Guides
How to Read a Med Spa Compliance Checklist Skeptically
A med spa compliance checklist should tie each device, licensing, and advertising requirement to its authority, proof record, owner, and review trigger.
What to take away
- Two federal threads decide most med spa advertising riskFDA device status and FTC claim substantiation.
- A device cleared for one intended use does not cover the next use you add to the menu.
- Every objective health claim needs evidence in hand before the ad runs, not after a complaint.
- Testimonials and fine print cannot rescue an ad that misleads as a whole.
- Accessibility duties attach to the facility and the booking path, not just the treatment room.
This article covers business and advertising operations, not medical, legal, scope-of-practice, prescribing, supervision, or privacy advice. Device status, licensure, delegation, and facility requirements vary by product and state; use the applicable federal and state sources below, and have counsel review questions that require legal interpretation.
The two federal threads
A med spa compliance checklist usually starts with state licensing, and that is where a new owner loses the thread. Two federal questions sit underneath everything you print, post or say at the front desk.
The first is device status. The FDA regulates aesthetic devices as medical devices when intended use and effect bring them into that category, as set out in the FDA's aesthetic devices guidance. A laser cleared for hair reduction is not cleared for pigment removal because a client asked.
The second is claim substantiation. The FTC requires that objective health and safety claims rest on competent and reliable evidence before you publish them, per the FTC health products compliance guidance. "Before" is the operative word.
Where the checklist usually fails
Most checklists list categories. Categories do not tell you who signs, what gets filed, or when the item reopens.
Instead of “maintain device records,” write a line that can be checked: “For each device make and model, file its FDA status record and labeling; keep the manufacturer’s instructions, training and service records; verify each operator’s current state license and document the scope, supervision, and delegation review for the service; and link every related ad to its dated substantiation file.” Assign an owner to each file and reopen it when the device, use, operator, or claim changes.
Replace category lines with authority lines. Each line names the body that sets the rule, the document that proves you met it, and the person who owns it.
Worked example: a body contouring device
A new owner adds a body contouring device to the menu and writes one line: "device compliant."
The authority map splits that line into four:
As an internal control, split the line into four evidence checks. The applicable route and state rule depend on the device, intended use, service, and location.
- FDA status:Identify the exact device and intended use; retain the applicable FDA status record and labeling. Authority: FDA. Owner: purchasing or compliance lead.
- State authorization:Keep a dated license verification and a documented review of the scope, supervision, and delegation rules for the clinician and service. Authority: the relevant state medical or nursing board and its governing rules. Owner: clinical director.
- Device operation:Keep the manufacturer’s instructions, device-specific training and competency records, and service or repair log. Authority: manufacturer instructions and any FDA requirements applicable to the device. Owner: device lead.
- Advertising:Keep dated support for each objective safety or efficacy claim before the ad runs. Authority: FTC substantiation guidance. Owner: marketing lead.
Four Records for One Device
- FDA clearance for advertised intended use
- State board position on operator
- Manufacturer training record per operator
- Advertising file with claim substantiation
Four records, four owners, one device. The single line hid all of it.
Before committing, ask the vendor for itemized written pricing for the device, installation, training, service, and consumables, plus the delivery, installation, and training schedule for that model and location. Record the quoted amounts and dates in the business case and device file rather than relying on generic estimates.
Advertising claims
FTC guidance is blunt about testimonials and disclaimers. A disclosure or a footnote cannot cure an ad that misleads when read as a whole, and a consumer testimonial does not substitute for substantiation of the underlying claim.
Claim File Before the Ad
- Draft objective claim
- Attach study or clearance document
- Date it before the ad runs
- File per campaign
Keep a claim file per campaign. Each objective claim gets the study, the clearance document, or the manufacturer data behind it, dated before the ad ran.
Vague claims are not safer. "Look younger" and "tighten skin" both invite the question of what evidence supports them.
Accessibility and the booking path
The Justice Department's small business guide covers public accommodations, including barrier removal, accessible routes and service practices, weighed against what is readily achievable for an existing facility, as detailed in the DOJ ADA small business guide.
The booking path counts. If a client cannot reach the scheduler, read the intake form, or enter the building, the compliance gap is real even when the treatment room is spotless.
Common questions
Does FDA clearance cover how we advertise the device?
No. Clearance covers a stated intended use. Advertising a different use moves the claim outside that clearance and into a separate substantiation problem. Confirm the cleared indication with the FDA listing and match your marketing to it.
Can a disclaimer fix a claim we cannot support?
Generally no. FTC guidance treats disclaimers and fine print as unable to cure a misleading overall message. If you cannot substantiate the claim, the workable fix is to change the claim.
Who decides whether our injectors are properly supervised?
Your state medical board and board of nursing, not a national standard. Supervision and delegation rules differ by state and by credential. Check AmSpa's state law summaries for orientation, then confirm with a licensed attorney in your state. For a state-specific lookup example, use the Medical Board of California's physician license lookup and the California Board of Registered Nursing's license verification. Review the California Business and Professions Code, the California Nurse Practice Act, and current board regulations for the clinician, task, and supervisor involved. This is a California example only, not a rule for another state or a complete delegation determination.
How often should the checklist be reopened?
Whenever a service, device, location, software system, claim or staffing model changes. A checklist reviewed only at renewal misses the change that created the exposure.
