Virginia Med Spa Compliance Checklist (2026): Full Guide

Virginia is the state where operators most often assume there is nothing to comply with. There is no Virginia med spa license, no registry, and no statute in the Code of Virginia using the phrase “medical spa.” That absence is the trap: everything involving a prescription drug or a medical device is the practice of medicine, which is tightly governed here — just by general law rather than an aesthetics chapter.

Four bodies each take a piece: the Board of Medicine (physicians, PAs, delegation, lasers), the Board of Nursing (RNs, LPNs, nurse practitioners), the Board of Pharmacy (drug handling and dispensing), and the Board for Barbers and Cosmetology (estheticians and your spa establishment license). One treatment can implicate three at once: a nurse injecting a filler ordered by a nurse practitioner from practice stock touches Nursing, Medicine, and Pharmacy in a single motion. Because no agency owns med spas, none publishes a checklist. Run this one before you open, before you add a procedure, and before any board inquiry — and see our med spa regulations by state reference for how Virginia compares.

What Virginia Actually Regulates (and What It Does Not)

There is no Virginia med spa license

Virginia does not license or register medical spas, and the Board of Medicine issues no med spa facility permit; vendors claiming otherwise are wrong. The medical side is regulated entirely through who is licensed to deliver care and what they may delegate. The only establishment license most Virginia med spas need is the spa establishment license from the Board for Barbers and Cosmetology (18VAC41-70-80) — an occupational license for the esthetics side, not a healthcare facility license.

What the practice of medicine sweeps in

Neuromodulators, fillers, biostimulators, medical lasers and IPL, microneedling below the epidermis, IV therapy, hormone pellets, and weight-loss prescribing are all the practice of medicine here. Va. Code 54.1-2902 makes unlicensed practice unlawful, and Va. Code 54.1-111 makes it a Class 1 misdemeanor — a Class 6 felony on a third conviction within 36 months. The licensee who improperly delegates faces discipline too. For the federal floor beneath all of this, see our guide to what med spa compliance requires in 2026.

1. Physician Oversight and the Medical Director Virginia Never Named

The phrase “medical director” appears nowhere in the governing law, yet the function is unavoidable. Va. Code 54.1-2901 is the load-bearing wall: every medical act must be performed by someone licensed to perform it, or delegated by a licensee who directs it, supervises it, and remains responsible for it.

Why the role exists anyway

If an RN is injecting, a prescriber evaluated the patient and wrote the order. If a technician is lasering, a licensee is supervising. Aggregate those duties across a menu and you have described a medical director in all but name — which is why Virginia med spas retain a physician, or an autonomous nurse practitioner for services within NP scope, under a written agreement.

What the agreement should actually say

Name the procedures covered and the supervision standard for each, because Virginia does not use one standard: laser hair removal requires the supervisor to be readily available, while certain delegated drug administration requires direct and immediate supervision. Set a chart-review cadence and record that it happens. Pay fair market value, never a share of revenue. A name on a wall with no documented involvement is the finding that turns a complaint into a Board case. Our guide to med spa medical director requirements covers the role nationally.

2. Delegation: What Can Be Handed Off, and Under Which Standard

The statutory hooks

Va. Code 54.1-2901 permits nurses and technicians to give injections and intravenous infusions under the orders of a licensed physician, osteopath, advanced practice registered nurse, or physician assistant. A separate clause permits delegation of activities that are nondiscretionary, require no professional judgment, and for which the practitioner assumes responsibility. Va. Code 54.1-3408 adds that properly trained personnel may administer drugs on a specific patient order under direct and immediate supervision, with limits on route.

Read the supervision standard, not just the word

Virginia uses at least three intensities, and confusing them is the most common documentation failure. Direct and immediate supervision means physically present and immediately available. Direction and supervision for laser hair removal means readily available, without physical presence. Collaboration and consultation is the NP and PA standard under their practice agreements. Protocols should state which standard applies procedure by procedure, and how it is met on an ordinary Tuesday.

