Med Spa Compliance in Texas: The 2026 Owner’s Checklist

Why Does Med Spa Compliance Matter More in 2026?

Texas regulators have been paying closer attention to med spas over the past several years. High-profile incidents, including patient injuries and deaths linked to improperly supervised aesthetic procedures, have created political and regulatory pressure to tighten oversight.

In fact, a widely reported death at a North Texas med spa directly contributed to legislative momentum for stricter standards. You can read more about that case and its legal implications here.

In 2026, med spa owners face:

• Increased scrutiny from the Texas Medical Board on physician supervision practices
• Ongoing enforcement actions related to who can perform injectable treatments
• Heightened HIPAA audit activity from the HHS Office for Civil Rights
• Growing litigation risk from patient complaints tied to non-compliant services
• Potential licensing board actions against medical directors and supervising physicians

Staying compliant is not just a legal obligation. It is a core business protection strategy.

Who Can Legally Own a Med Spa in Texas?

What Does Texas Law Say About Med Spa Ownership?

This is where most compliance problems begin. Texas follows the Corporate Practice of Medicine (CPOM) doctrine, which prohibits non-physicians from owning or controlling entities that practice medicine. Because med spas routinely offer services that constitute the practice of medicine, including injectables like Botox and fillers, laser treatments, and prescription-based therapies, ownership structure matters enormously.

If you are a non-physician who owns or wants to own a med spa in Texas, you must use a legally compliant structure. Simply forming an LLC and offering aesthetic medical services without a physician owner or a proper MSO structure is a CPOM violation.

Compliant ownership models in Texas include:

• Physician ownership: A licensed physician owns and controls the medical practice entity
• MSO model: A non-physician owns a Management Services Organization that contracts with a physician-owned professional entity for clinical services
• Physician-led PLLC or PA: The professional entity that delivers medical services must be physician-owned

Learn more about the MSO model and how it applies to med spas in Texas through our detailed guide on the MSO model for med spas.

If you are a nurse practitioner, RN, or other non-physician provider considering ownership, review whether a nurse can legally open a med spa in Texas before proceeding.

What Is the MSO Structure and Is It Right for Your Med Spa?

The Management Services Organization (MSO) model allows a non-physician entrepreneur to own the business management side of a med spa while contracting with a physician-owned professional entity for clinical operations. When properly structured, this arrangement is legal and widely used across Texas.

However, the structure only holds up if the physician maintains genuine clinical independence and control. A poorly drafted MSO agreement that gives the non-physician owner de facto control over clinical decisions will not protect you. It will expose both the physician and the non-physician owner to regulatory liability.

Our guide to MSOs in Texas for non-physicians explains what a compliant structure looks like in practice.

“The MSO structure is a tool, not a loophole. It works when it is designed correctly and maintained consistently. When it is used as window dressing over an arrangement that the non-physician controls, it creates more risk than it resolves.”

– Doris Dike, Founder, Dike Law Group PLLC

Is Your Medical Director Agreement Actually Compliant?

What Should a Med Spa Medical Director Agreement Include?

Every Texas med spa that offers medical services must have a supervising or medical director physician. But having a physician’s name on a piece of paper is not enough. The medical director must be genuinely engaged in clinical oversight, and the agreement must reflect that engagement.

A compliant medical director agreement for a Texas med spa should address:

• Scope of medical services being supervised
• Required frequency of on-site supervision visits
• Protocols for patient assessment, treatment, and follow-up
• Delegation authority for RNs, PAs, and NPs performing services
• Medical record review responsibilities
• Emergency protocols and response procedures
• Compensation structure that complies with anti-kickback and Stark Law requirements
• Termination provisions that protect both parties

Arrangements where a physician signs a medical director agreement but never visits the spa, never reviews patient charts, and receives a flat monthly fee with no real involvement are a known enforcement target for the Texas Medical Board.

For more context on the role and responsibilities involved, read our resource on what a medical director does at a medical spa.

How Often Must the Medical Director Be On-Site?

