Regulations research

FDA and state rules, for what you actually buy.

Search a drug, ingredient or device for its live FDA record, or pick your state and a category to see the federal rules and what your state adds — each answer with its citation and source.

A physician working on a laptop in a private-practice office
Licenses and compliance: the states a vendor is licensed in and the documents it publishes, each marked verified or not
Every answer sourced
Everything for Colorado ↓
← All categories

Wound care & dressings

FDA pathway: Device class I/II/unclassified | Drug | HCT/P 361 or Biologic (BLA)

Plain dressings are mostly Class I exempt devices; dressings with drugs, biologics or animal-derived materials need FDA clearance; amniotic/placental products qualify as 361 HCT/Ps only if minimally manipulated and used homologously.

On MedGrid as: Wound Care & Dressings · Wound Care & Hemostatics

The federal rules

Basic dressings are Class I, exemptHydrophilic (21 CFR 878.4018) and occlusive (878.4020) wound dressings are Class I and exempt from 510(k), but these classifications exclude dressings with added drugs, biologics or animal-derived materials.

Liquid bandages (880.5090) are also Class I.

Current as of 2026-09-01

Drug-containing and animal-derived dressings need 510(k)FDA product codes FRO (dressing, wound, drug) and KGN (wound dressing with animal-derived materials) are unclassified and reviewed through 510(k).

Check the product code and 510(k) number before buying.

Current as of 2026-09-23

Amniotic membrane and other tissue products (361 vs 351)An HCT/P is regulated only as a 361 tissue if it is minimally manipulated, for homologous use, not combined with other articles, and (generally) has no systemic effect; otherwise it needs a BLA or IND.

FDA's July 2020 guidance examples: amniotic membrane ground and lyophilized into particles is more than minimally manipulated; an amniotic membrane product used 'for wound healing and/or to reduce scarring and inflammation' is not homologous use; amniotic membrane covering the eye surface is homologous. Establishments must register and list HCT/Ps.

Unapproved amniotic products marketed for injection draw FDA lettersFDA's March 12, 2024 untitled letter to Amnion Florida said injected amniotic membrane/fluid products marketed for conditions such as arthritis and tendinopathy are drugs and biological products.

See cellular-biologics category.

Current as of 2024-03-12

Changing now

What Colorado adds

Physicians dispensing from the officeColorado practitioners may personally compound and dispense any drug they can prescribe to patients under their care, exempt from the pharmacy article.Allowed

May physicians dispense prescription drugs (not just administer them) directly to patients from their practice? "Yes" means allowed under standard rules (labeling, records, and at most a simple notice to the board); "conditional" means a separate dispensing registration, permit or license, or quantity, day-supply or drug-category limits; "no" means prohibited except narrow exceptions.

C.R.S. 12-280-120(6)(a) lets a practitioner personally compound and dispense, for any patient under the practitioner's care, any drug the practitioner may prescribe and deems necessary for the condition being treated; the practitioner is exempt from the pharmacy article except the unlawful-acts section (12-280-129). No separate dispensing registration is required under this provision. Controlled substances still need DEA registration.

Statute text read via an unofficial mirror of the Colorado Revised Statutes.

C.R.S. 12-280-120(6)(a)

Current as of 2026-09-23 · Checked against the primary source

State laws on stem cell / regenerative therapiesNo Colorado law specific to stem cell, exosome or regenerative therapies was found, so FDA rules and general medical-practice rules apply.No state-specific law (FDA rules apply)

Has the state enacted a law or rule specifically about stem cell, exosome or regenerative-medicine therapies (notice/disclosure duties, permission for certain non-FDA-approved uses, or Right to Try extensions covering them)?

Compilations of state stem-cell laws from 2024 to 2026 list about a dozen states with specific laws (California, Florida, Georgia, Mississippi, Nevada, North Carolina, Tennessee, Texas, Utah, Vermont, Washington and Wyoming), plus Montana's general experimental-treatment law and Kansas's state stem cell center. Colorado is not among them. Without a state-specific law, regenerative products are governed by federal FDA rules plus the state's general medical practice, advertising and consumer-protection laws, enforced by its medical board. Federal FDA rules still apply regardless of state law: stem cell, birth-tissue and exosome products are regulated by FDA, and a state law cannot make an unapproved biologic FDA-approved.

The finding of no law rests on multi-state compilations (a commercial one from Aug 2026 and a peer-reviewed one from Feb 2024, which is older than 2 years) and targeted searches, not a statute-by-statute review, and neither compilation is exhaustive. General Right to Try laws for terminal patients, where they exist, were not reviewed here.

Colorado at a glance

Every topic we research, for Colorado. Open any line for the rule, its citation and the source.

Pharmacy & compounding

Out-of-state pharmacies shipping into the stateOut-of-state pharmacies must register with the Colorado Board of Pharmacy as a nonresident prescription drug outlet before shipping prescriptions into Colorado.License required

Must a pharmacy located in another state hold a license/registration from this state to ship prescriptions (including patient-specific 503A compounded preparations) to patients or practitioners here?

C.R.S. 12-280-133 requires any prescription drug outlet outside Colorado that ships, mails or delivers drugs or devices into the state under a prescription order to register with the State Board of Pharmacy. It must disclose its officers and dispensing pharmacists, keep its home-state license active, and submit its most recent home-state inspection report. Board Rule 5.00.15 (3 CCR 719-1) also requires proof of good standing, an inspection report dated within two years from the resident state board or the NABP Verified Pharmacy Program, and a sworn affidavit that the outlet will not ship compounded or other prescription drugs into Colorado without a patient-specific prescription (except as Rule 21.00.20 allows). Under Rule 5.00.70, the outlet must be under the direct charge of a pharmacist manager; the rules reviewed do not say that manager needs a Colorado license.

