If you want to open a med spa franchise in more than one state, one setup will not work everywhere. I’d check four things first: ownership rules, entity setup, supervision rules, and fee rules.

Here’s the short version:

  • In California, Texas, and New York, the clinical entity usually must stay under physician control.
  • A PC + MSO setup is often used so the doctor controls medical care and the business side handles admin work.
  • States differ on who can do injectables and laser services, and how much physician oversight is required.
  • Revenue-based payments can create fee-splitting risk, especially in stricter states.
  • Enforcement is active: in January 2026, New York inspections of 223 med spas led to 87 citations.
  • In Florida, non-physician-owned med spas may need AHCA clinic registration, with fines up to $5,000 per violation per day and $10,000 per day for repeat issues.

If I were reviewing a new state, I’d ask:

  • Who can own the clinical entity?
  • Do I need a PC or PLLC?
  • Can an RN, NP, or PA perform the services I plan to offer?
  • Does the state require on-site supervision or allow remote oversight?
  • Can management fees be tied to revenue, or must they be flat-fee or FMV-based?

Quick Comparison

State Ownership Approach Supervision Risk Money/Structure Risk
California Strict physician control; doctors hold at least 51% Good Faith Exam and physician oversight rules (often conducted via telehealth) MSO cannot control clinical billing judgment
Texas Strict physician ownership Delegation and posting rules for the physician Revenue-sharing and MSO control issues
New York Strict; narrow NP ownership exception Medical director oversight is under close review Fee-splitting and ghost director risk
Florida More open on business ownership Medical oversight still required Clinic registration failures can lead to fines
Georgia More open on business ownership Written orders and laser staffing rules matter Third-party physician match services are barred
New Jersey Mixed Clinical control must stay with licensed people Franchise terms can cross the line

Bottom line: I’d treat every new state as a new legal build, not a copy-and-paste rollout.

Ownership and CPOM Rules in Key States

Med Spa Franchise State Compliance: Ownership, Supervision & Fee Rules at a Glance

Med Spa Franchise State Compliance: Ownership, Supervision & Fee Rules at a Glance

In CPOM states, ownership and control of the clinical entity stay with licensed professionals. For med spa franchises, that affects who can hire medical staff and how much say the franchisor has in daily operations.

A setup you’ll see a lot is the PC + MSO model. Under this structure, a physician-owned Professional Corporation (PC) runs the clinical side, while a Management Services Organization (MSO) owned by the franchisor or an investor handles non-clinical work like marketing, billing, payroll, and real estate and business analytics. In CPOM states, licensed professionals must keep control over clinical decisions. That rule carries straight into the franchise agreement.

Strict CPOM States: California, Texas, and New York

California, Texas, and New York take a hard line. In these states, the clinical entity must be physician-owned. Non-physician investors, including franchisors, usually can’t own that entity directly.

California requires physicians to own at least 51% of the medical entity. The other 49% may be owned by other licensed professionals, such as NPs or PAs. Texas requires physician ownership of the clinical entity and also has written delegation rules for procedures. New York is strict as well, although certain NPs with 3,600+ hours of experience may own the clinical entity.

This isn’t just theory. Enforcement has teeth. In January 2026, the New York Department of State led a multi-agency task force that inspected 223 med spas. That effort led to 87 citations, many tied to unlicensed people performing medical procedures and "ghost" medical directors who existed on paper but gave no real oversight.

California added another rule in 2026. SB 351, which took effect on January 1, 2026, specifically bars MSOs from making billing, e-prescribing, or coding decisions when those decisions depend on clinical judgment.

More Permissive or Mixed States: Florida, New Jersey, and Georgia

Florida, New Jersey, and Georgia are more flexible in some ways, but they still expect real medical oversight. In Florida, med spas with non-physician owners must register as a Health Care Clinic with the Agency for Health Care Administration (AHCA). AHCA fines can reach $5,000 per violation per day, and repeat offenses can climb to $10,000 per day.

New Jersey gives more room than strict CPOM states, but licensed professionals still must control the clinical side. Georgia also gives more room for non-physician ownership of the business entity, but the oversight has to be real, not just a name on a form. As of May 7, 2026, the Georgia Composite Medical Board bars arrangements where a third party is paid to connect a clinic with a delegating physician.

