Washington Med Spa Compliance Checklist 2026

Most state compliance checklists are really a licence application in disguise: find the facility permit, satisfy its conditions, pass the inspection, done. Washington does not work that way, and the difference is the whole reason this article exists. There is no Washington med spa licence. No agency approves your treatment menu, walks your treatment rooms as a medical facility, or tells you that the physician whose name appears on your protocol has never been trained in the procedure you are delegating to a nurse.

Nothing external will catch a structural error for you. A Washington practice can look immaculate from the street and pass its Department of Licensing salon inspection while being wrong in a way that only surfaces when a complaint arrives. The checklist below is our attempt to be the missing inspector — fifty discrete, checkable items across fourteen areas, each one something you either have on file or do not.

Every item carries its source. Where a Washington statute, rule, or agency stands behind it, the citation is printed under the item; where Washington is genuinely silent and the item reflects a defensible practice standard instead, it says best practice and means it. We have not invented a requirement to fill a row. If you want the underlying documents rather than the list, our ready-to-use med spa compliance SOPs cover the protocols, consent forms, and delegation templates each section refers to.

How Washington Regulates a Med Spa — and How to Use This Checklist

Before the items, the map — getting this wrong is why operators arriving from Arizona, Texas, or Florida make the same mistakes here.

Three agencies, no facility licence

The Washington Medical Commission writes the rules governing cosmetic injections and prescription-device treatments, and they attach to the physician who delegates. The Washington State Board of Nursing — renamed in 2023 from the Nursing Care Quality Assurance Commission, the NCQAC most binders still cite — governs ARNP, RN, and LPN practice. The Department of Licensing regulates esthetics under chapter 18.16 RCW. None of the three licenses a med spa as a facility.

How to work the list

Answer each item yes or no, never "probably" — an item you cannot evidence with a document is a no. Work the groups in order, because they build. Each group links to the Washington guide that explains the underlying rule in full, so the checklist doubles as an index to this cluster.

Entity and Ownership Structure

Ownership is first because it is the one item you cannot retrofit cheaply. Professional equity in the wrong hands is not a paperwork problem; it is a rebuild.

Where Washington draws the line

Washington's corporate practice of medicine posture is doctrinal rather than statutory, but the professional entity chapters do the practical work: a professional service corporation under chapter 18.100 RCW and a PLLC under chapter 25.15 RCW both restrict who may hold an interest in an entity organised to render professional services. Lay investors sit outside it, usually through a management services organisation — and the management agreement is where structures fail. Chapter 19.68 RCW separately prohibits rebating and fee-splitting, which is why oversight paid as a share of injectable revenue is an exposure rather than a saving.

The full analysis — professional corporations, ARNP ownership under full practice authority, MSO structures that hold up, and the 2026 ownership bill that died in the Senate — is in our guide to who can own a med spa in Washington.

Licensing and Registration

Short, concrete, and the group most often half-done — usually because operators assume that with no med spa licence there is nothing to register.

The business layer

Every business operating in Washington needs a state business licence through the Department of Revenue's Business Licensing Service, which assigns the nine-digit Unified Business Identifier every other agency will ask for. Applications take roughly ten business days, so it is not a same-week fix if you find it missing.

The esthetics layer

If any part of your menu is esthetics, chapter 18.16 RCW reaches the premises as well as the person. RCW 18.16.175 requires a salon/shop location licence and sets physical conditions — an outside entrance separate from sleeping or residential rooms, adequate toilet facilities, zoning compliance, and safe storage and labelling of chemicals. Location licences are posted in reception, individual licences at the licensed person's workstation, and the Department of Licensing inspects each salon/shop at least once every two years and on written complaint.

What each esthetics tier may actually deliver, service by service, is set out in our Washington esthetician and master esthetician scope guide.

Medical Oversight and the Delegating Physician's File

If one group decides whether your practice is lawful, it is this one — and Washington's delegation rule is unusually document-shaped, so almost every condition is satisfied by producing a specific piece of paper.

Training first, then delegation

WAC 246-919-606 requires the delegating physician to be fully and appropriately trained in a nonsurgical medical cosmetic procedure before performing or delegating it, and to keep that record in the office, available on request. It is the item most commonly missing and the first an investigator asks for.

The protocol and the thirty-minute standard

Delegation is a document, not a conversation: the physician must maintain a written office protocol naming the responsible physician and including criteria to screen patients for the appropriateness of treatment. For an FDA-approved medication used for an approved purpose the physician need not be on the premises but must be reachable and able to respond within thirty minutes — a geographic constraint, not a telephonic one. For an unapproved medication, or an approved one used for an unapproved purpose, they must be on site for the entire procedure. Note too that a practice where an ARNP with prescriptive authority personally evaluates, prescribes, and treats never triggers these rules at all.