The statute text comes from an unofficial mirror of the official C.R.S. PDF, current through Fall 2025. 2026 legislative changes were not checked because web search was unavailable. The board's website (dpo.colorado.gov/Pharmacy) blocked automated access, so application-page details were not confirmed.

C.R.S. 12-280-133; 3 CCR 719-1, Rules 5.00.15, 5.00.70, 5.00.80

Current as of 2026-08-21 · Checked against the primary source

Office-use compounding from 503A pharmaciesColorado pharmacies may not fill 'office use' orders for human patients; compounded drugs require a patient-specific prescription (veterinary office stock is the only exception).Not allowed

May a 503A (traditional) pharmacy dispense or distribute compounded preparations to a practitioner for office use (administration in the office, not patient-specific)? The federal position is that 503A requires patient-specific prescriptions; this is what the state pharmacy act and board rules allow.

Board Rule 3.00.20(d) (3 CCR 719-1) says a pharmacist may not dispense a prescription drug to a practitioner on an order that does not list a specific patient, and that 'A prescription order for "office use" is not a valid order.' The only exception in that rule is compounded drugs for veterinarian 'office stock' under C.R.S. 12-280-121. Rule 21.00.20 adds that nonresident prescription drug outlets may not distribute compounded products into Colorado and may ship compounded products only under valid patient-specific prescriptions, again with a limited veterinary exception. C.R.S. 12-280-120(5)(a) lets pharmacies make casual sales only of drugs in the manufacturer's sealed container to practitioners. Office stock of compounded human drugs therefore has to come from an FDA-registered 503B outsourcing facility registered in Colorado.

The veterinary exception (C.R.S. 12-280-121; 12-280-120(6)(b)) is capped at 10% of dosage units dispensed and distributed each year, and nonresident outlets must meet extra inspection conditions to use it. This entry covers human-use office stock only.

3 CCR 719-1, Rules 3.00.20(d), 21.00.20, 5.00.15(d); C.R.S. 12-280-120(5), 12-280-121

Current as of 2026-08-21 · Checked against the primary source

503B outsourcing facilities shipping into the stateAn out-of-state 503B outsourcing facility must register with the Colorado Board of Pharmacy as a Nonresident 503B Outsourcing Facility before distributing compounded drugs into Colorado.State license required

Does the state require an FDA-registered 503B outsourcing facility located outside the state to hold a state license/registration (as an outsourcing facility, nonresident manufacturer, wholesaler or pharmacy) before shipping into the state?

C.R.S. 12-280-133.5 bars a nonresident 503B outsourcing facility from distributing compounded prescription drugs in Colorado without first registering with the Board. The application must include: proof of active FDA 503B registration and a home-state license, permit or registration; officers and the pharmacist in charge; verification of compliance with FDA and home-state requests; and a copy of the most recent FDA inspection report (also Rule 5.00.17). The Board may deny, revoke or suspend the registration if FDA or the home state revokes or does not renew the facility's registration or license. Rule 5.00.00 defines the facility as FDA-registered, outside Colorado, and distributing compounded drugs into the state without a prescription order.

Neither the statute nor the rule requires a Colorado-licensed pharmacist or a separate wholesaler registration for a nonresident 503B. The Board may do a risk-based inspection of a nonresident 503B after a complaint (Rule 5.00.00(e)). Colorado did sign FDA's 2020 standard MOU (MOU 225-21-014, effective 2021-06-29, per FDA's Compounding MOUs page); see the fda_mou topic. The MOU governs 503A interstate distribution, not 503B licensing.

C.R.S. 12-280-133.5; 3 CCR 719-1, Rules 5.00.00(c), 5.00.17

Current as of 2026-08-21 · Checked against the primary source

FDA compounding MOUColorado signed FDA's 2020 standard compounding MOU (MOU 225-21-014, effective June 29, 2021), but FDA now treats all signed MOUs as suspended.Signed

Has the state signed FDA's standard Memorandum of Understanding Addressing Certain Distributions of Compounded Human Drug Products (October 2020)? If not, FD&C Act §503A limits its 503A pharmacies' out-of-state distribution to 5% of total prescription orders (currently not enforced by FDA pending rulemaking).

Signing the standard MOU means the state board agrees to investigate complaints about compounded drugs its 503A pharmacies ship out of state and to identify and report to FDA pharmacies that distribute "inordinate amounts" interstate (more than 50% of their compounded prescriptions); in exchange, the statutory 5% out-of-state cap in FD&C Act §503A(b)(3)(B) does not apply to that state's pharmacies. The Colorado Board of Pharmacy signed MOU 225-21-014, effective June 29, 2021; Colorado is one of only three signatories (with Kentucky and New Hampshire). FDA now considers the October 2020 standard MOU suspended (it does not expect signatory states to carry out MOU activities and will not sign new ones) and is not enforcing the 5% limit until a final rule and an updated MOU are published; FDA's rulemaking (RIN 0910-AI71) listed a proposed rule for 11/2026 in the Fall 2025 Unified Agenda.

The FDA list of signed MOUs (current as of 2023-01-23) is older than 2 years, but FDA stopped entering new agreements under the 2020 MOU in October 2022, so no state can have signed since. The FDA "Compounding Information for States" page (current as of 2026-08-28) still describes the MOU as awaiting rulemaking. Pending: FDA proposed rule on 503A distribution (RIN 0910-AI71, NPRM projected 11/2026); H.R. 5316 (introduced 2025-09-11, referred to House Energy & Commerce) would remove the MOU provision from §503A.

