiolysis may carry a benzodiazepine, and a small number of wellness practices offer ketamine, Schedule III. Each pulls the practice into the federal rules and, more importantly, into the state controlled-substance telehealth restrictions alongside them.

Telehealth Prescribing and Remote Supervision by State: The Comparison Table

Each row reflects what our own state guide establishes, plus the state's telehealth instrument where our guide cites it, and links to that guide. The remote GFE column answers only the delivery question: may the pre-treatment prescriber evaluation be conducted other than in person? It does not answer what the evaluation must contain or who may perform it — our good faith exam by state pillar owns those questions in full.

This table covers the sixteen states where we hold dedicated scope and medical director guides. It is not a fifty-state table. Do not read a row across to a state that is not listed — telehealth is where neighbouring states diverge most. For any jurisdiction outside these sixteen, start with our med spa regulations by state reference and confirm with that state's board.

How to read the remote GFE column

A green cell means the state permits the pre-treatment prescriber evaluation to be delivered other than in person, at the same clinical standard. It never means the standard is lower: Illinois, Ohio and Tennessee all reject the idea of a looser telehealth medicine, and Texas statutorily bars a higher standard from being imposed on telemedicine, which cuts both ways. An amber cell means the permission is conditional, contested, or absent from our own state guidance for this use. There are no red cells, because no covered state flatly prohibits remote prescriber evaluation for non-scheduled aesthetic drugs.

How to read the modality column

Note what is not in it: outside Georgia's technology test and Colorado's synchronous requirement for APRN mentorship, almost no covered state prescribes a specific technology for an aesthetic evaluation. That absence is not permission to use the cheapest channel. It means the modality question collapses back into the parity question, and parity is assessed against the clinical task rather than against the statute.

Where the table says unsettled

Three rows say unsettled, each for a different reason. New York is unsettled because Public Health Law Article 29-G authorises telehealth broadly and no New York board has issued guidance on remote evaluation for cosmetic injectables — the modality is lawful, the application unaddressed. Illinois and Washington are unsettled in the same shape, which is why our good faith exam pillar flags both. Arizona is different: the state's telehealth statute is permissive, but our own Arizona guidance describes a face-to-face prescriber evaluation before a new cosmetic patient is injected. Where our state guidance and a general telehealth statute point different ways, we have taken the more conservative reading rather than forcing a yes.

Modality: Video, Audio-Only and Store-and-Forward Are Not Interchangeable

Modality is where the largest gap sits between what operators believe their state permits and what a board would accept.

Synchronous video is the only broadly defensible default

Across all sixteen states, a live two-way audio-video encounter in which the prescriber sees the patient and the treatment area, takes a history, discusses the plan and documents a decision is defensible — our New York guidance calls it exactly that. It is also the only modality defensible everywhere, which is a strong argument for standardising on it rather than building a per-state matrix for the intake team to remember.

The audio-only trap: reimbursement rules are not scope rules

Several states define telehealth broadly enough to include audio-only telephone communication. New York's Article 29-G does; Michigan's framework contemplates secure audio-only. It is easy to read that as permission for an audio-only good faith exam, and it usually does not follow. First, a large share of the audio-only authority people cite is reimbursement policy — what a Medicaid programme or a commercial payor will fund — and a payment rule has no bearing on whether an encounter satisfies a prescribing standard. Second, even where the modality sits squarely within the statutory definition, the operative test remains parity. An aesthetic assessment turns on facial anatomy, asymmetry, prior product, skin condition and vascular risk; a prescriber who cannot see the face has not performed it, and no definitional inclusion cures that.

Store-and-forward and the asynchronous intake form

Asynchronous or store-and-forward review — photographs, history and questionnaire reviewed by the prescriber without a live encounter — is expressly contemplated in California under section 2290.5 and in Virginia under § 54.1-3303, and Ohio permits asynchronous technology at an initial visit where the standard of care for one is satisfied. That is a genuine capability, and not a licence for the form-only model most telehealth aesthetics platforms run. The distinction is whether a prescriber applied clinical judgment to that patient's material and recorded a decision, or whether an approval issued because the form contained no red flags. The second is not an asynchronous evaluation; it is an absent one wearing a timestamp.