Texas does not specify an exact number of required on-site visits in statute, but the Texas Medical Board evaluates whether supervision is adequate based on the nature and complexity of the services offered. The more advanced the treatments, the more frequent and substantive the oversight needs to be.

A monthly 30-minute appearance with no chart review does not constitute adequate supervision. If the Texas Medical Board investigates and finds the supervision arrangement is superficial, both the physician and the practice may face disciplinary action.

Who Can Perform Services at Your Med Spa in Texas?

What Procedures Can RNs Perform in a Texas Med Spa?

This is one of the most frequently asked and most frequently misunderstood questions in Texas med spa law. The answer depends on the specific service, the provider’s license, and the delegation authority from the supervising physician.

In Texas, the following general framework applies:

Review who can administer cosmetic injections in Texas and who can perform injectable treatments in a med spa for more detailed breakdowns.

The question of whether an RN can administer Botox is addressed specifically in our resource covering whether an RN can administer Botox in Texas.

What About Nurse Practitioners and Independent Practice?

Texas does not grant nurse practitioners full practice authority. NPs in Texas must operate under a signed collaborative practice agreement with a licensed physician. This has direct implications for any NP who wants to operate a med spa or serve as the primary clinical provider in one.

Learn more about NP scope of practice and registration in Texas and whether nurse practitioners can practice independently in Texas.

What Licenses Does a Texas Med Spa Actually Need?

Which Licenses and Permits Are Required to Open a Med Spa in Texas?

Texas med spas must secure multiple layers of licensing before opening. Missing any of them can result in operating illegally even if you believe your business is otherwise compliant.

The licensing requirements depend on the services you offer, but a standard Texas med spa typically needs:

• Texas Medical Board registration for the professional entity providing medical services
• Physician licensure for any physician owners or medical directors (active Texas license)
• NP registration with the Texas Board of Nursing if NPs provide services
• PA licensure with the Texas Medical Board for any PA providers
• Cosmetology facility license from the Texas Department of Licensing and Regulation (TDAR) if esthetic services are offered
• Business entity registration with the Texas Secretary of State
• DEA registration if controlled substances like ketamine or prescription topicals are used
• Laser device registration with the Texas Department of State Health Services for applicable devices

For a complete breakdown, review our resource on what license you need to open a medical spa in Texas. There is also a practical overview in our article on what licenses are required to open a med spa.

Do You Need a Separate License for Each Location?

Yes. Each physical location typically requires its own facility registration, licensing approvals, and verified supervision arrangements. If you are expanding your med spa to multiple locations, you cannot simply extend your existing licenses. Each location needs its own compliance infrastructure.

This is also where the MSO structure becomes important for multi-location operators. Review our guide on the growing role of MSOs in Texas healthcare for insight on scaling compliantly.

Is Your HIPAA Program Actually Functioning?

What HIPAA Requirements Apply to Texas Med Spas?

Med spas are covered entities under HIPAA if they transmit health information electronically in connection with covered transactions. Most modern med spas do. That means full HIPAA compliance obligations apply, including:

• Written Privacy Policies and Procedures
• Notice of Privacy Practices posted and provided to patients
• HIPAA Security Rule compliance for electronic PHI (ePHI)
• Workforce training on HIPAA policies
• Business Associate Agreements (BAAs) with all third-party vendors who access PHI
• Breach notification procedures in place
• A designated Privacy Officer
• Annual risk assessments

Many med spas underestimate their HIPAA exposure because they perceive themselves as beauty businesses. But the moment a medical record exists, HIPAA governs how it is protected, shared, and stored.

Common HIPAA violations in med spas include posting before-and-after photos without proper written authorization, using patient testimonials without HIPAA-compliant releases, and sharing records with business partners without BAAs in place.

Review our resource on what HIPAA and OSHA compliance means for healthcare practices and our overview of the most common HIPAA violations and how to avoid them.

Do Med Spas Need OSHA Compliance Programs Too?

