Who may own it, and who may treat the patient.
Five answers for every state: ownership, injections, NP and PA rules, and any exam required first, each with its source.
Nothing you type leaves your browser. The arithmetic runs on this page. There is no form, no account, no sign-up and no record of what you entered.
The short answer: two rules decide most of what a med spa may do. Corporate practice of medicine decides who may own the practice: strict states require physician ownership, which is why non-physician owners use a management services organization alongside a physician-owned professional corporation. Delegation and supervision rules decide who may treat the patient. In 34 of the 50 states in this map, the rule names an examination a qualifying practitioner must perform before some or all treatment, and each state's note gives the scope. Pick your state below for both, with sources.
Your state, rule by rule
Alabama
Reviewed 18 October 2026Alaska
Reviewed 18 October 2026Arizona
Reviewed 18 October 2026Arkansas
Reviewed 18 October 2026California
Reviewed 18 October 2026Colorado
Reviewed 18 October 2026Connecticut
Reviewed 18 October 2026Delaware
Reviewed 18 October 2026Florida
Reviewed 18 October 2026Georgia
Reviewed 18 October 2026Hawaii
Reviewed 18 October 2026Idaho
Reviewed 18 October 2026Illinois
Reviewed 18 October 2026Indiana
Reviewed 18 October 2026Iowa
Reviewed 18 October 2026Kansas
Reviewed 18 October 2026Kentucky
Reviewed 18 October 2026Louisiana
Reviewed 18 October 2026Maine
Reviewed 18 October 2026Maryland
Reviewed 18 October 2026Massachusetts
Reviewed 18 October 2026Michigan
Reviewed 18 October 2026Minnesota
Reviewed 18 October 2026Mississippi
Reviewed 18 October 2026Missouri
Reviewed 18 October 2026Montana
Reviewed 18 October 2026Nebraska
Reviewed 18 October 2026Nevada
Reviewed 18 October 2026New Hampshire
Reviewed 18 October 2026New Jersey
Reviewed 18 October 2026New Mexico
Reviewed 18 October 2026New York
Reviewed 18 October 2026North Carolina
Reviewed 18 October 2026North Dakota
Reviewed 18 October 2026Ohio
Reviewed 18 October 2026Oklahoma
Reviewed 18 October 2026Oregon
Reviewed 18 October 2026Pennsylvania
Reviewed 18 October 2026Rhode Island
Reviewed 18 October 2026South Carolina
Reviewed 18 October 2026South Dakota
Reviewed 18 October 2026Tennessee
Reviewed 18 October 2026Texas
Reviewed 23 September 2026Utah
Reviewed 18 October 2026Vermont
Reviewed 18 October 2026Virginia
Reviewed 18 October 2026Washington
Reviewed 18 October 2026West Virginia
Reviewed 18 October 2026Wisconsin
Reviewed 18 October 2026Wyoming
Reviewed 18 October 2026No state matches that search.
All 50 states at a glance
Nurse practitioner authority as classified by the American Association of Nurse Practitioners; corporate practice posture as we assessed it from the sources on each state's sheet. Select a state name for the full sheet with citations.
| State | NP authority | Practice ownership | Exam before treatment | PA framework |
|---|---|---|---|---|
| Alabama | Reduced | Minimal | See note | Board-approved registration agreement with a supervising physician |
| Alaska | Full | Not recorded | Yes | Since 16 September 2026 (SB 89, chapter 21 SLA 26), a PA practices under a written collaborative agreement with a physician licensed in Alaska, who need not be located in the state, unless the PA works at a facility directed by a physician, osteopath or podiatrist, a health care facility licensed by the Department of Health, a federal or tribal facility, a federally qualified health center or rural health clinic, or a military or veterans' facility, or the medical board approves a facility-specific exemption. One collaborating physician is enough |
| Arizona | Full | Minimal | Yes | Supervision agreement |
| Arkansas | Reduced | Strict | See note | Board-approved delegation agreement with a designated supervising physician |
| California | Restricted | Strict | Yes | Practice agreement with a supervising physician (no task-by-task delegation) |
| Colorado | Full | Strict | See note | Collaborative agreement required |
| Connecticut | Full | Moderate | Yes | Supervision agreement required: a clearly identified supervising physician providing active, direct supervision |
| Delaware | Full | Minimal | See note | Collaborative agreement required, with a statutory independent-practice pathway after 6,000 postgraduate clinical hours |
| Florida | Restricted | Moderate | Yes | Supervision required: the supervising physician must be easily available or physically present |
| Georgia | Restricted | Moderate | Yes | Supervision required: a board-approved job description with a primary supervising physician. Since 25 May 2026 a physician may supervise no more than the combined equivalent of eight APRNs or PAs at one time, and a physician may not be the employee of a PA the physician supervises unless the board approved the arrangement before 1 July 2009 |
| Hawaii | Full | Minimal | Yes | Physician supervision required |
| Idaho | Full | Minimal | Yes | Written collaborative practice agreement required |
| Illinois | Reduced | Strict | Yes | Written collaborative agreement required |
| Indiana | Reduced | Strict | See note | Written collaborative agreement required |
| Iowa | Full | Moderate | Yes | Collaboration is set at the practice level and no supervisory agreement is required, except that a physician associate in independent practice (their own professional corporation or PLLC) must be supervised by a physician for the first two years unless they already have two years of supervised or collaborative practice |
| Kansas | Full | Strict | See note | Supervision under a written agreement is required. From 1 January 2027 (House Bill 2702 of 2026), a PA who attests to 4,000 or more hours of postgraduate clinical experience and has no board discipline may practice in collaboration with a physician under a practice agreement kept at the practice site |
| Kentucky | Reduced | Moderate | See note | Board-approved supervision agreement with a supervising physician required |
| Louisiana | Reduced | Moderate | See note | Supervising physician required |
| Maine | Full | Minimal | Yes | Practice agreement required below 4,000 clinical hours |
