Med Spa Legal Considerations: Protecting Your Clinic

You built your med spa to help people look and feel their best. But behind every successful aesthetic clinic is a legal foundation that most owners do not think about until something goes wrong.

Whether you are just launching or have been operating for years, the legal risks in the med spa industry are real, specific, and costly to ignore. Ownership rules, physician supervision requirements, treatment protocols, employment agreements, and compliance obligations all carry serious consequences when handled incorrectly.

This guide breaks down the core med spa legal considerations every owner, investor, and healthcare entrepreneur needs to understand before opening the doors or scaling operations.

If you want to protect your clinic, your license, and your business, start here.

What Makes Med Spas Legally Unique?

Med spas are not just beauty salons with better equipment. They offer medical-grade treatments, which places them firmly within the healthcare regulatory framework in most states, including Texas, California, and Indiana.

That distinction changes everything.

Unlike a traditional day spa, a medical spa performs procedures such as Botox injections, laser treatments, chemical peels, IV infusions, and body contouring. These are medical services. That means they require physician oversight, proper licensing, and legal business structures that comply with healthcare-specific laws.

Many owners enter the med spa space without fully understanding this reality. They hire staff, purchase equipment, sign leases, and start treating patients while operating under a legal structure that violates state regulations. The result can be board investigations, regulatory fines, forced closures, or criminal liability.

According to the Texas Medical Board, medical spas that offer services requiring physician oversight must have a licensed physician who takes medical responsibility for the practice. This is not optional. It is the law.

Understanding what is considered a med spa in Texas is the first step in building a legally compliant business from the ground up.

Who Can Legally Own a Med Spa?

Does State Law Restrict Med Spa Ownership?

Yes, in most states, including Texas, it does. The Corporate Practice of Medicine (CPOM) doctrine prohibits non-physicians from owning or controlling a medical practice. Because med spas deliver medical services, CPOM often applies.

This means a non-physician entrepreneur who wants to open a med spa cannot simply form an LLC, hire a doctor on a part-time basis, and start operating. That structure violates CPOM rules and exposes both the owner and the supervising physician to serious liability.

However, non-physicians are not locked out of the industry. There are compliant legal structures that allow business-minded entrepreneurs to own and operate successful med spas.

Learn more about who can own a med spa in Texas and what the law actually requires.

Can a Nurse Own a Med Spa?

This is one of the most common questions we receive. In Texas, a registered nurse cannot independently own a med spa that provides services requiring physician oversight. Nurses can play a leadership role in operations, but the medical side of the business must be physician-owned or properly structured under a compliant model.

There are specific ways to structure ownership so that an RN or NP can have an equity stake while remaining legally compliant. It requires a well-drafted legal structure and clear contractual boundaries.

Read a full breakdown of whether a nurse can open a med spa in Texas and what workarounds exist under current law.

What About Non-Physician Entrepreneurs?

Non-physicians who want to own and operate a med spa in Texas typically use a Management Services Organization (MSO) structure. This model allows a non-physician entity to manage the business operations of the med spa while a physician-owned entity handles the clinical side.

The MSO structure, when set up correctly, gives non-physician owners meaningful control and economic interest in the business without violating CPOM. But the devil is in the details. Poorly drafted MSO agreements or structures that blur the line between management and medical control can still trigger CPOM violations.

Find out more about how non-physicians can own and operate a med spa in Texas through legally compliant structures.

What Is the MSO Model and Why Does It Matter for Med Spas?

The MSO model is one of the most powerful and commonly used legal structures in the med spa industry. Understanding how it works is critical for any serious med spa owner or investor.

How Does an MSO Structure Work for a Med Spa?

In an MSO arrangement, two separate legal entities are created:

• The Medical Entity: Owned by a licensed physician. This entity employs or contracts with clinical staff and is responsible for all medical decision-making and patient care.
• The MSO: Owned by the non-physician entrepreneur. This entity provides management, administrative, marketing, and operational services to the medical entity for a management fee.

The MSO charges the medical entity a fee for its services. That fee structure is where the non-physician owner derives their economic interest. The fee must be set at fair market value and cannot be designed to give the MSO control over clinical decisions.

Explore the MSO model for med spas explained in detail to understand how this structure protects your investment.

What Are the Key Legal Requirements of an MSO?

• The MSO agreement must clearly separate management functions from medical decisions
• The physician must retain independent clinical authority at all times
• Management fees must reflect fair market value
• The structure must not give the MSO the power to hire or fire clinical staff
• Both entities must have separate governing documents and bank accounts

An MSO that fails to meet these requirements may still be found to violate CPOM. Working with a healthcare attorney who specializes in this structure is not optional. It is essential.