FD&C Act §503A(b)(3)(B) (21 U.S.C. 353a(b)(3)(B)); FDA MOU 225-21-014

Current as of 2026-08-28 · Checked against the primary source

Prescribing, dispensing & telehealth

State controlled-substance registrationColorado has no separate controlled substance registration for physicians: state law treats the physician's Colorado Medical Board license as the 'registration', so a license plus DEA registration is what is required.DEA + state license only

Besides DEA registration, does the state require practitioners to hold a separate state controlled substance registration, license or permit to prescribe, administer or dispense controlled substances (e.g. testosterone, Schedule III)? "Conditional" means a state registration is needed only in some settings, such as keeping controlled-substance stock in the office.

C.R.S. 18-18-302(1) requires anyone who dispenses controlled substances to hold a 'registration' from the respective licensing board, and defines registration for physicians as the licensing of physicians by the Colorado Medical Board (likewise dentists, podiatrists, optometrists, veterinarians); only manufacturers, distributors, pharmacies and similar entities are separately registered by the Board of Pharmacy. No additional state CS certificate is issued to physicians. NPs and PAs are not named in that definition and practise under their own prescriptive-authority rules plus DEA registration.

Source older than 2 years - possibly stale: the section was last amended effective Aug. 10, 2022 and the printout is the 2024 CRS (uncertified); the 2025 edition was not available at the URL tried. Colorado requires PDMP registration for prescribers (not verified here).

C.R.S. 18-18-302

Current as of 2022-08-10 · Checked against the primary source

PDMP check before prescribingColorado requires a PDMP query only before prescribing an opioid or a benzodiazepine, so testosterone is not covered.Required for some drugs only

Must a prescriber query the state Prescription Drug Monitoring Program before prescribing, and does the mandate cover Schedule III drugs such as testosterone? "Yes" means a mandate that reaches Schedule III; "conditional" means a mandate limited to certain drugs (e.g. opioids or benzodiazepines) or situations; "no" means no prescriber query mandate.

C.R.S. 12-280-404(4)(a) requires a practitioner or designee to query the PDMP before prescribing an opioid, except for patients receiving it in a hospital, skilled nursing, residential or correctional facility, cancer pain, palliative or hospice care, post-surgical pain expected to last over 14 days, disasters/mass casualty events, or a single dose for a test or procedure. Subsection (4)(a.5) requires a query before prescribing a benzodiazepine, except for hospice, epilepsy/seizures, spasticity, alcohol withdrawal or neurological conditions. Attempting access during a technical outage counts as compliance. Under 12-30-109(1)(b), repeated failure to comply is grounds for discipline by the prescriber's licensing board.

Source older than 2 years - possibly stale (CRS 2024 official printout; the Public.Law copy labelled current through Fall 2025 shows the same text). Testosterone (C-III) is not caught. The Colorado PDMP page (dpo.colorado.gov/PDMP) gave no scope detail.

C.R.S. § 12-280-404(4); C.R.S. § 12-30-109(1)(b)

Current as of 2024-01-01 · Checked against the primary source

Physicians dispensing from the officeColorado practitioners may personally compound and dispense any drug they can prescribe to patients under their care, exempt from the pharmacy article.Allowed

May physicians dispense prescription drugs (not just administer them) directly to patients from their practice? "Yes" means allowed under standard rules (labeling, records, and at most a simple notice to the board); "conditional" means a separate dispensing registration, permit or license, or quantity, day-supply or drug-category limits; "no" means prohibited except narrow exceptions.

C.R.S. 12-280-120(6)(a) lets a practitioner personally compound and dispense, for any patient under the practitioner's care, any drug the practitioner may prescribe and deems necessary for the condition being treated; the practitioner is exempt from the pharmacy article except the unlawful-acts section (12-280-129). No separate dispensing registration is required under this provision. Controlled substances still need DEA registration.

Statute text read via an unofficial mirror of the Colorado Revised Statutes.

C.R.S. 12-280-120(6)(a)

Current as of 2026-09-23 · Checked against the primary source

Prescribing by telehealthColorado lets clinicians licensed elsewhere register with the relevant regulator to provide telehealth from January 1, 2026, and applies in-person prescribing standards to telehealth without a blanket in-person requirement.Allowed with extra conditions

For a patient located in the state: must the prescriber hold this state's license (or a telehealth registration or special license), is an in-person exam required before prescribing (generally or for controlled substances), are there state limits on prescribing Schedule III drugs such as testosterone by telehealth, and is the state an Interstate Medical Licensure Compact member? "Yes" means a state license and the in-person standard of care apply (opioid-only or Schedule II-only limits are described but do not change the answer); "conditional" means extra state conditions such as a telehealth registration route, an in-person exam requirement, controlled-substance limits reaching Schedule III, or registration of telehealth businesses. Federal DEA rules apply on top.

Since January 1, 2026, a clinician with an out-of-state credential may provide telehealth to patients in Colorado after registering with the applicable regulator; registrants must follow Colorado practice standards (including prescribing rules), may not open an office or see patients in person, and must meet disclosure and emergency-follow-up duties (C.R.S. 12-30-124, amended by SB 25-129). The Colorado Medical Board treats a provider-patient relationship as established whether or not there was an in-person encounter and holds telehealth prescribing to the same standards as in-person care (Policies 40-03 and 40-27). No Colorado telehealth-specific Schedule III limit was found. IMLC: member.

Registration details come from CCHP's quotation of C.R.S. 12-30-124; the SB25-129 page (signed 4/24/2025) confirms the out-of-state telehealth provider requirements but the statute text itself was not read.

C.R.S. 12-30-124 (as amended by SB 25-129); Colorado Medical Board Policies 40-03, 40-27

Current as of 2026-08-31 · From a dated compilation

Aesthetics, IV therapy & practice ownership

Who may inject neuromodulators and fillersColorado is permissive: RNs inject under the Nurse Practice Act, and physicians may even delegate cosmetic injections to trained unlicensed 'delegatees' under Medical Board Rule 1.17, with a written agreement, written protocols and an in-state delegating physician.RNs may inject under delegation

Who may administer botulinum toxin and dermal fillers (physicians, PAs, NPs, RNs, LPNs, estheticians, dentists), under what supervision (on-site vs available), and must a physician/NP/PA perform a prior good-faith exam?