| Maryland | Full | Moderate | Yes | Collaboration agreement with a patient care team physician (delegation agreements ended October 2024) |
| Massachusetts | Full | Strict | Yes | Physician supervision agreement required, though on-site physician presence is not |
| Michigan | Restricted | Strict | Yes | Practice agreement with a participating physician (agreement-based rather than supervision) |
| Minnesota | Full | Strict | See note | A practice agreement is required, and a physician reviews it every year. A newly licensed PA first practices 2,080 hours under a collaborative agreement in a hospital or integrated clinical setting where PAs and physicians work together |
| Mississippi | Reduced | Minimal | Yes | Board-approved supervising physician with a delegated-services protocol required |
| Missouri | Restricted | Minimal | Yes | Written collaborative practice arrangement |
| Montana | Full | Minimal | See note | A PA with fewer than 8,000 hours of postgraduate clinical experience practices under a collaborative agreement with a physician, or with a PA who has 8,000 or more hours |
| Nebraska | Full | Minimal | See note | Physician supervision with a written scope-of-practice agreement |
| Nevada | Full | Strict | Yes | Supervising physician required |
| New Hampshire | Full | Minimal | Yes | A PA with fewer than 8,000 post-graduate clinical hours who practices without a New Hampshire physician in the group, practice or health system needs a written collaboration agreement with a New Hampshire physician. Until January 1, 2027, a PA past 8,000 hours in that setting needs a Board of Medicine waiver, and from January 1, 2027 the law drops the waiver, so a PA past 8,000 hours needs neither |
| New Jersey | Reduced | Strict | Yes | Physician supervision with a signed written delegation agreement |
| New Mexico | Full | Minimal | Yes | Supervision agreement required |
| New York | Full | Strict | Yes | Continuous physician supervision required |
| North Carolina | Restricted | Strict | Yes | A written supervisory arrangement with a primary supervising physician is required unless the PA has registered with the Medical Board for team-based practice. Since June 30, 2026, a PA with more than 4,000 hours of practice, including more than 1,000 in the specialty, may register to work in a team-based setting (a majority physician-owned practice in the same clinical area, or a qualifying facility) without a supervising physician, collaborating with the team instead. A practice that specializes in pain management is not a team-based setting. Every PA, team-based or not, still needs physician supervision to compound or dispense drugs and to give the final interpretation of plain film radiographs, and a team-based PA practicing in a perioperative setting, including surgical or anesthesia-related services, must be supervised by a physician. A PA may not give the final interpretation of CT, MRI, nuclear medicine, PET, mammography or ultrasound studies |
| North Dakota | Full | Strict | Yes | Optimal Team Practice: collaboration only |
| Ohio | Reduced | Minimal | Yes | Written supervision agreement with a supervising physician required |
| Oklahoma | Restricted | Minimal | Yes | A PA with fewer than 6,240 postgraduate clinical hours, or whose hours the Medical Board has not yet verified, practices under a delegating physician with a practice agreement on file with the Board |
| Oregon | Full | Strict | Yes | Collaborative practice agreement required rather than supervision |
| Pennsylvania | Reduced | Strict | See note | Written agreement signed by the PA and a primary supervising physician, filed with the State Board of Medicine and effective on submission |
| Rhode Island | Full | Strict | Yes | Collaboration with a physician |
| South Carolina | Restricted | Strict | See note | Approved primary supervising physician plus scope-of-practice guidelines filed with the board before practising |
| South Dakota | Full | Moderate | See note | Collaborative agreement required under 6,000 practice hours |
| Tennessee | Restricted | Strict | Yes | Supervising physician with jointly developed written protocols, availability for consultation, and periodic chart review |
| Texas | Restricted | Strict | See note | PAs prescribe under a prescriptive authority agreement with a delegating physician, under adequate physician supervision. The same narrow hospital and long-term care facility exception allows facility-approved orders or protocols instead |
| Utah | Full | Minimal | Yes | Collaboration is set at the practice level under written policies. A PA collaborates with a physician for the first 4,000 hours of post-graduate clinical practice, then works under a written collaborative agreement with a physician, or with a PA who has more than 8,500 hours in the same specialty, until reaching 8,500 hours (Utah Code 58-70a-307, as amended in 2026) |
| Vermont | Full | Minimal | See note | Written practice agreement with a participating physician, filed with the board |
| Virginia | Restricted | Moderate | Yes | Practice agreement with a patient care team physician or podiatrist. A 2026 law (Chapter 418, HB 746) lets a PA with three years of full-time clinical experience practice without one after a physician attestation, but it takes effect only once the Board of Medicine adopts regulations, and as of October 18, 2026 those regulations had not been adopted |
| Washington | Full | Strict | Yes | Collaboration agreement required with one or more physicians or the PA's employer |
| West Virginia | Reduced | Strict | Yes | Collaborating physician required with practice notification filed with the board |
| Wisconsin | Reduced | Moderate | Yes | Written collaborative agreement with a physician, or employment evidence that a physician directs the PA's professional activities |
| Wyoming | Full | Moderate | Yes | The degree of collaboration is determined at the practice level, which may include the employer, group, hospital or credentialing system, with no required supervising physician |
What the three labels mean
Nurse practitioner authority
- Full: the NP may evaluate, diagnose and prescribe under the exclusive authority of the state board of nursing. 27 states on this map.