What Ohio's initial-visit rule actually permits

Ohio repays close reading, because ORC 4743.09 is unusually explicit and is often quoted at half length. It requires each licensing board to set a telehealth standard of care equal to the in-person standard, and permits synchronous or asynchronous technology at an initial visit if the appropriate standard of care for an initial visit is satisfied. The conditional clause is the rule. It also preserves the professional's right to refuse telehealth, and permits a board to require an initial in-person visit before a Schedule II prescription to a new patient, with carve-outs for hospice and palliative care, opioid use disorder medication, mental health conditions and clinical emergencies.

The Remote-Delivery Axis of the Good Faith Exam

Everything above assumes you already know what a pre-treatment evaluation is and who may perform it. If not, that is a different guide: our good faith exam for med spas by state pillar covers the definition, the who-may-perform matrix, the documentation checklist and the re-exam triggers across the same sixteen states. What follows is strictly the delivery question, in the three postures the covered states take.

Prior in-person requirements, and how rare they are

A genuine prior in-person requirement — a rule that the prescriber must have physically examined this patient before a remote order is valid — is rarer than industry commentary suggests. Among the sixteen, none imposes one across the board for non-scheduled aesthetic drugs. Where such requirements appear they attach to controlled substances rather than to the modality generally: New York's 10 NYCRR § 80.63 requires an in-person evaluation by the prescribing practitioner before a controlled-substance prescription issues, and Ohio permits a board to impose one for a Schedule II prescription to a new patient. In-person rules follow the schedule, not the specialty.

Conditional permissions: Georgia and Virginia

Two states write conditions into the rule text rather than relying on a general parity standard, and both should be read literally. Georgia Board Rule 360-3-.07 authorises care by electronic means where a Georgia-licensed physician, PA or APRN has personally seen and examined the patient, or acts at the request of a Georgia-licensed provider who has, or can examine the patient using technology and peripherals equal or superior to an in-person examination — with documentation required and diligent efforts to have the patient seen in person by a Georgia-licensed provider at least annually. Rule 360-3-.02 separately treats prescribing based solely on an electronic consultation as unprofessional conduct. Virginia § 54.1-3303 requires the prescriber to have a medical history available for review, obtain an updated history at the time of prescribing, make a diagnosis then, and meet the in-person standard of care. Neither is satisfied by a video call that skipped a step.

Lawful in principle, unsettled in application

The third posture is the awkward one. New York, Illinois and Washington all permit remote evaluation as a matter of general telehealth law, and none has said anything specific about cosmetic injectables. That silence is neither permission nor prohibition; it means the standard of care is the whole question, assessed after the fact, by a board, on your chart. The operational answer in an unsettled state is to over-document rather than to argue: live video, the treatment area visible, an assessment recorded in the prescriber's own words, the order patient-specific, and consent to the telehealth format captured as its own entry.

Where the Licence Must Be Held, and What Compacts Actually Buy

Licensure is the question that voids the largest number of otherwise-thoughtful telehealth arrangements, and it does so quietly, because nothing about a remote workflow looks different when the licence is wrong.

The practice occurs where the patient is

Every covered state resolves this the same way: the practice of medicine occurs where the patient is physically located at the time of the encounter, so the prescriber must hold a licence issued by that state. Colorado's Medical Board says so expressly. Virginia reaches the same result, and our Virginia guidance draws out the Northern Virginia consequence — a physician licensed only in the District of Columbia, Maryland, North Carolina or West Virginia cannot treat Virginia patients, telehealth included. Illinois, Ohio and Tennessee are equally clear, and Tennessee adds an active in-state practice requirement under its med spa rule.

What an interstate compact is and is not

The Interstate Medical Licensure Compact is an expedited application pathway. A physician using it still receives a separate, full licence from each participating state, pays each state, renews in each state, and answers to each state's board. It compresses the calendar; it does not create a national licence and it does not let a physician prescribe into a state that has not issued them one. Two of the largest aesthetic markets are outside it: California is not a compact jurisdiction, as our California guidance notes, and neither is New York. The nursing and physician assistant compacts carry the same limit. Before signing a lease across a state line, verify the prescriber's licence on that state board's own lookup rather than on a résumé — the multi-location capacity question that follows is covered in our remote and telehealth medical director guide.