Colorado Medical Board Rule 1.17 defines 'Medical-Aesthetic Services' to include injections of any substance and lets physicians delegate them, as routine technical services not requiring medical judgment, to persons not licensed to perform them. The delegating physician must be trained, insured, personally perform the service in their own practice, be physically in Colorado and able to attend the patient promptly (or name an in-state covering physician), sign a written agreement listing the facility, write procedure and emergency protocols, and supervise through measures such as initial consultations, observation and chart review. Prescribing cannot be delegated, and off-label use needs specific authorization. Delegation to RNs and LPNs is governed by the Nurse Practice Act rather than Rule 1.17. The Colorado Board of Nursing's FAQ adds that Botox injections may be within RN and APN scope as a delegated medical function if the nurse has the knowledge, judgment and ability to perform them safely, but are not within LPN scope.

Rule compilation version 12607; latest effective date shown in the document is 2026-04-30 (recorded as the version date). Rule 1.17 itself was not separately dated in the extract. The Colorado Board of Nursing's policy compilation contains no cosmetic-injection policy.

3 CCR 713-1, Rule 1.17 (Colorado Medical Board); C.R.S. §12-240-107(3)(l)

Current as of 2026-04-30 · Checked against the primary source

IV hydration and vitamin therapyColorado has no IV-hydration-specific rule; the Board of Nursing says RNs and LPNs may administer prescription drugs on an order from a provider authorized to prescribe in Colorado.Standard medical/nursing rules

What does the state require for elective IV hydration/vitamin (incl. NAD+) therapy: who may start IVs, is a patient-specific order or good-faith exam required before a patient's first IV, are standing orders allowed, and are there rules for mobile IV services?

The Colorado Board of Nursing FAQ states that RNs and LPNs are authorized to administer prescription drugs pursuant to an order or prescription issued by a licensed healthcare provider authorized to prescribe in Colorado, and that RNs performing delegated medical functions require supervision. The Board's policy compilation and the Medical Board's policies contain no IV-hydration clinic guidance (checked 2026-09-23). Under Medical Board Rule 1.17, prescribing may not be delegated to unlicensed persons.

FAQ page has no date (accessed 2026-09-23). No Colorado guidance on prior exams, standing orders or mobile IV services was found; answer rests on general rules.

Colorado Board of Nursing FAQ; 3 CCR 713-1, Rule 1.17(D)(6)

Current as of 2026-09-23 · Checked against the primary source

Corporate practice of medicine / med spa ownershipCompilations list Colorado as a corporate practice of medicine state based on its Medical Practice Act.Strong CPOM

Does the state enforce the corporate practice of medicine doctrine (non-physicians may not own medical practices or employ physicians), and how does that affect med spa ownership?

Permit Health's 2025 guide classifies Colorado as strict, citing the Medical Practice Act (listed as C.R.S. 12-36-117(m), a pre-2019 citation), and MedPath Compliance (reviewed 2026-06-20) lists Colorado as 'Yes (statute)'. MedPath also notes 2025 Colorado laws voiding most provider non-competes (SB25-083) and requiring pre-merger notice for health transactions (SB25-126).

The Colorado statute's exceptions and current section numbers were not fetched; some compilations describe Colorado's doctrine as having significant entity exceptions.

Colorado Medical Practice Act (as reported by Permit Health: C.R.S. 12-36-117(m), now recodified in Title 12, Article 240)

Current as of 2026-06-20 · From a dated compilation

Who may operate aesthetic lasersColorado lets physicians delegate Class IIIb/IV laser, IPL and RF aesthetic procedures, including hair removal, to trained unlicensed delegatees under Rule 1.17; there is no separate laser licence.Delegable under supervision

Who may perform laser/IPL/RF aesthetic procedures (laser hair removal, resurfacing): physicians only, delegated to RNs/PAs, or licensed electrologists/estheticians/laser technicians with state certification?

The Medical Board treats use of Class IIIb or higher lasers or pulsed-light devices as the practice of medicine and lists them among 'Medical-Aesthetic Services' that may be delegated under Rule 1.17 with a written delegation agreement naming the facility, written procedure and emergency protocols, and an in-state delegating physician who is trained, insured and personally performs the service. Class I, II and IIIa devices are not medical services, and the Board's Policy 40-19 says Class I electrolysis devices need no physician oversight. Nurses and PAs perform laser services under their own practice acts and supervision rules. The Board of Nursing FAQ says cosmetic laser use may be within RN scope as a delegated medical function but is not within LPN scope.

Policy 40-19 shows 'Revised 2/22/2024' but also 'Repealed: Effective 11/16/2023' in the compilation — its current status is unclear; Rule 1.17 is the operative rule.

3 CCR 713-1, Rule 1.17(D)(2)–(4); Colorado Medical Board Policy 40-19 'Use of Laser to Provide Medical Services'

Current as of 2026-04-30 · Checked against the primary source

Labs, regenerative medicine & cosmetics

State clinical laboratory licensing (beyond CLIA)Not confirmed. No Colorado lab license beyond CLIA was found in the sources reviewed, but its absence was not verified.Not confirmed

Does the state license clinical laboratories itself, beyond federal CLIA certification, including out-of-state labs that test specimens from the state?

