Regulations research

FDA and state rules, for what you actually buy.

Search a drug, ingredient or device for its live FDA record, or pick your state and a category to see the federal rules and what your state adds — each answer with its citation and source.

A physician working on a laptop in a private-practice office
Licenses and compliance: the states a vendor is licensed in and the documents it publishes, each marked verified or not
Every answer sourced
Everything for New York ↓
← All categories

Cosmeceutical & consumer skincare

FDA pathway: Cosmetic (MoCRA) | Drug if disease or structure/function claims | OTC monograph for sunscreen/acne actives

Cosmetics must be made in FDA-registered facilities and listed with FDA (enforced since July 1, 2024), have safety substantiation, and have serious adverse events reported within 15 business days; 'cosmeceutical' is not a legal category.

On MedGrid as: Cosmeceutical Skincare · Consumer Skincare · Consumer Take-Home · Medical-Grade Skincare · Post-Procedure Care

The federal rules

Facility registration and product listingExisting facilities had to register and products be listed by Dec 29, 2023; FDA did not enforce until July 1, 2024. Registrations renew every two years and listings update annually.

Submissions go through Cosmetics Direct (or ESG NextGen, or paper forms 5066/5067). Certain small businesses are exempt except for higher-risk products such as eye-area products and injectables.

Serious adverse event reporting and safety substantiationThe responsible person must report serious adverse events to FDA within 15 business days and keep records supporting adequate safety substantiation.

Animal testing is not mandated.

Current as of 2026-08-10

Fragrance allergens, talc, PFAS, GMPFragrance-allergen labeling and cosmetic GMP rules are still pending (GMP has a draft guidance); FDA withdrew its Dec 2024 proposed talc asbestos-testing rule in Nov 2025; FDA published its PFAS-in-cosmetics report Dec 29, 2025.

FDA's MoCRA page (08/10/2026) lists fragrance allergen labeling as a required regulation but links no proposed or final rule.

Current as of 2026-08-10

Drug vs cosmetic claimsIntended use decides: claims to treat acne, dandruff or psoriasis, remove wrinkles, promote cell regeneration, or reduce cellulite make a product a drug; FDA says the law 'does not recognize any such category as cosmeceuticals'.

Products can be both (e.g., moisturizer with sunscreen) and must meet both sets of rules.

Current as of 2024-09-11

Imported cosmeticsImport Alert 53-21 allows detention of adulterated cosmetic products and ingredients (revised Mar 5, 2026).

Other cosmetic import alerts cover color additive violations and microbial contamination.

Current as of 2026-03-05

Changing now

What New York adds

State rules for cosmetics and sunscreenNew York limits 1,4-dioxane in cosmetics (10 ppm) and personal care products (1 ppm), bans mercury in cosmetics, and bans the sale of animal-tested cosmetics.State cosmetic/sunscreen rules

Does the state have cosmetic or sunscreen requirements beyond federal MoCRA, such as ingredient bans (PFAS, formaldehyde, phthalates), ingredient reporting, sunscreen-ingredient bans, or bans on selling animal-tested cosmetics?

ECL §37-0117 bars selling cosmetic products with 1,4-dioxane above 10 ppm (since Dec 31, 2022) and personal care products above 2 ppm (Dec 31, 2022) and then 1 ppm (Dec 31, 2023). It also bans cosmetic or personal care products containing mercury beyond trace amounts, and the thresholds are reviewed every two years from May 1, 2025. GBL §399-aaaaa bars importing for profit or selling cosmetics developed with animal testing conducted after its effective date, with exceptions; the Attorney General may seek penalties of up to $5,000 plus $1,000 per day.

Pending: Assembly Bill 8585 would ban cosmetics with intentionally added PFAS (proposed effective Jan 1, 2029). Not enacted as of the March 2026 compilation. The animal-testing law's effective date was not shown on the statute page (2023 per compilation). Federal MoCRA and FDA cosmetic and OTC sunscreen rules apply in every state.

N.Y. Envtl. Conserv. Law §37-0117; N.Y. Gen. Bus. Law §399-aaaaa

Current as of 2026-09-23 · Checked against the primary source

New York at a glance

Every topic we research, for New York. Open any line for the rule, its citation and the source.

Pharmacy & compounding

Out-of-state pharmacies shipping into the stateAn out-of-state pharmacy must register with the New York State Board of Pharmacy (NYSED) as a nonresident establishment before shipping prescriptions into New York.License required

Must a pharmacy located in another state hold a license/registration from this state to ship prescriptions (including patient-specific 503A compounded preparations) to patients or practitioners here?

Education Law §6808-b and 8 NYCRR §63.8(b)(1) require every nonresident establishment (pharmacy, manufacturer, wholesaler or outsourcing facility) that ships, mails or delivers prescription drugs or devices to establishments, authorized prescribers or patients in New York to register with the State Education Department. The pharmacy must be licensed and in good standing in its home state, keep readily retrievable records of drugs shipped into New York, and comply with New York controlled-substance law. The application (form OOS 500 P) costs $345 (renewed triennially at $260) and requires a home-state license verification, a sample label with a toll-free number, and a signed letter from the owner and supervising pharmacist acknowledging that New York does not allow compounding for office use. A pharmacy may apply for an exception if it limits New York dispensing to 'isolated transactions' (600 or fewer prescriptions per calendar year). Neither the statute nor §63.8 sets a separate nonresident sterile-compounding permit, an NY-licensed PIC requirement for nonresident pharmacies, or an NABP/VPP inspection requirement.

Isolated-transaction exception (600 or fewer Rx/year) is granted on application under 8 NYCRR §63.8(e); it does not apply to outsourcing facilities. The nysenate.gov copy of §6808-b shows a 2026-05-29 revision and now also covers nonresident pharmacies that participate in 'shared pharmacy services' for NY pharmacies/patients; the application form (Rev. 6/26) adds a signed shared-pharmacy-services acknowledgment. A 2017 bill (S6104) that would have required NABP VPP inspections for nonresident sterile compounders was never enacted. Several third-party guides repeat that VPP requirement as if it were law; it is not in §6808-b or §63.8.

