Regulations research

FDA and state rules, for what you actually buy.

Search a drug, ingredient or device for its live FDA record, or pick your state and a category to see the federal rules and what your state adds — each answer with its citation and source.

A physician working on a laptop in a private-practice office
Licenses and compliance: the states a vendor is licensed in and the documents it publishes, each marked verified or not
Every answer sourced
Everything for Maryland ↓
← All categories

Cosmeceutical & consumer skincare

FDA pathway: Cosmetic (MoCRA) | Drug if disease or structure/function claims | OTC monograph for sunscreen/acne actives

Cosmetics must be made in FDA-registered facilities and listed with FDA (enforced since July 1, 2024), have safety substantiation, and have serious adverse events reported within 15 business days; 'cosmeceutical' is not a legal category.

On MedGrid as: Cosmeceutical Skincare · Consumer Skincare · Consumer Take-Home · Medical-Grade Skincare · Post-Procedure Care

The federal rules

Facility registration and product listingExisting facilities had to register and products be listed by Dec 29, 2023; FDA did not enforce until July 1, 2024. Registrations renew every two years and listings update annually.

Submissions go through Cosmetics Direct (or ESG NextGen, or paper forms 5066/5067). Certain small businesses are exempt except for higher-risk products such as eye-area products and injectables.

Serious adverse event reporting and safety substantiationThe responsible person must report serious adverse events to FDA within 15 business days and keep records supporting adequate safety substantiation.

Animal testing is not mandated.

Current as of 2026-08-10

Fragrance allergens, talc, PFAS, GMPFragrance-allergen labeling and cosmetic GMP rules are still pending (GMP has a draft guidance); FDA withdrew its Dec 2024 proposed talc asbestos-testing rule in Nov 2025; FDA published its PFAS-in-cosmetics report Dec 29, 2025.

FDA's MoCRA page (08/10/2026) lists fragrance allergen labeling as a required regulation but links no proposed or final rule.

Current as of 2026-08-10

Drug vs cosmetic claimsIntended use decides: claims to treat acne, dandruff or psoriasis, remove wrinkles, promote cell regeneration, or reduce cellulite make a product a drug; FDA says the law 'does not recognize any such category as cosmeceuticals'.

Products can be both (e.g., moisturizer with sunscreen) and must meet both sets of rules.

Current as of 2024-09-11

Imported cosmeticsImport Alert 53-21 allows detention of adulterated cosmetic products and ingredients (revised Mar 5, 2026).

Other cosmetic import alerts cover color additive violations and microbial contamination.

Current as of 2026-03-05

Changing now

What Maryland adds

State rules for cosmetics and sunscreenMaryland's Toxic-Free Cosmetics Act has banned listed ingredients in cosmetics, including phthalates, formaldehyde, mercury, certain parabens and PFAS, since Jan 1, 2025, and Maryland bans animal-tested cosmetics.State cosmetic/sunscreen rules

Does the state have cosmetic or sunscreen requirements beyond federal MoCRA, such as ingredient bans (PFAS, formaldehyde, phthalates), ingredient reporting, sunscreen-ingredient bans, or bans on selling animal-tested cosmetics?

Health-General §21-259.2 (HB 643) bars knowingly manufacturing or selling cosmetics with intentionally added ingredients from its list: certain phthalates, formaldehyde, mercury, isobutyl- and isopropylparaben, m- and o-phenylenediamine, and specified PFAS compounds. Technically unavoidable trace amounts from impurities, manufacturing, storage or packaging are excepted. A 2026 law-firm review gives the effective date as Jan 1, 2025. Maryland is also listed among the states banning the sale of animal-tested cosmetics.

The effective date is from secondary sources; the statute page did not show it. The citation for Maryland's animal-testing law was not confirmed. The animal-testing list is Wikipedia's 'as of 2023' compilation (older than 2 years); effective dates were not confirmed. Federal MoCRA and FDA cosmetic and OTC sunscreen rules apply in every state.

Md. Code, Health-Gen. §21-259.2 (HB 643)

Current as of 2026-09-23 · Checked against the primary source

Maryland at a glance

Every topic we research, for Maryland. Open any line for the rule, its citation and the source.

Pharmacy & compounding

Out-of-state pharmacies shipping into the stateOut-of-state pharmacies must hold a Maryland nonresident pharmacy permit, and have a Maryland-licensed pharmacist on staff, to dispense into Maryland.License required

Must a pharmacy located in another state hold a license/registration from this state to ship prescriptions (including patient-specific 503A compounded preparations) to patients or practitioners here?

Md. Code, Health Occ. §12-403(e) requires a nonresident pharmacy to hold a Board of Pharmacy permit and to have a Maryland-licensed pharmacist on staff designated as responsible for services to Maryland patients. To get the permit, it must submit its most recent home-state inspection report, name a Maryland agent for service of process, and, if it will dispense compounded sterile preparations to Maryland patients, submit a USP <797> inspection report done within 90 days before applying by a Board designee or Board-approved entity (§12-403(f)(1)(v)). It must also provide toll-free pharmacist access at least 6 days and 40 hours per week, print that number on labels, keep Maryland records readily retrievable, and follow USP <797> and the Board's sterile compounding rules (§12-403(g)). The Board's June 2025 application asks for an inspection report from the last 2 years, and its renewal page requires a USP <797> inspection dated within 90 days of renewal for sterile compounders.

The Board's site blocks some automated fetchers, so it was read in a browser. Washington's inspection directive accepts Maryland board inspections only for pharmacies that do not compound, which matters for Maryland-based compounders shipping to WA, not the reverse.