- Reduced: a career-long collaborative agreement with a physician is required for at least one element of practice. 12 states.
- Restricted: career-long supervision, delegation or team management by a physician is required. 11 states.
For an owner, this is a cost line as much as a legal one: in reduced and restricted states, the collaborating or supervising physician is a recurring expense and a single point of failure the day that physician resigns.
Practice ownership: corporate practice of medicine
- Strict: a medical practice must be physician-owned; non-physician owners structure around it with an MSO and a professional corporation. 22 states.
- Moderate: the doctrine exists but is limited, uncodified, or lightly enforced. 11 states.
- Minimal: no meaningful prohibition on non-physician ownership, though only licensees may deliver medical services. 16 states.
These labels compress a genuinely complicated body of law into one word, and several states are actively changing: a few have recently tightened the rules on management services organizations specifically. Use the label to know how hard the question is, then have a healthcare attorney licensed in that state draft the structure.
Who may inject, and the exam that comes first
These two rows travel together. The pattern in most states is that a practitioner authorised to diagnose (a physician, and depending on the state an NP or PA) must evaluate the patient and issue an order, after which a nurse may administer it. What varies is who may perform that evaluation, whether telehealth satisfies it, whether fillers are treated differently from neuromodulators, and whether the supervising practitioner must be physically present.
Several states have no cosmetic-specific board rule at all. Those rows say so. It is the honest answer, and it is also the useful one: in those states the question goes to the board in writing before you build a staffing model on an assumption.
How this map was built, and what it is not
Each state was researched against primary sources first (state board rules, position statements, statutes and administrative code), falling back to well-known secondary sources where no primary source could be located. The nurse practitioner classifications come from the American Association of Nurse Practitioners. Every line carries its sources, so you can check our work rather than take our word.
Where a field could not be confirmed, it says so. We did not infer a rule from a neighbouring state, and we did not repeat a claim we could not trace to a source. Those gaps are real gaps in published guidance, and they are worth knowing about: a state with no cosmetic-specific rule is a state where the answer comes from a board opinion letter, not from a blog.
This is not legal advice and it is not a substitute for the boards. It is a starting point built by operators who place medical directors and pharmacy relationships for clinics, so that the first conversation with your attorney starts from the right question. If a row is wrong or has gone stale, tell us at justin@eventideaw.com and we will correct it and note the date.
Cite it freely. Associations, educators and journalists are welcome to quote or link any row with attribution to this page.
Take the data: med-spa-compliance-v1
The whole map as a file, so you can check it, chart it, or cite a row without scraping this page. 50 states, 21 columns, every rule paired with its sources.
CSV92 KB, one row per state JSON149 KB, with the field dictionary and methodology
The version in the filename is the schema's. med-spa-compliance-v1 freezes the
columns and the identifiers: if a column is added, renamed or removed, that is a v2 at a
new URL and this file stays where it is. Corrections to a row's content ship in
place, move the third number, and are logged below with the date, so a citation can name
the revision it read. This is v1.0.8, revised 2026-10-18.
The ownership column is the weakest in the file. 18 of 50 ownership_source
values point at published legal guides (compliance-guide sites and law-firm articles) rather than a statute or a board document,
because several states have no primary CPOM instrument to cite: the doctrine is built
from case law and board opinion. Treat that column as a pointer for your attorney, not as a
citation. Separately: North Carolina and North Dakota have boards that do not use .gov
domains, so a missing .gov there is not a missing primary source.
No rule in the file ships without a source. A rule we could not confirm would ship
with an empty _source value and the rule text intact, rather than being dropped
to make the file look complete; since v1.0.5 there are none.
How to cite: Eventide Aesthetics & Wellness, US State Med Spa Compliance Map, v1.0.8 (revised 2026-10-18), full review 18 October 2026, Texas 23 September 2026. eventideaw.com/tools/state-compliance-map
Licence: CC BY 4.0. Reuse it, republish it, chart it, build on it commercially: the one condition is attribution in the form above. The page already invited quotation with attribution; this makes that a licence rather than a promise, so an association or a journalist can redistribute the file without asking. Note what the licence does NOT do: it grants rights in this compilation, and it makes no warranty that any row is current or correct. The rules themselves are public records and the limits in the methodology still apply.