State-by-State Comparison Snapshot

State CPOM Approach Who May Own the Clinical Entity PC/PLLC Required Top Franchise Risk Point
California Strict MD/DO (at least 51%; other licensed professionals may hold the remaining interest) Yes (PC/PLLC) MSO interference in clinical hiring or billing
Texas Strict MD/DO only Yes (PC/PLLC) Failure to post the delegating physician's name and license in treatment rooms
New York Strict Physicians, with a narrow exception for certain experienced NPs Yes (PC/PLLC) Revenue-based fee-splitting; "ghost" medical directors
Florida Moderate/Flexible Non-physicians may own the business entity, with medical oversight Not always Failure to register as a Health Care Clinic with AHCA
New Jersey Mixed Varies Varies Clinical control provisions in franchise agreements
Georgia Moderate Non-physicians may own the business entity, with medical oversight Not always Prohibited "matchmaker" medical director services

Once ownership is locked in, the next issue is control: how much authority the franchise agreement gives the franchisor, and where that crosses the line.

How Med Spa Franchises Are Structured for State Compliance

PC and MSO Models in Franchise Settings

Once ownership is in place, the next piece is structure. This is where a lot of med spa franchises either stay on solid ground or drift into trouble.

A PC + MSO model separates clinical control from business operations. The physician-owned Professional Corporation (PC) or PLLC handles clinical services, including patient care, treatment decisions, and medical staffing. Many franchises streamline these clinical workflows using digital intake tools to ensure data accuracy and compliance. The non-physician-owned Management Services Organization (MSO) handles nonclinical assets and functions like real estate, equipment, marketing, and staff. This often includes centralized lead management systems to track franchise growth without interfering in clinical care.

That line matters. Diagnosis, treatment protocols, and clinical hiring or firing should stay inside the physician-owned entity.

Franchise Agreement Terms That Create Compliance Risk

The franchise agreement is often where compliance issues start. If royalties or management fees are tied to clinical revenue, that can trigger fee-splitting concerns. A safer setup is for payments from the PC to the MSO to reflect fair market value for actual administrative services, such as flat retainers or hourly fees.

Marketing can cause problems too. If the franchisor has final approval over clinical advertising and there’s no physician sign-off process, the setup may create risk. The physician-owner should keep final responsibility for clinical marketing.

After structure, staffing rules decide who can perform each service and what level of supervision applies.

Structuring Model Comparison

The right model depends on the states where you operate and who owns the entity. Here’s a simple side-by-side view:

Model Ownership Clinical Authority Best Fit
Physician-Owned PC 100% physician Physician All states; simplest for solo practitioners
PC + MSO (Physician-Owned PC/MSO Model) PC: physician; MSO: investor/franchisor Physician (clinical); MSO (admin only) Strict CPOM states: CA, NY, TX

Supervision, Delegation, and Staffing Rules That Affect Daily Operations

Once ownership is set up the right way, the next pressure point is day-to-day control: who can do which procedures, and how much oversight the law requires. That’s where many med spas get into trouble. Even when the business entity is set up right, weak supervision or loose delegation can create risk fast.

Medical Director and Physician Oversight Requirements

In many states, the medical director must be a licensed MD or DO with an active in-state license. That role usually includes protocol approval, staff training, chart review, and oversight of adverse events.

And this can’t be just a name on paper. The medical director has to provide actual clinical oversight. Supervision rules change a lot from state to state. Some states want direct, on-site physician oversight. Others allow general supervision or written delegation instead.

Iowa is a good example of how specific these rules can get: a qualified practitioner must provide direct, in-person supervision for at least 4 hours per week. States such as California, New York, and Texas have also stepped up enforcement against nominal medical directors who provide little or no real oversight.

A simple way to back this up is to keep digital records of:

  • protocol reviews
  • staff training
  • chart audits

Those records help show that oversight is happening in practice, not just in theory.

That oversight rule shapes who may legally treat patients.

Who May Perform Aesthetic Procedures by License Type

Procedures like Botox, dermal fillers, laser treatments, and microneedling are generally treated as medical procedures. In most states, MDs, DOs, NPs, and PAs can prescribe and administer injectables. RNs can usually administer them, but they can’t prescribe. That means they need a physician’s order or a standing protocol.

Many states add another step before treatment starts. In California, for example, a physician, NP, or PA must perform a Good Faith Exam before an RN can treat a patient.

Estheticians and cosmetologists usually cannot perform injections or run laser devices used for medical aesthetic procedures on their own. LPN and LVN authority is often narrower as well, and it may depend on delegation rules or state-by-state exceptions.

NP authority is growing in some places, but that doesn’t always remove facility-level rules. A med spa may still need a designated medical director even when an NP has more practice authority under state law.