Out-of-State Telehealth Registration: A Third Route That Is Not a Licence

Two of the sixteen states have built a middle path that is neither full licensure nor an exception, and it is misunderstood in both directions — treated as unavailable by those who could use it, and as a licence by those who cannot.

Arizona's interstate telehealth registration

Under A.R.S. § 36-3606, a provider not licensed in Arizona may deliver telehealth services to a person located in Arizona if they hold an active, unrestricted licence elsewhere and register with the applicable Arizona board. Registrants renew annually and report the number of patients served in Arizona and the number and type of encounters. Registration is not required for services delivered in response to an emergency medical condition, in consultation with an Arizona-licensed provider who holds ultimate authority over diagnosis and treatment, or as after-care for a procedure delivered in person in another state. Separately, A.R.S. § 36-3602 holds telehealth to the in-person standard of care and requires identity verification and documentation.

Florida's out-of-state telehealth provider registration

Florida operates a comparable route under s. 456.47(4), allowing a professional not licensed in Florida to treat a patient located in Florida by telehealth after registering with the applicable board and working within the Florida scope of practice. The limits are express: a registrant may not open an office in Florida or provide in-person services to Florida patients, and must maintain professional liability coverage extending to telehealth services outside their home state. Florida's controlled-substance restriction sits in the same section — a telehealth provider may not prescribe a Schedule II controlled substance except in enumerated circumstances including psychiatric treatment, hospital inpatient care, hospice and nursing home residence, while Schedules III through V may be prescribed remotely.

Why registration does not make someone your medical director

This is the point our Arizona guidance makes with unusual force, and it generalises. Telemedicine registration permits remote consults. It does not authorise the holder to serve as the supervising physician for a bricks-and-mortar med spa in that state, and where a facility operates with a registered but unlicensed out-of-state physician in the director role, every procedure performed during the engagement is exposed as unauthorised practice. Florida arrives at the same place from the other direction: a registrant who may not open an office or deliver in-person care in Florida is structurally incapable of meeting the on-premises supervision expectation Florida applies to registered-nurse injection. Registration is a narrowly drawn patient-care permission, never an oversight credential.

Telehealth GLP-1 Prescribing in 2026

Weight management is the service line that made telehealth prescribing a mainstream med spa question, and it is also the line where the legal analysis is most often imported from the wrong place.

Semaglutide and tirzepatide are not controlled substances

Start here, because it disposes of most of the anxiety. GLP-1 and dual-agonist products are prescription drugs and are not scheduled. Ryan Haight does not reach them, the DEA's temporary extension does not authorise them, and its expiry does not threaten them. Nor do the state controlled-substance restrictions apply: Florida's Schedule II bar does not touch semaglutide, and New York's in-person requirement under 10 NYCRR § 80.63 reaches phentermine and not semaglutide or tirzepatide, a distinction our New York guidance draws expressly.

Where the friction actually is

Four real constraints remain, and they are what to build the programme around. Licensure in the patient's state, the binding constraint for a national telehealth brand and the most common defect. Depth of evaluation: indication, comorbidity, contraindications including personal or family medullary thyroid carcinoma and MEN2 history, current medications, and a measurable baseline. Consent to the format, captured as its own record. And continuity: titration, tolerability review and the point at which the patient is escalated or stopped. All four are harder to evidence when the encounter was remote. Our GLP-1 med spa compliance guide works through the rest of that programme design.

Phentermine is a different drug and a different rule

Phentermine is Schedule IV, and the moment it enters the formulary both the federal and the state controlled-substance layers switch on. Under the current federal extension a prior in-person evaluation is not required through 31 December 2026, but the state rule is independent and can be stricter — in New York the in-person requirement stands regardless. Florida permits Schedules III through V by telehealth, so phentermine is available there remotely, subject to clinical justification and prescription drug monitoring obligations. Texas restricts audio-only prescribing of scheduled drugs for chronic pain — a different clinical context, but a reminder that audio-only plus controlled substances is a combination states legislate about.