What each column means
state- Full state name as published by the state. The join key for the other two artefacts on this site: it matches the sheet on the compliance map and the state on the coverage page.
state_code- Two-letter USPS abbreviation, uppercase. Provided so the file joins to census, licensure and claims datasets without a lookup.
np_authority- Nurse practitioner practice authority as classified by the American Association of Nurse Practitioners: Full, Reduced or Restricted. Empty where the map records no classification.
np_rule- What the state requires of nurse practitioners, as summarised from the cited source.
np_source- URL of the document the np_rule summarises. Empty means unconfirmed.
pa_rule- What the state requires of physician assistants.
pa_source- URL for pa_rule. Empty means unconfirmed.
ownership_posture- Corporate-practice-of-medicine posture as assessed from the cited source: Strict, Moderate, Minimal or similar. Empty where the map records no classification.
ownership_rule- Who may own the practice, and under what structure.
ownership_source- URL for ownership_rule. Empty means unconfirmed.
injection_rule- Who may perform cosmetic injections, and under what supervision or delegation.
injection_source- URL for injection_rule. Empty means unconfirmed.
good_faith_exam_rule- Whether an examination must precede treatment, who may perform it, and whether telehealth is accepted.
good_faith_exam_source- URL for good_faith_exam_rule. Empty means unconfirmed.
coming_change_rule- A pending statute or rule change the map has recorded. Empty where none is recorded.
coming_change_source- URL for coming_change_rule. Empty means unconfirmed or none.
medical_board_url- Home page of the state medical board: the body that decides delegation and good-faith-exam questions. This is where an unconfirmed row should be taken.
nursing_board_url- Home page of the state board of nursing: the body that decides what an RN or APRN may perform, which is often the binding constraint on a med spa staffing model.
reviewed- The date of this state's full review against its sources. Cells verified later carry their own date on the map.
map_url- The state's sheet on the compliance map.
coverage_page_url- Eventide's medical-director coverage page for the state.
Change log
- v1.0.8 (2026-10-18): Forty-nine states re-reviewed against their sources, fetched 18 October 2026 (every state but Texas), and reviewed moves from 30 July 2026 to 18 October 2026 on each of those rows. Rule cells re-read: Alabama: injection_rule and ownership_rule. Alaska: pa_rule, injection_rule and ownership_rule. Arizona: injection_rule and ownership_rule. Arkansas: np_rule. Colorado: good_faith_exam_rule and ownership_rule. Delaware: injection_rule and ownership_rule. Florida: good_faith_exam_rule and injection_rule. Georgia: np_rule, pa_rule and ownership_rule. Hawaii: ownership_rule. Idaho: good_faith_exam_rule and injection_rule. Illinois: good_faith_exam_rule and ownership_rule. Indiana: injection_rule, ownership_rule and coming_change_rule. Iowa: pa_rule, injection_rule and ownership_rule. Kansas: good_faith_exam_rule, pa_rule, injection_rule and coming_change_rule (new). Kentucky: np_rule and ownership_rule. Louisiana: good_faith_exam_rule and injection_rule. Maine: ownership_rule and coming_change_rule (new). Maryland: ownership_rule. Massachusetts: good_faith_exam_rule, np_rule and ownership_rule. Michigan: good_faith_exam_rule, np_rule, injection_rule and ownership_rule. Minnesota: np_rule, pa_rule and ownership_rule. Mississippi: ownership_rule. Missouri: good_faith_exam_rule. Montana: pa_rule and ownership_rule. Nebraska: injection_rule. Nevada: injection_rule and ownership_rule. New Hampshire: pa_rule and ownership_rule. New Jersey: good_faith_exam_rule, np_rule, pa_rule, injection_rule and ownership_rule. New Mexico: injection_rule and ownership_rule. New York: ownership_rule. North Carolina: pa_rule and ownership_rule. North Dakota: pa_rule and ownership_rule. Oklahoma: pa_rule. Oregon: good_faith_exam_rule, injection_rule and ownership_rule. Pennsylvania: good_faith_exam_rule, pa_rule and injection_rule. Rhode Island: injection_rule and coming_change_rule. South Carolina: good_faith_exam_rule. South Dakota: good_faith_exam_rule, np_rule, injection_rule and ownership_rule. Tennessee: np_rule, pa_rule and ownership_rule. Utah: pa_rule and injection_rule. Vermont: injection_rule and ownership_rule. Virginia: good_faith_exam_rule and pa_rule. Washington: ownership_rule. West Virginia: good_faith_exam_rule and ownership_rule. Wisconsin: np_rule and ownership_rule. Wyoming: pa_rule and ownership_rule. First sources that move, because the old one was dead, superseded, a page that does not carry the rule or a walled reproduction: Alabama ownership_source, Alaska pa_source, Alaska ownership_source, Colorado good_faith_exam_source, Florida good_faith_exam_source, Florida injection_source, Idaho good_faith_exam_source, Idaho injection_source, Kansas good_faith_exam_source, Kansas injection_source, Kentucky ownership_source, Massachusetts ownership_source, Michigan good_faith_exam_source, Montana pa_source, Montana ownership_source, Nevada ownership_source, New Jersey good_faith_exam_source, New Jersey pa_source, New Jersey injection_source, New Mexico ownership_source, North Carolina ownership_source, North Dakota ownership_source, Oklahoma pa_source, Pennsylvania pa_source, Pennsylvania injection_source, South Carolina good_faith_exam_source, South Dakota np_source, South Dakota ownership_source, Tennessee pa_source, Tennessee ownership_source, Utah pa_source, Vermont ownership_source, Washington ownership_source, Wyoming pa_source and Wyoming ownership_source. Montana's ownership_posture moves from Moderate to Minimal, because the board rule the old posture rested on was repealed in 2022. The map's count of rows that name an examination moves from 34 to 35: Kansas, Louisiana and Pennsylvania read See note, Florida, Michigan, South Dakota and West Virginia read Yes. No column, identifier or board URL changed, so this is still med-spa-compliance-v1 at the same URL; the bytes changed, so the revision number moves to 1.0.8.
