What a med spa medical director is actually responsible for

Most med spas offering injectables, lasers, IV therapy or prescription weight-loss treatment have a physician with the title "medical director." The title alone means little. Regulators look at whether the physician actually supervises. The Medical Board of California has said the standards for informed consent, delegation, medical records and liability apply to physicians "even those denominated 'medical director.'" Here is what the job involves and how it changes from state to state.

The patients are the physician's responsibility

Boards treat cosmetic injections and laser treatments as the practice of medicine. California's board is plain about it: the physician is responsible for the patients regardless of who performs the treatment, including complications and emergencies, and must make sure back-up systems and emergency plans are in place. It also says a physician may delegate only to licensed staff they know are capable, and should be competent in the procedure themselves.

Texas rules say something similar. The delegating physician must be trained in, or familiar with and able to perform, the delegated procedure, and must make sure the person performing it is trained in technique, contraindications and managing complications.

Delegation by service line

Injectables and lasers

Each state decides who can be delegated what. In California, the medical board has said only registered nurses, nurse practitioners and physician assistants may be delegated lasers, other prescription devices or prescription-drug injections; medical assistants and estheticians may not, whatever their training. Texas rules classify nonsurgical cosmetic procedures, including cosmetic injections and use of prescription devices, as medical acts that can be delegated and supervised under written orders.

IV therapy

Texas passed HB 3749, known as Jenifer's Law, after a woman died in 2023 following an IV infusion at a spa where, according to the law firm Jackson Walker, the supervising physician failed to properly oversee the unlicensed person who gave it. Since September 1, 2025, for elective IV therapy outside physician offices and licensed facilities, the law lets a physician delegate ordering to a PA or APRN, and administration to a PA, APRN or RN, each acting under adequate physician supervision.

Weight-loss prescribing

Exam and indication. California treats prescribing dangerous drugs without an appropriate prior examination and a medical indication as unprofessional conduct.
Controlled substances. Phentermine is a Schedule IV controlled substance, so prescribers need DEA registration, generally in each state where they practice. Some states add rules. Ohio's rule on controlled substances for obesity sets BMI thresholds, requires a history, physical exam and a check of the state prescription monitoring database, and requires follow-up at least every three months.
GLP-1 drugs. The FDA declared the tirzepatide and semaglutide shortages resolved (December 19, 2024 and February 21, 2025) and ended its compounding enforcement discretion periods in 2025. The FDA says compounded drugs should only be used for patients whose needs an FDA-approved drug cannot meet, and it has flagged dosing errors and unapproved salt forms. Drug sourcing should be the physician's call.

Good faith exams and patient assessments

Before the first treatment, a qualified provider needs to assess the patient and confirm the treatment is appropriate. AmSpa describes the good faith exam as a medical history plus an appropriate physical exam, performed by a physician, PA or advanced practice nurse. A registered nurse can gather information but cannot generate the order. AmSpa recommends repeating the exam for new treatments, significant health changes or after time passes, and at least annually as a best practice.

California: the prior exam does not have to be synchronous. It can be done by telehealth, including a questionnaire, if the standard of care is met. The medical board has said the exam may not be delegated to registered nurses, though NPs working under standardized procedures may perform it.
Texas: before a delegated cosmetic procedure, a physician, or a PA or APRN acting under a physician's delegation, must establish a practitioner-patient relationship, keep an adequate medical record, tell the patient who will perform the procedure, and ensure someone trained in basic life support is present.
Ohio: for delegated vascular laser treatment, the physician must see and evaluate the patient before the first treatment and again before treatment continues.

Standing orders and protocols

Written protocols carry the physician's judgment into the treatment room. Texas requires the delegating physician to write the orders or approve the facility's existing orders in writing. They must identify the delegating physician and include patient screening criteria, a description of appropriate care, and procedures for complications and emergencies, including how the physician is notified. The person performing the procedure signs and dates a written protocol. Texas facilities must also post the delegating physician's name and license number in each public area and treatment room.

California uses "standardized procedures" for registered nurses. They must be written and signed, and must state training requirements, how competence is evaluated initially and over time, the scope of supervision, when the nurse must contact the physician immediately, record keeping, and how the procedures are periodically reviewed.

On-site vs. remote supervision

Texas: a physician, PA or APRN must be on site during the procedure or immediately available for emergency consultation, and the physician must be able to see the patient for an emergency appointment if needed.
California: nurses under standardized procedures may treat while the physician is off site, but the medical board has said the physician must be immediately reachable and close enough to supervise effectively. The setting must be under the physician's control, not a salon or spa the physician does not control.
Ohio: delegated vascular laser treatment requires on-site physician supervision, with no more than two people supervised at a time. For laser hair removal, on-site supervision is the default, but HB 377 (effective August 26, 2026) allows off-site supervision in defined cases, such as established patients treated by delegates with added training, with the physician continuously available.

NP and PA collaboration or supervision

Your NPs and PAs may need their own legally required relationship with a physician. The American Association of Nurse Practitioners groups states into full, reduced and restricted practice for NPs. Three examples:

California: most NPs work under standardized procedures. Under AB 890, NPs with 4,600 hours or three years of practice may work without them in a group setting that includes a physician. After three more years, they may practice outside that setting, a status first available January 1, 2026.
Texas: APRNs and PAs prescribe under a prescriptive authority agreement. A physician generally may hold these with no more than seven APRNs and PAs combined. Each agreement needs a quality plan with chart review and meetings at least monthly, and must be reviewed annually.
Utah: PAs collaborate with a physician for their first 4,000 hours and need a written collaborative agreement until 8,500 hours. A 2026 amendment lowered that threshold from 10,000.

Chart review

Chart review is how a director shows supervision happened. Check that the exam came before treatment, consent is signed, the treatment matched the protocol, and complications were handled. Texas prescriptive authority agreements require chart review, with the number of charts set by the parties. Set a sampling plan, weight it toward new staff, new services and adverse events, and sign and date each review.

The "name on the wall" problem

The California board once described a solicitation offering physicians up to $400 a month per spa to serve as medical director, and called it renting a license. It linked such arrangements to paper-only supervision, unlicensed staff and confusion over who is responsible for the patient. Warning signs:

the director rarely visits and cannot be reached during treatment hours
protocols were signed once and never revisited
charts do not show an exam before the first treatment
staff perform services their license does not allow in that state
the director has no training in the delegated procedures
a non-physician owns the medical practice in a state that prohibits it

What a defensible file looks like

If a board, a plaintiff's lawyer or an insurer asks, have this ready:

a signed agreement defining the director's duties, availability and backup coverage
current licenses and DEA registrations for the director and every provider
training records and competency sign-offs for each delegate and service
signed, dated protocols or standing orders for every service, with review dates
any state-required NP or PA agreements
a documented exam and signed consent in each chart before the first treatment
chart review logs and meeting notes
an emergency plan and an adverse event log
required postings and staff identification
drug and device sourcing records

MedGrid MSO connects clinics with a physician licensed in their state, drafts delegation agreements, standing orders and consents per state, and keeps them current. But paperwork is only the start; the physician's real oversight is what makes the file defensible.

This article is general information, not legal advice. Rules vary by state; confirm specifics with your counsel and your state boards.