N.Y. Educ. Law §6808-b; 8 NYCRR §63.8(a)(2), (b)(1), (e)

Current as of 2026-05-29 · Checked against the primary source

Office-use compounding from 503A pharmaciesNew York does not allow pharmacies to compound for office use; compounded products must be dispensed on patient-specific prescriptions, and office stock must come from a New York-registered outsourcing facility.Not allowed

May a 503A (traditional) pharmacy dispense or distribute compounded preparations to a practitioner for office use (administration in the office, not patient-specific)? The federal position is that 503A requires patient-specific prescriptions; this is what the state pharmacy act and board rules allow.

The NYS Board of Pharmacy's nonresident pharmacy application requires the owner and supervising pharmacist to sign a letter acknowledging that 'NYS does not allow compounding for office use' and that compounded products will be prepared and dispensed pursuant to patient-specific prescriptions. The Board states that New York has never accepted routine compounding of bulk preparations for office use as the practice of pharmacy and considers it manufacturing. Education Law §6801 defines pharmacy practice as preparing, compounding or dispensing drugs 'on the basis of prescriptions or other legal authority,' and §6802 defines a 'manufacturer' as one who compounds or prepares drugs for distribution or sale to pharmacies or other channels. This matches FDA's view that 503A compounding requires patient-specific prescriptions. Non-patient-specific sterile compounded drugs are the domain of outsourcing facilities registered under Education Law §6808 / §6808-b.

The prohibition is stated as Board policy in the application packet (form revised 6/26) rather than in a single rule section expressly titled 'office use'; no 2025–2026 bill or rule changing this position was found. The form's acknowledgment applies to nonresident pharmacies, so an out-of-state 503A pharmacy registered in NY is bound by it.

N.Y. Educ. Law §§6801, 6802; NYS Board of Pharmacy form OOS 500 P, item 8

Current as of 2026-09-23 · Checked against the primary source

503B outsourcing facilities shipping into the stateAn out-of-state 503B outsourcing facility must register with the NYS Board of Pharmacy as a nonresident outsourcing facility, supervised by a New York-licensed pharmacist, before shipping into New York.State license required

Does the state require an FDA-registered 503B outsourcing facility located outside the state to hold a state license/registration (as an outsourcing facility, nonresident manufacturer, wholesaler or pharmacy) before shipping into the state?

Education Law §6808-b and 8 NYCRR §63.8(b)(1) include outsourcing facilities located outside New York in the nonresident establishment registration requirement, and §63.8(b)(7) adds conditions for nonresident outsourcing facilities: comply with cGMP (21 CFR parts 210 and 211); be supervised at all times by a pharmacist licensed and registered in New York; submit results of an inspection by FDA, NYSED or an acceptable third party at initial registration and at least annually; and not dispense or distribute any drug pursuant to a prescription unless also registered as a New York pharmacy. The isolated-transaction exception does not apply to nonresident outsourcing facilities (§63.8(e)). Education Law §6808 also requires outsourcing facilities to be under the supervision of a New York-licensed pharmacist and to report the drugs they compounded to the Board every six months.

A patient-specific shipment by a 503B requires it to also hold New York pharmacy registration (§63.8(b)(7)(viii)). §63.8 cites the 2014 edition of 21 CFR 210/211.

N.Y. Educ. Law §6808-b; N.Y. Educ. Law §6808 (outsourcing facilities); 8 NYCRR §63.8(b)(7), (e)

Current as of 2026-05-29 · Checked against the primary source

FDA compounding MOUNew York has not signed FDA's standard compounding MOU, so under the statute its 503A pharmacies are limited to 5% out-of-state distribution, although FDA is not enforcing that limit while it rewrites the MOU.Not signed

Has the state signed FDA's standard Memorandum of Understanding Addressing Certain Distributions of Compounded Human Drug Products (October 2020)? If not, FD&C Act §503A limits its 503A pharmacies' out-of-state distribution to 5% of total prescription orders (currently not enforced by FDA pending rulemaking).

Signing the standard MOU means the state board agrees to investigate complaints about compounded drugs its 503A pharmacies ship out of state and to identify and report to FDA pharmacies that distribute "inordinate amounts" interstate (more than 50% of their compounded prescriptions); in exchange, the statutory 5% out-of-state cap in FD&C Act §503A(b)(3)(B) does not apply to that state's pharmacies. FDA lists only Colorado, Kentucky and New Hampshire as signatories; New York is not among them. For a non-signing state, FD&C Act §503A(b)(3)(B)(ii) caps a 503A pharmacy's out-of-state distribution of compounded drugs at 5% of its total prescription orders. FDA now considers the October 2020 standard MOU suspended (it does not expect signatory states to carry out MOU activities and will not sign new ones) and is not enforcing the 5% limit until a final rule and an updated MOU are published; FDA's rulemaking (RIN 0910-AI71) listed a proposed rule for 11/2026 in the Fall 2025 Unified Agenda.

The FDA list of signed MOUs (current as of 2023-01-23) is older than 2 years, but FDA stopped entering new agreements under the 2020 MOU in October 2022, so no state can have signed since. The FDA "Compounding Information for States" page (current as of 2026-08-28) still describes the MOU as awaiting rulemaking. Pending: FDA proposed rule on 503A distribution (RIN 0910-AI71, NPRM projected 11/2026); H.R. 5316 (introduced 2025-09-11, referred to House Energy & Commerce) would remove the MOU provision from §503A.