- v1.0.7 (2026-10-11): South Carolina: injection_rule re-read against the boards' 2022 revision of their joint advisory opinion, and injection_source now cites that revision, because the 2017 address no longer serves the opinion. Tennessee: injection_rule limited to what the board's 2002 policy says. Kentucky: injection_rule follows the nursing board's June 2026 revision, and good_faith_exam_rule says the medical board's opinion does not itself have the force of law, so on the map Kentucky's exam column now reads See note and the count of states whose rule names an examination moves from 35 to 34. Mississippi: injection_rule follows the nursing board FAQ, with the laser rule from the medical board. Virginia: injection_rule and ownership_rule cite the Department of Health Professions guidance adopted October 8, 2026. Every other changed cell keeps its first source, so no other _source column moves.
- v1.0.6 (2026-09-26): Nine rule cells in five states re-read against their primary texts after the Codex re-audit of 26 September 2026, and the documentation. Texas: ownership_rule now says legal guides describe Texas as limiting ownership of a medical practice to physicians, that physicians and PAs may jointly own a professional association or PLLC with the PAs together holding only a minority interest and a physician controlling and managing the entity (Texas Business Organizations Code section 301.012 and 22 TAC 174.5), that jointly owned entities report to the medical board each year by April 30, and that nonprofit health organizations certified by the medical board are another exception (the unsourced "MSO structures are standard" is gone); good_faith_exam_rule now says the written order the physician approves or writes must include patient selection criteria (22 TAC 169.27), and that in adopting the rule the medical board said statute permits the relationship to be established in person or by telemedicine, with Occupations Code section 111.005 setting the telemedicine conditions, where it used to say telehealth acceptability was unverified; np_rule and pa_rule now say NPs and PAs prescribe under a prescriptive authority agreement with a delegating physician, with the narrow hospital and long-term care facility exception of Occupations Code section 157.054. Alabama: good_faith_exam_rule now states the medical board's telehealth conditions in full: how the relationship must be established, and all three conditions for prescribing a controlled substance by telehealth, including an established legitimate medical purpose. New York: np_rule now says that after 3,600 hours current law removes the written practice agreement and protocol requirements, and that from 1 July 2030 an NP past 3,600 hours may instead keep collaborative relationships with a physician or hospital, attested on a state form (Education Law section 6902(3)(b)); the 1.0.3 entry below described that later text as the current duty. Florida: good_faith_exam_rule now says the telehealth statute lets a provider perform a patient evaluation by telehealth without a physical exam first, and that we found no Florida statute or board rule setting a separate exam requirement for cosmetic procedures; ownership_rule now says that as of 26 September 2026 we found no Florida statute limiting practice ownership to physicians, when a Health Care Clinic license is needed, that the practitioner-owned exemption covers only the license classes the statute lists with a licensed owner supervising the business and legally responsible for its compliance, and that a licensed clinic must appoint a medical director or clinic director who accepts legal responsibility in writing. New Hampshire: injection_rule now says when we searched and which statutes and board rules we searched for a rule naming who may administer cosmetic injectables, and the row links RSA 329 and both boards' rule sets beside its earlier sources. The added sources are linked on the map and the state pages; each changed cell's first source, the one its _source column carries, is unchanged, and so are np_authority and ownership_posture. On the map, Florida's exam column now reads See note, and the count of states whose rule names an examination moves from 36 to 35. The methodology now says each row was read from the documents linked in its sources and summarized, that most sources are state statutes, rules and board pages while some ownership rows rely on published legal guides, and that classifications and dated search results are our assessments; in 1.0.5 the known_gaps field rows_without_a_primary_source was 0 and counted rule cells with no source at all; 1.0.6 publishes that count as rows_without_a_source, which stays 0, and adds the field rows_without_a_government_source: 84 of 252 populated rule cells (300 schema slots) none of whose sources is a government document; it also says that each _source column holds the row's first source, and that the full list of sources for every row is on the compliance map and on the state's coverage page; the field dictionary now describes reviewed as the date of the state's full review against its sources, with cells verified later carrying their own date on the map; and the download block says every rule is paired with its sources, gives the full review date beside the latest cell verification and counts the rules with no government source. The map's Dataset structured data now states the same methodology as its measurementTechnique. The changed cells carry their own verified date, 2026-09-26; no state's review date, column or identifier moves, so this is still med-spa-compliance-v1 at the same URL, and the revision number moves to 1.0.6.