Md. Code Ann., Health Occ. §12-403(e)-(g)

Current as of 2026-09-23 · Checked against the primary source

Office-use compounding from 503A pharmaciesMaryland does not allow general office-use compounding by 503A pharmacies: sterile office stock must come from an FDA-registered facility holding a Maryland distributor permit, with narrow exceptions for ophthalmologists and veterinarians.Not allowed

May a 503A (traditional) pharmacy dispense or distribute compounded preparations to a practitioner for office use (administration in the office, not patient-specific)? The federal position is that 503A requires patient-specific prescriptions; this is what the state pharmacy act and board rules allow.

COMAR 10.34.19.19 ('Office Use') says anyone preparing and distributing sterile compounded medications for office use into, out of or within Maryland must hold an FDA manufacturer's permit (or other FDA-designated permit) and, if applicable, a Maryland wholesale distributor permit. In practice that means an FDA-registered 503B facility or manufacturer, not a 503A pharmacy. Md. Code, Health Occ. §12-403(c)(22) allows only one human office-use exception without a patient-specific prescription: compounded antibiotics for emergency bacterial endophthalmitis or viral retinitis, and anti-VEGF agents for emergency neovascular glaucoma, wet macular degeneration or macular edema, supplied to an ophthalmologist who must report which patients received them. §12-403(c)(23) similarly allows non-patient-specific compounds for veterinarians. Advance ('batch') sterile compounding is limited to quantities supported by prior valid prescriptions (COMAR 10.34.19.08), which matches FDA's patient-specific view of 503A.

Non-sterile office-use compounding is not expressly addressed in what was reviewed. The statute's narrow office-use carve-outs and Maryland's definition of compounding (tied to a practitioner's prescription order or anticipated orders based on regular prescribing patterns, Health Occ. §12-101(f)) point to patient-specific dispensing. Confirm non-sterile office use with the Board (MDH.MDBOP@maryland.gov).

COMAR 10.34.19.19; COMAR 10.34.19.08; Md. Code Ann., Health Occ. §12-403(c)(22)-(23)

Current as of 2026-09-23 · Checked against the primary source

503B outsourcing facilities shipping into the stateAn out-of-state 503B outsourcing facility needs a Maryland Board of Pharmacy permit (issued on the manufacturer/wholesale-distributor application) before distributing into Maryland.State license required

Does the state require an FDA-registered 503B outsourcing facility located outside the state to hold a state license/registration (as an outsourcing facility, nonresident manufacturer, wholesaler or pharmacy) before shipping into the state?

Md. Code, Health Occ. §12-6C-03 requires a permit before any wholesale distribution in Maryland, and a manufacturer engaged in wholesale distribution must hold a wholesale distributor permit. The Board's current forms tell 503B facilities to use the 'Application for Manufacturers and Virtual Manufacturers Distributing Their Own Prescription Drugs or Devices,' not the general distributor application. That form (rev. 06/09/2025) asks for the FDA 503B registration date and number, sterile risk levels, a list of products distributed into Maryland, the most recent FDA inspection and a $1,750 fee. COMAR 10.34.19.19 separately requires anyone distributing sterile compounded office-use medications into Maryland to hold an FDA manufacturer or other FDA-designated permit and, if applicable, a Maryland wholesale distributor permit. The form also says a 503B that dispenses patient-specific prescriptions must additionally apply for a nonresident pharmacy permit.

Maryland has no separate 'outsourcing facility' license; 503Bs are permitted on the manufacturer/distributor track. The Wholesale Distributor application (rev. 08/04/2025) tells 503Bs not to use it. Out-of-state general wholesale distributors need accreditation or reciprocity, but the manufacturer form reviewed asks 503Bs for an FDA inspection instead.

Md. Code Ann., Health Occ. §12-6C-03; COMAR 10.34.19.19

Current as of 2025-06-09 · Checked against the primary source

FDA compounding MOUMaryland has not signed FDA's standard compounding MOU, so under the statute its 503A pharmacies are limited to 5% out-of-state distribution, although FDA is not enforcing that limit while it rewrites the MOU.Not signed

Has the state signed FDA's standard Memorandum of Understanding Addressing Certain Distributions of Compounded Human Drug Products (October 2020)? If not, FD&C Act §503A limits its 503A pharmacies' out-of-state distribution to 5% of total prescription orders (currently not enforced by FDA pending rulemaking).

Signing the standard MOU means the state board agrees to investigate complaints about compounded drugs its 503A pharmacies ship out of state and to identify and report to FDA pharmacies that distribute "inordinate amounts" interstate (more than 50% of their compounded prescriptions); in exchange, the statutory 5% out-of-state cap in FD&C Act §503A(b)(3)(B) does not apply to that state's pharmacies. FDA lists only Colorado, Kentucky and New Hampshire as signatories; Maryland is not among them. For a non-signing state, FD&C Act §503A(b)(3)(B)(ii) caps a 503A pharmacy's out-of-state distribution of compounded drugs at 5% of its total prescription orders. FDA now considers the October 2020 standard MOU suspended (it does not expect signatory states to carry out MOU activities and will not sign new ones) and is not enforcing the 5% limit until a final rule and an updated MOU are published; FDA's rulemaking (RIN 0910-AI71) listed a proposed rule for 11/2026 in the Fall 2025 Unified Agenda.

The FDA list of signed MOUs (current as of 2023-01-23) is older than 2 years, but FDA stopped entering new agreements under the 2020 MOU in October 2022, so no state can have signed since. The FDA "Compounding Information for States" page (current as of 2026-08-28) still describes the MOU as awaiting rulemaking. Pending: FDA proposed rule on 503A distribution (RIN 0910-AI71, NPRM projected 11/2026); H.R. 5316 (introduced 2025-09-11, referred to House Energy & Commerce) would remove the MOU provision from §503A.