Whether you need the role at all, who qualifies, what it costs in 2026, and how many sites one physician can realistically cover is covered in our guide to Washington med spa medical director requirements.

Scope of Practice: Who May Perform Which Treatment

Every treatment on your menu belongs to a specific set of licences, and Washington's boundaries are firmer than most states'. The audit here is mechanical: list the services, list the people, and draw the lines.

The closed delegate list — and the esthetics ceiling

WAC 246-919-606 names who may receive a delegated nonsurgical medical cosmetic procedure: a physician assistant, a registered nurse, or a licensed practical nurse. That list is closed. Medical assistants are not on it despite their authority to give intramuscular injections under chapter 18.360 RCW, and Washington offers no unlicensed-delegatee route of any kind. On the esthetics side, RCW 18.16.020 provides that the practice of esthetics does not, under any circumstances, include the administration of injections — an exclusion covering the master licence exactly as it covers the standard one.

The licence-by-licence verdicts, including the physician assistant condition that catches the most practices, are in our guide to who can inject Botox in Washington.

The Good-Faith Exam and Informed Consent

These two belong together because they are the pair that turns a properly staffed treatment into a lawful one.

The evaluation

Washington has no rule using the phrase "good faith exam," which leads some operators to conclude the requirement does not exist. It does — it is assembled rather than stated. Neurotoxins, fillers, and GLP-1 medications are prescription drugs requiring a lawful prescription; the Board of Nursing holds that an RN may administer a neuromodulator only on a prescription from an authorized health care practitioner; and WAC 246-919-606 requires the written protocol to include screening criteria for the appropriateness of treatment. The evaluation therefore belongs to a prescriber, never to an RN, an LPN, a master esthetician, or an intake form.

Consent that carries weight

RCW 7.70.060 gives a signed consent form real legal effect: it is prima facie evidence of informed consent, shifting the burden to the patient to rebut it. To earn that effect the form must describe, in language the patient could reasonably be expected to understand, the nature and character of the proposed treatment, the anticipated results, the recognised possible alternatives, and the recognised serious possible risks, complications, and anticipated benefits — including those of nontreatment. The Department of Health's Medical Spa and Esthetic Services Work Group published an aesthetics-specific consent resource built around that section in June 2025; it is guidance, not a rule.

How the evaluation and telehealth rules apply to a weight-loss programme specifically — including compounded semaglutide sourcing — is covered in our Washington GLP-1 med spa compliance guide.

Medical Records, Retention, and Privacy

Records are where Washington is quietest on paper and loudest in practice: very little is mandated, and almost everything is judged against what a reasonable practitioner would have kept. The working test for a chart is whether it answers who evaluated, who ordered, who performed, and under whose protocol.

How long to keep it

There is no general Washington statute setting a retention period for an outpatient practice. The Washington Medical Commission's records guideline concurs with the Washington State Medical Association recommendation of at least ten years from the patient's last contact, twenty-one years from a minor patient's date of birth, and six years from death — a recommendation rather than a statutory floor, and nonetheless the yardstick a board will use. RCW 70.02.160 adds one hard duty: retain a record of existing health care information for at least a year following an authorization to disclose, and throughout any pending request to examine, copy, correct, or amend.

The privacy layer most practices under-build

HIPAA applies if you are a covered entity; Washington then layers the My Health My Data Act, chapter 19.373 RCW, over the top, reaching consumer health data well outside the HIPAA perimeter — including what your website learns about a visitor. RCW 19.373.080 separately makes it unlawful to geofence a location providing in-person health care in order to track consumers seeking care, collect their health data, or advertise to them on that basis.

What changed in Washington this year and what did not — including the litigation now building around My Health My Data — is set out in our review of Washington med spa regulatory changes for 2026.

Infection Control, Sharps, and Biomedical Waste

This group has the clearest legal footing on the list, because the rules come from workplace safety law rather than aesthetics regulation — they apply to you as an employer regardless of your menu.

The exposure control plan

Chapter WAC 296-823, enforced by the Department of Labor & Industries, requires an employer whose staff face occupational exposure to bloodborne pathogens to identify the employees and tasks involved and maintain a written exposure control plan. Employees may review it during any shift, and a copy must be supplied free within fifteen days of a request. Contaminated sharps must be discarded immediately into compliant containers, and contaminated needles never sheared or broken.

Waste, and the guidance layer

Biomedical waste is defined at chapter 70A.228 RCW — recodified from the chapter 70.95K RCW older manuals still cite — and that definition preempts local variants. Sharps waste means hypodermic needles, syringes with needles attached, IV tubing with needles attached, scalpel blades, and lancets removed from the original sterile package; handling runs through your local health jurisdiction and a permitted vendor. Alongside the rules, the Department of Health work group published an interprofessional infection control checklist in June 2025 — guidance rather than law, and a sensible external benchmark.