FD&C Act §503A(b)(3)(B) (21 U.S.C. 353a(b)(3)(B))

Current as of 2026-08-28 · Checked against the primary source

Prescribing, dispensing & telehealth

State controlled-substance registrationNew York does not require a separate state controlled substance license for practitioners; the professional license plus DEA registration is enough to prescribe.DEA + state license only

Besides DEA registration, does the state require practitioners to hold a separate state controlled substance registration, license or permit to prescribe, administer or dispense controlled substances (e.g. testosterone, Schedule III)? "Conditional" means a state registration is needed only in some settings, such as keeping controlled-substance stock in the office.

The NYS Department of Health Bureau of Narcotic Enforcement (BNE) states that the requirement to prescribe a controlled substance in New York is the appropriate practitioner license and a DEA registration, and that there is no separate state controlled substance license for practitioners. Public Health Law licensing from BNE applies to manufacturers, distributors, importers/exporters, institutional dispensers and institutional dispensers limited (Class 3A), researchers and similar entities. New York prescribers still use official NY prescription forms/EPCS and must consult the I-STOP PMP under separate rules.

Page shows 'Revised: September 2026'. A facility that qualifies as an institutional dispenser (e.g. certain clinics/ambulatory surgery settings) needs a BNE license; a private practitioner office does not per this page. NP/PA: the BNE statement covers 'practitioners' generally.

N.Y. Public Health Law Article 33 (as described by BNE); 10 NYCRR Part 80

Current as of 2026-09-01 · Checked against the primary source

PDMP check before prescribingNew York requires practitioners to consult the PMP Registry before every prescription or dispensing of any Schedule II, III or IV controlled substance, which includes testosterone.Check required (covers C-III)

Must a prescriber query the state Prescription Drug Monitoring Program before prescribing, and does the mandate cover Schedule III drugs such as testosterone? "Yes" means a mandate that reaches Schedule III; "conditional" means a mandate limited to certain drugs (e.g. opioids or benzodiazepines) or situations; "no" means no prescriber query mandate.

Public Health Law Sec. 3343-a(2)(a) states that every practitioner shall consult the prescription monitoring program registry prior to prescribing or dispensing any controlled substance listed on schedule II, III or IV, so the duty applies to each prescription and also to practitioners who dispense. Exceptions include veterinarians, practitioners administering a controlled substance, prescribing for use on the premises of an institutional dispenser, emergency-department prescribing of no more than a 5-day supply, hospice patients, situations where timely access is not reasonably possible and no more than a 5-day supply is given, registry outages, and waivers granted by the Department of Health. A practitioner may authorize a designee to consult the registry. The PMP registry is maintained under the Public Health Law by the NYS Department of Health.

The NY Senate page showed 'Last Updated June 5, 2026'. Testosterone and other anabolic steroids are Schedule III, so they trigger the duty; Schedule V drugs do not. The PDMP TTAC list also cites 10 NYCRR 80.63 and related rules.

N.Y. Pub. Health Law Sec. 3343-a

Current as of 2026-06-05 · Checked against the primary source

Physicians dispensing from the officeNew York practitioners may not dispense more than a 72-hour supply except in listed situations such as free dispensing or practices 10+ miles from a pharmacy.Prohibited (narrow exceptions)

May physicians dispense prescription drugs (not just administer them) directly to patients from their practice? "Yes" means allowed under standard rules (labeling, records, and at most a simple notice to the board); "conditional" means a separate dispensing registration, permit or license, or quantity, day-supply or drug-category limits; "no" means prohibited except narrow exceptions.

Education Law 6807(2) limits practitioner dispensing to a 72-hour supply. Exceptions: hospital practice, dispensing at no charge, practices 10 or more miles from a registered pharmacy, college health services, nurse practitioners, medical emergencies, drugs diluted, reconstituted or compounded by the prescriber, allergenic extracts, and oncology or AIDS protocols. Ongoing in-office sales of testosterone, GLP-1s or other chronic therapies fall outside these exceptions.

The 'diluted, reconstituted or compounded by a prescriber' exception is narrow and fact-specific; it is not a general allowance for dispensing compounded products bought from a pharmacy.

N.Y. Educ. Law 6807(2)

Current as of 2025-03-21 · Checked against the primary source

Prescribing by telehealthNew York requires a New York license (it is not an IMLC member); its rule requiring an in-person evaluation before controlled-substance prescribing now has a telehealth exception when prescribing complies with state law and federal DEA rules.Allowed (standard rules)

For a patient located in the state: must the prescriber hold this state's license (or a telehealth registration or special license), is an in-person exam required before prescribing (generally or for controlled substances), are there state limits on prescribing Schedule III drugs such as testosterone by telehealth, and is the state an Interstate Medical Licensure Compact member? "Yes" means a state license and the in-person standard of care apply (opioid-only or Schedule II-only limits are described but do not change the answer); "conditional" means extra state conditions such as a telehealth registration route, an in-person exam requirement, controlled-substance limits reaching Schedule III, or registration of telehealth businesses. Federal DEA rules apply on top.

(1) Full New York licensure and current registration are required to treat patients in New York by telehealth; only occasional consultation with New York physicians is exempt (Educ. Law 6526(3), per NYSED telepractice guidance quoted by CCHP). (2) 10 NYCRR 80.63(d) bars prescribing a controlled substance before an in-person medical evaluation by the prescriber, but 80.63(e)(4), amended effective 5/21/2025, allows prescribing through telemedicine or telehealth consistent with state law and DEA rules, so the state rule now defers to the federal Ryan Haight/DEA telemedicine framework. (3) Other controlled-substance rules apply equally to telehealth, including checking the PMP registry within 24 hours before prescribing Schedule II-IV drugs (80.63(c)); no separate New York telehealth limit on testosterone was found. (4) IMLC: not a member (legislation introduced 3/4/2026).

Change: the long-standing NY in-person evaluation rule (80.63(d)) gained a telehealth exception (80.63(e)(4)) effective 2025-05-21 (NY State Register Vol. XLVII, Issue 20). In practice the in-person question now turns on federal DEA telemedicine rules. IMLC legislation introduced 2026 (IMLC map status date 3/4/2026).