FD&C Act §503A(b)(3)(B) (21 U.S.C. 353a(b)(3)(B))

Current as of 2026-08-28 · Checked against the primary source

Prescribing, dispensing & telehealth

State controlled-substance registrationMaryland requires practitioners to be registered by the Maryland Department of Health (Office of Controlled Substances Administration, OCSA) before prescribing, administering or dispensing controlled dangerous substances, with a separate registration for each principal place of practice.State CS registration required

Besides DEA registration, does the state require practitioners to hold a separate state controlled substance registration, license or permit to prescribe, administer or dispense controlled substances (e.g. testosterone, Schedule III)? "Conditional" means a state registration is needed only in some settings, such as keeping controlled-substance stock in the office.

Md. Code, Criminal Law Sec. 5-301 requires a person to be registered by the Department before manufacturing, distributing or dispensing a controlled dangerous substance in Maryland, and 'dispense' includes prescribing and administering (Sec. 5-101); an applicant must register separately each principal place of business or professional practice where it dispenses. Prescribers must attest to 2 hours of controlled-substance CE (Sec. 5-301(c)) and must be registered with the PDMP before obtaining a new or renewal registration (Sec. 5-304(b)). A registration expires on the date the Department sets and may not be renewed for more than 3 years (Sec. 5-302). Separately, a physician who personally prepares and dispenses drugs for a charge needs a written dispensing permit from the Board of Physicians and is subject to OCSA inspection (Health Occ. Sec. 12-102).

The OCSA website (health.maryland.gov/ocsa) returned 403 in this session, so fee and current term were not confirmed; statute caps the term at 3 years. The statute applies to all 'authorized providers' including NPs and PAs with prescriptive authority. Per-location: separate registration for each principal place of practice.

Md. Code, Crim. Law Secs. 5-101, 5-301, 5-302, 5-304; Md. Code, Health Occ. Sec. 12-102

Current as of 2026-09-23 · Checked against the primary source

PDMP check before prescribingMaryland requires a PDMP query only when starting (and every 90 days during) a course of treatment that includes an opioid or benzodiazepine, so testosterone is not covered.Required for some drugs only

Must a prescriber query the state Prescription Drug Monitoring Program before prescribing, and does the mandate cover Schedule III drugs such as testosterone? "Yes" means a mandate that reaches Schedule III; "conditional" means a mandate limited to certain drugs (e.g. opioids or benzodiazepines) or situations; "no" means no prescriber query mandate.

Health-General 21-2A-04.2 requires a prescriber, since July 1, 2018, to request at least the prior 4 months of PDMP data before initiating a course of treatment that includes prescribing or dispensing an opioid or benzodiazepine, to repeat the request at least every 90 days if the course continues beyond 90 days, and to document the review. Exemptions: supplies of 3 days or less; cancer or cancer-related pain; hospital inpatients; hospice or terminally ill patients; residents of assisted living, long-term care, comprehensive care or developmental disabilities facilities; acute pain for up to 14 days after surgery, fracture, significant trauma or childbirth; low-abuse drugs listed by the Secretary; and delays harmful to the patient or system outages. Pharmacists must check only when they suspect misuse.

Frequency: start of course + every 90 days. The duty covers prescribers who dispense. Testosterone (C-III) is not caught.

Md. Code, Health-Gen. § 21-2A-04.2

Current as of 2026-09-23 · Checked against the primary source

Physicians dispensing from the officeMaryland physicians need a written dispensing permit from the Board of Physicians, except for free starter doses and samples.Allowed with permit or limits

May physicians dispense prescription drugs (not just administer them) directly to patients from their practice? "Yes" means allowed under standard rules (labeling, records, and at most a simple notice to the board); "conditional" means a separate dispensing registration, permit or license, or quantity, day-supply or drug-category limits; "no" means prohibited except narrow exceptions.

Health Occ. 12-102(c) lets a physician personally prepare and dispense only with a Board dispensing permit, only to the physician's own patients, and only without a substantial financial interest in a pharmacy. The physician must follow dispensing and labeling rules, record dispensing in the chart, keep prescription files (separate Schedule II files), allow the Office of Controlled Substances Administration to inspect, avoid steering patients to one pharmacy, and complete 10 CE credits on dispensing every 5 years. Starter doses (72 hours or less) and samples given free need no permit.

Maryland also requires a state CDS registration for controlled substances.

Md. Code, Health Occ. 12-102

Current as of 2026-09-23 · Checked against the primary source

Prescribing by telehealthMaryland requires a Maryland license and allows telehealth prescribing, with an in-person requirement only for Schedule II opioids for pain.Allowed (standard rules)

For a patient located in the state: must the prescriber hold this state's license (or a telehealth registration or special license), is an in-person exam required before prescribing (generally or for controlled substances), are there state limits on prescribing Schedule III drugs such as testosterone by telehealth, and is the state an Interstate Medical Licensure Compact member? "Yes" means a state license and the in-person standard of care apply (opioid-only or Schedule II-only limits are described but do not change the answer); "conditional" means extra state conditions such as a telehealth registration route, an in-person exam requirement, controlled-substance limits reaching Schedule III, or registration of telehealth businesses. Federal DEA rules apply on top.

Out-of-state physicians need a Maryland license apart from narrow adjoining-state exceptions (Health Occ. 14-301, 14-302); expedited licensure pathways exist. A practitioner may not prescribe a Schedule II opiate for pain through telehealth unless the patient is in a health care facility or the practitioner (or a group colleague) previously assessed the patient in person (Health Occ. 1-1003, amended 2025). Other controlled substances, including testosterone, follow general state and federal rules; asynchronous care requires a prior synchronous audio-video or in-person evaluation (COMAR 10.32.05.05). IMLC: member.

Health Occ. 1-1003 amended by HB 869 / SB 372 (2025 session) per CCHP.

