MedSpaForms

GUIDE

How to Open a Med Spa: The Compliance Side Nobody Explains

Updated August 24, 2026 · MedSpaForms

Opening a med spa is two projects running at the same time: a retail business and a medical practice. The retail half — lease, brand, devices, hiring — is the part every guide covers. The half that decides whether you keep the business is who is legally allowed to own the medical entity in your state, who supervises clinical care, and whether you can produce the paperwork when a board, an insurer, or a plaintiff's attorney asks for it.

Aesthetics Clinic-in-a-Box

Aesthetics Clinic-in-a-Box

The entire aesthetics documentation system: every treatment consent set (tox, fillers, microneedling, peel, laser, PRP, lash), the shared intake/photo/financial core, good-faith exam, HIPAA pack and all eight aftercare cards.

See what's inside — $99

Step one is ownership, not the lease

Before you sign anything, find out how your state treats the corporate practice of medicine. The doctrine, which most states adopted in some form, holds that an unlicensed person or an ordinary business corporation cannot practice medicine, employ physicians to practice medicine, or control clinical judgment. The stated purpose is to keep a commercial owner from leaning on a physician's decisions about what a patient needs.

Enforcement varies enormously. States commonly described as strict — California, New York, New Jersey, Texas, Illinois, Colorado — expect the professional entity to be owned by licensed physicians, and they look at control, not just the name on the share certificate. A roughly comparable number of states impose no meaningful restriction and let a general business corporation own a practice outright; Florida, Ohio, Missouri, Virginia and Utah are among the ones usually named. Several states have tightened their rules recently, California and Oregon among them, specifically targeting management companies that exercise de facto control over a nominally physician-owned practice.

This matters on day one because the structure is expensive to unwind later. A buyer's counsel, a malpractice carrier, or a state board can look at a practice built the wrong way and conclude that the real owner has been practicing medicine without a license.

Three structures, and where each one fits

StructureWho owns the medical entityWhere it typically fits
Physician-owned PC, PA or PLLCOne or more licensed physiciansLegal everywhere; the default in strict CPOM states
PC plus MSOPhysician owns the PC; you own the management companyCalifornia, New York, Texas, New Jersey, Illinois, Colorado and other CPOM states
NP- or PA-owned practiceNurse practitioner or physician assistant, within state scopeFull practice authority states such as Arizona, Oregon, New Mexico and Montana
Ordinary LLC or corporation owning everythingAny owner, licensed or notPermissive states, commonly including Florida, Ohio, Missouri, Virginia and Utah

The PC plus MSO model is the one most non-physician founders end up using. The physician-owned professional corporation employs the clinical staff, holds the patient records, bills for medical services, and makes every clinical decision. Your management services organization owns the lease, the equipment, the brand, the software and the non-clinical staff, and provides those to the practice under a written management services agreement for a fee.

Two things make that arrangement hold up. The management fee has to be at fair market value for services actually delivered, and it should not be structured so that it functions as a share of clinical revenue, which raises fee-splitting problems in many states. And the physician has to actually control clinical matters: hiring and firing clinical staff, setting protocols, deciding what is medically appropriate, and holding the ability to terminate the agreement. A structure where the physician is a figurehead with no real authority is the fact pattern regulators look for.

The licenses and registrations you actually file

There is rarely a single document called a "med spa license." What you file is a stack, and different agencies issue each layer:

  1. Entity formation. The professional entity in the form your state requires, plus the MSO if you are using one. Some states require the medical board or secretary of state to approve a professional corporation's name and ownership.
  2. Standard business filings. EIN, local business license, occupancy and zoning approval, and a sales tax permit if you sell retail skincare.
  3. Individual professional licenses. Current, unrestricted licenses for every physician, NP, PA, RN and esthetician, plus NPI numbers for prescribers. Keep primary source verification printouts, not photocopies.
  4. Facility-level permits. These vary widely. Some states register or inspect facilities that perform certain procedures; office-based surgery rules and accreditation can be triggered by sedation.
  5. Device and drug permits. Several states register laser devices with a radiation control program or require a designated laser safety officer. Purchasing prescription drugs and devices may require a specific account tied to the prescriber, and in some states a distributor or pharmacy permit if you hold stock.
  6. Safety and waste. An OSHA bloodborne pathogen exposure control plan, a sharps and biohazard disposal contract, and documented staff training on both.