Supervision and Scope Comparison by State

The table below shows how selected states handle supervision levels, injector roles, and the main compliance trigger franchise teams need to watch.

State Supervision Level for RNs Common Injector Roles Main Compliance Trigger
California Direct (Good Faith Exam required first) MD, DO, NP, PA prescribe; RN administers Good Faith Exam documentation; protocol sign-offs
Texas General (delegation orders required) MD, DO, NP, PA, RN, LVN under delegation Delegation orders; Laser Safety Officer required
Florida Direct MD, DO, NP, PA prescribe; RN administers Medical supervision; safety training
New York Direct MD, DO, NP, PA prescribe; RN administers On-site physician oversight; chart review
Georgia Direct (written orders required) MD, DO, NP, PA prescribe; RN administers Written delegation orders; Certified Laser Practitioner for lasers
Arizona General MD, DO, NP, PA prescribe; RN administers under delegation Delegation protocols

A staffing matrix helps tie each procedure to the right license type and the right supervision level.

The next pressure point is financial structure, especially fee-splitting and revenue controls.

Fee-Splitting, Financial Controls, and Multi-State Compliance Systems

Fee-Splitting and Referral Restrictions by State

Many states limit how med spa franchises can get paid, with fee-splitting rules being one of the biggest pressure points. New York is one of the strictest. Under Education Law §6521 and Public Health Law §238-a, management fees should be set up as a flat retainer or a documented hourly rate, not as a percentage of clinical revenue.

California takes a hard line too. Its fee-splitting rules bar non-physicians from sharing in professional fees, and violations of Business & Professions Code §2052 can lead to license suspension. Texas and California also look closely at management fees that act like disguised profit sharing.

At the federal level, the Anti-Kickback Statute adds another layer. Payments to an MSO or franchisor must match fair market value for actual services performed, not the number of patients seen or referrals sent over.

Once the payment setup is handled the right way, the next issue is control: who handles the money, and who handles the medicine.

Operational Controls for Compliant Multi-Location Growth

A clean deal structure on paper doesn't solve everything. The PC and MSO should keep separate bank accounts, and the MSO should not control the PC's clinical revenue accounts. Reporting should also separate clinical revenue from management fees so each money flow can be audited.

That same separation should carry into day-to-day operations. Across all locations, use one documentation system for credentials, consent forms, supervision logs, and charting. If one site handles records one way and another does something else, things can get messy fast.

Before expanding, map those controls state by state. What works in one market may not fly in the next.

Before entering a new state, check entity, ownership, supervision, payment, and permit rules.

Use this checklist before signing a lease or franchise agreement.

Compliance Area Primary Question Before Expanding
Entity Structure Does the state require a PC or PLLC for clinical services?
Ownership (CPOM) Must the clinical entity be physician-owned, and if so, to what degree?
Fee-Splitting Does the state allow management fees as a percentage of gross revenue?
Anti-Kickback / FMV Can the MSO or franchisor fee be justified by independent market data?
Supervision Is on-site physician oversight required, or is remote oversight allowed?
Scope of Practice Which license types (RN, NP, PA) are authorized to perform injectables?
Facility Permits Does the state require a specific health care clinic or laser facility license?

Scaling works only when state-by-state legal structure and day-to-day documentation stay in sync.

FAQs

Do I need a separate entity in each state?

Yes - in most cases, medical spa rules vary by state.

That includes CPOM doctrines and licensure rules. And those rules can differ a lot from one state to the next.

Here’s the practical issue: ownership rules and clinical oversight rules aren’t the same everywhere. So a single entity often can’t satisfy every state’s requirements.

Because of that, many operators use an MSO to handle the business side while keeping separate, state-specific clinical entities where the law requires it.

When is a PC plus MSO structure required?

A PC plus MSO structure is required in states that enforce the Corporate Practice of Medicine (CPOM) doctrine. That rule bars non-physicians from owning or controlling medical practices.

In those states, a licensed physician owns the PC and oversees clinical care. The MSO handles non-clinical work such as marketing, billing, and staffing. This setup keeps medical decision-making in the physician’s hands.

Can management fees be based on revenue?

Generally, no. Management fees usually should not be tied to a percentage of revenue because many states ban sharing medical fees or profits with non-physicians.

To help comply with CPOM and anti-kickback rules, MSOs usually charge fixed fees or cost-plus fees that reflect fair market value for administrative services. A qualified healthcare attorney can review your agreement and confirm that it meets your state's rules.

Related Blog Posts