Md. Code Health Occ. 1-1003; COMAR 10.32.05.05; Health Occ. 14-301, 14-302

Current as of 2026-06-03 · From a dated compilation

Aesthetics, IV therapy & practice ownership

Who may inject neuromodulators and fillersMaryland lets physicians assign cosmetic injections to licensed providers such as RNs only after the physician personally assesses each patient and writes a treatment plan, with the physician on site during the procedure and required training completed.RNs may inject with added conditions

Who may administer botulinum toxin and dermal fillers (physicians, PAs, NPs, RNs, LPNs, estheticians, dentists), under what supervision (on-site vs available), and must a physician/NP/PA perform a prior good-faith exam?

COMAR 10.32.09 (Board of Physicians) defines 'cosmetic medical procedure' to include subcutaneous, intradermal or intramuscular injections of medical products and devices used to inject substances into skin, fat, muscle or bone. A physician may delegate these to a PA or assign them to another health care provider licensed under the Health Occupations Article whose own board considers the procedure within scope, only if the person has the training in Regulation .07 and any training their own board requires. The physician must keep written office protocols at each site, personally perform each patient's initial assessment, prepare a written treatment plan (including device and settings), obtain informed consent to treatment by a non-physician, and provide on-site supervision whenever a non-physician performs the procedure (a Board-approved PA delegation agreement may allow 'immediately available' supervision after the physician's evaluation). Unlicensed staff are not eligible.

Regulation pages show no effective date (accessed 2026-09-23); the chapter references agreements approved before May 2009. The Maryland Board of Nursing site blocked automated access, so its own position on RN cosmetic injections was not checked.

COMAR 10.32.09.02, .04, .05 (Delegation and Assignment of Performance of Cosmetic Medical Procedures and Use of Cosmetic Medical Devices)

Current as of 2026-09-23 · Checked against the primary source

IV hydration and vitamin therapyNo Maryland rule or board statement on elective IV hydration could be confirmed; the Maryland Board of Nursing site blocked automated access.Not confirmed

What does the state require for elective IV hydration/vitamin (incl. NAD+) therapy: who may start IVs, is a patient-specific order or good-faith exam required before a patient's first IV, are standing orders allowed, and are there rules for mobile IV services?

The Board of Physicians' cosmetic procedure chapter (COMAR 10.32.09) covers cosmetic injections, not wellness IVs. The Maryland Board of Nursing's pages returned HTTP 403 to automated requests on 2026-09-23, so any declaratory ruling on IV hydration could not be reviewed.

Check with the Maryland Board of Nursing (mbon.maryland.gov).

Current as of 2026-09-23 · Not independently confirmed

Corporate practice of medicine / med spa ownershipMaryland's corporate practice of medicine restriction rests on common law and board policy rather than a clear statute, and compilations disagree on how strict it is.CPOM with exceptions

Does the state enforce the corporate practice of medicine doctrine (non-physicians may not own medical practices or employ physicians), and how does that affect med spa ownership?

Permit Health's 2025 guide rates Maryland 'Moderate (Common Law)', citing a Board of Physician Quality Assurance position statement and the Maryland Dentistry Act; MedPath Compliance (reviewed 2026-06-20) lists Maryland as 'Yes (common law)' based on board policy.

Maryland Board of Physician Quality Assurance position statement (as reported by Permit Health)

Current as of 2026-06-20 · From a dated compilation

Who may operate aesthetic lasersMaryland lets physicians assign laser, IPL and RF cosmetic procedures only to PAs and other licensed providers whose board allows it, after the physician personally assesses the patient, with required training and on-site physician supervision; estheticians and unlicensed staff are not eligible.Delegable with licensing/training rules

Who may perform laser/IPL/RF aesthetic procedures (laser hair removal, resurfacing): physicians only, delegated to RNs/PAs, or licensed electrologists/estheticians/laser technicians with state certification?

Under COMAR 10.32.09, lasers, light/IPL and RF/microwave devices used cosmetically are 'cosmetic medical devices'. A physician may delegate or assign their use only to a PA or a licensed health care provider whose board deems it within scope and who has the training in Regulation .07. The physician must personally perform the initial assessment, write a treatment plan specifying device and settings, keep written protocols at each site, obtain informed consent and provide on-site supervision whenever a non-physician operates the device (except under a Board-approved PA agreement allowing immediately available supervision).

Training content in Regulation .07 was not reviewed.

COMAR 10.32.09.02, .04, .05

Current as of 2026-09-23 · Checked against the primary source

Labs, regenerative medicine & cosmetics

State clinical laboratory licensing (beyond CLIA)Maryland requires a state license for medical laboratories, including out-of-state labs that test specimens from Maryland providers.State lab license required

Does the state license clinical laboratories itself, beyond federal CLIA certification, including out-of-state labs that test specimens from the state?

Health-General §17-205 requires a license from the Secretary to offer or perform medical laboratory tests, and expressly covers performing tests 'on specimens acquired from health care providers in this State at a medical laboratory located outside this State.' The Office of Health Care Quality runs the lab licensing program and is also Maryland's CLIA agency. The license is in addition to CLIA.

Out-of-state labs: yes. Contact: OHCQ.labs@maryland.gov.

Md. Code, Health-Gen. §17-205

Current as of 2026-09-23 · Checked against the primary source

Direct-to-consumer lab testingNot confirmed whether Maryland consumers may order lab tests without a practitioner order. Practitioner-ordered panels are not affected.Not confirmed

May consumers order their own lab tests without a practitioner order (direct access testing)? A practitioner-ordered panel is always fine; this matters for take-home and consumer test kits.