The intake that applies one standard to two regimes

The design failure to avoid is a single funnel. If your intake form, video call and order set are identical whether the patient ends up on semaglutide or on phentermine, you have applied the non-scheduled standard to a scheduled drug — the point our New York guidance makes directly about weight-loss practices running both through one telehealth intake. Split at drug selection: let the non-scheduled branch run your standard remote workflow, and let the scheduled branch carry the steps that state requires — in-person evaluation where mandated, monitoring-programme check, and a tighter refill cadence.

Compounded GLP-1 Sourcing by Telehealth and the Pharmacy-Board Layer

Sourcing is where a telehealth weight-management model stops being a prescribing question and becomes a product question, and it brings a third regulator into the room.

What changed when the shortages resolved

The compounded GLP-1 market was built on drug shortage status. FDA resolved the tirzepatide shortage in December 2024 and the semaglutide shortage in February 2025, with phased enforcement deadlines winding shortage-driven compounding down. In April 2026 FDA proposed excluding semaglutide, tirzepatide and liraglutide from the 503B bulk drug substances list, on the basis that outsourcing facilities have no clinical need to compound them from bulk active ingredient, and legal challenges have not obtained preliminary relief. Any telehealth programme still running on a 2024 sourcing assumption is running on a superseded premise; our 503A versus 503B sourcing guide works the current position through in detail.

The narrow 503A pathway that survives

What remains is patient-specific compounding under section 503A, resting on a documented clinical difference the approved product cannot meet for that individual patient. The statutory limit that matters is the prohibition on compounding a drug that is essentially a copy of a commercially available one regularly or in inordinate amounts. Read that against a telehealth platform's economics and the tension is obvious: a model whose value proposition is a cheaper version of an approved product, dispensed at volume, is describing the conduct the prohibition names. The clinical-difference determination is the prescriber's, for the patient, and recorded — not a checkbox the pharmacy supplies.

State pharmacy boards are a separate regulator

This is the layer telehealth operators forget. A state pharmacy board licenses the pharmacy, regulates non-resident pharmacies shipping into the state, and takes positions on office use, on what may be dispensed without a patient-specific prescription, and on compounded products it considers problematic. Its jurisdiction is independent of the medical board's, so a prescribing arrangement can be clean under the medical practice act and still generate a pharmacy-board problem at the sourcing end. The specific telehealth exposure is the non-resident pharmacy: it must be licensed or registered in the patient's state, and while that obligation is the pharmacy's, the consequences land on the patient and, reputationally, on you.

What a defensible telehealth compounding arrangement shows

Four records, kept per patient rather than per contract: the prescriber's documented reason the compounded formulation is clinically necessary for this patient rather than the approved product; the patient-specific prescription, not a bulk order; evidence of the pharmacy's licensure or registration in the patient's state, refreshed rather than filed once; and the recorded consent conversation in which the patient was told the product is compounded, that compounded products are not FDA-approved, and what that means. A practice that can produce those four for a randomly chosen patient is in a very different position from one that can produce a supply agreement.

Available Versus On-Site: What the Rule Text Actually Says

Supervision language uses a small vocabulary of terms that look interchangeable and are not. Reading them precisely separates a remote arrangement that holds from one that fails on its own words.

Immediately available

The most common formulation asks the supervising physician to be immediately available, reachable, or available for consultation while the practice is operating. On its face this permits distance, and in most covered states it does. What it demands in return is reachability that can be demonstrated — a channel staff actually use, a response time the practice can evidence, and a physician not simultaneously unavailable for another reason. Our California guidance frames the test usefully: could the director say, from their own knowledge, what devices you own, who is authorised to use each, and what happened in your last complication?

Physically present on the premises

A minority of rules require actual presence, and where they do, no technology substitutes. Florida is the example that most often catches operators by surprise: for a registered nurse performing a delegated injection, direct supervision means the physician is physically on the premises and immediately available to intervene, and recent Board of Nursing guidance treats remote or standby availability as insufficient. Two cautions belong with that. The Board's declaratory statements are issued to individual petitioners, have pointed in different directions, and do not create a general rule, so a Florida RN-injection model should be reviewed with Florida counsel. And the rule is about who injects: it is a delegation rule, not a blanket bar on remote direction in Florida.