What does not survive delegation

Discretionary judgment: drug selection, dosing, planning, and candidacy stay with the ordering practitioner, and a protocol letting an injector decide them independently has crossed into unlicensed practice. Delegation cannot cure a scope problem either — no supervision authorizes an esthetician to inject or fire a laser — and delegation to an untrained person is not delegation.

3. The Bona Fide Practitioner-Patient Relationship

Other states say “good-faith exam.” Virginia says bona fide practitioner-patient relationship, codified at Va. Code 54.1-3303 with Board of Medicine expectations at 18VAC85-20-25. Every prescription drug a med spa uses — toxin, filler, lidocaine, a GLP-1, an IV bag — requires one first, cosmetic intent notwithstanding.

What the examination must include

The regulation is concrete: obtain a medical or drug history; give the patient information about the benefits and risks of the drug prescribed; perform, or have performed, an appropriate examination either physically or by instrumentation through which images and records may be transmitted electronically; and initiate follow-up care where necessary. Read that against a high-volume injectable day and the drift is obvious — thin histories, unrecorded risk discussions, an examination that collapses into a glance.

Who may perform it, and by telehealth

Only a practitioner with prescriptive authority — physician, nurse practitioner, or PA. A registered nurse cannot establish the relationship, however experienced. Virginia permits it to be established via telemedicine using interactive two-way real-time or store-and-forward technology where consistent with the standard of care. Two caveats belong in the protocol: the standard of care does not soften because the visit is virtual, and the prescriber must hold a Virginia license to treat a patient located in Virginia.

4. Injector Scope by Role

A physician may evaluate, prescribe, inject, and delegate — but only within their own training and competence, so a director supervising a filler program they have never performed is a gap dressed as a credential. The nationwide comparison is in our guide to who can inject Botox across the United States; here is how Virginia resolves each other role.

Nurse practitioners: agreement or autonomous

Until the Board of Nursing grants autonomous practice, an NP practices as part of a patient care team under a written or electronic practice agreement with a patient care team physician (Va. Code 54.1-2957). Since July 1, 2024 the threshold for the autonomous practice designation dropped from five years to the equivalent of three — roughly 4,500 clinical hours — with attestation (18VAC90-30-86). That is the most consequential recent change for NP-led Virginia med spas. Our NP med spa ownership playbook works through the models.

Physician assistants, and the HB 746 change still pending

PAs inject under a practice agreement with a patient care team physician (Va. Code 54.1-2952) covering the acts performed, periodic chart review, collaboration and consultation, and physician input for complex cases. In 2026 Virginia enacted HB 746 (Chapter 418), signed April 8, 2026, letting a PA with three years of full-time clinical experience practice without an agreement upon attestation from a patient care team physician. The operative provisions do not take effect until the Board of Medicine adopts implementing regulations — keep agreements current and verify status before restructuring around it.

Registered nurses

An RN may inject toxin and filler pursuant to a valid order from a practitioner who evaluated the patient, under the express injection language of Va. Code 54.1-2901. The order is the whole ballgame: the RN does not select product, dose, or candidacy. An RN-run practice where the prescriber never meaningfully evaluates patients is unlicensed-practice exposure with a nurse’s license attached.

LPNs, medical assistants, and estheticians

LPNs have a dependent scope, and prevailing Virginia practice treats cosmetic injection as registered-nurse-and-above; confirm with the Board of Nursing first. Unlicensed assistants sit in the narrowest position: Va. Code 54.1-3408 allows properly trained personnel to administer drugs on a specific order under direct and immediate supervision, but that standard is demanding, excludes intravenous routes, and building an injectable business on it is an aggressive read. Estheticians may never inject — Va. Code 54.1-700 places esthetics outside the healing arts, and supervision cannot expand a cosmetology license.

5. Laser and Energy Devices: The One Procedure Virginia Names

Legislators mostly left aesthetics alone, with one exception — a 2017 laser hair removal statute that is the most specific aesthetic requirement in Virginia law, and therefore the easiest to be caught violating.

The statute: Va. Code 54.1-2973.1

Laser hair removal may be performed by a doctor of medicine or osteopathic medicine, a physician assistant, or an advanced practice registered nurse — or by a properly trained person under the direction and supervision of one of those licensees. Nobody else. A cosmetologist or esthetician without that delegation relationship and training is practicing medicine unlawfully, and the delegating licensee owns the arrangement.