ADLM (formerly AACC) reported in 2019 that 37 states and DC let consumers order some or all tests directly, but it did not publish the state list, and this research did not confirm Maryland's rule. Maryland's lab regulator (CLIA state agency) is Maryland Dept. of Health, Office of Health Care Quality (OHCQ.labs@maryland.gov, 410-402-8025). The question matters for take-home and consumer test kits, not for panels a clinician orders.

A commercial 2026 guide (Just Labs) lists Maryland among states that restrict independent test ordering; not confirmed. Maryland requires a state license for labs testing Maryland specimens. The ADLM figure dates from 2019 (older than 2 years).

Not confirmed

Current as of 2026-09-23 · Not independently confirmed

State laws on stem cell / regenerative therapiesNo Maryland law specific to stem cell, exosome or regenerative therapies was found, so FDA rules and general medical-practice rules apply.No state-specific law (FDA rules apply)

Has the state enacted a law or rule specifically about stem cell, exosome or regenerative-medicine therapies (notice/disclosure duties, permission for certain non-FDA-approved uses, or Right to Try extensions covering them)?

Compilations of state stem-cell laws from 2024 to 2026 list about a dozen states with specific laws (California, Florida, Georgia, Mississippi, Nevada, North Carolina, Tennessee, Texas, Utah, Vermont, Washington and Wyoming), plus Montana's general experimental-treatment law and Kansas's state stem cell center. Maryland is not among them. Without a state-specific law, regenerative products are governed by federal FDA rules plus the state's general medical practice, advertising and consumer-protection laws, enforced by its medical board. Federal FDA rules still apply regardless of state law: stem cell, birth-tissue and exosome products are regulated by FDA, and a state law cannot make an unapproved biologic FDA-approved.

The finding of no law rests on multi-state compilations (a commercial one from Aug 2026 and a peer-reviewed one from Feb 2024, which is older than 2 years) and targeted searches, not a statute-by-statute review, and neither compilation is exhaustive. General Right to Try laws for terminal patients, where they exist, were not reviewed here.

State rules for cosmetics and sunscreenMaryland's Toxic-Free Cosmetics Act has banned listed ingredients in cosmetics, including phthalates, formaldehyde, mercury, certain parabens and PFAS, since Jan 1, 2025, and Maryland bans animal-tested cosmetics.State cosmetic/sunscreen rules

Does the state have cosmetic or sunscreen requirements beyond federal MoCRA, such as ingredient bans (PFAS, formaldehyde, phthalates), ingredient reporting, sunscreen-ingredient bans, or bans on selling animal-tested cosmetics?

Health-General §21-259.2 (HB 643) bars knowingly manufacturing or selling cosmetics with intentionally added ingredients from its list: certain phthalates, formaldehyde, mercury, isobutyl- and isopropylparaben, m- and o-phenylenediamine, and specified PFAS compounds. Technically unavoidable trace amounts from impurities, manufacturing, storage or packaging are excepted. A 2026 law-firm review gives the effective date as Jan 1, 2025. Maryland is also listed among the states banning the sale of animal-tested cosmetics.

The effective date is from secondary sources; the statute page did not show it. The citation for Maryland's animal-testing law was not confirmed. The animal-testing list is Wikipedia's 'as of 2023' compilation (older than 2 years); effective dates were not confirmed. Federal MoCRA and FDA cosmetic and OTC sunscreen rules apply in every state.

Md. Code, Health-Gen. §21-259.2 (HB 643)

Current as of 2026-09-23 · Checked against the primary source

Compare every state

Corporate practice of medicine / med spa ownership. Does the state enforce the corporate practice of medicine doctrine (non-physicians may not own medical practices or employ physicians), and how does that affect med spa ownership?

Strong CPOM · 20CPOM with exceptions · 15No meaningful CPOM · 16
Alaska: No meaningful CPOMAlabama: No meaningful CPOMArkansas: CPOM with exceptionsArizona: Strong CPOMCalifornia: Strong CPOMColorado: Strong CPOMConnecticut: CPOM with exceptionsWashington DC: CPOM with exceptionsDelaware: No meaningful CPOMFlorida: No meaningful CPOMGeorgia: CPOM with exceptionsHawaii: No meaningful CPOMIowa: CPOM with exceptionsIdaho: No meaningful CPOMIllinois: Strong CPOMIndiana: CPOM with exceptionsKansas: CPOM with exceptionsKentucky: CPOM with exceptionsLouisiana: CPOM with exceptionsMassachusetts: Strong CPOMMaine: No meaningful CPOMMichigan: Strong CPOMMinnesota: Strong CPOMMissouri: No meaningful CPOMMississippi: CPOM with exceptionsMontana: CPOM with exceptionsNorth Carolina: Strong CPOMNorth Dakota: Strong CPOMNebraska: No meaningful CPOMNew Hampshire: No meaningful CPOMNew Jersey: Strong CPOMNew Mexico: No meaningful CPOMNevada: Strong CPOMNew York: Strong CPOMOhio: CPOM with exceptionsOklahoma: No meaningful CPOMOregon: Strong CPOMPennsylvania: Strong CPOMRhode Island: CPOM with exceptionsSouth Carolina: Strong CPOMSouth Dakota: Strong CPOMTennessee: Strong CPOMTexas: Strong CPOMUtah: No meaningful CPOMVirginia: No meaningful CPOMVermont: No meaningful CPOMWashington: CPOM with exceptionsWisconsin: Strong CPOMWest Virginia: Strong CPOMWyoming: No meaningful CPOMMaryland: CPOM with exceptionsConnecticut: CPOM with exceptionsCTWashington DC: CPOM with exceptionsDCDelaware: No meaningful CPOMDEMassachusetts: Strong CPOMMANew Hampshire: No meaningful CPOMNHNew Jersey: Strong CPOMNJRhode Island: CPOM with exceptionsRIVermont: No meaningful CPOMVTMaryland: CPOM with exceptionsMD

The federal floor, for every category

Two federal compounding lanes: §503A pharmacies vs §503B outsourcing facilitiesA §503A pharmacy (or physician) compounds for an identified patient on a prescription; a §503B outsourcing facility is FDA-registered, follows CGMP, and is the only federal lane for non-patient-specific office stock.