Yes. Med spas that employ staff must comply with OSHA standards applicable to healthcare settings. This includes bloodborne pathogen exposure control plans, needle safety protocols, hazard communication standards, and proper disposal of sharps and biological waste.

OSHA compliance is separate from HIPAA compliance, and both are enforced independently.

Are Your Patient Consent and Documentation Practices Up to Standard?

What Documentation Should a Texas Med Spa Maintain for Every Patient?

Inadequate documentation is one of the fastest ways a med spa can lose a licensing dispute or face litigation. Your documentation practices need to meet medical record standards, not just aesthetic service intake standards.

For each patient receiving medical aesthetic services, your records should include:

• Complete health history and intake form
• Physician or provider assessment prior to treatment
• Informed consent form specific to each procedure performed
• Treatment record documenting products used, dosage, injection sites, and provider performing the service
• Post-treatment instructions provided
• Follow-up notes or adverse event documentation if applicable
• Photo consent (separate from treatment consent)

Consent forms must be specific to each treatment. A general intake form is not adequate informed consent for a neurotoxin injection, laser treatment, or chemical peel.

What Are Good Faith Exam Requirements for Texas Med Spas?

Texas law requires that a licensed provider conduct a good faith exam before certain medical aesthetic services are performed, particularly for telemedicine-based supervision or prescription-based treatments. This requirement has specific implications for telehealth supervision models used by remote medical directors.

Explore how good faith exams and compliance intersect in our guide on telehealth good faith exams and compliance in a medical spa.

Is Your Business Structure and Compliance Plan Ready for 2026?

What Are the Most Common Compliance Mistakes Med Spa Owners Make in Texas?

After advising dozens of med spas across Texas, these are the patterns we see most often:

• No compliant ownership structure: Operating as a non-physician-owned entity without a proper MSO or physician partner arrangement
• Paper medical director: Having a physician on paper but not in practice, with no real clinical oversight
• Unlicensed personnel performing medical services: Estheticians or unqualified staff performing treatments that require a medical license
• Missing BAAs: No Business Associate Agreements with EMR vendors, payment processors, or marketing platforms that access PHI
• Inadequate consent forms: Using generic forms that do not satisfy informed consent standards for medical procedures
• No written compliance plan: Operating without documented policies and procedures that demonstrate a commitment to compliance
• Unregistered devices: Using laser or energy-based devices that have not been properly registered or maintained

You can review a broader compliance audit framework in our resource on avoiding common healthcare compliance mistakes.

Do You Need a Written Compliance Plan for Your Med Spa?

A written compliance plan is not always legally mandated for small practices, but it is one of the strongest defenses you have if the Texas Medical Board or another regulatory agency investigates your facility. A well-documented compliance plan demonstrates:

• You took regulatory obligations seriously
• You identified risks and addressed them proactively
• You trained staff appropriately
• You had protocols in place for issues that arose

Our guide on essential components of a successful compliance plan outlines what your written plan should include. The importance of compliance in a med spa context is also covered in our dedicated article on med spa compliance importance.

What Are the Legal Risks of Offering Specialized Services Like Ketamine or IV Therapy?

What Compliance Steps Are Required for Ketamine Treatments at a Med Spa?

Ketamine treatment for depression, anxiety, and chronic pain has grown significantly, but it brings a distinct compliance layer. Ketamine is a Schedule III controlled substance under the DEA’s controlled substances schedule. Offering ketamine treatments at your med spa requires:

• DEA registration for the prescribing physician
• Proper prescribing protocols and patient assessment requirements
• Storage and handling compliance for controlled substances
• Oversight by a physician with appropriate training
• Clear informed consent for off-label use

Our detailed overview of what to consider before offering ketamine treatment services covers both the legal and clinical compliance requirements.

Is IV Hydration Therapy Considered a Medical Practice in Texas?

Yes, in most cases. The Texas Medical Board has taken the position that IV hydration therapy involving prescription components constitutes the practice of medicine. This means it requires physician oversight, proper protocols, and a compliant business structure.