See how Texas Management Services Organizations are structured and what they must include to be legally defensible.

What Role Does the Medical Director Play?

Is a Medical Director Required for a Med Spa?

Yes, in Texas and most states, a med spa must have a supervising or medical director physician who takes responsibility for patient care, treatment protocols, and clinical oversight. This is not a figurehead role. The physician must be genuinely involved in the clinical operations of the practice.

The Texas Medical Board has taken enforcement action against med spas where the supervising physician was not meaningfully engaged in clinical oversight. A passive or absentee medical director arrangement creates serious legal risk for both the physician and the business.

What Should a Medical Director Agreement Include?

A properly drafted medical director agreement is one of the most important legal documents in your med spa. It should cover:

• Scope of clinical oversight responsibilities
• Frequency of on-site presence or availability
• Protocol review and approval obligations
• Patient care standards and quality controls
• Compensation structure (which must comply with Anti-Kickback Statute rules)
• Termination provisions and transition procedures
• Liability allocation between the parties

Read a full guide on what a medical director agreement should include and how to protect both parties.

Also review the role of a medical director at a medical spa to understand what actual oversight obligations look like in practice.

Who Can Perform Treatments at Your Med Spa?

What Are the Scope of Practice Rules for Med Spa Treatments?

Not every licensed professional can legally perform every treatment. Scope of practice rules determine which procedures each type of provider can legally perform, and those rules vary by state and by treatment type.

In Texas, this is particularly important. The wrong provider performing the wrong treatment is not just a malpractice risk. It is a regulatory violation that can cost you your license and your business.

Common treatments and typical provider requirements include:

Find out exactly who can perform injectable treatments in a medical spa and what the law requires at each level.

Also review the specific rules around who can administer cosmetic injections in Texas and whether an RN can administer Botox under current state rules.

Does Telehealth Change Supervision Requirements?

Yes, and this is a rapidly evolving area of law. Some med spas use telemedicine to have a physician conduct a good faith exam remotely before a treatment is administered. While this can be compliant in certain circumstances, it must be structured carefully.

Telehealth in the med spa context must comply with state telemedicine laws, including requirements for patient consent, prescribing authority, and the minimum standard of care. Simply having a physician available by video does not automatically satisfy supervision requirements.

Review the rules around telehealth good faith exams and compliance in a medical spa before implementing any remote oversight model.

What Licenses and Registrations Does Your Med Spa Need?

What Are the State Licensing Requirements for a Med Spa?

The specific licenses and registrations required for a med spa depend on your state, the services you offer, and how your business is structured. In Texas, you will typically need:

• A business entity registration with the Texas Secretary of State
• A Texas Medical Board registration if providing physician-supervised services
• A Texas State Board of Pharmacy registration if dispensing medications or compounded drugs
• Applicable facility certifications depending on procedure types
• Individual provider licenses for all clinical staff
• Laser facility registration if applicable
• Local business permits and certificates of occupancy

Find a full breakdown of what license you need to open a medical spa in Texas so you can check every box before opening.

If your practice involves prescribing or dispensing controlled substances, additional DEA registration requirements apply. Review the DEA Controlled Substances Act for relevant federal requirements.

How Do Licensing Requirements Differ in Other States?

If you are operating in California or Indiana, the requirements differ significantly from Texas. California has strict physician supervision rules and additional requirements for nurse practitioners. Indiana has its own corporate practice of medicine framework that affects ownership and supervision structures.

Read about med spa ownership in California and the operational rules for med spas in California if you are expanding into that market.

For Indiana operations, review the rules on how to start a med spa in Indiana.

What Compliance Obligations Does a Med Spa Have?

Does HIPAA Apply to Med Spas?

Yes. If your med spa collects, stores, or transmits protected health information (PHI), you are subject to HIPAA. This includes patient intake forms, treatment records, before-and-after photos, and any electronic health data.

HIPAA violations can result in significant civil and criminal penalties. The U.S. Department of Health and Human Services actively investigates complaints and conducts compliance audits. Med spas are not exempt simply because they are not hospitals.

Common HIPAA violations in med spas include:

• Posting before-and-after photos without proper written authorization
• Using patient contact information for marketing without consent
• Inadequate data security for electronic records
• Improper disposal of paper patient records
• Sharing patient information with staff who do not need it for treatment purposes

Learn about the most common HIPAA violations and how to avoid them in your practice.

What Are the Anti-Kickback and Stark Law Implications?

The Anti-Kickback Statute (AKS) and Stark Law are federal regulations that restrict financial arrangements between healthcare providers and the businesses that refer patients to them. Even if your med spa does not bill Medicare or Medicaid, understanding how these laws apply to your referral arrangements is important.