Under §503A, a state-licensed pharmacist or physician may compound for an identified individual patient on a valid prescription, or in limited anticipatory quantities (no more than a 30-day supply based on the compounder's own prescription history). 503A compounders are not required to follow CGMP and are not required to report adverse events to FDA. Under §503B, an outsourcing facility registers with FDA, compounds under CGMP, is inspected on a risk-based schedule, must report adverse events, and may distribute non-patient-specific product to hospitals, clinics and practitioners for office use. Neither lane makes a compounded drug 'FDA-approved'. Both lanes restrict 'essentially copies' of approved or marketed drugs and restrict which bulk ingredients may be used. FDA keeps a public list of registered outsourcing facilities (content current as of 09/08/2026).

'Essentially a copy' of an approved or commercially available drugFDA treats a compounded drug with the same active ingredient, a similar strength and a usable route as a marketed product as 'essentially a copy' unless the prescriber documents a patient-specific significant difference on the prescription.

503A (final guidance, Jan 2018): a drug is not 'commercially available' if it is discontinued or is in 'currently in shortage' status on FDA's drug shortage list. FDA generally considers a compounded drug a copy if it has the same API in the same, similar or easily substitutable strength by a route the commercial product can be used by. The prescriber's determination must name the change and the significant difference for that patient; a patient name plus formulation is not enough, and lower price does not count. FDA does not consider copies to be made 'regularly or in inordinate amounts' if the compounder fills four or fewer such prescriptions per calendar month. 503B (final guidance, Jan 2018): outsourcing facilities may not compound drugs identical or nearly identical to an approved drug unless it is on the shortage list; otherwise a prescriber's determination of a clinical difference must be noted on the prescription or order.

Office use / office stock of compounded drugs (federal position)FDA's position is that §503A compounding requires a prescription for an identified patient; clinics wanting non-patient-specific office stock are directed to §503B outsourcing facilities.

FDA's final 503A prescription-requirement guidance (Dec 2016) says hospitals, clinics and practitioners can obtain non-patient-specific compounded drugs from outsourcing facilities registered under §503B, which may distribute sterile and non-sterile office-use product. 503A anticipatory compounding is limited to no more than a 30-day supply based on the compounder's own prescription history. Some states allow limited 503A office use under state law, but the federal 503A exemptions still depend on patient-specific prescriptions (see state topic office_use_503a).

503B products may not be resold by anyone other than the outsourcing facilitySection 503B(a)(8) bars anyone other than the outsourcing facility from selling or transferring its compounded drugs, so a clinic, distributor or marketplace that takes ownership may not resell 503B product.

FDA's June 2023 draft guidance (still draft) says the drug should go from the outsourcing facility to the entity that dispenses or administers it. FDA does not intend to apply the prohibition to transfers to common carriers, third-party logistics providers, regulators, returns processors, waste handlers or contract test labs, or to recall-related transfers. A state-licensed pharmacy may dispense 503B product against a patient-specific prescription. Clinic-to-clinic resale is the core concern.

Which bulk ingredients compounders may use (503A Categories 1/2/3; 503B bulks list)A 503A compounder may use a bulk ingredient only if it has a USP/NF monograph, is a component of an FDA-approved drug, or is on the 503A bulks list; FDA tolerates interim 'Category 1' substances, flags 'Category 2' as significant safety risks, and treats 'Category 3' as lacking support.

FDA's category list was updated May 14, 2026. 503A Category 2 now contains only cesium chloride, domperidone, germanium sesquioxide, ibutamoren mesylate, kisspeptin-10 and quinacrine (intrauterine use). Category 1 includes glutathione, methylcobalamin, NAD, NADH, enclomiphene citrate, GHK-Cu (non-injectable routes only), vasoactive intestinal peptide and others. GHRP-2, GHRP-6, mechano growth factor and thymulin are in Category 3. BPC-157, TB-500, CJC-1295, ipamorelin, AOD-9604, Selank, Semax, epitalon, MOTs-C, dihexa, KPV and thymosin alpha-1 are in no category, so they do not get Category 1 enforcement discretion. FDA does not intend to categorize substances nominated on or after Jan 7, 2025. The final 503B bulks list is short (e.g., diphenylcyclopropenone, glycolic acid topical up to 70%, quinacrine oral, squaric acid dibutyl ester, trichloroacetic acid); 503B Category 2 includes GHRP-2, GHRP-6, ipamorelin acetate, ibutamoren, tranilast and others.

Biologics (including hCG, tesamorelin, somatropin) cannot be compounded under 503A/503BSince March 23, 2020, protein products approved as drugs became licensed biologics, and FDA says biological products are not eligible for the 503A or 503B compounding exemptions.

The BPCI Act transition on March 23, 2020 deemed approved NDAs for biological products to be BLAs. FDA's transition list includes chorionic gonadotropin (Pregnyl, Novarel, Fresenius chorionic gonadotropin, Ovidrel), menotropins, follitropins, hyaluronidase, somatropin and tesamorelin acetate (Egrifta/Egrifta SV). FDA's notice to compounders states that 'biological products will not be eligible for the exemptions for compounded drugs under sections 503A and 503B'. Separate FDA guidance (Jan 2018) describes limited conditions for mixing, diluting or repackaging licensed biologics outside their labeling.

