Medical Spa Laws in New York: What Owners Need to Know

New York takes the corporate practice of medicine doctrine seriously, and med spa operators who treat it as a formality tend to find that out the hard way.

The state's approach isn't unusual by national standards, but it is unforgiving of shortcuts. A professional corporation that's technically owned by a physician but functionally controlled by a non-physician management company — through control over hiring, pricing, patient scheduling priorities, or profit distribution — can still be treated as a CPOM violation even if the paperwork looks clean on its face.

Ownership & CPOM Structure

New York enforces corporate practice of medicine doctrine strictly. The entity that delivers medical care — including medical aesthetic procedures like injectables and laser treatments that require a physician's involvement — generally must be owned by a licensed physician (or, in the appropriate professional entity form, by licensed professionals) rather than by a lay investor or management company.

The standard, expected structure is a split between a management services organization (MSO) and a professional corporation (PC) or similar professional entity. The MSO — which can be owned by non-physicians — handles the business side: branding, marketing, real estate, non-clinical staffing, equipment leasing, back-office administration. The PC, owned by a licensed physician, holds the clinical operations and employs or contracts with the treating providers.

The line between the two has to be real, not cosmetic. The MSO should be compensated through a management fee tied to actual services rendered, not through arrangements that function as a share of medical revenue or effective control over clinical decisions. A management agreement that gives the MSO final say over which patients get seen, what services are pushed, or how clinical staff are hired and fired starts to look like the MSO is practicing medicine — which is exactly what the doctrine prohibits.

Licensing & Registration

Every provider delivering care needs an active New York license appropriate to their role — physicians, nurse practitioners, physician assistants, and registered nurses are all licensed and regulated separately, each with defined scope limits.

The professional entity itself typically needs to be properly formed and registered as a professional corporation (or another recognized professional entity form) with physician ownership, consistent with New York's rules for entities that deliver medical care. Confirm the specific formation requirements with counsel, since the details depend on how the practice is structured and which providers are involved.

Your state's medical board and the relevant nursing and physician assistant licensing authorities are the reference points for individual licensure. Don't assume a license from another state transfers automatically — confirm New York-specific licensure before a provider treats a New York patient.

Scope of Practice: Who Can Do What

New York defines scope of practice separately for each licensed profession, and delegation has to respect those boundaries. A strict CPOM state tends to pair with careful attention to delegation on the clinical side as well — the two issues aren't identical, but they're closely related in how boards evaluate a clinic.

• Physicians retain ultimate responsibility for medical procedures performed in the clinic, whether performed personally or delegated.
• Nurse practitioners and physician assistants generally need a defined collaborative or supervisory relationship with a physician for procedures within the scope of that relationship.
• Registered nurses may perform certain delegated tasks under a physician's order or protocol, with the physician retaining oversight responsibility.
• Non-licensed staff should be kept to genuinely non-medical services; New York regulators have been active in scrutinizing arrangements where non-licensed personnel perform procedures that require licensure.

Facility & Safety Standards

Facility standards in New York track what you'd expect from a state with active clinical oversight: real sterile processing protocols, documented device maintenance, and a clear internal process for handling and documenting adverse events.

• Sterile processing and infection-control procedures appropriate to the invasiveness of the services offered.
• Documented, regular calibration and maintenance for lasers and other energy-based devices.
• A written adverse-event protocol, with clear escalation and reporting steps.
• Emergency readiness — appropriate medications, equipment, and staff training for the procedures performed on-site.

Documentation & Recordkeeping

In a strict CPOM state, documentation does double duty: it protects the patient, and it's also the evidence that demonstrates the physician was genuinely directing care rather than lending a license to a non-physician-controlled operation.

• Procedure-specific informed consent, signed before treatment, for every patient.
• Complete intake and medical history documentation reviewed by the treating or supervising provider.
• Treatment notes that identify who performed the procedure and under whose supervision or delegation.
• Records retained for the period required under New York law and consistent with applicable professional standards.

Enforcement & Risk

New York's CPOM enforcement isn't theoretical. Complaints can come from patients, competitors, former employees, or a routine licensing review, and once a board or the state's investigators start looking at a clinic's structure, the management agreement and the actual day-to-day control of the practice both come under scrutiny — not just the entity's formal ownership on paper.

Consequences run from board discipline against the involved physician's license, to civil exposure for the management company and its principals, to the practical risk of an unwind — having to restructure the business under pressure, which is far more costly than structuring it correctly from the outset.

For acquisitions and investment in New York med spas, this is usually the single biggest diligence item. Buyers scrutinize the management agreement's fee structure, who actually controls clinical hiring and scheduling, and whether the physician owner has genuine, documented authority — because a structure that looks fine on the surface can still carry real CPOM exposure underneath.

Frequently Asked Questions

• Can a non-physician own a med spa in New York?: Not the medical entity directly. Non-physicians can own and operate the MSO that handles the business side, while a licensed physician owns the professional entity that delivers care — the standard MSO-PC structure.
• What makes an MSO-PC structure risky in New York?: Arrangements where the MSO effectively controls clinical decisions — hiring, scheduling priorities, treatment protocols — or where the management fee functions as a share of medical revenue rather than compensation for actual services rendered.
• Is a physician's name on the PC enough to be compliant?: No. Regulators and courts look past the paperwork to actual control. A nominal physician owner with no real authority over the practice doesn't cure a CPOM problem.
• Why does this matter so much for a sale or investment?: Because an unwind or restructuring triggered after closing is far more expensive and disruptive than structuring the deal correctly the first time — buyers know this and diligence accordingly.

This article is general information about New York med spa regulation, not legal advice, and it isn't a substitute for state-specific counsel. CPOM enforcement is fact-specific and the details of a compliant structure depend on your particular arrangement. Confirm the specifics for your clinic with your medical director and your own attorney before relying on them.