Medical Spa Regulations in California

A MediSpaCover State Guide — what practices need to know to operate compliantly in California
✓ Reviewed by legal counsel | Last reviewed: August 11, 2026

Who Can Own a Med Spa in California

California operates under the Corporate Practice of Medicine (CPOM) doctrine, one of the strictest in the country. A med spa performing medical procedures must be owned through a physician-controlled Professional Corporation (PC), not a standard LLC, with physicians holding at least 51 percent.

  • A standard LLC or non-medical corporation cannot own a med spa delivering medical services.
  • Non-physician investors participate through a Management Services Organization (MSO) under a written Management Services Agreement, but cannot control clinical decisions.
  • New for 2026: under AB-890, a qualifying "104" nurse practitioner may practice independently within scope. Whether a 104 NP can wholly own the medical PC is unsettled among attorneys and unresolved by the courts or Medical Board.
  • SB 351 (effective January 1, 2026) further tightened what an MSO may control.
  • Med spas offering medical procedures must be registered with the Medical Board of California.

Source: Medical Board of California / B&P Code §2400 — https://www.mbc.ca.gov
Source: California Legislative Information (AB-890, SB 351) — https://leginfo.legislature.ca.gov

Medical Director Requirements

Every California med spa performing medical procedures must have a medical director who is an actively licensed MD or DO (or, as of January 2026, a qualifying 104 NP under AB-890). The role is substantive: writing protocols, deciding which procedures the facility offers, determining which staff are qualified, and actively supervising. The Medical Board enforces delegation and supervision standards and has expanded audits of med spas.

Source: Medical Board of California — https://www.mbc.ca.gov

Who Can Perform Services, and at What Level

Provider Injectables? Good Faith Exam?
MD / DOYes, full authorityYes
NP (104, AB-890)Yes, independently within scopeYes
NP (standard / 103)Yes, under standardized proceduresYes
Physician AssistantYes, under supervisionYes
Registered Nurse (RN)Yes, under a patient-specific order after a GFENo
LVNNo — prohibited even with supervisionNo
Esthetician / Medical AssistantNoNo

Source: CA Board of Registered Nursing (B&P §2725; 16 CCR §1474) — https://www.rn.ca.gov
Source: Board of Vocational Nursing & Psychiatric Technicians — https://www.bvnpt.ca.gov

Good Faith Exam and Delegation Authority

Before any injectable or prescription-classified treatment, an authorized prescriber (MD, DO, NP, or PA) must complete a Good Faith Exam (GFE) establishing a valid provider-patient relationship. As of 2026, California has moved firmly away from broad standing orders: the GFE must result in a documented, individualized Patient-Specific Order (PSO) for that patient and that treatment. A GFE alone is not enough without the PSO. Only then may an RN perform the procedure under that order. An RN cannot perform the GFE.

  • The patient-specific order must identify the procedure, note contraindications, and reflect the supervising physician's oversight.
  • Broad or generic standing orders are no longer adequate in California; each medical treatment requires an individualized patient-specific order. This is one of the most commonly cited scope issues.

Telemedicine

Telemedicine is central to modern med spa operations in California, both for the Good Faith Exam and for remote prescribing. It is permitted, but tightly governed by overlapping state and federal rules.

Telemedicine Good Faith Exams

California permits the GFE by telemedicine, allowing a collaborating physician or NP to evaluate a patient remotely before an RN performs treatment. The standard of care is identical to in-person. Boards expect synchronous audio-video; California law excludes fax, standard email, and basic text chat. Asynchronous questionnaires cannot bypass a real-time encounter, and the exam must still produce a patient-specific order.

Remote Prescribing and Controlled Substances

  • Non-controlled medications: no federal in-person exam requirement, but the prescriber must meet the standard of care and follow California board rules.
  • Controlled substances (Schedule II-V): under DEA temporary telemedicine flexibilities extended through December 31, 2026, a DEA-registered prescriber may prescribe via synchronous audio-video without a prior in-person visit. Permanent rules are expected before that date, so this is subject to change.
  • California overlay: to prescribe controlled substances to a California patient by telehealth, the remote practitioner must hold an active California license and a California-tied DEA registration, and must query the CURES database.
  • When federal and state rules differ, providers must follow the stricter rule.

Source: DEA / HHS Telemedicine Flexibilities Extension (through Dec 31, 2026) — https://www.dea.gov
Source: Medical Board of California — Telehealth — mbc.ca.gov/…/Telehealth.aspx
Source: California CURES (Dept. of Justice) — https://oag.ca.gov/cures

Mobile and Off-Site Services

Mobile med spa services (in-home Botox, mobile IV therapy, event or "botox party" injectables) are permitted in California only when every medical rule that applies in a fixed clinic is met at the off-site location. Operating from a home, hotel, gym, or private event does not lower the standard; California applies the same practice-of-medicine requirements wherever the treatment happens.

  • The same ownership structure (physician-controlled PC or qualifying entity), medical director oversight, and Medical Board registration apply to the mobile operation, not just the flagship location.
  • A good faith exam and a patient-specific order are still required before any injectable or prescription treatment at the off-site location; the mobile setting does not permit skipping or batching the exam for a group.
  • Group or "party" settings are high-risk: each attendee is an individual patient who needs an individualized exam and order. Treating a room of guests off one blanket authorization is a common enforcement trigger.
  • Sterility, sharps handling, medication storage and cold chain, emergency protocols (including anaphylaxis readiness), and proper disposal must be maintained off-site to clinical standards.
  • Controlled substances transported or administered off-site must follow DEA storage and recordkeeping rules, and CURES querying still applies.