Review our resources on IV hydration clinic compliance in Texas and whether an IV hydration business is considered a medical practice for more detail.

The 2026 Med Spa Compliance Checklist: Quick Reference

Use This Framework to Audit Your Med Spa Before the Year Progresses

The following table provides a condensed compliance audit framework. Use it to identify areas that need immediate attention.

For a detailed walkthrough of how to structure and operate a legally compliant med spa in Texas, visit our comprehensive guide on how to open a med spa in Texas and our resource on operating a med spa in Texas.

You may also benefit from reviewing our overview of med spa legal compliance and the Texas med spa ownership laws that directly affect your structure.

What Happens When a Med Spa Faces a Texas Medical Board Investigation?

How Does the Texas Medical Board Investigate Med Spas?

Texas Medical Board investigations can be triggered by patient complaints, adverse events, reports from competitors, or proactive enforcement sweeps. When an investigation begins, the process typically involves:

1. Notice to the licensee of a complaint or inquiry
2. Request for medical records, practice information, and documentation
3. Review by a Board physician consultant
4. Possible informal settlement conference
5. Formal hearing if the matter escalates
6. Disciplinary order, remedial education, probation, suspension, or license revocation

Non-physician owners of a med spa can also face action from their own licensing boards (Board of Nursing, Texas State Board of Pharmacy, etc.) if their license is implicated in the investigation.

For a detailed overview of what to do if you receive a complaint, read our guide on Texas Medical Board investigations and the five steps to protecting your medical license. You can also review the overview of the Texas Medical Board complaints process.

If a license has already been suspended or revoked, learn whether restoration is possible through our resource on restoring a medical license after revocation.

The firm’s Texas licensing defense practice and Dallas licensing defense team regularly represent med spa owners and providers facing board investigations.

Does Your Med Spa Have a Trademark Strategy?

Why Should Texas Med Spa Owners Register Their Brand Name?

Your med spa’s name is one of its most valuable commercial assets. If you have not registered your brand as a federal trademark, someone else in your market could use a confusingly similar name, and your only option would be a costly infringement dispute with uncertain outcomes.

Trademark registration through the U.S. Patent and Trademark Office provides nationwide priority and significantly stronger legal protection than simply registering a business name with the state of Texas.

For context on the registration process and what it protects, review our overview of trademark protection in Texas, our resource on why a trademark is important for your business, and the healthcare trademark services offered by Dike Law Group.

Frequently Asked Questions About Med Spa Compliance in Texas

What is the most important compliance requirement for a Texas med spa in 2026?

Ownership structure is the most foundational requirement. If your med spa is not structured in compliance with Texas CPOM doctrine, every other compliance effort is built on a legally defective foundation. Non-physician owners must use a properly documented MSO model or partner with a physician owner. Beyond structure, active and documented physician supervision is the next most critical requirement, followed by provider licensing verification and HIPAA compliance.

Can a non-physician own a med spa in Texas at all?

Yes, but only with the right legal structure in place. Non-physicians can own the management and business operations side of a med spa through an MSO arrangement. The clinical, physician-directed entity must be physician-owned and genuinely physician-controlled. Review our full breakdown of who can own a med spa in Texas and how non-physicians can own and operate a med spa in Texas.

What happens if a Texas med spa is found to be non-compliant?

Consequences can range significantly depending on the nature and severity of the violation. Possible outcomes include Texas Medical Board disciplinary actions against the medical director, nursing board actions against RN or NP providers, civil penalties, fines, required closure of services, license suspension or revocation, and civil liability from patient claims. The earlier compliance issues are identified and corrected, the more options you typically have. Our Dallas healthcare compliance attorneys can assist with pre-emptive compliance audits.

Does a Texas med spa need HIPAA compliance even if it does not accept insurance?

Potentially yes. HIPAA applies to covered entities, which include healthcare providers who transmit health information electronically in connection with certain standard transactions. If your med spa uses an electronic health records system, submits electronic prescriptions, or shares patient data with third-party vendors, you likely have HIPAA obligations regardless of whether you accept insurance. Consult with a healthcare attorney to evaluate your specific situation.