Laser and device rules in particular have changed in several states over the past few years, so verify the current requirement with the issuing agency rather than relying on an article, including this one.

The medical director is a hire, not a signature

The cheapest version of this decision is a physician who lends a name for a small monthly fee and is never seen again. The industry calls it a rent-a-doc, and it is the single most common structural defect in a new med spa. It fails in two directions at once: the physician faces board discipline for inadequate supervision, and the practice faces unlicensed practice and corporate practice exposure, because the oversight the law assumes is not happening.

A real medical director signs and periodically reviews the clinical protocols and standing orders, defines what is delegated to whom, performs or supervises the good faith exam that establishes the patient relationship before any medical treatment, reviews a defined sample of charts on a set cadence, is reachable for clinical questions during operating hours, and is involved when something goes wrong. Budget for that. Fractional arrangements are common and legitimate; absent ones are not.

What it costs, and what the budget usually misses

Startup ranges quoted in the market run from roughly $50,000 for a single-room injectables suite to well over $1 million for a premium build, with $150,000 to $300,000 covering a typical two- or three-room location. Equipment is normally the largest bucket and can reach 40 to 50 percent of the total once you add a laser platform or body contouring. Build-out for 1,200 to 2,500 square feet is commonly quoted at $80,000 to $300,000 depending on the market.

The line items that get left out are the ones that cause trouble: legal and structuring work, the medical director's retainer, malpractice and general liability premiums, opening drug and filler inventory, and four to six months of operating reserve. Most practices run cash-flow negative for the first six months and reach consistent profitability somewhere between twelve and eighteen months in.

Insurance and the documents an underwriter asks for

You will need professional liability, general liability, property, and workers' compensation, and probably cyber coverage as well. Underwriters do not price a med spa off revenue alone. They ask who performs each service and under what license, who supervises, what devices you run, whether every patient receives a documented good faith exam, whether you use written treatment-specific consent forms, and how staff training and competency are recorded.

That is worth noticing at the planning stage, because the answers are cheap to build now and expensive to reconstruct later. Have the consent set, the intake and medical history form, the good faith exam template, the chart note format, the protocol binder and the training log in place before the first patient. If a claim ever arrives, the first two things the carrier asks for are the signed consent and the chart note for that visit, and a practice that cannot produce them on request is negotiating from a much worse position than one that can.

The bottom line

Get the ownership structure right before you spend money on anything else, because it is the one mistake that cannot be patched later. Hire a medical director who actually shows up, and pay a fair market fee for defined duties written into an agreement. Expect the licensing to be a stack of permits from several agencies rather than one certificate, and verify each with the issuing body. Then build the documentation system — consent, intake, good faith exam, chart notes, protocols, training records — before you open, because it is what your insurer, your board and your defense counsel will all ask to see.

Frequently asked questions

Can I open a med spa if I am not a doctor?

In many states yes, but usually not by owning the medical entity outright. States that enforce the corporate practice of medicine doctrine, such as California, New York, New Jersey and Texas, require the professional entity to be owned by licensed physicians, so non-physician owners typically hold a management services organization that contracts with the physician-owned practice. In permissive states a non-physician can often own the business directly, provided every clinical service is performed and supervised by appropriately licensed people.

How much does it cost to open a med spa?

Commonly quoted ranges run from roughly $50,000 to $150,000 for a lean injectables-only suite up to $250,000 to $850,000 for a full-service build with lasers and body contouring. Equipment is usually the largest single bucket, and the item most often left out of the budget is four to six months of operating reserve. Most new practices run cash-flow negative for the first six months.

Do I need a medical director to open a med spa?

In most states, yes, if you offer any service that is the practice of medicine, which includes neurotoxins, dermal fillers, prescription-strength peels, most laser treatments and IV therapy. The medical director is the licensed physician who owns or supervises the clinical side, signs the protocols and delegation, and is accountable for care. A few full practice authority states allow a nurse practitioner to fill the equivalent role without physician oversight.

Related templates

Free template for your practice

Get a ready-to-edit version of the document this guide describes, plus new templates as we publish them. One useful email now and then, no spam.

Unsubscribe anytime.

This guide is educational and is not legal or medical advice. Verify requirements with your own advisors and your state board before applying them in your practice.