Because mobile and event-based aesthetics are an active area of regulatory attention and the compliance burden travels with the provider, practices should confirm their coverage explicitly extends to off-site and mobile work.

Source: Medical Board of California — https://www.mbc.ca.gov

Lab Draws, Prescribing, and Performing the Service

  • Prescribing (including GLP-1): only a licensed prescriber (MD, DO, qualifying NP, or PA) may prescribe, after a good-faith exam and patient-specific order. Not delegable to an RN or MA.
  • Administering: RNs may administer injections/infusions under a valid patient-specific order after the GFE; LVNs and MAs cannot administer injectables.
  • Lab draws: phlebotomy is permitted for certified personnel; interpretation and treatment decisions remain with the prescriber.

Highlighted Services by California Regulators

  • GLP-1 / medical weight loss: good-faith exam and patient-specific order by a prescriber required before prescribing; RN-approved intake without a prescriber's individualized order is unlicensed practice of medicine. SB 351 constrains MSO involvement.
  • Injectables (Botox, fillers): classified as the practice of medicine under B&P §2052; GFE and PSO required before every treatment.
  • Lasers/energy devices: certain ablative modalities may exceed RN or NP scope and require physician involvement.
  • IV therapy, peptides, and chemical peels above superficial depth: medical services requiring the same oversight and patient-specific-order structure.
For national developments on GLP-1, peptides, ozone, and telemedicine, see our National Regulatory News & Headlines page.

Position on Medical and Compounded Products

Prescription and compounded products (including compounded GLP-1 medications) must be prescribed by an authorized prescriber after a good-faith exam and sourced through appropriately licensed pharmacies. Compounded medications are an area of active federal and state regulatory attention; see the National Regulatory News & Headlines page for current developments.

Key Cases: The Range of Real Risk

Med spa liability spans the entire treatment menu, not just injectables. Rather than characterize cases ourselves, we link to primary and news sources so you can read the facts directly. These three show three very different exposures:

1. Laser / energy device: burns and permanent scarring.
Laser burns are among the most frequently litigated med spa injuries. In one documented case a spa patron burned during laser hair removal settled for $300,000 paid by the spa's insurer, after allegations of a wrong laser setting and failure to test the patient's skin type first. The consistent pattern is inadequate operator training, wrong settings for the skin type, and missing informed consent.
Read: Charles E. Boyk Law Offices (case summary) — read the case
2. GLP-1 / compounded medication: the fastest-growing litigation wave.
As of early 2026, over 4,400 GLP-1 lawsuits had been filed, most consolidated into federal multidistrict litigation. Separately, drug manufacturers have filed suits against telehealth companies, med spas, and compounding pharmacies over unapproved or counterfeit compounded semaglutide. Poison-control calls for GLP-1 dosing errors rose sharply, many tied to compounded vials requiring self-measured dosing. This is the emerging exposure every weight-loss practice now carries.
Read: Endocrinology Advisor (GLP-1 litigation overview) — read the overview
3. Unlicensed practice and bad product sourcing: criminal exposure.
A U.S. Attorney's Office press release describes an unlicensed med spa owner who injected clients with unapproved botulinum toxin from illegitimate sources, causing numerous severe botulism cases, after falsely claiming to be a licensed professional. This is the criminal end of the spectrum: unlicensed injecting plus non-authorized product sourcing, exactly what proper licensing, supervision, and declared coverage exist to prevent.
Read: U.S. Department of Justice (press release) — read the release

California enforcement context: the Medical Board, Board of Registered Nursing, PA Board, and Attorney General have actively enforced CPOM, fee-splitting, and unauthorized-practice rules against non-compliant med spas through 2024 to 2026, with a task force conducting unannounced audits. The single most commonly cited violation is allowing LVNs or medical assistants to inject, which California prohibits absolutely, even with a physician physically supervising.

Source: Medical Board of California — Enforcement Actions & License Verification — mbc.ca.gov/Breeze

How the Setup Must Look

  • A physician-controlled Professional Corporation (or qualifying 104 NP entity) owns the clinical side, registered with the Medical Board.
  • A written Management Services Agreement governs any MSO relationship, at fair market value, with no fee-splitting or restrictions on the physician's clinical judgment.
  • An actively engaged medical director sets protocols and supervises.
  • Each provider works strictly within license scope, with GFEs and patient-specific orders documented, at both fixed and mobile locations.
  • Malpractice/liability insurance (extending to any mobile work) and HIPAA compliance in place before treating the first patient.

Wellness Medical Protection Group, LLC is a licensed producer in California (License #_____) and places specialized med spa and integrative wellness insurance for California practices, including coverage for mobile and off-site work and the high-risk procedures many standard carriers decline.

Check your eligibility for practice coverage or request a consultation.

Check Eligibility Request a Consultation

Disclaimer: This is not an offer to purchase insurance. This page is intended to provide general information and should not be relied upon as a substitute for evaluating compliance with applicable legal requirements or unique risks and insurance needs of a particular healthcare provider. California scope-of-practice, ownership, telemedicine, mobile-service, and medical-director rules are complex and may change over time. Wellness Medical Protection Group, LLC does not guarantee accuracy or completeness of the information provided on this page. Providers should confirm current applicable requirements with their counsel, the Medical Board of California, the DEA, and relevant licensing boards, and consult a California healthcare attorney before structuring or operating a practice. Last reviewed: August 11, 2026.