10 NYCRR 80.63(c), (d), (e)(4) (amended eff. 5/21/2025); N.Y. Educ. Law 6526(3)

Current as of 2026-09-23 · Checked against the primary source

Aesthetics, IV therapy & practice ownership

Who may inject neuromodulators and fillersNew York RNs may inject Botox and fillers only on a patient-specific order from a physician, PA or NP who has examined that patient; standing (non-patient-specific) orders are not allowed for cosmetic injections.RNs may inject with added conditions

Who may administer botulinum toxin and dermal fillers (physicians, PAs, NPs, RNs, LPNs, estheticians, dentists), under what supervision (on-site vs available), and must a physician/NP/PA perform a prior good-faith exam?

The NYSED Office of the Professions (updated September 2026) states that in most cases New York law requires an RN to execute medical regimens ordered for a specific patient by a physician or other qualified practitioner who has examined the patient, and that RNs may not follow orders or protocols that let them diagnose or choose treatment. Non-patient-specific orders are allowed only for listed services (immunizations, anaphylaxis and opioid-overdose treatment, specified tests and screenings, certain emergency and newborn services), which do not include neuromodulators or fillers. LPNs work under RN or practitioner direction.

Page dated 'September 2026' (recorded as 2026-09-01); it does not quote statute section numbers. No NYSED statement specific to cosmetic injectables was found on the RN FAQ or practice-issues pages.

NYSED Office of the Professions, 'Non Patient Specific Orders and Protocols' (Sept. 2026)

Current as of 2026-09-01 · Checked against the primary source

IV hydration and vitamin therapyIn New York an RN may start an elective IV only on a patient-specific order from a physician, PA or NP who has examined the patient; IV hydration is not among the services allowed under non-patient-specific standing orders.Extra requirements apply

What does the state require for elective IV hydration/vitamin (incl. NAD+) therapy: who may start IVs, is a patient-specific order or good-faith exam required before a patient's first IV, are standing orders allowed, and are there rules for mobile IV services?

NYSED's guidance says RNs generally must execute regimens ordered for a specific patient by a practitioner who has examined the patient, and the short list of services that can be delivered under non-patient-specific orders and protocols does not include IV hydration, vitamin or NAD+ infusions. A 2025 law-firm review adds that RNs and LPNs with formal IV training and competency may administer IV therapy in med spas, LPNs only under supervision by an RN, NP or physician available to intervene, and that medical assistants may not. NYSED also publishes Board of Nursing guidance on IV therapy by LPNs.

No NY IV-hydration-specific board statement was found. The LPN IV guidance documents are listed on the practice-issues page but were not individually reviewed.

NYSED 'Non Patient Specific Orders and Protocols' (Sept. 2026); NY State Board for Nursing guidance on IV therapy by LPNs

Current as of 2026-09-01 · Checked against the primary source

Corporate practice of medicine / med spa ownershipNew York strictly enforces the corporate practice of medicine: only physicians (through PCs/PLLCs) may own a medical practice, so med spas offering medical services use physician-owned entities, often with an MSO.Strong CPOM

Does the state enforce the corporate practice of medicine doctrine (non-physicians may not own medical practices or employ physicians), and how does that affect med spa ownership?

Permit Health's 2025 guide classifies New York as strict, citing N.Y. Educ. Law §6522, Pub. Health Law §2806 and cases such as People v. Woodbury Dermatological Inst. (1908) and Stern v. Flynn (1936). MedPath Compliance (reviewed 2026-06-20) also rates New York strict and reports a pending bill (S8442/A9012) to limit MSO control and a budget expansion of health-transaction review.

Statutes not fetched.

N.Y. Educ. Law §6522; N.Y. Pub. Health Law §2806 (as reported by Permit Health)

Current as of 2026-06-20 · From a dated compilation

Who may operate aesthetic lasersNo New York statute or board rule on who may operate cosmetic lasers was confirmed; RNs using lasers would need a patient-specific order from an examining practitioner.Not confirmed

Who may perform laser/IPL/RF aesthetic procedures (laser hair removal, resurfacing): physicians only, delegated to RNs/PAs, or licensed electrologists/estheticians/laser technicians with state certification?

New York has no laser-technician licence. Under NYSED guidance, an RN performing a laser treatment would need a patient-specific order from a physician, PA or NP who examined the patient. Whether estheticians or unlicensed technicians may perform laser hair removal in New York could not be confirmed from official sources (the Department of State appearance-enhancement pages blocked automated access); a 2026 training-provider guide says laser hair removal has no dedicated licence in New York and that a licensing bill (S6231A) is pending.

Check with NYSED Office of the Professions (physicians/nursing) and the NY Department of State Division of Licensing Services.

Current as of 2026-09-23 · Not independently confirmed

Labs, regenerative medicine & cosmetics

State clinical laboratory licensing (beyond CLIA)New York requires a NYSDOH (CLEP) permit for any lab that tests New York specimens, wherever the lab is located.State lab license required

Does the state license clinical laboratories itself, beyond federal CLIA certification, including out-of-state labs that test specimens from the state?

Under Public Health Law Article 5, Title V, the Wadsworth Center's Clinical Laboratory Evaluation Program (CLEP) oversees clinical laboratories and states that 'any laboratory seeking to test New York State specimens must obtain CLEP approval.' New York is a CLIA-exempt state: the state permit program stands in for CLIA for New York labs. CLEP also keeps a database of approved labs and approved laboratory-developed tests. Physician office labs in New York go through a separate program (POLEP).

Out-of-state labs: yes (permit needed to accept NY specimens). New York also restricts direct-access testing (see that topic).

N.Y. Public Health Law Art. 5, Title V

Current as of 2026-09-23 · Checked against the primary source

Direct-to-consumer lab testingNew York allows direct access testing only for tests that have an FDA-approved over-the-counter kit or collection device, and only at permitted labs.Limited tests or labs only

May consumers order their own lab tests without a practitioner order (direct access testing)? A practitioner-ordered panel is always fine; this matters for take-home and consumer test kits.