Most states rely on federal CLIA certification alone. The states confirmed in this research as issuing their own lab licenses are California, New York, Pennsylvania, Maryland and Rhode Island (which also reach out-of-state labs testing specimens from their residents), plus Nevada, Washington, Massachusetts, New Jersey and New Hampshire (labs located in the state). Colorado was not among them, but this research did not confirm its statutes. Colorado's CLIA state agency is Colorado Dept. of Public Health & Environment, Laboratory Services Division (cdphe_cliaprogram@state.co.us, 303-692-3681); it can confirm whether any state license or permit applies, including to out-of-state labs.

Absence of a state license was not verified against the state's statutes or rules.

Not confirmed

Current as of 2026-05-01 · Not independently confirmed

Direct-to-consumer lab testingNot confirmed whether Colorado consumers may order lab tests without a practitioner order. Practitioner-ordered panels are not affected.Not confirmed

May consumers order their own lab tests without a practitioner order (direct access testing)? A practitioner-ordered panel is always fine; this matters for take-home and consumer test kits.

ADLM (formerly AACC) reported in 2019 that 37 states and DC let consumers order some or all tests directly, but it did not publish the state list, and this research did not confirm Colorado's rule. Colorado's lab regulator (CLIA state agency) is Colorado Dept. of Public Health & Environment, Laboratory Services Division (cdphe_cliaprogram@state.co.us, 303-692-3681). The question matters for take-home and consumer test kits, not for panels a clinician orders.

A commercial 2026 guide (Just Labs) describes Colorado as low-restriction, with guidelines for genetic testing; not confirmed against state law. The ADLM figure dates from 2019 (older than 2 years).

Not confirmed

Current as of 2026-09-23 · Not independently confirmed

State laws on stem cell / regenerative therapiesNo Colorado law specific to stem cell, exosome or regenerative therapies was found, so FDA rules and general medical-practice rules apply.No state-specific law (FDA rules apply)

Has the state enacted a law or rule specifically about stem cell, exosome or regenerative-medicine therapies (notice/disclosure duties, permission for certain non-FDA-approved uses, or Right to Try extensions covering them)?

Compilations of state stem-cell laws from 2024 to 2026 list about a dozen states with specific laws (California, Florida, Georgia, Mississippi, Nevada, North Carolina, Tennessee, Texas, Utah, Vermont, Washington and Wyoming), plus Montana's general experimental-treatment law and Kansas's state stem cell center. Colorado is not among them. Without a state-specific law, regenerative products are governed by federal FDA rules plus the state's general medical practice, advertising and consumer-protection laws, enforced by its medical board. Federal FDA rules still apply regardless of state law: stem cell, birth-tissue and exosome products are regulated by FDA, and a state law cannot make an unapproved biologic FDA-approved.

The finding of no law rests on multi-state compilations (a commercial one from Aug 2026 and a peer-reviewed one from Feb 2024, which is older than 2 years) and targeted searches, not a statute-by-statute review, and neither compilation is exhaustive. General Right to Try laws for terminal patients, where they exist, were not reviewed here.

State rules for cosmetics and sunscreenColorado has banned the sale of cosmetics with intentionally added PFAS since Jan 1, 2025.State cosmetic/sunscreen rules

Does the state have cosmetic or sunscreen requirements beyond federal MoCRA, such as ingredient bans (PFAS, formaldehyde, phthalates), ingredient reporting, sunscreen-ingredient bans, or bans on selling animal-tested cosmetics?

HB22-1345 (signed June 3, 2022; C.R.S. §§25-15-601 to -604) phases in PFAS product bans. Cosmetics, indoor textile furnishings and indoor upholstered furniture were added on Jan 1, 2025, after carpets, fabric treatments, food packaging, juvenile products and others in 2024. A 2026 law-firm review notes the statute lists example cosmetics (moisturizers, nail polish, shampoo and others) and excludes prescription products and certain propellants.

Federal MoCRA and FDA cosmetic and OTC sunscreen rules apply in every state.

C.R.S. §§25-15-601 to -604 (HB22-1345)

Current as of 2026-09-23 · Checked against the primary source

Compare every state

State clinical laboratory licensing (beyond CLIA). Does the state license clinical laboratories itself, beyond federal CLIA certification, including out-of-state labs that test specimens from the state?

State lab license required · 10CLIA only · 5Not confirmed · 36
Alaska: Not confirmedAlabama: Not confirmedArkansas: Not confirmedArizona: CLIA onlyCalifornia: State lab license requiredConnecticut: Not confirmedWashington DC: CLIA onlyDelaware: Not confirmedFlorida: CLIA onlyGeorgia: Not confirmedHawaii: Not confirmedIowa: Not confirmedIdaho: CLIA onlyIllinois: Not confirmedIndiana: Not confirmedKansas: Not confirmedKentucky: Not confirmedLouisiana: Not confirmedMassachusetts: State lab license requiredMaryland: State lab license requiredMaine: Not confirmedMichigan: Not confirmedMinnesota: Not confirmedMissouri: Not confirmedMississippi: Not confirmedMontana: Not confirmedNorth Carolina: Not confirmedNorth Dakota: Not confirmedNebraska: Not confirmedNew Hampshire: State lab license requiredNew Jersey: State lab license requiredNew Mexico: Not confirmedNevada: State lab license requiredNew York: State lab license requiredOhio: Not confirmedOklahoma: Not confirmedOregon: CLIA onlyPennsylvania: State lab license requiredRhode Island: State lab license requiredSouth Carolina: Not confirmedSouth Dakota: Not confirmedTennessee: Not confirmedTexas: Not confirmedUtah: Not confirmedVirginia: Not confirmedVermont: Not confirmedWashington: State lab license requiredWisconsin: Not confirmedWest Virginia: Not confirmedWyoming: Not confirmedColorado: Not confirmedConnecticut: Not confirmedCTWashington DC: CLIA onlyDCDelaware: Not confirmedDEMassachusetts: State lab license requiredMAMaryland: State lab license requiredMDNew Hampshire: State lab license requiredNHNew Jersey: State lab license requiredNJRhode Island: State lab license requiredRIVermont: Not confirmedVT

The federal floor, for every category

Two federal compounding lanes: §503A pharmacies vs §503B outsourcing facilitiesA §503A pharmacy (or physician) compounds for an identified patient on a prescription; a §503B outsourcing facility is FDA-registered, follows CGMP, and is the only federal lane for non-patient-specific office stock.

