Med Spa Peptide Regulations: What Owners Must Know

if your med spa provides peptide therapy to patients, you are practicing medicine. that sentence is the whole article compressed. everything that follows is a consequence of it: a licensed prescriber has to evaluate the patient, the product has to come from a lawful source, someone qualified has to supervise, and your state gets a lot of say in how all of that is structured.

this is general information for med spa owners, not legal or medical advice. medical practice, delegation, supervision, and corporate practice rules are set state by state and differ meaningfully. you need counsel who practices health care regulatory law in your state, and you should confirm anything here with your state medical board and your pharmacy partners.

the two models, and why blending them hurts

med spa owners generally encounter peptides through two doors. the clinical door, where a prescriber evaluates a patient and a pharmacy prepares a patient-specific preparation. and the commerce door, where research-use-only product is sold online at scale to a national audience.

both can be legitimate. they are governed by almost entirely different rule sets, and the failure mode is treating them as one business. an RUO storefront wearing your clinic's brand tends to make your RUO claims look like medical advice, while your clinical credibility makes consumer use more foreseeable. that is the worst of both.

• —clinical peptide therapy: patient evaluation, valid prescription, lawful product source, supervision, charting, informed consent, malpractice coverage.
• —online RUO sales: no claims, no dosing, no patient relationship, third-party COAs, high-risk payments, national shipping considerations.
• —if you run both: separate entities, brands, domains, email lists, support teams, and creative standards.

the prescriber relationship is not a formality

in the clinical lane, the core requirement is a genuine practitioner-patient relationship. that generally means an evaluation appropriate to what is being prescribed, a documented history, a clinical rationale, informed consent, and follow-up. states differ on whether and how that can happen via telehealth, what modality is acceptable, and whether an initial in-person visit is required.

the shortcuts that get med spas in trouble are recognizable: a questionnaire with no real review, a prescriber who signs in bulk without meaningful evaluation, or a protocol where staff decide and the prescriber rubber-stamps. boards treat those as unlicensed practice and as a supervision failure at the same time.

supervision and delegation

who can actually administer an injection in your clinic, and under what level of supervision, is a state question with real variation. some states require on-site physician presence for certain acts. others permit delegation to nurses or medical assistants under defined protocols. some distinguish between the initial evaluation and subsequent administration.

1. 1.confirm in writing which license types in your state may administer what you are administering.
2. 2.confirm the required level of supervision: on-site, immediately available, or general.
3. 3.have written standing orders or protocols where your state contemplates them.
4. 4.keep the supervising prescriber's involvement documented and real, not nominal.
5. 5.re-check this whenever you add a service, a location, or a new provider type.

where the product comes from

sourcing is a hard line in the clinical lane. product administered to patients should come through lawful channels: an approved drug from a legitimate distributor, or a compounded preparation from a licensed compounding pharmacy on a valid prescription. the set of substances a pharmacy may lawfully compound is restricted and changes, and your pharmacy partner should be able to explain their basis clearly.

what you must not do is administer research-use-only product to patients. it is labeled not for human use, it is not prepared for clinical administration, and doing it exposes your providers to board discipline and your business to liability that no insurer will want to cover. this happens more than the industry admits, usually because the clinical supply got restricted and someone improvised.

if your supply chain changed and nobody updated the consent form, the chart, or the label, you did not solve a sourcing problem. you created a liability problem.

corporate practice of medicine

many states restrict who can own an entity that practices medicine, and how a non-licensed owner can be involved. this affects med spa ownership structures broadly and becomes more visible the moment your business looks like it is directing clinical decisions.

the common structure in restrictive states involves a professional entity owned by a licensed provider and a management services organization providing non-clinical services under an agreement. whether that is right for you, and whether your current structure holds up, is squarely a question for health care counsel in your state.

the online opportunity, done correctly

here is the honest commercial picture. med spas have a real advantage in the online peptide market: brand trust, an existing customer base, and operational maturity. the advantage disappears if the online arm is built as an extension of the clinic rather than as its own compliant business.

LIVV Well is a med spa. we built their online operation as its own thing, with its own compliance standard, its own payment stack, its own creative pipeline, and its own fulfillment. the result was over 1,200% growth in six months, 294 live ads, and top creatives at 6.79 to 14.96 ROAS. the separation is not a compliance tax. it is what made the growth durable.

advertising as a med spa

your clinical brand raises the stakes on marketing claims. a licensed practice making a treatment claim is held to a higher standard than a random storefront, and state boards frequently regulate provider advertising directly, including rules on testimonials, before-and-after imagery, and how credentials are displayed.

• —check your board's advertising rules, which often cover testimonials, guarantees, and specialty claims.
• —avoid implying outcomes you cannot substantiate, even in patient-facing material.
• —keep clinic marketing and RUO marketing on separate assets with separate approval workflows.
• —make sure staff social accounts are covered by your policy, because boards look at them.

documentation is your defense

if a board or a plaintiff ever looks at your peptide program, the question will be what your records show. charts with real evaluations, consent forms that describe what was actually administered including whether it was a compounded preparation, sourcing documentation, lot traceability, and adverse event logging.

clinics with excellent clinical care and poor documentation lose cases they should win. clinics with average care and immaculate documentation usually do not end up in cases at all.

the five questions to ask your attorney this month

1. 1.does our current prescriber relationship and evaluation process satisfy our state's standard, including for telehealth patients?
2. 2.who may administer, and under what supervision level, in every state we operate in?
3. 3.is our sourcing chain lawful for every product we administer, today, not last year?
4. 4.does our ownership structure comply with corporate practice of medicine rules here?
5. 5.if we launch an online RUO business, how should it be separated from the clinic?

those five answers, in writing, are worth more than any checklist on the internet, including this one.