Amendments to the Public Health Law effective September 24, 2002 let clinical labs holding the appropriate NY permit offer direct access testing, limited to 'tests for which a Federal Food and Drug Administration (FDA) approved test kit or collection device is available over-the-counter (OTC) without a prescription, and for tests for the same purpose.' The FDA OTC database defines the eligible list. Limited Service Laboratories may not offer direct access testing, and any lab testing NY specimens needs a NY permit.

Consumer panels without an FDA OTC counterpart need a practitioner order in New York.

N.Y. Public Health Law (direct access testing amendments effective 2002-09-24)

Current as of 2026-09-23 · Checked against the primary source

State laws on stem cell / regenerative therapiesNo New York law specific to stem cell, exosome or regenerative therapies was found, so FDA rules and general medical-practice rules apply.No state-specific law (FDA rules apply)

Has the state enacted a law or rule specifically about stem cell, exosome or regenerative-medicine therapies (notice/disclosure duties, permission for certain non-FDA-approved uses, or Right to Try extensions covering them)?

Compilations of state stem-cell laws from 2024 to 2026 list about a dozen states with specific laws (California, Florida, Georgia, Mississippi, Nevada, North Carolina, Tennessee, Texas, Utah, Vermont, Washington and Wyoming), plus Montana's general experimental-treatment law and Kansas's state stem cell center. New York is not among them. Without a state-specific law, regenerative products are governed by federal FDA rules plus the state's general medical practice, advertising and consumer-protection laws, enforced by its medical board. Federal FDA rules still apply regardless of state law: stem cell, birth-tissue and exosome products are regulated by FDA, and a state law cannot make an unapproved biologic FDA-approved.

The finding of no law rests on multi-state compilations (a commercial one from Aug 2026 and a peer-reviewed one from Feb 2024, which is older than 2 years) and targeted searches, not a statute-by-statute review, and neither compilation is exhaustive. General Right to Try laws for terminal patients, where they exist, were not reviewed here.

State rules for cosmetics and sunscreenNew York limits 1,4-dioxane in cosmetics (10 ppm) and personal care products (1 ppm), bans mercury in cosmetics, and bans the sale of animal-tested cosmetics.State cosmetic/sunscreen rules

Does the state have cosmetic or sunscreen requirements beyond federal MoCRA, such as ingredient bans (PFAS, formaldehyde, phthalates), ingredient reporting, sunscreen-ingredient bans, or bans on selling animal-tested cosmetics?

ECL §37-0117 bars selling cosmetic products with 1,4-dioxane above 10 ppm (since Dec 31, 2022) and personal care products above 2 ppm (Dec 31, 2022) and then 1 ppm (Dec 31, 2023). It also bans cosmetic or personal care products containing mercury beyond trace amounts, and the thresholds are reviewed every two years from May 1, 2025. GBL §399-aaaaa bars importing for profit or selling cosmetics developed with animal testing conducted after its effective date, with exceptions; the Attorney General may seek penalties of up to $5,000 plus $1,000 per day.

Pending: Assembly Bill 8585 would ban cosmetics with intentionally added PFAS (proposed effective Jan 1, 2029). Not enacted as of the March 2026 compilation. The animal-testing law's effective date was not shown on the statute page (2023 per compilation). Federal MoCRA and FDA cosmetic and OTC sunscreen rules apply in every state.

N.Y. Envtl. Conserv. Law §37-0117; N.Y. Gen. Bus. Law §399-aaaaa

Current as of 2026-09-23 · Checked against the primary source

Compare every state

Who may operate aesthetic lasers. Who may perform laser/IPL/RF aesthetic procedures (laser hair removal, resurfacing): physicians only, delegated to RNs/PAs, or licensed electrologists/estheticians/laser technicians with state certification?

Delegable under supervision · 4Delegable with licensing/training rules · 28Licensed practitioners only · 4Not confirmed · 15
Alaska: Not confirmedAlabama: Delegable with licensing/training rulesArkansas: Not confirmedArizona: Delegable with licensing/training rulesCalifornia: Delegable with licensing/training rulesColorado: Delegable under supervisionConnecticut: Not confirmedWashington DC: Not confirmedDelaware: Not confirmedFlorida: Delegable with licensing/training rulesGeorgia: Delegable with licensing/training rulesHawaii: Not confirmedIowa: Delegable with licensing/training rulesIdaho: Not confirmedIllinois: Delegable with licensing/training rulesIndiana: Not confirmedKansas: Delegable with licensing/training rulesKentucky: Delegable with licensing/training rulesLouisiana: Delegable with licensing/training rulesMassachusetts: Licensed practitioners onlyMaryland: Delegable with licensing/training rulesMaine: Not confirmedMichigan: Delegable under supervisionMinnesota: Not confirmedMissouri: Not confirmedMississippi: Delegable with licensing/training rulesMontana: Licensed practitioners onlyNorth Carolina: Delegable with licensing/training rulesNorth Dakota: Delegable with licensing/training rulesNebraska: Delegable with licensing/training rulesNew Hampshire: Not confirmedNew Jersey: Licensed practitioners onlyNew Mexico: Delegable with licensing/training rulesNevada: Delegable with licensing/training rulesOhio: Delegable with licensing/training rulesOklahoma: Delegable with licensing/training rulesOregon: Delegable with licensing/training rulesPennsylvania: Delegable under supervisionRhode Island: Delegable with licensing/training rulesSouth Carolina: Delegable with licensing/training rulesSouth Dakota: Licensed practitioners onlyTennessee: Delegable with licensing/training rulesTexas: Delegable with licensing/training rulesUtah: Delegable with licensing/training rulesVirginia: Delegable with licensing/training rulesVermont: Not confirmedWashington: Delegable with licensing/training rulesWisconsin: Delegable under supervisionWest Virginia: Not confirmedWyoming: Delegable with licensing/training rulesNew York: Not confirmedConnecticut: Not confirmedCTWashington DC: Not confirmedDCDelaware: Not confirmedDEMassachusetts: Licensed practitioners onlyMAMaryland: Delegable with licensing/training rulesMDNew Hampshire: Not confirmedNHNew Jersey: Licensed practitioners onlyNJRhode Island: Delegable with licensing/training rulesRIVermont: Not confirmedVT

The federal floor, for every category

Two federal compounding lanes: §503A pharmacies vs §503B outsourcing facilitiesA §503A pharmacy (or physician) compounds for an identified patient on a prescription; a §503B outsourcing facility is FDA-registered, follows CGMP, and is the only federal lane for non-patient-specific office stock.