- v1.0.5 (2026-09-23): Seven rule cells that carried no source were read against their primary texts, reworded to what those texts say and cited, so the rows with no source move from 7 to 0. Ohio's good_faith_exam_rule now states the prescriber-patient relationship a PA prescribes within, which includes a history and physical examination (Ohio Administrative Code 4730-2-07), the one an APRN needs (4723-9-10), and the physician evaluation before delegating non-ablative vascular laser (4731-18-03); it says no cosmetic-specific exam rule was found, and that telehealth is allowed for an initial visit that meets the standard of care (Ohio Revised Code 4743.09). Tennessee's good_faith_exam_rule now states the history and physical examination, diagnosis and treatment plan required before prescribing or dispensing, with listed exceptions, in the Board of Medical Examiners' rules (chapter 0880-02) and the Board of Nursing's APRN rules (chapter 1000-04), and physician telemedicine under Rule 0880-02-.16. New Hampshire's good_faith_exam_rule now states the physician-patient relationship required before prescribing, with its exam, history, diagnosis, treatment plan and drug documentation (RSA 329:1-c), the APRN-patient relationship defined the same way (RSA 326-B:2), and RSA 329:1-d. New Hampshire's injection_rule now says no New Hampshire statute or rule names who may administer cosmetic injectables, cites the APRN and PA statutes under which both may administer drugs (RSA 326-B:11 and RSA 328-D:3-b), and says what the Board of Nursing's non-binding scope advisories say. Vermont's good_faith_exam_rule now states that a licensed provider may, within the limits of their license, prescribe after an appropriate examination in person, by live audio-video telemedicine or through transmitted images and records, and that a questionnaire alone is inadequate for a physician's initial evaluation, with one listed exception (Vermont Statutes Title 18 section 9361, Title 26 section 1354 and Title 8 section 4098a). West Virginia's good_faith_exam_rule now states that prescribing without an ongoing provider-patient relationship is unprofessional conduct for physicians and PAs, and how the telehealth rules let physicians, PAs and APRNs establish that relationship where the standard of care allows (the West Virginia Code of State Rules, including the Board of Medicine's final 2023 licensing and discipline rule (11 CSR 1A), and West Virginia Code 30-3-13a). Montana's good_faith_exam_rule now states the telemedicine relationship and history rule for physicians and PAs (Administrative Rules of Montana 24.156.813), the Board of Nursing's medical spa FAQ, and Montana Code 37-2-305. Separately, the good_faith_exam_rule cells of Alabama, Minnesota and Arkansas drop a leading "Required" that the rest of each cell does not support (they describe a relationship or a prescription, not a required examination); no other word moves. Each cell's first source fills its _source column; the others are linked on the map and the state page. The changed cells carry their own verified date, 2026-09-23; no state's review date, column, identifier or classification moves.
- v1.0.4 (2026-09-23): Texas only: five rule cells re-read against the Texas statutes and the Texas Medical Board's rules in Title 22 of the Texas Administrative Code, chapter 169, and Texas's review date. Texas's good_faith_exam_rule said a physician, PA or APRN must establish the practitioner-patient relationship and order treatment before delegation, and cited the board's home page; it now says what 22 TAC 169.26(c) requires before a delegated cosmetic procedure, that a physician, or a PA or APRN acting under a physician's delegation, establish a practitioner-patient relationship, complete and maintain the medical record, disclose who will perform the procedure and their title, and have a person trained in basic life support present, and what section 169.27 adds, that the written order the physician approves or writes sets patient selection criteria. good_faith_exam_source cites section 169.26, with section 169.27 linked beside it on the map and the state page. Telehealth acceptability is still unverified and the cell still says so. Texas's np_rule no longer says NPs prescribe "only" through a prescriptive authority agreement, because the statute it cites does not say only; np_source is still the AANP state resource sheet, which supports the Restricted classification and the no-independent-practice fact, and Texas Occupations Code section 157.0512, the delegation of prescribing through a prescriptive authority agreement, is linked beside it on the map and the state page. Texas's pa_rule now reads "PAs prescribe through a physician-delegated, signed prescriptive authority agreement, under physician supervision", which is what section 157.0512 governs, and pa_source moves from the board's home page to section 157.0512. Texas's delegation rule keeps its wording and its first source, the board's medical spa page, and the map and the state page now also link 22 TAC 169.25, which makes nonsurgical medical cosmetic procedures including cosmetic injection the practice of medicine that may be delegated and supervised, and 169.26, the onsite-or-available duty. Texas's ownership rule is respelled organizations (it read organisations); its ownership_source is still the secondary compliance guide, because the physician-only ownership rule is still carried on that guide's reading and section 162.001 speaks only to the exception, and the map and the state page now also link Texas Occupations Code section 162.001, under which the board certifies the non-profit health organizations the rule names as its exception. Texas's reviewed date moves from 30 July 2026 to 23 September 2026, the day its rows were re-read, as the review line on the Texas sheet shows; every other state's review date is unchanged, and the map's answer on how current it is now says that rows re-verified since 30 July carry their own date in this change log. No column, identifier, classification or board URL changed, and the count of rule cells with no primary source is still 7, so this is still med-spa-compliance-v1 at the same URL; the bytes at that URL did change, so the revision number moves to 1.0.4. The compliance map and the Texas coverage page were regenerated in the same commit, so the page and the file still state each rule identically.