The ten proctored cases

18VAC85-20-91 puts numbers on the training duty: a licensee delegating laser hair removal to someone other than a PA or nurse practitioner must ensure that person completed training including a minimum of ten proctored patient cases with demonstrated competency across skin types, plus didactic content on laser physics, safety, and complications. 18VAC85-50-191 mirrors this for a PA. Keep the record on file — it is the first thing an investigator asks for.

Readily available, and evaluating complications personally

The supervisor need not be physically present, but must be readily available at the time of treatment. The companion duty is the one practices miss: the supervising practitioner must personally see and evaluate a patient who experiences a complication before treatment continues. A burn triaged by text, by a supervisor who never examines the patient, is a documented violation waiting to be found.

Everything that is not hair removal

Resurfacing, IPL, fractional and radiofrequency devices, tattoo removal, and body-contouring devices fall outside the hair removal statute and revert to the general Va. Code 54.1-2901 analysis. Virginia issues no laser operator license and no facility registration, so defensibility rests on delegation documentation, device-specific training, and a written safety program.

6. Esthetician Scope: Virginia Draws Its Line at the Epidermis

Where the line sits

Most Virginia med spas run an esthetics business beside the medical one, sharing rooms and staff, and that adjacency is where scope violations breed. Estheticians are licensed by the Board for Barbers and Cosmetology, and Va. Code 54.1-700 states that esthetics is not a healing art and excludes anything constituting the practice of medicine. Scope covers superficial, non-invasive care: cleansing, toning, extraction, makeup, mechanical hair removal, and — for master estheticians — lymphatic drainage, microdermabrasion, and chemical exfoliation of the epidermis. Nothing below the epidermis, nothing injected, nothing energy-based.

Peels: the specific ceilings

18VAC41-70-250 enumerates rather than implies. Chemical exfoliation of the epidermis requires a master esthetician, and the permitted agents are Jessner and modified Jessner solution, trichloroacetic acid at less than 20 percent, nonprescription alpha and beta hydroxy acids, nonprescription commercial products used per manufacturer instructions, vitamin-based acids, and enzymes. Anything deeper or prescription-strength is a medical procedure needing a licensee and a prescriber behind it.

Microneedling is not in the esthetics scope

Microneedling does not appear in Virginia’s esthetics scope, and the standing petition to add it for master estheticians reflects that it is not currently authorized. Treat microneedling that penetrates living tissue as a medical procedure: delegated by a licensee, performed by licensed or properly trained supervised personnel, under written protocol. The same applies to anything marketed as “medical grade” — depth of penetration and prescription status decide which board governs, not the marketing.

7. Drug Handling: Schedule VI and the Dispensing Line

Your Botox is a Schedule VI controlled substance

Virginia’s schedules run to six, and Schedule VI captures prescription drugs and devices not placed in Schedules I through V — so botulinum toxin, fillers, lidocaine, GLP-1 medications, and IV components are all controlled substances under Virginia law. That creates no DEA obligation, but it does mean Board of Pharmacy provisions written for controlled substances apply to your shelf, and operators who assume those rules are only about opioids miss requirements aimed squarely at them.

Administering is not dispensing

Administering is giving the drug in your office under the authority of the practitioner who ordered it — the ordinary injectable visit. Dispensing is providing product for the patient to take away: weight-loss pens, numbing cream, a hormone supply. Practitioner dispensing requires Board of Pharmacy authorization — for physicians, the license described as a practitioner of the healing arts to sell controlled substances, tied to a permitted facility. If product crosses the counter, confirm your permit status; separate controlled substances registration provisions (18VAC110-20-690) govern entities holding stock apart from a practitioner.

Sourcing and the compounded GLP-1 problem

Buy only from licensed wholesale distributors or pharmacies authorized to supply prescribers, keep invoices that reconcile to the shelf, and refuse grey-market foreign-labeled toxin. On weight-loss drugs the federal picture has hardened: with the semaglutide and tirzepatide shortages resolved and the grace periods over, compounded copies are defensible only in narrow, documented cases — our explainer on compounded GLP-1s and the 503A/503B distinction covers where the line sits.

