New Compliance Regulations for Med Spas in 2027: A National Overview

While there is currently no single comprehensive federal licensing framework that specifically regulates medical spas as a distinct healthcare facility category, multiple federal laws and agencies impose significant requirements on med spa operations involving prescription drugs, medical devices, biologics, controlled substances, patient privacy, laboratory services, and advertising practices. Primary regulatory oversight remains at the state level through medical boards, nursing boards, pharmacy boards, and health departments, with increasing state-by-state variation and a continuing trend toward stricter enforcement and operational requirements anticipated through 2026–2027.

Federal (National) Regulations Impacting Med Spas

Med spas must comply with these overlapping federal frameworks, regardless of state:

• Modernization of Cosmetics Regulation Act (MoCRA, 2022): Requires facility registration with the FDA, adverse event reporting for cosmetic products, and safety substantiation. Full enforcement and biennial renewals are active in 2026–2027.
• Drug Supply Chain Security Act (DSCSA): Med spas handling prescription drugs (Botox, fillers, compounded GLP-1s like semaglutide, etc.) are considered “dispensers.” Key requirements include verifying suppliers are authorized trading partners, maintaining traceability records, and serialization compliance. The FDA issued its first warning letter to a med spa in early 2026, signaling heightened enforcement. Full electronic tracking deadlines approach in late 2026.
• FDA Oversight on Compounding and Devices: Stricter rules on compounded medications, especially after GLP-1 shortage resolutions. Medical devices (lasers, etc.) must meet FDA clearance requirements.
• FTC Advertising Rules: Prohibits deceptive claims about results, safety, or endorsements. “Before/after” photos and testimonials face increased scrutiny.
• HIPAA and Other Privacy Laws: Apply to patient records and telehealth services.

These federal rules create a baseline that all med spas must follow, even in states with minimal specific oversight.

State-Level Landscape: High Variability

• 36 states lack dedicated med spa regulations as of mid-2026. They rely on general medical board rules, nursing board scopes, and corporate practice of medicine (CPOM) doctrines.
• States with specific frameworks or recent changes include: Indiana, California, Florida, Texas, Massachusetts, Illinois, Rhode Island, and others. Trends include mandatory registration/licensure, enhanced medical director responsibilities, adverse event reporting, and restrictions on mobile/pop-up services.

Indiana SB 282 (Effective 2026–2027) remains a leading example:

• Mandatory registration by January 1, 2027.
• Designated responsible practitioner with oversight.
• Adverse event reporting and location restrictions.

Similar proposals or laws in other states often mirror elements of Indiana’s approach, especially around prescription drug handling.

AmSpa (American Med Spa Association) offers state-by-state legal summaries and resources that operators nationwide rely on.

Looking Ahead to 2027 and Beyond

The trend is toward greater standardization and patient protection without a single national med spa law. States are increasingly treating med spas as healthcare entities rather than wellness businesses, especially when prescription drugs or advanced devices are involved.

Proactive Steps for Multi-State or National Operators:

• Conduct a state-specific compliance audit. SysTAMedix offers compliance packages.
• Engage healthcare attorneys familiar with aesthetics (e.g., via AmSpa network).
• Implement centralized policies that meet the strictest applicable standards.
• Monitor FDA, state boards, and industry groups for updates.

Disclaimer: This is general information based on publicly available sources as of late May 2026 and is not legal advice. Regulations change rapidly and are highly location-specific. Always consult qualified healthcare counsel and compliance experts for your specific operations.

Sources: FDA guidance, state legislative records (e.g., Indiana SB 282), AmSpa resources, peer-reviewed analyses, and legal firm publications.