Under §503A, a state-licensed pharmacist or physician may compound for an identified individual patient on a valid prescription, or in limited anticipatory quantities (no more than a 30-day supply based on the compounder's own prescription history). 503A compounders are not required to follow CGMP and are not required to report adverse events to FDA. Under §503B, an outsourcing facility registers with FDA, compounds under CGMP, is inspected on a risk-based schedule, must report adverse events, and may distribute non-patient-specific product to hospitals, clinics and practitioners for office use. Neither lane makes a compounded drug 'FDA-approved'. Both lanes restrict 'essentially copies' of approved or marketed drugs and restrict which bulk ingredients may be used. FDA keeps a public list of registered outsourcing facilities (content current as of 09/08/2026).

'Essentially a copy' of an approved or commercially available drugFDA treats a compounded drug with the same active ingredient, a similar strength and a usable route as a marketed product as 'essentially a copy' unless the prescriber documents a patient-specific significant difference on the prescription.

503A (final guidance, Jan 2018): a drug is not 'commercially available' if it is discontinued or is in 'currently in shortage' status on FDA's drug shortage list. FDA generally considers a compounded drug a copy if it has the same API in the same, similar or easily substitutable strength by a route the commercial product can be used by. The prescriber's determination must name the change and the significant difference for that patient; a patient name plus formulation is not enough, and lower price does not count. FDA does not consider copies to be made 'regularly or in inordinate amounts' if the compounder fills four or fewer such prescriptions per calendar month. 503B (final guidance, Jan 2018): outsourcing facilities may not compound drugs identical or nearly identical to an approved drug unless it is on the shortage list; otherwise a prescriber's determination of a clinical difference must be noted on the prescription or order.

Office use / office stock of compounded drugs (federal position)FDA's position is that §503A compounding requires a prescription for an identified patient; clinics wanting non-patient-specific office stock are directed to §503B outsourcing facilities.

FDA's final 503A prescription-requirement guidance (Dec 2016) says hospitals, clinics and practitioners can obtain non-patient-specific compounded drugs from outsourcing facilities registered under §503B, which may distribute sterile and non-sterile office-use product. 503A anticipatory compounding is limited to no more than a 30-day supply based on the compounder's own prescription history. Some states allow limited 503A office use under state law, but the federal 503A exemptions still depend on patient-specific prescriptions (see state topic office_use_503a).

503B products may not be resold by anyone other than the outsourcing facilitySection 503B(a)(8) bars anyone other than the outsourcing facility from selling or transferring its compounded drugs, so a clinic, distributor or marketplace that takes ownership may not resell 503B product.

FDA's June 2023 draft guidance (still draft) says the drug should go from the outsourcing facility to the entity that dispenses or administers it. FDA does not intend to apply the prohibition to transfers to common carriers, third-party logistics providers, regulators, returns processors, waste handlers or contract test labs, or to recall-related transfers. A state-licensed pharmacy may dispense 503B product against a patient-specific prescription. Clinic-to-clinic resale is the core concern.

Which bulk ingredients compounders may use (503A Categories 1/2/3; 503B bulks list)A 503A compounder may use a bulk ingredient only if it has a USP/NF monograph, is a component of an FDA-approved drug, or is on the 503A bulks list; FDA tolerates interim 'Category 1' substances, flags 'Category 2' as significant safety risks, and treats 'Category 3' as lacking support.

FDA's category list was updated May 14, 2026. 503A Category 2 now contains only cesium chloride, domperidone, germanium sesquioxide, ibutamoren mesylate, kisspeptin-10 and quinacrine (intrauterine use). Category 1 includes glutathione, methylcobalamin, NAD, NADH, enclomiphene citrate, GHK-Cu (non-injectable routes only), vasoactive intestinal peptide and others. GHRP-2, GHRP-6, mechano growth factor and thymulin are in Category 3. BPC-157, TB-500, CJC-1295, ipamorelin, AOD-9604, Selank, Semax, epitalon, MOTs-C, dihexa, KPV and thymosin alpha-1 are in no category, so they do not get Category 1 enforcement discretion. FDA does not intend to categorize substances nominated on or after Jan 7, 2025. The final 503B bulks list is short (e.g., diphenylcyclopropenone, glycolic acid topical up to 70%, quinacrine oral, squaric acid dibutyl ester, trichloroacetic acid); 503B Category 2 includes GHRP-2, GHRP-6, ipamorelin acetate, ibutamoren, tranilast and others.

Biologics (including hCG, tesamorelin, somatropin) cannot be compounded under 503A/503BSince March 23, 2020, protein products approved as drugs became licensed biologics, and FDA says biological products are not eligible for the 503A or 503B compounding exemptions.

The BPCI Act transition on March 23, 2020 deemed approved NDAs for biological products to be BLAs. FDA's transition list includes chorionic gonadotropin (Pregnyl, Novarel, Fresenius chorionic gonadotropin, Ovidrel), menotropins, follitropins, hyaluronidase, somatropin and tesamorelin acetate (Egrifta/Egrifta SV). FDA's notice to compounders states that 'biological products will not be eligible for the exemptions for compounded drugs under sections 503A and 503B'. Separate FDA guidance (Jan 2018) describes limited conditions for mixing, diluting or repackaging licensed biologics outside their labeling.