'Research Use Only' / 'not for human consumption' productsFDA treats RUO-labeled peptides and GLP-1s as unapproved drugs when marketing, dosing information or bundled syringes/bacteriostatic water show human use; the disclaimer does not make them lawful to administer to patients.

FDA's GLP-1 safety page says companies sold products falsely labeled 'for research purposes' or 'not for human consumption' with dosing instructions for human use. FDA has issued repeated warning-letter rounds to peptide/RUO sellers in 2026 (e.g., letters dated March 31, 2026 to Gram Peptides and others; June 17, 2026 to Wholesale Peptide; August 24, 2026 to Royal Peptides and others). Import Alert 66-41 (unapproved new drugs promoted in the U.S.) has listed, for example, a firm offering PT-141 peptide. RUO material is not a USP-grade or approved-drug-component bulk ingredient for compounding and is not a prescription drug a clinician can lawfully buy for patient use.

FDA drug shortage list and why it matters for compoundingA drug in 'currently in shortage' status is not 'commercially available', so 503A/503B compounders may make copies of it; when FDA marks the shortage resolved, that permission ends (503B facilities may finish existing orders for up to 60 days).

The 503A copies guidance says a drug appears on the shortage list only if it is in 'currently in shortage' status, not 'resolved'. FDA's shortage-compounding page says compounders must still meet all other 503A conditions (including a valid patient-specific prescription), and FDA 'may take action if an outsourcing facility continues to fill new orders after the approved drug is removed from FDA's drug shortage list, or if it continues to fill existing orders more than 60 days after the drug has been removed.' The GLP-1 episode shows the effect: large-scale semaglutide and tirzepatide compounding depended on shortage status and ended after FDA resolved the shortages. A prescriber or compounder relying on a shortage should note on the prescription that the drug was on the list and the date checked.

FDA Standard MOU on interstate distribution of 503A compounded drugsThe October 2020 standard MOU is suspended after a 2021 court remand; FDA is not enforcing the statutory 5% out-of-state limit and plans a new rule, with a proposed rule projected for November 2026.

Section 503A limits a pharmacy in a state without an FDA MOU to distributing no more than 5% of its compounded prescriptions out of state. FDA published a final standard MOU in October 2020, but a federal court remanded it in September 2021. FDA 'considers the standard MOU published in October 2020 to be suspended' and, per its Oct 21, 2022 Federal Register notice, will not enforce the 5% limit until a final rule and updated MOU are published. The Fall 2025 Unified Agenda lists RIN 0910-AI71 ('Distribution of Compounded Drug Products Under Section 503A') at the proposed-rule stage with an NPRM projected for 11/2026. State nonresident-pharmacy licensing still applies (see state topics nonresident_pharmacy and fda_mou).

DEA telemedicine prescribing of controlled substances (Ryan Haight Act flexibilities)Through December 31, 2026, DEA-registered practitioners may prescribe Schedule II–V controlled substances by telemedicine without a prior in-person visit under a fourth temporary extension; the permanent special-registration rule is still pending.

The Ryan Haight Act generally requires an in-person medical evaluation before prescribing controlled substances over the internet. DEA and HHS published the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities (90 FR 61301, Dec 31, 2025), effective Jan 1 – Dec 31, 2026. Prescriptions must still be for a legitimate medical purpose and comply with federal and state law; state telehealth and controlled-substance rules still apply (see telehealth_rx, state_csr, pdmp_mandate). The separate buprenorphine (opioid use disorder) telemedicine final rule and the VA continuity-of-care final rule, both published Jan 17, 2025, took effect Dec 31, 2025 after two delays (90 FR 13410). A Federal Register search on 2026-09-23 found no DEA special-registration final rule published in 2026. The Special Registrations for Telemedicine final rule was reported to be in OMB review as of late August 2026, with a final rule forecast for November 2026. Without a new rule or another extension, the in-person requirement returns on Jan 1, 2027.

FTC health-claim substantiation (advertising)The FTC requires competent and reliable scientific evidence, generally randomized controlled human trials, before a marketer makes health-benefit claims for any health product, including devices, tests, supplements and apps.

The FTC's Health Products Compliance Guidance (Dec 2022) replaced the 1998 supplement advertising guide. Marketers must have substantiation for every objective claim, express or implied, before it runs; for health benefits this generally means randomized, controlled human clinical testing. Qualifying disclosures must be clear and conspicuous, and advertisers are liable for misleading testimonials and endorsements. This sits alongside FDA's rules: FDA regulates labeling and intended use, and FDA warning letters in 2025–2026 target 'same as brand' and 'FDA-approved' claims for compounded drugs.

Current as of 2026-09-23

Adverse event reporting (MedWatch; 503B mandatory reporting)Clinicians and patients can report problems with drugs, biologics, devices and cosmetics to FDA's MedWatch voluntarily; 503B outsourcing facilities must report adverse events, while 503A pharmacies are not federally required to.

MedWatch accepts voluntary reports for prescription and OTC drugs, biologics (including human cell and tissue products), medical devices, combination products and cosmetics. Manufacturers, packers and distributors named on a marketed prescription drug label must file 15-day 'Alert reports' for serious and unexpected adverse experiences under 21 CFR 310.305; FDA's final guidance (Oct 2015) applies adverse event reporting to 503B outsourcing facilities. FDA notes that federal law does not require state-licensed 503A pharmacies to report adverse events, so compounded-drug events are likely under-reported. Under MoCRA, cosmetic 'responsible persons' must report serious adverse events within 15 business days.

Where FDA enforcement shows up: warning letters, import alerts, recallsFDA posts warning letters in a searchable database, detains risky imports through import alerts (e.g., 66-80 for GLP-1 APIs, 66-41 for unapproved drugs, 80-04 for gloves, 53-21 for adulterated cosmetics), and publishes recalls in its enforcement reports.