Under §503A, a state-licensed pharmacist or physician may compound for an identified individual patient on a valid prescription, or in limited anticipatory quantities (no more than a 30-day supply based on the compounder's own prescription history). 503A compounders are not required to follow CGMP and are not required to report adverse events to FDA. Under §503B, an outsourcing facility registers with FDA, compounds under CGMP, is inspected on a risk-based schedule, must report adverse events, and may distribute non-patient-specific product to hospitals, clinics and practitioners for office use. Neither lane makes a compounded drug 'FDA-approved'. Both lanes restrict 'essentially copies' of approved or marketed drugs and restrict which bulk ingredients may be used. FDA keeps a public list of registered outsourcing facilities (content current as of 09/08/2026).

'Essentially a copy' of an approved or commercially available drugFDA treats a compounded drug with the same active ingredient, a similar strength and a usable route as a marketed product as 'essentially a copy' unless the prescriber documents a patient-specific significant difference on the prescription.

503A (final guidance, Jan 2018): a drug is not 'commercially available' if it is discontinued or is in 'currently in shortage' status on FDA's drug shortage list. FDA generally considers a compounded drug a copy if it has the same API in the same, similar or easily substitutable strength by a route the commercial product can be used by. The prescriber's determination must name the change and the significant difference for that patient; a patient name plus formulation is not enough, and lower price does not count. FDA does not consider copies to be made 'regularly or in inordinate amounts' if the compounder fills four or fewer such prescriptions per calendar month. 503B (final guidance, Jan 2018): outsourcing facilities may not compound drugs identical or nearly identical to an approved drug unless it is on the shortage list; otherwise a prescriber's determination of a clinical difference must be noted on the prescription or order.

Office use / office stock of compounded drugs (federal position)FDA's position is that §503A compounding requires a prescription for an identified patient; clinics wanting non-patient-specific office stock are directed to §503B outsourcing facilities.

FDA's final 503A prescription-requirement guidance (Dec 2016) says hospitals, clinics and practitioners can obtain non-patient-specific compounded drugs from outsourcing facilities registered under §503B, which may distribute sterile and non-sterile office-use product. 503A anticipatory compounding is limited to no more than a 30-day supply based on the compounder's own prescription history. Some states allow limited 503A office use under state law, but the federal 503A exemptions still depend on patient-specific prescriptions (see state topic office_use_503a).

503B products may not be resold by anyone other than the outsourcing facilitySection 503B(a)(8) bars anyone other than the outsourcing facility from selling or transferring its compounded drugs, so a clinic, distributor or marketplace that takes ownership may not resell 503B product.

FDA's June 2023 draft guidance (still draft) says the drug should go from the outsourcing facility to the entity that dispenses or administers it. FDA does not intend to apply the prohibition to transfers to common carriers, third-party logistics providers, regulators, returns processors, waste handlers or contract test labs, or to recall-related transfers. A state-licensed pharmacy may dispense 503B product against a patient-specific prescription. Clinic-to-clinic resale is the core concern.

Which bulk ingredients compounders may use (503A Categories 1/2/3; 503B bulks list)A 503A compounder may use a bulk ingredient only if it has a USP/NF monograph, is a component of an FDA-approved drug, or is on the 503A bulks list; FDA tolerates interim 'Category 1' substances, flags 'Category 2' as significant safety risks, and treats 'Category 3' as lacking support.

FDA's category list was updated May 14, 2026. 503A Category 2 now contains only cesium chloride, domperidone, germanium sesquioxide, ibutamoren mesylate, kisspeptin-10 and quinacrine (intrauterine use). Category 1 includes glutathione, methylcobalamin, NAD, NADH, enclomiphene citrate, GHK-Cu (non-injectable routes only), vasoactive intestinal peptide and others. GHRP-2, GHRP-6, mechano growth factor and thymulin are in Category 3. BPC-157, TB-500, CJC-1295, ipamorelin, AOD-9604, Selank, Semax, epitalon, MOTs-C, dihexa, KPV and thymosin alpha-1 are in no category, so they do not get Category 1 enforcement discretion. FDA does not intend to categorize substances nominated on or after Jan 7, 2025. The final 503B bulks list is short (e.g., diphenylcyclopropenone, glycolic acid topical up to 70%, quinacrine oral, squaric acid dibutyl ester, trichloroacetic acid); 503B Category 2 includes GHRP-2, GHRP-6, ipamorelin acetate, ibutamoren, tranilast and others.

Biologics (including hCG, tesamorelin, somatropin) cannot be compounded under 503A/503BSince March 23, 2020, protein products approved as drugs became licensed biologics, and FDA says biological products are not eligible for the 503A or 503B compounding exemptions.

The BPCI Act transition on March 23, 2020 deemed approved NDAs for biological products to be BLAs. FDA's transition list includes chorionic gonadotropin (Pregnyl, Novarel, Fresenius chorionic gonadotropin, Ovidrel), menotropins, follitropins, hyaluronidase, somatropin and tesamorelin acetate (Egrifta/Egrifta SV). FDA's notice to compounders states that 'biological products will not be eligible for the exemptions for compounded drugs under sections 503A and 503B'. Separate FDA guidance (Jan 2018) describes limited conditions for mixing, diluting or repackaging licensed biologics outside their labeling.