If a physician receives compensation for referring patients to your med spa, that arrangement must be structured carefully to avoid AKS liability. Compensation to a medical director that is tied to patient volume or revenue is a red flag.

Review the fundamental concepts of Stark Law and the Anti-Kickback Statute to understand how they may affect your med spa operations.

The HHS Office of Inspector General provides detailed guidance on AKS compliance that is relevant to all healthcare providers.

What Does an Ongoing Compliance Program Look Like?

Running a compliant med spa is not a one-time task. It requires ongoing attention to regulatory changes, staff training, and internal audits. A solid compliance program for a med spa includes:

• Written policies and procedures for all clinical and operational functions
• Regular staff training on HIPAA, scope of practice, and treatment protocols
• Documented physician oversight activities
• Internal audits of billing, consent forms, and treatment records
• A clear process for reporting and responding to compliance concerns
• Annual review of all contracts, including medical director and MSO agreements

See why compliance is critical in a medical spa and how to build a program that protects your business.

What Contracts Does Your Med Spa Need?

Which Agreements Are Non-Negotiable for Med Spa Operations?

Contracts are the backbone of your legal protection. Operating a med spa without proper written agreements exposes you to disputes, liability, and regulatory risk. The agreements every med spa should have in place include:

• Medical Director Agreement: Defines the physician’s clinical role, responsibilities, compensation, and liability allocation
• MSO Agreement: Governs the relationship between the management company and the medical entity
• Employment and Independent Contractor Agreements: Covers all clinical and non-clinical staff
• Patient Consent Forms: Treatment-specific, legally compliant, and regularly updated
• Vendor and Equipment Contracts: Including lease terms, warranty obligations, and maintenance requirements
• Business Associate Agreements (BAAs): Required under HIPAA for any third-party vendor handling PHI
• Non-Compete and Non-Solicitation Agreements: Where enforceable under state law

Review what healthcare contracts your practice needs and how to make sure they hold up legally.

What Makes a Med Spa Contract Legally Problematic?

Many med spa owners download template contracts from the internet or use agreements that were not drafted for healthcare. These contracts often fail to account for state-specific requirements, healthcare regulations, or the specific dynamics of the med spa model.

Common contractual problems include:

• Ambiguous language that creates disputes over responsibilities
• Missing HIPAA Business Associate Agreement requirements
• Compensation structures that accidentally violate Anti-Kickback rules
• Medical director agreements that give non-physicians too much control over clinical decisions
• Blanket non-competes that may not be enforceable in Texas

Read about navigating ambiguity pitfalls in healthcare contracts before signing anything.

What Are the Employment Law Considerations for Med Spas?

Should Med Spa Staff Be Employees or Independent Contractors?

This is a question many med spa owners get wrong, and it carries real financial and legal consequences. Misclassifying employees as independent contractors can result in tax liability, labor law violations, and loss of workers’ compensation protections.

The general rule is that if you control how, when, and where someone works, they are likely an employee, not an independent contractor. Clinical staff who work regular hours, use your equipment, and follow your protocols are typically employees under most state and federal standards.

However, true independent contractors such as a part-time medical director with their own practice and patients may qualify for contractor status when properly structured.

This distinction matters for tax withholding, benefit obligations, licensing requirements, and liability exposure.

What Happens When a Provider Leaves Your Med Spa?

Provider transitions are a major operational and legal risk. When a nurse practitioner, physician assistant, or medical director leaves your practice, several issues arise simultaneously:

• Clinical oversight may be interrupted
• Patient records must be managed according to HIPAA and state law
• Non-compete provisions may limit where the departing provider can work
• New oversight arrangements must be put in place before services continue

Having transition provisions built into every employment and contractor agreement before the relationship begins is how you protect your business when it ends.

What Are the Specific Legal Risks of Offering Certain Treatments?

Are There High-Risk Treatments That Need Extra Legal Scrutiny?

Yes. Some treatments carry higher regulatory and liability risk than others. Before adding any new service line to your med spa, you should conduct a legal review that includes:

• Confirming the treatment is within scope of practice for your staff
• Reviewing FDA approval or clearance status for devices and injectables
• Confirming physician oversight requirements for the specific treatment
• Updating informed consent forms to reflect the treatment’s specific risks
• Reviewing your malpractice insurance coverage for the new service

Treatments that commonly require additional legal review include:

• Ketamine therapy (highly regulated with specific DEA requirements)
• Hormone therapy and peptide treatments
• Compounded medications (subject to FDA and state pharmacy board rules)
• IV infusion therapy
• Platelet-rich plasma (PRP) treatments

Read about the legal considerations for offering ketamine treatment services and the regulatory requirements that apply.