Import alerts let FDA detain products without physical examination. Import Alert 66-80 (GLP-1 receptor agonist bulk drug substances) detains semaglutide, tirzepatide, liraglutide, exenatide, orforglipron, retatrutide and dulaglutide APIs unless the manufacturer is on FDA's 'Green List'; FDA cited that 21% of inspected GLP-1 API makers were noncompliant with CGMP. Import Alert 66-41 covers unapproved new drugs promoted in the U.S. and has listed firms offering unapproved botulinum toxin and PT-141 peptide. Recalls, including Class I recalls of compounded glutathione in July–August 2026, appear in FDA enforcement reports and openFDA.

Compounded peptides: where things stand in September 2026FDA pulled 12 peptides out of Category 2 in April 2026 after nominators withdrew them, and its advisory committee voted in July 2026 to recommend six for the 503A bulks list, but none is on the list or in Category 1 yet, so none has federal compounding permission today.

On April 15, 2026 FDA announced that 12 peptides (BPC-157, cathelicidin LL-37, dihexa acetate, emideltide/DSIP, epitalon, GHK-Cu injectable, KPV, PEG-MGF, melanotan II, MOTs-C, Semax, TB-500) would leave Category 2 after seven days because their nominations were withdrawn; FDA's list shows the change effective April 22, 2026. Law-firm analyses stress that leaving Category 2 does not place a substance on the 503A bulks list or in Category 1. At the July 23–24, 2026 PCAC meeting, members voted to recommend BPC-157 (8–6), KPV (8–6), TB-500 (8–6), MOTs-C (7–5), epitalon (7–4) and Semax (8–5), and against emideltide (6–7); FDA staff had recommended against all of them. FDA must still decide and complete notice-and-comment rulemaking. GHK-Cu, dihexa, LL-37, PEG-MGF and melanotan II are slated for a PCAC meeting before the end of February 2027. Earlier, AOD-9604, CJC-1295, ipamorelin, thymosin alpha-1 and Selank left Category 2 in September 2024, and PCAC voted against CJC-1295 and AOD-9604 on Dec 4, 2024.

Search the official databases

FDA

Drugs@FDAApproval status, application number, labels and approval letters for FDA-approved brand and generic drugs.Orange Book: Approved Drug Products with Therapeutic Equivalence EvaluationsTherapeutic-equivalence (AB) ratings, reference listed drugs, patents and exclusivities for approved small-molecule drugs.Purple Book: Database of Licensed Biological ProductsLicensed biologics and their biosimilar and interchangeable products, with exclusivity dates.National Drug Code (NDC) DirectoryThe NDC, labeler, dosage form, marketing category and listing status of a drug product.FDA Drug ShortagesWhether a drug is on FDA's current shortage list, and its status, reason and expected resolution.Registered Outsourcing Facilities (503B)Whether a compounder is a registered 503B outsourcing facility, with its last FDA inspection and any Form 483 or warning letter.Bulk Drug Substances Used in Compounding Under Section 503A (Category 1/2/3 lists)Whether a bulk ingredient (for example a peptide) is in Category 1, 2 or 3 of FDA's interim 503A bulks policy, and links to the final 503A bulks list.503B Bulk Drug Substances ListBulk drug substances that outsourcing facilities may compound from because of clinical need, and substances FDA has placed on or excluded from the list.FDA Warning LettersSearchable warning letters to compounders, telehealth and med-spa sellers, device makers and others, by company, subject and date.FDA Import AlertsProducts and firms that FDA may detain at the border without examination, for example unapproved drugs, peptides and cosmetics.AccessGUDID (Global Unique Device Identification Database)Look up a medical device by UDI or device identifier to see its labeler, model, FDA product code, premarket number and MRI safety status.510(k) Premarket Notification DatabaseWhether a device (for example an aesthetic laser or energy device) was cleared through 510(k), with the K-number, product code and cleared indications.Premarket Approval (PMA) DatabaseClass III devices approved through PMA (for example dermal fillers), with approval orders, supplements and approved indications.MAUDE: Manufacturer and User Facility Device ExperienceReports of adverse events and malfunctions filed for a medical device, by brand, product code or manufacturer.MedWatch Online Voluntary Reporting Form (FDA 3500)Report a serious adverse event, product quality problem or medication error for a drug, biologic, device, compounded product or cosmetic.openFDAPublic APIs and downloads for FDA adverse-event, recall, labeling, NDC, 510(k)/PMA and UDI data.Modernization of Cosmetics Regulation Act of 2022 (MoCRA)Federal cosmetics rules on facility registration, product listing, adverse-event reporting, safety substantiation and labeling, with their compliance dates.Cosmetics Direct (FDA cosmetic registration and listing portal)How cosmetic facilities register and products are listed under MoCRA through FDA's Cosmetics Direct portal.
Rules checked. Now buy from vendors who are.

Every vendor on MedGrid clears document review for its category before it lists. Join free with your NPI to see wholesale pricing.

Platform terms — non-circumvention

Non-circumvention. Every introduction made through MedGrid — doctor to vendor, doctor to pharmacy, vendor to pharmacy, partner to any of them — is platform-protected. For 24 months following an introduction, the parties agree not to solicit, contract, or transact directly (or through affiliates) in a manner that circumvents MedGrid or its fees. Renewals, refills, and reorders of platform-introduced relationships run through the platform. This clause is part of every participant agreement — doctor, vendor, pharmacy, and sales partner alike — and it protects the people who make the introductions as much as it protects MedGrid.

Educational summaries of public law and agency guidance, not legal advice. Researched 2026-09-23 from the sources linked on each answer; laws, board rules and FDA policy change, so confirm with the linked agency or your counsel before you rely on an answer. Found something out of date? Tell our compliance desk.