'Research Use Only' / 'not for human consumption' productsFDA treats RUO-labeled peptides and GLP-1s as unapproved drugs when marketing, dosing information or bundled syringes/bacteriostatic water show human use; the disclaimer does not make them lawful to administer to patients.

FDA's GLP-1 safety page says companies sold products falsely labeled 'for research purposes' or 'not for human consumption' with dosing instructions for human use. FDA has issued repeated warning-letter rounds to peptide/RUO sellers in 2026 (e.g., letters dated March 31, 2026 to Gram Peptides and others; June 17, 2026 to Wholesale Peptide; August 24, 2026 to Royal Peptides and others). Import Alert 66-41 (unapproved new drugs promoted in the U.S.) has listed, for example, a firm offering PT-141 peptide. RUO material is not a USP-grade or approved-drug-component bulk ingredient for compounding and is not a prescription drug a clinician can lawfully buy for patient use.

FDA drug shortage list and why it matters for compoundingA drug in 'currently in shortage' status is not 'commercially available', so 503A/503B compounders may make copies of it; when FDA marks the shortage resolved, that permission ends (503B facilities may finish existing orders for up to 60 days).

The 503A copies guidance says a drug appears on the shortage list only if it is in 'currently in shortage' status, not 'resolved'. FDA's shortage-compounding page says compounders must still meet all other 503A conditions (including a valid patient-specific prescription), and FDA 'may take action if an outsourcing facility continues to fill new orders after the approved drug is removed from FDA's drug shortage list, or if it continues to fill existing orders more than 60 days after the drug has been removed.' The GLP-1 episode shows the effect: large-scale semaglutide and tirzepatide compounding depended on shortage status and ended after FDA resolved the shortages. A prescriber or compounder relying on a shortage should note on the prescription that the drug was on the list and the date checked.

FDA Standard MOU on interstate distribution of 503A compounded drugsThe October 2020 standard MOU is suspended after a 2021 court remand; FDA is not enforcing the statutory 5% out-of-state limit and plans a new rule, with a proposed rule projected for November 2026.

Section 503A limits a pharmacy in a state without an FDA MOU to distributing no more than 5% of its compounded prescriptions out of state. FDA published a final standard MOU in October 2020, but a federal court remanded it in September 2021. FDA 'considers the standard MOU published in October 2020 to be suspended' and, per its Oct 21, 2022 Federal Register notice, will not enforce the 5% limit until a final rule and updated MOU are published. The Fall 2025 Unified Agenda lists RIN 0910-AI71 ('Distribution of Compounded Drug Products Under Section 503A') at the proposed-rule stage with an NPRM projected for 11/2026. State nonresident-pharmacy licensing still applies (see state topics nonresident_pharmacy and fda_mou).

DEA telemedicine prescribing of controlled substances (Ryan Haight Act flexibilities)Through December 31, 2026, DEA-registered practitioners may prescribe Schedule II–V controlled substances by telemedicine without a prior in-person visit under a fourth temporary extension; the permanent special-registration rule is still pending.

The Ryan Haight Act generally requires an in-person medical evaluation before prescribing controlled substances over the internet. DEA and HHS published the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities (90 FR 61301, Dec 31, 2025), effective Jan 1 – Dec 31, 2026. Prescriptions must still be for a legitimate medical purpose and comply with federal and state law; state telehealth and controlled-substance rules still apply (see telehealth_rx, state_csr, pdmp_mandate). The separate buprenorphine (opioid use disorder) telemedicine final rule and the VA continuity-of-care final rule, both published Jan 17, 2025, took effect Dec 31, 2025 after two delays (90 FR 13410). A Federal Register search on 2026-09-23 found no DEA special-registration final rule published in 2026. The Special Registrations for Telemedicine final rule was reported to be in OMB review as of late August 2026, with a final rule forecast for November 2026. Without a new rule or another extension, the in-person requirement returns on Jan 1, 2027.

FTC health-claim substantiation (advertising)The FTC requires competent and reliable scientific evidence, generally randomized controlled human trials, before a marketer makes health-benefit claims for any health product, including devices, tests, supplements and apps.

The FTC's Health Products Compliance Guidance (Dec 2022) replaced the 1998 supplement advertising guide. Marketers must have substantiation for every objective claim, express or implied, before it runs; for health benefits this generally means randomized, controlled human clinical testing. Qualifying disclosures must be clear and conspicuous, and advertisers are liable for misleading testimonials and endorsements. This sits alongside FDA's rules: FDA regulates labeling and intended use, and FDA warning letters in 2025–2026 target 'same as brand' and 'FDA-approved' claims for compounded drugs.

Current as of 2026-09-23

Adverse event reporting (MedWatch; 503B mandatory reporting)Clinicians and patients can report problems with drugs, biologics, devices and cosmetics to FDA's MedWatch voluntarily; 503B outsourcing facilities must report adverse events, while 503A pharmacies are not federally required to.

MedWatch accepts voluntary reports for prescription and OTC drugs, biologics (including human cell and tissue products), medical devices, combination products and cosmetics. Manufacturers, packers and distributors named on a marketed prescription drug label must file 15-day 'Alert reports' for serious and unexpected adverse experiences under 21 CFR 310.305; FDA's final guidance (Oct 2015) applies adverse event reporting to 503B outsourcing facilities. FDA notes that federal law does not require state-licensed 503A pharmacies to report adverse events, so compounded-drug events are likely under-reported. Under MoCRA, cosmetic 'responsible persons' must report serious adverse events within 15 business days.

Where FDA enforcement shows up: warning letters, import alerts, recallsFDA posts warning letters in a searchable database, detains risky imports through import alerts (e.g., 66-80 for GLP-1 APIs, 66-41 for unapproved drugs, 80-04 for gloves, 53-21 for adulterated cosmetics), and publishes recalls in its enforcement reports.