Laser and Energy-Based Device Safety

Device treatments carry their own rule in Washington, distinct from the injectables rule, and its presence requirement is stricter than most operators schedule around.

What WAC 246-919-605 requires

A physician may delegate a laser, light, radiofrequency, or plasma procedure to a properly trained and licensed professional whose own licence and scope permit device use, provided the treatment involves no surgery, the device is not used on the eye, and a written office protocol governs the work. The supervised professional must be trained in, at minimum, application techniques for each device, cutaneous medicine, indications and contraindications, pre- and post-procedural care, potential complications, and infectious disease control — and must not exercise independent medical judgment when using the device.

The presence requirement people miss

The physician must be on the immediate premises during a patient's initial treatment. For established patients continuing a plan, a backup physician must be reachable and able to see the patient within sixty minutes. New device patients therefore have to be scheduled around physician availability.

Emergency Preparedness and Adverse-Event Response

WAC 246-919-606 states its own rationale for existing: these procedures can cause visual impairment, blindness, inflammation, burns, scarring, disfiguration, hypopigmentation and hyperpigmentation. Read your emergency preparedness against that list rather than against a generic clinic template.

What the rule actually names

Delegate training must cover, at minimum, recognition and acute management of the complications the procedure can cause. Note the shape of that requirement: it is about what happens when things go wrong, not injection technique. Washington does not separately mandate an AED, a crash cart, or a stocked reversal agent for an aesthetic practice — those are practice standards we recommend, and we are labelling them as such rather than dressing them as law.

Staff Credentialing and Training

Because Washington attaches compliance to individuals, credential verification is the load-bearing control — every other section assumes the licences behind it are real and current.

Verify at source, and again at renewal

Health profession credentials are verifiable through the Department of Health's provider credential search, esthetics and salon/shop licences through the Department of Licensing. Verify at hire and at each renewal, and keep the dated printout: a licence that lapses quietly mid-employment converts every treatment after that date into a problem. Titles matter too — nurse title protection took effect on 11 June 2026, and "medical aesthetician" is not a Washington credential.

Advertising, Before-and-After Photos, and Insurance

The last group is the one most likely to be handled by someone who has never read a scope rule — a marketing agency, a photographer, a broker. Bring it inside the compliance perimeter.

The advertising bar

Washington has no aesthetics-specific advertising rule, but it does not need one. Under RCW 18.130.180, all advertising which is false, fraudulent, or misleading is unprofessional conduct for any licence holder — which reaches your clinic's marketing through the licensees named in it. Guaranteed results, implied credentials nobody holds, and "board certified" without naming the board all sit inside that language.

Photos and coverage

A before-and-after image is protected health information. Publishing one requires a written HIPAA authorization from the patient that specifies what is being used and where — separate from treatment consent, and revocable. On insurance, Washington does not require physicians or ARNPs to carry malpractice coverage as a condition of licensure, so professional liability cover is a strong practice standard rather than a state mandate. The one statutory insurance requirement sits on the esthetics side: RCW 18.16.175 requires personal services licence holders to certify public liability coverage of at least one hundred thousand dollars for combined bodily injury and property damage.

The fastest way to fail this checklist

• Assuming that because no agency licenses your med spa, no agency governs it.
• Recruiting an oversight physician for a signature and staffing the room with a better-trained delegate — Washington ties the delegate's authority to the physician's own training.
• Mapping the thirty-minute response at 6 a.m. and never re-testing it at 5 p.m. or after a second location opens.
• Treating a master esthetician licence as a route to injections; RCW 18.16.020 excludes injections from esthetics under any circumstances.
• Letting an agency install tracking on a booking flow that captures treatment interest, without auditing it against chapter 19.373 RCW.
• Downloading a generic consent form that does not carry the four elements RCW 7.70.060 requires to give it prima facie effect.

Every Washington guide we have published is indexed on the Washington med spa compliance hub — this checklist is the seventh and closes the set.

This article is for informational purposes only and does not constitute legal or medical advice. Washington med spa requirements are administered by several agencies — the Washington Medical Commission, the Washington State Board of Nursing (formerly the NCQAC), the Department of Licensing, the Department of Health, and the Department of Labor & Industries — and they change over time. Items marked as best practice are practice standards we recommend, not Washington legal requirements, and are labelled that way deliberately. Where Washington's position is genuinely unsettled, we have said so rather than guessed. Confirm current requirements with the relevant agency and consult a Washington healthcare attorney before relying on this checklist for compliance decisions.

Frequently Asked Questions