Where to Expand Your Med Spa in 2026: Ranked by CPOM Risk

Rent and Foot Traffic Aren't the Only Numbers That Matter

Most expansion planning starts with the numbers a real estate broker hands over: lease rates, foot traffic, local income levels, competitor density. Those numbers matter, but they answer a business question, not a structural one. A separate question sits underneath it: what does this state actually require to own and run the medical side of the business — and does the structure that works in your home state work here at all?

That second question is corporate practice of medicine (CPOM) enforcement, and it varies enough state to state that treating it as a footnote to the real estate decision is how expansion plans get expensive fast.

The Three Tiers

CPOM enforcement across the country sorts into three real tiers, not fifty individual answers.

• Strict: A non-physician generally cannot own the entity delivering medical care. An MSO-PC split is required, not optional — the professional entity has to be genuinely physician-owned and physician-controlled.
• Moderate: CPOM is enforced, but with more structural latitude than a strict state — an MSO arrangement is still the expected approach, with somewhat more room in how the management agreement is built.
• Flexible: No meaningfully enforced CPOM doctrine — a non-physician can generally own the med spa entity outright. Medical treatment still requires real, documented physician direction regardless of ownership.

The States, by Tier

This reflects each state's general CPOM posture, not a legal opinion for any specific structure — confirm current status for any state before treating it as final.

• Strict (17 states): California, Colorado, Illinois, Iowa, Kansas, Michigan, Minnesota, New Jersey, New York, North Carolina, Ohio, Oregon, Pennsylvania, Tennessee, Texas, Washington, Wisconsin.
• Moderate (15 states): Alabama, Arizona, Connecticut, Georgia, Hawaii, Indiana, Maryland, Massachusetts, Mississippi, Missouri, Nevada, South Carolina, Utah, Virginia, West Virginia.
• Flexible (18 states): Alaska, Arkansas, Delaware, Florida, Idaho, Kentucky, Louisiana, Maine, Montana, Nebraska, New Hampshire, New Mexico, North Dakota, Oklahoma, Rhode Island, South Dakota, Vermont, Wyoming.

What "Flexible" Doesn't Mean

A flexible-CPOM state is not the same thing as a low-compliance state. Ownership being easier changes who can hold equity in the business — it does not change who is allowed to direct medical treatment. Florida is the clearest example: no meaningfully enforced CPOM doctrine, one of the largest med spa markets in the country, and still a state where injectables, weight-loss prescribing and hormone therapy all require a real, engaged physician relationship. The states that get this wrong are not the ones with weak rules — they are the ones that read "easy to own" as "nothing to build."

Large Markets Worth Knowing About, Regardless of Tier

• Texas (strict): Dallas, Houston, Austin and San Antonio make it one of the largest med spa markets in the country — and once the PC-MSO structure is built correctly, Texas gives nurse practitioners and physician assistants some of the broadest delegation authority anywhere, which lets a compliant clinic run leaner than the strict-CPOM label alone would suggest.
• California (strict): The largest market on the West Coast, with enforcement that reads control broadly — and unlike some Western neighbors, California restricts nurse practitioner independence more, so clinics here lean more heavily on physician-set protocols.
• Florida (flexible): Miami, Tampa and Orlando anchor one of the largest med spa markets nationally, with no CPOM ownership bar — real medical direction is still required, just not forced by the entity paperwork the way it is elsewhere.
• Illinois (strict): Chicago alone supports one of the largest med spa markets in the Midwest, with a regulator known for reading control broadly regardless of what the corporate wrapper calls the arrangement.
• Nevada (moderate): Las Vegas and increasingly Reno support a tourism-driven market with client volume that dwarfs most states per capita, under enforcement that sits well below neighboring California's.
• Tennessee (strict): Nashville is one of the fastest-growing wellness and aesthetics markets in the country, paired with a board known as one of the more actively enforcing in the country — fast growth and strict enforcement together means more scrutiny, not less.

What This Actually Means for Expansion Planning

The tier a target state falls into changes the structure you have to build there, not whether expansion is worth pursuing. A strict state costs more in setup complexity and delivers some of the largest markets in the country in exchange. A flexible state costs less in entity structure and still requires the exact same clinical rigor once a patient is in the chair.

The real planning question is not which states have the fewest rules — it is whether the same partner can actually execute the correct structure in every state on your expansion list, since a template built for a flexible state does not survive being copied into a strict one, and the reverse wastes money building complexity nobody required.

Where MedGrid Fits

MedGrid onboards clinics in all 50 states, building whatever structure each one actually requires — a physician-owned PC and MSO split where CPOM demands it, and a real, documented medical director relationship everywhere else. The tier changes what gets built. The standard behind the physician relationship does not change by state.

Frequently Asked Questions

• Is a flexible-CPOM state always the easiest place to expand?: Easiest on the ownership side, yes. It does not reduce what's required clinically — real physician direction, delegation and documentation apply the same way they would in a strict state.
• Do strict-CPOM states mean smaller opportunity?: No — several of the largest med spa markets in the country (Texas, California, Illinois) are strict-CPOM states. The tier affects the structure required to operate there, not the size of the market.
• Can I reuse the same entity structure across every state we expand into?: No. CPOM tier varies state to state, so the structure has to be built (or confirmed) per state rather than copied from wherever the business started.
• How do I know which tier a specific state I'm considering falls into?: Check our state-by-state coverage pages — every state has its own current CPOM classification and structural requirements, confirmed before you build anything around it.

A Note on This Information

This article reflects general CPOM enforcement posture by state, not legal advice for a specific expansion decision. Requirements shift, and how they apply to a particular clinic depends on the facts. Confirm current status for any target state with your medical director and licensed counsel before building around it.