Medical Director Requirements for Medspas: Role, Supervision, and Liability

Most states require the medical director to be a licensed physician (MD or DO). Some states permit nurse practitioners (NPs) or physician assistants (PAs) to hold the title, but this is narrower and often comes with restrictions—particularly around the ability to delegate certain procedures or prescribe controlled substances. A few states (notably California and Florida) have more permissive language, while others (such as New York) maintain stricter physician-only requirements. Verify your state medical board's specific statute or administrative code; this is non-negotiable.

The medical director does not need to be physically present during every procedure—that is a common misconception. What is required is appropriate supervision, which typically means:

• Establishing written protocols for each procedure type (injection depth, units per area, patient screening criteria)
• Initial in-person evaluation of new patients or complex cases
• Regular chart audits and staff observation
• Availability for consultation and emergency response
• Documented training and credentialing of delegated staff

The frequency and intensity of supervision depend on state law and the risk profile of the procedure. High-risk treatments (such as deep-plane RF microneedling or large-volume filler) may require more frequent oversight than maintenance Botox.

MSO Structures and the Corporate Practice of Medicine Doctrine

Many medspas operate under a Management Services Organization (MSO) model, where a non-physician entity (often a PE-backed roll-up or independent practice group) owns and manages the business while a physician serves as medical director under contract. This structure is legal in most states but requires careful documentation to avoid violating the Corporate Practice of Medicine (CPOM) doctrine—a state-level prohibition against non-physicians owning or controlling the medical decisions of a licensed practice.

Key compliance points:

• The MSO can own equipment, lease space, handle billing, and manage staff—but cannot dictate clinical decisions.
• The medical director must retain genuine autonomy over treatment protocols, staff credentials, and quality standards.
• Compensation must not be tied to production volume or specific patient outcomes in a way that creates financial pressure to over-treat.
• Written agreements should clearly delineate the MSO's administrative role and the medical director's clinical authority.

States with strong CPOM enforcement (California, Texas, Florida) scrutinize these arrangements closely. States with weaker or no CPOM doctrine (Delaware, Nevada) allow more flexibility. Some states permit a "safe harbor" if the non-physician entity is owned by healthcare professionals or if the arrangement is transparent to regulators.

Liability and Insurance

The medical director carries vicarious liability for the acts of delegated staff—meaning if a nurse injector causes harm, the medical director can be held responsible even if they were not present. This is why credentialing, training, and documentation are not optional.

Medical directors should carry:

• Medical malpractice insurance with coverage that explicitly includes supervision of delegated staff and MSO arrangements (some carriers exclude or limit this).
• Tail coverage if leaving a practice, to protect against claims arising from prior work.
• Facility/general liability coverage (usually carried by the practice entity).

Many MSOs now require the medical director to maintain a minimum coverage limit (often $1M–$2M per occurrence) and to name the MSO as an additional insured. Review your policy language carefully; some carriers have carved out exclusions for "corporate practice" or "non-physician-owned" entities.

Regulatory Audits and Documentation

State medical boards and state attorneys general increasingly audit medspas for unlicensed practice and improper delegation. The medical director's documentation is the primary defense:

• Signed protocols for each procedure
• Evidence of initial patient evaluation and ongoing chart review
• Staff training records and competency assessments
• Incident reports and adverse-event tracking
• Regular in-person observation notes

Lack of documentation is treated as lack of supervision, even if supervision occurred informally. A single audit finding can result in fines, license suspension, or criminal referral.

Bottom Line

The medical director role is not ceremonial. It is a real clinical and legal responsibility that requires active engagement, documented protocols, and appropriate malpractice insurance. Whether you are a physician considering the role or a practice owner hiring one, ensure that your state's specific requirements are met, that the MSO structure is transparent and compliant, and that the medical director's authority and liability exposure are clearly defined in writing.