- v1.0.3 (2026-09-19): Eleven rule cells reworded or resourced against their primary documents, and the count of rule cells with no primary source moves from 10 to 7. New York's nurse practitioner rule said NPs may prescribe without a collaborative agreement; the Education Department's practice-requirements page says an NP practises under written practice protocols and a written practice agreement with a collaborating physician until 3,600 hours of experience are completed, and documents collaborative relationships after that, so the rule now says both and the source moves from the AANP classification page to the New York State Education Department. The AANP classification itself is unchanged and is still what np_authority records. California's ownership rule said non-physicians may not own a medical practice and cited SB 351; the Medical Board's own medical spa guidance states the ownership split directly, so the rule now states it as the board does, a majority of the stock held by California-licensed physicians, no more than 49 per cent held by other licensed health care professionals and no lay ownership at all, and the source moves to that guidance document. The SB 351 attribution is removed because it was not verified. Alabama's exam rule now carries the medical board's telehealth conditions in full, including the originating-site alternative it omitted, and Alabama's delegation rule stops saying only CRNPs and PAs may inject: the board notice governs DELEGATION under an approved protocol and says nothing about a physician injecting personally. Texas's delegation rule now states what the medical board states, that cosmetic injection is the practice of medicine and may be delegated to a person with appropriate training, with the onsite-or-available condition and the emergency-appointment duty, and the source moves from the board's home page to the board's own medical spa page. Tennessee's delegation rule now names the figures in the board position statement, four hours on site a week and charts signed within seven days, and says they apply to supervisees other than NPs and PAs. Utah's exam rule said an in-person evaluation is expressly required before tattoo removal; the statute says no such thing. It requires, for a nonablative cosmetic medical procedure other than hair removal, that a physician, nurse practitioner or physician assistant develop the treatment plan and evaluate the patient in person or by live telemedicine before a protocol or series begins, and that is what the rule now says. Both Utah rows move off a republished secondary copy of section 58-1-506 and onto the statute on the legislature's own site; no other Utah row was repointed, and the physician assistant row still cites section 58-70a-307. Three rows that carried no source now carry one. Montana's delegation rule is the Board of Nursing's medical spa FAQ, which lets RNs and LPNs with appropriate training, education and supervision inject prescribed medications as part of a medical treatment plan and bars them from prescribing or diagnosing; the FAQ is guidance, not a rule, and the cell says so. Nebraska's delegation and exam rules are both the Board of Nursing's aesthetic nursing advisory opinion, which lets an RN perform Level II and III procedures only after a licensed practitioner assesses, diagnoses and prescribes, and does not accept standing orders; the opinion is non-binding, and both cells say so. Montana's exam row and both New Hampshire rows are still unsourced and are unchanged. No column, identifier, classification, board URL or per-state review date changed, so this is still med-spa-compliance-v1 at the same URL; the bytes at that URL did change, so the revision number moves to 1.0.3. The eleven corrected rows, and the two corrected on 18 September, now carry their own verification date in the store, and the state pages say that a corrected row is dated here rather than at the 30 July review. The compliance map and all fifty state coverage pages were regenerated in the same commit, so the page and the file still state each rule identically. The Codex re-audit of the same day narrowed two of these readings before publication: California's rule names California-licensed physicians, as the Medical Board's guidance does, and Nebraska's two rows use the advisory opinion's own term, a licensed practitioner, because no definition of that term as a nurse practitioner or physician was verified. The revision number does not move again, because 1.0.3 has not been published.
- v1.0.2 (2026-09-19): Two coming_change_rule cells reworded against the primary text, and their coming_change_source cells filled. Indiana's row was checked against Senate Enrolled Act 282 of 2026 (Public Law 136-2026), which adds Indiana Code 25-22.5-12.5 effective 1 July 2026: the claim that this was the first state med-spa registration statute is removed, because neither the act nor the bill record says so; "registration opens around October 2026" is corrected to the statutory duty, which is that the board shall establish a registration procedure not later than October 1, 2026 (Sec. 3(b)); registration is required to do business from January 1, 2027 (Sec. 3(a)); the responsible practitioner duty is stated as the act states it, on a registered medical spa, and with both qualifications the act requires, prescriptive authority and education and training in the services, treatments and medications concerned (Sec. 5(a)); the notice to the board is due not later than fifteen days after the occurrence of a patient's serious adverse event (Sec. 6(b)); and the exemptions cover a physician's office and a facility or practice otherwise licensed by the state (Sec. 1(b)). The source now filed in coming_change_source, and linked from Indiana's row on the map, is the enrolled act itself on iga.in.gov. Rhode Island's row was checked against Public Laws 2025 chapters 308 and 309, codified at Rhode Island General Laws chapter 23-105: the act took effect upon passage on 30 June 2025, the medical director requirement is 23-105-2(a), the ablative device restriction is 23-105-2(f), and the rulemaking deadline in 23-105-3 is a specific date, 1 July 2026, that has passed, so "implementing regulations due in 2026, re-check this row once those land" is replaced by what we found when we checked on 18 September 2026, which was no medical spa rule in the Rhode Island Code of Regulations or on the Department's rulemaking agenda. That last sentence is our own dated observation of the public listings on that date and is not something the statute says; the searches behind it are recorded in ledger row F-14. The source now filed in coming_change_source, and linked from Rhode Island's row on the map, is chapter 23-105 itself on webserver.rilegislature.gov. The count of rule cells with no primary source moves from 12 to 10. No column, identifier, classification, board URL, review date or other cell changed, so this is still med-spa-compliance-v1 at the same URL; the bytes at that URL did change, so the revision number moves to 1.0.2. The compliance map and both state coverage pages were regenerated in the same commit, so the page and the file still state each rule identically.
