Who Can Own a Med Spa? State Ownership Rules (2026)

A non-physician may be able to own a med spa’s business or management company, but that does not answer whether the person may own or control the medical practice. State law governs professional-entity ownership, clinical authority, delegation, supervision, facility licensing, and advertising. The same structure can be permitted in one state and unlawful or incomplete in another.

Can a non-physician own a med spa?

Sometimes—but usually only after separating the administrative business from the professional practice. There is no single federal rule that says who can own a med spa nationwide.

A prospective owner should identify exactly what is being purchased or created:

• The medical practice, which evaluates patients and delivers medical services;
• The brand and customer-facing business;
• The real estate, equipment, or nonclinical staff; or
• A management-services organization (MSO) that supports a separately owned professional entity.

That distinction matters because a non-physician owner may be allowed to operate administrative functions while licensed professionals retain clinical control. In restrictive states, placing a physician’s name on paper does not fix an arrangement if the lay owner still controls medical decisions in practice.

A useful starting point for an existing spa is to map what the business already does, what licensed clinicians must control, and what technology or administrative partner could support. The broader telehealth-business programs hub can help frame that infrastructure discussion, but it does not replace state-specific professional and facility review.

What is the corporate practice of medicine?

The corporate practice of medicine (CPOM) is a state-law doctrine or set of rules that can limit a general business from owning or controlling a medical practice. The details vary substantially by state.

Where CPOM restrictions apply, the professional entity generally must be owned and controlled by appropriately licensed professionals. An MSO may provide nonclinical services under an agreement, but it cannot become the practical decision-maker for the medical practice.

Clinical authority commonly includes:

• Diagnosis, treatment, and medical-necessity decisions;
• Patient eligibility and clinical protocols;
• Delegation, supervision, and competency decisions;
• Control of medical records and clinical information;
• Hiring, firing, and evaluation of clinical personnel;
• Selection of medical devices, medications, and supplies;
• Clinical coding and billing judgments; and
• Emergency procedures and quality assurance.

The exact boundary must be reviewed under the law of the state where services are delivered. California’s Medical Board guidance is especially explicit that a physician’s formal ownership may not cure an arrangement in which a lay entity retains practical control.

What can an MSO do for a med spa?

An MSO can often support the business side of a med spa, subject to state law and the specific contracts. Typical functions may include leasing space, providing nonclinical staff, maintaining scheduling and customer-service systems, supporting information technology, handling bookkeeping and payroll, administering marketing, and supplying ordinary business services.

The professional practice should retain control over clinical functions. An administrative agreement should not give the MSO authority to select treatment for a patient, dictate clinical protocols, control records, hire or terminate clinicians based on clinical judgment, or choose medical devices and medications for clinical reasons.

The arrangement also needs privacy controls. A covered health-care provider may be a HIPAA covered entity, while a vendor handling protected health information on its behalf may be a business associate. Written agreements, limited access, and clear record-control provisions may therefore be necessary.

What do state med spa ownership rules look like?

Rules vary by state, and the examples below are not a national standard. They show why an ownership analysis must cover entity ownership, clinical services, delegation, supervision, facility licensing, advertising, and fee-splitting separately.

California: physician ownership and genuine control are central

California prohibits laypersons and lay entities from owning any part of a medical practice. The California Medical Board states that medical spas providing medical procedures must be physician-owned, and it warns that a physician acting only as a nominal medical director for a lay-owned spa may create unlicensed-practice concerns.

California guidance identifies decisions that must remain with the physician, including treatment decisions, patient records, clinical hiring and firing, coding and billing decisions, and selection of medical equipment and supplies. An MSO cannot simply retain those powers while physicians hold formal ownership.

California owners should also distinguish the April 1, 2026 Attorney General announcement concerning an amicus brief defending the state’s CPOM ban from a new statute. The announcement addressed ongoing litigation and should not be described as a new ownership law.

Texas: business participation may be possible, but clinical control remains with licensed professionals

The Texas Medical Board states that nonsurgical medical procedures offered at med spas are the practice of medicine. They must be performed by a physician or properly delegated to a qualified person. Texas guidance also describes onsite or immediately available physician, PA, or APRN responsibilities for emergency consultation and the ability to conduct an emergency appointment when needed.

Texas currently does not have a specific med-spa registration according to the Board’s FAQ, but that does not eliminate delegation, supervision, licensure, or professional-entity requirements. Texas law prohibits non-physicians from practicing medicine and protects a physician’s independent medical judgment.

A non-physician may participate in the administrative business depending on the entity and services, but a “medical director only” label does not transfer clinical authority to the business owner.

New York: professional entities and facility licensing both matter

New York materials describe professional practice structures such as a physician-owned professional corporation, physician-owned PLLC, qualifying physician partnership, and certain university-related structures. Ownership and control of those professional entities must remain with licensed professionals.

New York also treats unauthorized corporate practice of medicine as a restriction on an unlicensed corporation or entity providing or arranging professional services unless authorized by law. A January 8, 2026 Department of State warning states that businesses promoting or offering med-spa services must be licensed as medical facilities and that licensed professionals must perform the services.

Using “spa” in a brand name does not avoid New York’s professional-entity or facility analysis. The location, services, ownership, and professional credentials all require review.

Massachusetts: ownership can affect clinic licensure

Massachusetts requires medical spas providing medical services to be licensed as clinics unless an exception applies. The state advisory says an exception may apply when the med spa is wholly owned and controlled by one or more practitioners providing the medical services and does not use “clinic,” “institute,” or “dispensary” in its name.