Import alerts let FDA detain products without physical examination. Import Alert 66-80 (GLP-1 receptor agonist bulk drug substances) detains semaglutide, tirzepatide, liraglutide, exenatide, orforglipron, retatrutide and dulaglutide APIs unless the manufacturer is on FDA's 'Green List'; FDA cited that 21% of inspected GLP-1 API makers were noncompliant with CGMP. Import Alert 66-41 covers unapproved new drugs promoted in the U.S. and has listed firms offering unapproved botulinum toxin and PT-141 peptide. Recalls, including Class I recalls of compounded glutathione in July–August 2026, appear in FDA enforcement reports and openFDA.

Compounded peptides: where things stand in September 2026FDA pulled 12 peptides out of Category 2 in April 2026 after nominators withdrew them, and its advisory committee voted in July 2026 to recommend six for the 503A bulks list, but none is on the list or in Category 1 yet, so none has federal compounding permission today.

On April 15, 2026 FDA announced that 12 peptides (BPC-157, cathelicidin LL-37, dihexa acetate, emideltide/DSIP, epitalon, GHK-Cu injectable, KPV, PEG-MGF, melanotan II, MOTs-C, Semax, TB-500) would leave Category 2 after seven days because their nominations were withdrawn; FDA's list shows the change effective April 22, 2026. Law-firm analyses stress that leaving Category 2 does not place a substance on the 503A bulks list or in Category 1. At the July 23–24, 2026 PCAC meeting, members voted to recommend BPC-157 (8–6), KPV (8–6), TB-500 (8–6), MOTs-C (7–5), epitalon (7–4) and Semax (8–5), and against emideltide (6–7); FDA staff had recommended against all of them. FDA must still decide and complete notice-and-comment rulemaking. GHK-Cu, dihexa, LL-37, PEG-MGF and melanotan II are slated for a PCAC meeting before the end of February 2027. Earlier, AOD-9604, CJC-1295, ipamorelin, thymosin alpha-1 and Selank left Category 2 in September 2024, and PCAC voted against CJC-1295 and AOD-9604 on Dec 4, 2024.

Search the official databases

FDA

Drugs@FDAApproval status, application number, labels and approval letters for FDA-approved brand and generic drugs.Orange Book: Approved Drug Products with Therapeutic Equivalence EvaluationsTherapeutic-equivalence (AB) ratings, reference listed drugs, patents and exclusivities for approved small-molecule drugs.Purple Book: Database of Licensed Biological ProductsLicensed biologics and their biosimilar and interchangeable products, with exclusivity dates.National Drug Code (NDC) DirectoryThe NDC, labeler, dosage form, marketing category and listing status of a drug product.FDA Drug ShortagesWhether a drug is on FDA's current shortage list, and its status, reason and expected resolution.Registered Outsourcing Facilities (503B)Whether a compounder is a registered 503B outsourcing facility, with its last FDA inspection and any Form 483 or warning letter.Bulk Drug Substances Used in Compounding Under Section 503A (Category 1/2/3 lists)Whether a bulk ingredient (for example a peptide) is in Category 1, 2 or 3 of FDA's interim 503A bulks policy, and links to the final 503A bulks list.503B Bulk Drug Substances ListBulk drug substances that outsourcing facilities may compound from because of clinical need, and substances FDA has placed on or excluded from the list.FDA Warning LettersSearchable warning letters to compounders, telehealth and med-spa sellers, device makers and others, by company, subject and date.FDA Import AlertsProducts and firms that FDA may detain at the border without examination, for example unapproved drugs, peptides and cosmetics.AccessGUDID (Global Unique Device Identification Database)Look up a medical device by UDI or device identifier to see its labeler, model, FDA product code, premarket number and MRI safety status.510(k) Premarket Notification DatabaseWhether a device (for example an aesthetic laser or energy device) was cleared through 510(k), with the K-number, product code and cleared indications.Premarket Approval (PMA) DatabaseClass III devices approved through PMA (for example dermal fillers), with approval orders, supplements and approved indications.MAUDE: Manufacturer and User Facility Device ExperienceReports of adverse events and malfunctions filed for a medical device, by brand, product code or manufacturer.MedWatch Online Voluntary Reporting Form (FDA 3500)Report a serious adverse event, product quality problem or medication error for a drug, biologic, device, compounded product or cosmetic.openFDAPublic APIs and downloads for FDA adverse-event, recall, labeling, NDC, 510(k)/PMA and UDI data.Modernization of Cosmetics Regulation Act of 2022 (MoCRA)Federal cosmetics rules on facility registration, product listing, adverse-event reporting, safety substantiation and labeling, with their compliance dates.Cosmetics Direct (FDA cosmetic registration and listing portal)How cosmetic facilities register and products are listed under MoCRA through FDA's Cosmetics Direct portal.
Rules checked. Now buy from vendors who are.

Every vendor on MedGrid clears document review for its category before it lists. Join free with your NPI to see wholesale pricing.

Platform terms — non-circumvention

Non-circumvention. Every introduction made through MedGrid — doctor to vendor, doctor to pharmacy, vendor to pharmacy, partner to any of them — is platform-protected. For 24 months following an introduction, the parties agree not to solicit, contract, or transact directly (or through affiliates) in a manner that circumvents MedGrid or its fees. Renewals, refills, and reorders of platform-introduced relationships run through the platform. This clause is part of every participant agreement — doctor, vendor, pharmacy, and sales partner alike — and it protects the people who make the introductions as much as it protects MedGrid.

Educational summaries of public law and agency guidance, not legal advice. Researched 2026-09-23 from the sources linked on each answer; laws, board rules and FDA policy change, so confirm with the linked agency or your counsel before you rely on an answer. Found something out of date? Tell our compliance desk.