- v1.0.1 (2026-09-10): Punctuation only, across 26 rule cells in 20 states. Where a rule opened with a label and an em dash before its detail, the em dash is a colon: "Required: provider must perform and document an initial history and physical evaluation". Rhode Island's pending-change row became two sentences. No rule, classification, source, board URL, review date or column changed, and no cell gained or lost a word. The columns and the identifiers are what v1 freezes and neither moved, so this is still med-spa-compliance-v1 at the same URL; the bytes at that URL did change, so the revision number moves to 1.0.1 and a citation can say which revision it read. The compliance map was retyped in the same commit, so the page and the file still state each rule identically. The field dictionary's two board_url descriptions, the methodology note, the ownership gap note and the attribution string were repunctuated the same way.
- v1.0.0 (2026-09-01): Montana ownership_source repointed from the rules.mt.gov gateway deep link (now a 301 to a search page) to the search URL it resolves to. Rule text and classification unchanged; no column added, renamed or removed, so this stays 1.0.0.
- v1.0.0 (2026-08-08): Licence set to CC BY 4.0 (was a pointer to the site terms, which is not a data licence). Data unchanged: no column added, renamed or removed, so this stays v1.0.0. Known gaps expanded to name the ownership column's reliance on secondary sources and to record that two states' boards are not on .gov domains.
- v1.0.0 (2026-08-08): First published release. 50 states; 21 columns; nurse practitioner authority, physician assistant framework, corporate-practice-of-medicine posture, cosmetic injection delegation, good-faith-examination requirement, pending changes, both board URLs, and a primary source per rule. Content as verified 30 July 2026.
Answers before you even ask
Which states allow a non-physician to own a med spa?
It turns on the corporate practice of medicine doctrine, which each state applies with different force. In strict states a medical practice must be owned by licensed physicians, and non-physician owners typically operate through a management services organization alongside a physician-owned professional corporation. In minimal states non-physicians may generally own the entity, though only licensees may deliver medical services. This map records each state's posture and links the source; the structure itself should be drafted by a healthcare attorney licensed there.
Can a registered nurse inject Botox or dermal filler?
In most states an RN may administer cosmetic injectables under an order from a prescriber who has evaluated the patient, but the details vary sharply. Some states exclude fillers while allowing neuromodulators, some require the physician on site, some exclude RNs entirely, and several have no cosmetic-specific board rule at all. Check the row for your state, and treat the absence of a rule as a reason to ask the board rather than as permission.
What is a good faith exam and does my state require one?
It is the evaluation that establishes the treatment plan before a patient is treated, performed by a practitioner authorised to do it. Most states require it in some form, whether through a med spa rule, a delegation rule, or the general prohibition on prescribing without a bona fide practitioner-patient relationship. Whether telehealth satisfies it is the question that varies most. Where we could not find a published rule, this map says so rather than guessing.
What do full, reduced and restricted practice mean for nurse practitioners?
They are the American Association of Nurse Practitioners classifications. Full practice means the NP may evaluate, diagnose and prescribe under the exclusive authority of the state board of nursing. Reduced practice means a career-long collaborative agreement or similar arrangement with a physician is required for at least one element of practice. Restricted practice means career-long supervision, delegation or team management by a physician is required.
How current is this map?
Every state's rows were reviewed against the sources linked in them on 18 October 2026, and Texas's on 23 September 2026; rows re-verified since then carry their own date in the change log below. State rules change, sometimes mid-year and sometimes through board guidance rather than statute, so treat this as a starting point for a conversation with the boards and your attorney rather than as a legal opinion. If you find a row that has gone stale, email justin@eventideaw.com and we will correct it.
The rest of the toolkit
Medical director coverage
What a doctor's network provides, the ownership trap most contracts hide, and the 7 to 10 day path to coverage.
Read the guide →Clinic Startup Calculator
Cash to open, fixed monthly burn, and the visits a month that cover it.
Run your numbers →Compounding Glossary
The vocabulary of pharmacy agreements and board rules, in plain English.
Read the glossary →Your state says you need a medical director. We do that part.
Coverage in all 50 states through one relationship, with the ownership language written so your patients and records stay yours. A 15-20 minute call maps your state footprint, the structure that fits, and realistic economics, before you sign anything, anywhere.
Educational reference for licensed medical providers and practice owners. This map is a plain-language summary compiled from the sources linked on each line and reviewed on 18 October 2026 (Texas on 23 September 2026). It is not legal advice, it is not exhaustive, and it does not create any professional relationship. Requirements vary by state, license type, procedure, and practice structure, and they change, sometimes through board guidance rather than statute. Verify every requirement with the applicable state boards and a healthcare attorney licensed in that state before acting. Eventide is not a law firm and is not a medical practice.