What is the difference between a medical director and a supervising physician at a med spa?

In practice, these terms are often used interchangeably, but they carry slightly different formal meanings. A medical director typically has broader administrative oversight responsibilities for the facility’s clinical operations, protocols, and quality. A supervising physician is the licensed physician who delegates specific procedures to mid-level providers like NPs and PAs under Texas law. In many Texas med spas, the same physician serves both functions, but the agreement must clearly define both roles and responsibilities.

Do I need a lawyer to set up a med spa in Texas, or can I use an online legal service?

The complexity of Texas med spa law, especially around CPOM compliance, MSO structuring, medical director agreements, and licensing, makes it extremely risky to rely on generic online legal services. These platforms do not account for healthcare-specific regulatory requirements, and a generic LLC formation does not create a CPOM-compliant structure. Working with a healthcare attorney who specializes in Texas med spa law can protect you from costly mistakes that are often much harder to fix after the fact. Learn more about working with a lawyer for opening a med spa in Texas.

How do I find a compliant medical director for my Texas med spa?

Finding the right medical director involves more than locating a willing physician. The physician must be licensed in Texas, must have relevant experience with the services offered, must be genuinely available for supervision, and must understand the legal obligations they are assuming. Our resource on finding the right medical director for your med spa provides practical guidance on what to look for and how to structure the relationship properly.

What is the MSO model and how does it help med spa owners stay compliant?

The MSO model allows a non-physician to own the business management entity while a physician-owned professional entity handles all clinical services. When structured correctly, it satisfies Texas CPOM requirements while giving the non-physician owner real operational control over non-clinical business functions. The key is that the physician must maintain genuine clinical independence. Learn more through our overview of the MSO management services organization model and the management services agreement framework.

Can my Texas med spa offer telehealth services, and does that change my compliance obligations?

Yes, telehealth can be incorporated into med spa operations, but it adds compliance layers including good faith exam requirements, telemedicine consent requirements, and state-specific telehealth regulations. Review our resources on telemedicine regulations in Texas and whether telemedicine is legal in Texas for guidance on how to structure telehealth-assisted services compliantly.

How often should a Texas med spa conduct an internal compliance review?

At minimum, once per year. However, compliance reviews should also be triggered by specific events such as adding new services, hiring new providers, changing ownership structure, receiving a patient complaint, or after any adverse event. A periodic review by a healthcare attorney familiar with Texas med spa law can identify regulatory gaps before they become enforcement problems. Contact the Dike Law Group compliance team to schedule a compliance review for your practice.

Ready to Protect Your Med Spa in 2026?

Texas med spa compliance is not something you can set up once and forget. Regulations shift, enforcement priorities change, and your business evolves in ways that create new legal exposure. The most effective thing any med spa owner can do right now is get a clear picture of where their compliance gaps actually are.

At Dike Law Group PLLC, we work exclusively with healthcare businesses across Texas. We do not advise on divorce cases or personal injury. Healthcare law is the only thing we do, and med spa compliance is one of the areas we know best. Whether you are building a new med spa, auditing an existing one, facing a board investigation, or trying to expand to multiple locations, our team provides the direct, specialist guidance your practice deserves.

If you want to understand your current legal exposure and get a clear action plan, speak with one of our attorneys today. We serve med spa owners in Dallas, Houston, Austin, Frisco, and across the state of Texas. Call us at (972) 290-1031 or visit our healthcare law services page to schedule your consultation.

Your med spa represents a significant investment. Protect it with legal counsel that understands exactly what is at stake.

Disclaimer: This article is intended for general educational purposes only and does not constitute legal advice. Laws and regulations change frequently, and the information provided here may not reflect the most current legal developments. For guidance specific to your med spa or healthcare business situation in Texas, please consult a qualified healthcare attorney at Dike Law Group PLLC or another licensed Texas healthcare law practitioner.