Appropriate to what was delegated

New York writes the standard as a function of the act rather than the distance. Education Law § 6530(11) requires supervision appropriate to what was delegated, assessed on the facts after the event, which means a procedure whose foreseeable complications need immediate physician intervention is not appropriately delegated to a remote-only arrangement, while a lower-acuity treatment may be. That produces a per-service answer rather than a per-practice one. The practical response is to grade your own menu: which treatments could go wrong in a way that needs a physician in the building within minutes, and are those the ones you run with nobody there?

Building a Telehealth Prescribing Workflow That Survives an Audit

Everything above converges into a small number of build decisions. None is difficult; all of them are easier to make once than to retrofit after a complaint.

Decide the modality per service, not per practice

Write the permitted modality into each service protocol rather than adopting one practice-wide telehealth policy. A follow-up neurotoxin review, a new-patient filler consultation and a GLP-1 titration check carry different parity thresholds. Put the modality in the protocol, alongside the product and dose, so the person running the schedule does not have to make the judgment.

Capture telehealth consent as its own record

Michigan makes it a statutory obligation under MCL 333.16284, California requires the patient to be informed of the format with consent documented, and every other covered state will read a missing format consent as evidence about how the encounter was run. Do not fold it into the treatment consent: it is a separate fact — that this patient agreed to be evaluated remotely, on this date, having been told what that meant.

Make the order patient-specific and traceable

The single most damaging finding in remote aesthetics is an order that turns out to be a batch. Washington's position is explicit that a protocol pre-approving everyone who books, or a prescriber signing orders on Friday for treatments already performed, is not an evaluation but a record that no evaluation happened. The chart should show who evaluated the patient, when, what was assessed and what was ordered — Michigan states it in exactly those terms. If your system cannot produce that four-part answer for a randomly chosen visit, the workflow is the problem. Standing orders have a legitimate role alongside patient-specific ones, and our standing orders and written protocols guide sets out where each belongs.

Re-verify whenever you cross a line

Keep a per-state register of which prescribers hold which licences, with expiry dates and the board lookup used to verify, and treat a new state, a new service, a new drug schedule or a new delegate as a trigger to re-run the whole analysis rather than to extend the existing one. That is also the point at which the underlying documents have to change, not just the policy — protocols, delegation agreements, consents and chart-review logs are all state-specific artefacts. If you would rather not build that set from a blank page, our library of ready-to-use med spa compliance SOPs covers the intake, consent, oversight and documentation templates a remote prescribing model has to produce, and our medical director requirements guide covers the oversight side of the same arrangement.

What This Guide Does Not Cover

A comparison invites over-reading, so the edges are worth stating plainly.

Sixteen states, not fifty

The table covers Arizona, California, Colorado, Florida, Georgia, Illinois, Michigan, New York, Ohio, Tennessee, Texas, Virginia and Washington — the states where we hold dedicated scope and medical director guides with the underlying rules worked through. It is not a fifty-state answer and no row should be read across to a state that is not listed. For anywhere else, start with our cited fifty-one jurisdiction reference at med spa regulations by state. It is also the remote-delivery axis only: what the evaluation must contain, who may perform it, who may inject afterwards, and what a medical director owes are separate questions with their own pillars — the good faith exam by state guide, who can inject Botox in the United States, esthetician scope of practice by state, and the remote and telehealth medical director guide.

It is a snapshot of the fastest-moving area we cover

Telehealth rules have changed repeatedly since 2020 and are still changing. The federal position rests on a temporary instrument expiring 31 December 2026, with a permanent rule still pending. The compounded-product position moved in April 2026. State boards continue to issue guidance, and three of our sixteen have not spoken to cosmetic injectables at all. Treat every date here as a date, re-check anything load-bearing, and prefer a workflow that survives the stricter reading over one that depends on the current flexibility persisting.

This article is for informational purposes only and does not constitute legal advice. Telehealth, prescribing and supervision requirements are set by each state's legislature, medical board, nursing board and pharmacy board, and by federal agencies including the DEA and FDA, and they change frequently; the federal telemedicine flexibilities described here are temporary and dated, several state positions described here — including remote evaluation for cosmetic injectables in New York, Illinois and Washington, and registered-nurse injection supervision in Florida — are genuinely unsettled. Confirm current requirements with the relevant state agency and consult a healthcare attorney licensed in your state before building or changing a telehealth prescribing or remote supervision arrangement.

Frequently Asked Questions