'Research Use Only' / 'not for human consumption' productsFDA treats RUO-labeled peptides and GLP-1s as unapproved drugs when marketing, dosing information or bundled syringes/bacteriostatic water show human use; the disclaimer does not make them lawful to administer to patients.

FDA's GLP-1 safety page says companies sold products falsely labeled 'for research purposes' or 'not for human consumption' with dosing instructions for human use. FDA has issued repeated warning-letter rounds to peptide/RUO sellers in 2026 (e.g., letters dated March 31, 2026 to Gram Peptides and others; June 17, 2026 to Wholesale Peptide; August 24, 2026 to Royal Peptides and others). Import Alert 66-41 (unapproved new drugs promoted in the U.S.) has listed, for example, a firm offering PT-141 peptide. RUO material is not a USP-grade or approved-drug-component bulk ingredient for compounding and is not a prescription drug a clinician can lawfully buy for patient use.

FDA drug shortage list and why it matters for compoundingA drug in 'currently in shortage' status is not 'commercially available', so 503A/503B compounders may make copies of it; when FDA marks the shortage resolved, that permission ends (503B facilities may finish existing orders for up to 60 days).

The 503A copies guidance says a drug appears on the shortage list only if it is in 'currently in shortage' status, not 'resolved'. FDA's shortage-compounding page says compounders must still meet all other 503A conditions (including a valid patient-specific prescription), and FDA 'may take action if an outsourcing facility continues to fill new orders after the approved drug is removed from FDA's drug shortage list, or if it continues to fill existing orders more than 60 days after the drug has been removed.' The GLP-1 episode shows the effect: large-scale semaglutide and tirzepatide compounding depended on shortage status and ended after FDA resolved the shortages. A prescriber or compounder relying on a shortage should note on the prescription that the drug was on the list and the date checked.

FDA Standard MOU on interstate distribution of 503A compounded drugsThe October 2020 standard MOU is suspended after a 2021 court remand; FDA is not enforcing the statutory 5% out-of-state limit and plans a new rule, with a proposed rule projected for November 2026.

Section 503A limits a pharmacy in a state without an FDA MOU to distributing no more than 5% of its compounded prescriptions out of state. FDA published a final standard MOU in October 2020, but a federal court remanded it in September 2021. FDA 'considers the standard MOU published in October 2020 to be suspended' and, per its Oct 21, 2022 Federal Register notice, will not enforce the 5% limit until a final rule and updated MOU are published. The Fall 2025 Unified Agenda lists RIN 0910-AI71 ('Distribution of Compounded Drug Products Under Section 503A') at the proposed-rule stage with an NPRM projected for 11/2026. State nonresident-pharmacy licensing still applies (see state topics nonresident_pharmacy and fda_mou).

DEA telemedicine prescribing of controlled substances (Ryan Haight Act flexibilities)Through December 31, 2026, DEA-registered practitioners may prescribe Schedule II–V controlled substances by telemedicine without a prior in-person visit under a fourth temporary extension; the permanent special-registration rule is still pending.

The Ryan Haight Act generally requires an in-person medical evaluation before prescribing controlled substances over the internet. DEA and HHS published the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities (90 FR 61301, Dec 31, 2025), effective Jan 1 – Dec 31, 2026. Prescriptions must still be for a legitimate medical purpose and comply with federal and state law; state telehealth and controlled-substance rules still apply (see telehealth_rx, state_csr, pdmp_mandate). The separate buprenorphine (opioid use disorder) telemedicine final rule and the VA continuity-of-care final rule, both published Jan 17, 2025, took effect Dec 31, 2025 after two delays (90 FR 13410). A Federal Register search on 2026-09-23 found no DEA special-registration final rule published in 2026. The Special Registrations for Telemedicine final rule was reported to be in OMB review as of late August 2026, with a final rule forecast for November 2026. Without a new rule or another extension, the in-person requirement returns on Jan 1, 2027.

FTC health-claim substantiation (advertising)The FTC requires competent and reliable scientific evidence, generally randomized controlled human trials, before a marketer makes health-benefit claims for any health product, including devices, tests, supplements and apps.

The FTC's Health Products Compliance Guidance (Dec 2022) replaced the 1998 supplement advertising guide. Marketers must have substantiation for every objective claim, express or implied, before it runs; for health benefits this generally means randomized, controlled human clinical testing. Qualifying disclosures must be clear and conspicuous, and advertisers are liable for misleading testimonials and endorsements. This sits alongside FDA's rules: FDA regulates labeling and intended use, and FDA warning letters in 2025–2026 target 'same as brand' and 'FDA-approved' claims for compounded drugs.

Current as of 2026-09-23

Adverse event reporting (MedWatch; 503B mandatory reporting)Clinicians and patients can report problems with drugs, biologics, devices and cosmetics to FDA's MedWatch voluntarily; 503B outsourcing facilities must report adverse events, while 503A pharmacies are not federally required to.

MedWatch accepts voluntary reports for prescription and OTC drugs, biologics (including human cell and tissue products), medical devices, combination products and cosmetics. Manufacturers, packers and distributors named on a marketed prescription drug label must file 15-day 'Alert reports' for serious and unexpected adverse experiences under 21 CFR 310.305; FDA's final guidance (Oct 2015) applies adverse event reporting to 503B outsourcing facilities. FDA notes that federal law does not require state-licensed 503A pharmacies to report adverse events, so compounded-drug events are likely under-reported. Under MoCRA, cosmetic 'responsible persons' must report serious adverse events within 15 business days.

Where FDA enforcement shows up: warning letters, import alerts, recallsFDA posts warning letters in a searchable database, detains risky imports through import alerts (e.g., 66-80 for GLP-1 APIs, 66-41 for unapproved drugs, 80-04 for gloves, 53-21 for adulterated cosmetics), and publishes recalls in its enforcement reports.