8. Ownership: Virginia’s Quiet Corporate-Practice Posture

The business entity versus the professional entity

Virginia has no blanket corporate practice of medicine statute of the kind California and New York enforce, and nothing forbids a layperson from owning a business offering aesthetic services. But Va. Code 54.1-2902 makes unlicensed practice unlawful, and Va. Code 13.1-543 limits ownership of a professional corporation to individuals licensed or legally authorized to render the same professional service. Virginia groups healing-arts practitioners — physicians, advanced practice registered nurses, and related licensees — for this purpose, so the professional entity is not physician-only; an autonomous nurse practitioner may hold it, which is a cleaner path than strict-CPOM states allow.

How lay-owned Virginia med spas are structured

The prevailing structure is a management services organization: the lay-owned company owns premises, equipment, brand, and administrative systems and contracts them to a licensed professional entity that employs the clinical providers and controls clinical decisions. The boundaries carry the weight — the MSO cannot direct medical judgment, write clinical protocols, or override a treatment decision, and the fee should be defensible as fair market value rather than a disguised split of medical revenue. Spend money here: Virginia healthcare counsel before the entity is formed, not after the first Board letter.

9. Consent, Records, and the Notice Virginia Requires

Virginia has no cosmetic-specific consent statute. It has a standard of care, a Board of Medicine with broad authority over unprofessional conduct, and a records regulation containing a requirement almost nobody satisfies.

Consent that survives a complaint

Procedure-specific written consent, signed before treatment, covering the nature of the procedure, material risks, realistic outcomes, alternatives including no treatment, and who will actually perform it. That last element carries weight in a delegation state: a patient who believed a physician would inject and was treated by a nurse has a consent grievance independent of the result. Disclose off-label use explicitly — most aesthetic toxin and filler indications are off-label.

Six years, and the notice at 18VAC85-20-26

The Board of Medicine requires practitioners to maintain a patient record for at least six years following the last patient encounter. Records of a minor must be kept until the child turns 18 or is emancipated, with a six-year minimum regardless of age. Then the sleeper: practitioners must post or otherwise inform all patients of the time frame for record retention and destruction — one sign or one intake paragraph, and its absence is a free finding. Clinical photographs live inside the protected record; marketing use needs separate written authorization, and every vendor touching patient information needs a business associate agreement.

10. Emergency Preparedness and Adverse-Event Response

Virginia has no med spa emergency-equipment regulation, so this section is governed by the standard of care — and that standard is not “call 911.” The events that actually happen are anaphylaxis after an injectable or topical, vascular occlusion from filler, syncope, and laser burns. Each has a window measured in minutes and needs supplies and trained hands already in the building.

What the protocol must cover

Written, procedure-specific steps kept where they will be read under stress. Anaphylaxis recognition at the early-symptom stage, with epinephrine location and dosing stated. Vascular occlusion recognition and a hyaluronidase protocol wherever HA filler is used. A transfer plan naming the receiving facility. And the supervising practitioner’s role — which for laser hair removal is a regulatory duty to personally evaluate a complication before treatment continues.

Documentation and follow-through

Every adverse event should produce a written record of what happened, what was administered, who was notified, and what follow-up occurred — the reconstruction a year later is only as good as the note. Drill annually; revise after any event.

The Complete Virginia Med Spa Compliance Checklist

Run this table before opening, before adding a procedure, and before any board inquiry. Each row maps to a section above and names the board that will ask. If a row is a “no,” fix it before the next patient — and if you would rather not draft the documentation from scratch, our ready-to-use med spa compliance SOPs cover the policy and protocol side of every row.

This checklist is for informational purposes only and does not constitute legal or medical advice. Virginia has no med spa statute, so several items reflect how general law is applied in practice rather than a rule written for aesthetics — and one was still moving at publication: the physician assistant provisions of HB 746 (2026) await Board of Medicine regulations. Confirm current requirements with the Virginia Boards of Medicine, Nursing, and Pharmacy, and consult a Virginia healthcare attorney.

Frequently Asked Questions