State Med Spa Laws Are Tightening in 2026 — Four States, One Direction

Four states have enacted new medical-spa laws across 2025 and 2026, and they all move in the same direction: naming a responsible clinician, restricting who may own or control clinical decisions, and making clear that a med spa cannot outsource its legal liability to a remote medical director or a good-faith-exam platform. Indiana's Governor Mike Braun signed the newest of them, Senate Bill 282, on March 5, 2026 — and law firms tracking the space, including Holland & Knight, now describe med spa compliance as being "under the microscope" nationally.

What just changed, state by state?

Indiana (SB 282). Signed March 5, 2026, with most provisions effective July 1, 2026 and a registration deadline of January 1, 2027. Med spas must register with the Indiana Medical Licensing Board, designate a responsible practitioner (a physician, APRN, or PA with prescriptive authority) who is physically present a sufficient amount of time, report adverse events within 15 days, and perform services at the registered location — a rule that curbs mobile and pop-up injectable models. Operating without registration carries penalties up to $5,000. The law reaches beyond injectables to IV-hydration clinics and weight-loss practices dispensing GLP-1 medications.

California (SB 351). Governor Gavin Newsom signed it October 6, 2025, effective January 1, 2026. It codifies the state's corporate-practice-of-medicine doctrine and specifically bars private-equity groups and hedge funds from controlling clinical decisions — including which diagnostic tests are ordered, when referrals are made, how many patients a provider sees, and how many hours a provider works. Non-compete and non-disparagement clauses in provider agreements are now largely unenforceable, and the Attorney General can seek injunctive relief plus attorney's fees.

Texas (HB 3749, "Jenifer's Law"). Signed by Governor Greg Abbott on June 20, 2025 and effective September 1, 2025. The law is named for Jenifer Cleveland, who died in July 2023 after receiving IV therapy at a Texas med spa where an unlicensed person administered the treatment under a medical director located 100 miles away. It restricts elective IV therapy to physicians, PAs, APRNs, and RNs — expressly excluding licensed vocational nurses, paramedics, and medical assistants.

New Jersey (S2996). Effective March 30, 2026. Advanced practice nurses with 5,000-plus hours of experience may practice independently — except in elective aesthetic and cosmetic services, where a collaborating-physician agreement remains mandatory. The carve-out is telling: the state loosened supervision generally but singled out aesthetics for continued oversight.

What is the common thread?

Every one of these laws draws the same line: a licensed clinician, named and accountable, must stand behind the medicine. Indiana requires a designated responsible practitioner and bars you from treating clinical oversight as a box you outsource. California bars non-clinical owners from touching clinical decisions at all. Texas was written in direct response to a death caused by an absent medical director. New Jersey preserved physician involvement specifically for aesthetics even as it deregulated elsewhere.

The movement is not confined to states that passed laws. Florida's SB 1728, which would have created a med spa registration and prescription-oversight framework, failed in committee on March 13, 2026 — but analysts expect similar legislation to return, and the fact that it was filed at all signals where the pressure is heading.

What does this mean for your practice?

Three concrete implications follow:

Know who your named responsible clinician is — and whether they are actually present. Indiana now requires one on record, and Texas was written because one was 100 miles away. If your medical director's involvement would not survive a regulator reading your chart, that is the exposure to close first.

Audit your good-faith exam workflow. A valid good-faith exam and order before treatment is the backbone of compliance in nearly every state tightening its rules. Third-party GFE platforms can support the workflow, but they do not absorb the liability if the exam was not genuinely individualized.

Re-read your ownership and management contracts if you are in a corporate-practice state. California's SB 351 voided offending contract provisions as of January 1, 2026. If a non-clinical partner or investor influences patient volume, provider hours, or referrals, those terms may now be unenforceable — and a compliance risk.

FAQ

Does this affect med spas outside these four states?
Directly, no — these are state laws. But the pattern is national. Holland & Knight and AmSpa both frame 2025–2026 as a period of intensifying med spa oversight, and states routinely model new statutes on one another, so rules in one state are a reasonable preview of what may arrive in yours.

Is a good-faith exam really required before every injectable?
In most regulated states, yes — a valid good-faith exam and order must precede any injectable or prescription treatment, and group or event settings require an individualized exam for each attendee. Standing orders are increasingly rejected as a substitute.

Regulation is tightening because the category grew faster than its guardrails, and the practices that treat compliance as core operations — not paperwork — are the ones that will still be standing when enforcement catches up. The free Aesthetic Mastery course covers how to build those systems into the way your practice runs day to day, without turning your front desk into a legal department.