Import alerts let FDA detain products without physical examination. Import Alert 66-80 (GLP-1 receptor agonist bulk drug substances) detains semaglutide, tirzepatide, liraglutide, exenatide, orforglipron, retatrutide and dulaglutide APIs unless the manufacturer is on FDA's 'Green List'; FDA cited that 21% of inspected GLP-1 API makers were noncompliant with CGMP. Import Alert 66-41 covers unapproved new drugs promoted in the U.S. and has listed firms offering unapproved botulinum toxin and PT-141 peptide. Recalls, including Class I recalls of compounded glutathione in July–August 2026, appear in FDA enforcement reports and openFDA.

Compounded peptides: where things stand in September 2026FDA pulled 12 peptides out of Category 2 in April 2026 after nominators withdrew them, and its advisory committee voted in July 2026 to recommend six for the 503A bulks list, but none is on the list or in Category 1 yet, so none has federal compounding permission today.

On April 15, 2026 FDA announced that 12 peptides (BPC-157, cathelicidin LL-37, dihexa acetate, emideltide/DSIP, epitalon, GHK-Cu injectable, KPV, PEG-MGF, melanotan II, MOTs-C, Semax, TB-500) would leave Category 2 after seven days because their nominations were withdrawn; FDA's list shows the change effective April 22, 2026. Law-firm analyses stress that leaving Category 2 does not place a substance on the 503A bulks list or in Category 1. At the July 23–24, 2026 PCAC meeting, members voted to recommend BPC-157 (8–6), KPV (8–6), TB-500 (8–6), MOTs-C (7–5), epitalon (7–4) and Semax (8–5), and against emideltide (6–7); FDA staff had recommended against all of them. FDA must still decide and complete notice-and-comment rulemaking. GHK-Cu, dihexa, LL-37, PEG-MGF and melanotan II are slated for a PCAC meeting before the end of February 2027. Earlier, AOD-9604, CJC-1295, ipamorelin, thymosin alpha-1 and Selank left Category 2 in September 2024, and PCAC voted against CJC-1295 and AOD-9604 on Dec 4, 2024.

Search the official databases

FDA

Drugs@FDAApproval status, application number, labels and approval letters for FDA-approved brand and generic drugs.Orange Book: Approved Drug Products with Therapeutic Equivalence EvaluationsTherapeutic-equivalence (AB) ratings, reference listed drugs, patents and exclusivities for approved small-molecule drugs.Purple Book: Database of Licensed Biological ProductsLicensed biologics and their biosimilar and interchangeable products, with exclusivity dates.National Drug Code (NDC) DirectoryThe NDC, labeler, dosage form, marketing category and listing status of a drug product.FDA Drug ShortagesWhether a drug is on FDA's current shortage list, and its status, reason and expected resolution.Registered Outsourcing Facilities (503B)Whether a compounder is a registered 503B outsourcing facility, with its last FDA inspection and any Form 483 or warning letter.Bulk Drug Substances Used in Compounding Under Section 503A (Category 1/2/3 lists)Whether a bulk ingredient (for example a peptide) is in Category 1, 2 or 3 of FDA's interim 503A bulks policy, and links to the final 503A bulks list.503B Bulk Drug Substances ListBulk drug substances that outsourcing facilities may compound from because of clinical need, and substances FDA has placed on or excluded from the list.FDA Warning LettersSearchable warning letters to compounders, telehealth and med-spa sellers, device makers and others, by company, subject and date.FDA Import AlertsProducts and firms that FDA may detain at the border without examination, for example unapproved drugs, peptides and cosmetics.AccessGUDID (Global Unique Device Identification Database)Look up a medical device by UDI or device identifier to see its labeler, model, FDA product code, premarket number and MRI safety status.510(k) Premarket Notification DatabaseWhether a device (for example an aesthetic laser or energy device) was cleared through 510(k), with the K-number, product code and cleared indications.Premarket Approval (PMA) DatabaseClass III devices approved through PMA (for example dermal fillers), with approval orders, supplements and approved indications.MAUDE: Manufacturer and User Facility Device ExperienceReports of adverse events and malfunctions filed for a medical device, by brand, product code or manufacturer.MedWatch Online Voluntary Reporting Form (FDA 3500)Report a serious adverse event, product quality problem or medication error for a drug, biologic, device, compounded product or cosmetic.openFDAPublic APIs and downloads for FDA adverse-event, recall, labeling, NDC, 510(k)/PMA and UDI data.Modernization of Cosmetics Regulation Act of 2022 (MoCRA)Federal cosmetics rules on facility registration, product listing, adverse-event reporting, safety substantiation and labeling, with their compliance dates.Cosmetics Direct (FDA cosmetic registration and listing portal)How cosmetic facilities register and products are listed under MoCRA through FDA's Cosmetics Direct portal.
Rules checked. Now buy from vendors who are.

Every vendor on MedGrid clears document review for its category before it lists. Join free with your NPI to see wholesale pricing.

Platform terms — non-circumvention

Non-circumvention. Every introduction made through MedGrid — doctor to vendor, doctor to pharmacy, vendor to pharmacy, partner to any of them — is platform-protected. For 24 months following an introduction, the parties agree not to solicit, contract, or transact directly (or through affiliates) in a manner that circumvents MedGrid or its fees. Renewals, refills, and reorders of platform-introduced relationships run through the platform. This clause is part of every participant agreement — doctor, vendor, pharmacy, and sales partner alike — and it protects the people who make the introductions as much as it protects MedGrid.

Educational summaries of public law and agency guidance, not legal advice. Researched 2026-09-23 from the sources linked on each answer; laws, board rules and FDA policy change, so confirm with the linked agency or your counsel before you rely on an answer. Found something out of date? Tell our compliance desk.