Also review the legal landscape for IV infusion and IV therapy before adding it to your service menu.

What Legal Considerations Apply When Selling or Buying a Med Spa?

Is Buying or Selling a Med Spa Different from Other Business Transactions?

Significantly, yes. Healthcare businesses carry compliance obligations, licensing requirements, and regulatory risks that standard business acquisition processes do not address. If you buy a med spa without proper due diligence, you may be acquiring someone else’s compliance violations, unpaid tax liabilities, or licensing problems.

Key considerations in a med spa acquisition include:

• Review of all existing licenses and whether they are transferable
• Assessment of any pending board investigations or regulatory actions
• Evaluation of existing contracts with physicians, staff, and vendors
• Compliance review of billing practices and patient records
• Structure of the deal (asset purchase vs. stock purchase)
• Post-closing transition of medical director and clinical oversight arrangements

Review the guide on buying a medical practice in Texas step by step for a full framework.

If you are on the selling side, review what you need to know about how to sell a medical practice in Texas to protect your interests through the transaction.

Understand the differences in deal structure through our guide on asset purchase agreements and stock purchase agreements in healthcare transactions.

What Should You Know About Trademarks and Branding for Your Med Spa?

Why Do Med Spas Need Trademark Protection?

Your med spa’s name and brand identity are valuable business assets. Operating under a name that infringes on an existing trademark can force you to rebrand entirely, which is expensive and disruptive. Worse, failing to register your own trademark means another business can legally use your name in a different market.

Trademark registration with the U.S. Patent and Trademark Office gives you nationwide priority and the legal right to stop others from using a confusingly similar name in your industry.

For med spas, the trademark analysis should include:

• A clearance search to confirm your desired name is available
• Registration in the appropriate international class for medical services
• Protection for your logo, tagline, and any distinctive brand elements
• Monitoring for infringement after registration

Learn more about healthcare trademark protection in Texas and why it matters for your med spa’s long-term value.

What Are the Most Common Legal Mistakes Med Spa Owners Make?

“The most expensive legal problem is the one you did not see coming because no one told you to look for it.” This is why proactive legal guidance matters more in healthcare than in almost any other industry.

Based on the common issues that arise in med spa legal disputes and regulatory investigations, here are the mistakes that cost med spa owners the most:

• Operating without a compliant ownership structure – Especially CPOM violations by non-physician owners
• Using a passive or absentee medical director – Creates liability for both the owner and the physician
• Hiring staff without verifying scope of practice – Allows unlicensed or out-of-scope services to be performed
• Skipping informed consent – Inadequate or outdated consent forms leave you exposed to malpractice claims
• Using template contracts – Non-healthcare-specific agreements fail to address regulatory requirements
• Ignoring HIPAA – Patient photo policies and marketing practices frequently create violations
• Not reviewing new treatment compliance – Adding services without legal review is a common source of regulatory problems
• Failing to plan for provider transitions – No exit provisions in employment agreements creates operational crises

See our full resource on med spa legal compliance to assess where your clinic may have gaps.

Also review what operating a med spa in Texas requires on an ongoing basis, including the rules and responsibilities most owners overlook.

How Does a Healthcare Attorney Help Protect Your Med Spa?

What Does a Med Spa Attorney Actually Do for Your Business?

A healthcare attorney who specializes in med spa law is not just someone you call when something goes wrong. The most effective legal strategy is proactive, not reactive.

A specialized med spa attorney helps you:

• Structure your business in a way that complies with CPOM and state law from day one
• Draft all foundational agreements, including medical director contracts and MSO agreements
• Review your proposed service lines for regulatory compliance before you launch them
• Respond to board inquiries, regulatory investigations, or patient complaints
• Navigate acquisitions, mergers, or practice sales
• Protect your brand through trademark registration
• Build and maintain a compliance program that reduces your exposure over time

The difference between working with a general business attorney and a healthcare-specialized attorney is significant. Healthcare law is a complex regulatory environment. General business advice does not account for CPOM, HIPAA, the Anti-Kickback Statute, or state medical board requirements.

Find out how a Texas medical spa lawyer can help you build and protect your clinic.

Dike Law Group focuses exclusively on healthcare law. If you are in the Dallas-Fort Worth area, learn about our Dallas medical spa lawyer services or our Frisco med spa legal services. Houston area clients can learn about Houston medical spa lawyer representation. Austin area clients can reach our Austin medical spa lawyer team.

Frequently Asked Questions About Med Spa Legal Considerations

Disclaimer: This article is intended for general educational purposes only and does not constitute legal advice. For guidance specific to your situation, please consult a qualified healthcare attorney.