The advisory treats services such as laser and light procedures, radiofrequency devices, chemical peels, fillers, botulinum toxin, and sclerotherapy as medical services within the framework. This creates an intermediate example: non-practitioner ownership may not automatically answer the question, but it can affect facility-licensure obligations.

Colorado: verify current law before relying on a proposed change

Colorado’s professional-corporation framework generally requires ownership by individuals licensed to practice medicine, and lay directors or officers may not exercise authority over professional matters. Colorado materials also state that corporations generally may not practice medicine except through permitted professional structures.

Colorado HB 26-1249 proposed special ownership rules for medical-aesthetics corporations, including provisions involving licensed physician assistants and other licensed professionals. The bill should be treated as a proposal unless an official enacted-law source confirms its final status. A pending bill is not a current ownership permission.

Does a med spa have to be physician-owned?

Not nationally. Some states require physician ownership or a physician-controlled professional entity; others may allow a non-physician to own an administrative company while licensed professionals own or control the practice. Facility licensing and the services offered can change the analysis.

An owner should not rely on a general statement that a “medical director is required” or that a “medical director makes the model compliant.” A medical director may have important clinical responsibilities, but the legal answer depends on whether the state permits the proposed ownership and management structure.

For a med spa adding remote consultations or prescription programs, telehealth adds another layer. Clinicians must remain independently licensed and responsible for clinical decisions. Federal telemedicine flexibilities for prescribing Schedule II–V controlled medications are currently extended through December 31, 2026, subject to federal requirements and state law; that extension does not authorize non-physician practice or override ownership rules.

How should an existing med spa separate its responsibilities?

Use this sequence before selecting an entity, platform, or management agreement:

1. 1Define the service line. List injections, lasers, peels, devices, prescription programs, consultations, and any telehealth or controlled-substance service.
2. 2Identify the patient location. State rules can apply where the patient is located, not only where the brand or platform is based.
3. 3Classify the entity. Determine whether the proposed owner is acquiring a professional practice, an MSO, a brand, equipment, real estate, or a combination.
4. 4Confirm professional ownership. Check the state’s requirements for corporations, PLLCs, partnerships, and other professional entities.
5. 5Map clinical control. Document who makes treatment decisions, controls records, hires clinicians, sets protocols, selects devices, and handles clinical quality assurance.
6. 6Check facility obligations. Determine whether the location is a clinic, medical facility, office-based surgery site, or another regulated setting.
7. 7Review compensation. Have counsel assess fee-splitting, referral, volume-based compensation, and related restrictions.
8. 8Review marketing. The FTC requires health-related advertising to be truthful, not misleading, and supported by adequate substantiation before dissemination.
9. 9Add privacy controls. Establish record ownership, access limits, security procedures, and business-associate documentation where applicable.
10. 10Recheck current sources. Distinguish statutes and board rules from advisories, enforcement announcements, pending bills, and litigation developments.

What does the business keep doing, and what must clinicians control?

The spa can generally continue building its brand, managing the customer experience, operating nonclinical workflows, and coordinating technology. It should not use those functions to direct the professional practice.

The professional practice and licensed clinicians must retain the authority assigned by state law. That may include evaluating patients, determining medical necessity, selecting treatment, supervising delegated procedures, maintaining records, responding to clinical complaints, and deciding which medications or devices are clinically appropriate.

A platform can support intake, scheduling, communications, administrative reporting, and coordination with clinical or fulfillment relationships. It cannot make the independent clinical decision for a patient or convert a non-physician business into a licensed professional practice.

MDLaunchr, the brand behind WhiteLabelClinic.com, is one infrastructure option for qualified businesses evaluating the technology, operational, compliance, clinical-network, and fulfillment relationships involved in expanding telehealth services. It is not a medical practice, law firm, regulator, or guarantor that a proposed ownership structure is lawful. Talk to us about your med spa to discuss the infrastructure questions that should be separated from state legal and clinical review.

Can a med spa advertise Botox, fillers, or laser results?

Marketing must be truthful, not misleading, and adequately substantiated before publication. The FTC standard applies to websites, social media, testimonials, influencer content, brochures, and other promotional channels.

FDA materials also distinguish cosmetics from products marketed to treat disease or affect the structure or function of the body, and FDA treats certain aesthetic lasers as medical devices. The business should therefore separate the product or device’s regulatory status, the practitioner’s state scope of practice, the procedure’s supervision rules, and the claim made in the advertisement.

Avoid guaranteed outcomes, unsupported safety claims, claims that a compounded product is FDA-approved, or language implying that ordinary website copy has FDA or FTC approval.

Med spa ownership checklist

Before signing a purchase, management agreement, or platform contract, confirm that you can answer these questions:

• Who owns the medical practice?
• Who owns the brand and customer relationships?
• Who owns and controls patient records?
• Who hires and fires clinicians?
• Who selects devices, medications, and clinical supplies?
• Who determines medical necessity and patient eligibility?
• Who sets delegation and supervision protocols?
• Does the state require a clinic or medical-facility license?
• Is the medical director a genuine owner or only a nominal supervisor?
• Does the proposed compensation structure raise fee-splitting concerns?
• Which marketing claims have substantiation before publication?
• Does the technology vendor need a business-associate agreement?
• If telehealth is included, where are clinicians licensed and where are patients located?

Related reading: Private Label vs. White Label Telehealth: Key Differences, What a White-Label GLP-1 Program Includes—and What You Own.