What Physician Supervision Legally Requires in a Med Spa

What does physician supervision or delegation actually require in practice?

Supervision isn't a doctor hovering in the treatment room. It's a documented chain of clinical responsibility, and every link in it has to be genuine, because the authority to break someone's skin barrier starts with a license and reaches you only by delegation. When a regulator opens the file, they aren't reading the contract, they're checking whether the physician was actually reachable and actually involved.

Source of authority: A cosmetic procedure that breaks the skin is generally the practice of medicine.
Conditions on delegation: The physician must be qualified in it, judge you competent, and stay reachable.
Supervision tier: State law sets direct, immediately available, or general; most medical spas run general.
Good faith exam: A licensed prescriber assesses the patient and authorizes the plan before anyone treats.
The paper trail: Signed protocols, a competency file, an emergency plan, a chart entry naming who treated.

The Throughline

A supervision arrangement that can't produce protocols, examination records, and evidence of reachability is treated as no supervision at all, which converts every treatment performed under it into unlicensed practice of medicine for the delegate and aiding that practice for the physician.

What is the difference between direct on-site supervision, immediate availability, and general or indirect supervision?

Strip the labels away and all three tiers answer one question: how fast can the physician be at the patient's side if something goes wrong. That's the entire distinction, and the tier you work under isn't a business decision you get to make. Your state statute and board rule set it, and it commonly shifts by procedure and by who's holding the device.

Direct or personal supervision: The physician is physically present on the premises and able to intervene immediately.

Some states go further and require presence in the treatment room for specific high-risk procedures.

Immediate or on-premises availability: In the building, or close enough to arrive inside a short defined window.

They also can't be tied up in something they aren't free to walk away from.

General or indirect supervision: Reachable by phone or electronic means, with prior authorization already given.

A clinic can run a full treatment day with no physician in the building, provided the protocols, the prior exam, and the reachability are all real.

What the Rules Say

Regulators test the supervision tier by asking where the physician was, pulling phone records and calendars, and asking the delegate who they'd have called, so a physician who was in surgery, on a plane, or several hours away has failed even a general supervision standard, because unreachable isn't a tier.

Who holds the legal authority to delegate a medical procedure, and can that authority be passed further down the chain?

Most people assume whoever signs the checks decides who does what. Authority to delegate flows from a license, never from a job title or an ownership stake, and in the many states enforcing the corporate practice of medicine doctrine a lay-owned entity can't employ physicians or control medical judgment at all.

Delegator's own competence: You can't hand off a procedure you couldn't perform and couldn't evaluate.
Verified delegate: Competency is checked by the delegator for that task, not assumed from a certificate.
Reserved acts: Assessment, diagnosis, prescribing, and the initial plan are commonly non-delegable.
Re-delegation: Several states bar passing a delegated task on without the delegator's express permission.

Compliance Note

The delegating clinician keeps accountability for the delegation because the judgment about who is competent isn't transferable, which is why the defense collapses when an owner rather than the supervising physician is shown to have assigned the treatments.

What does a good faith examination involve, and does it have to happen before every single treatment?

The good faith exam is the clinical event that turns a cosmetic request into an authorized treatment plan, and it's the requirement skipped most often. A licensed prescriber has to take the history, review medications, allergies and prior procedures, examine the treatment area, rule out contraindications like active infection, recent isotretinoin, keloid tendency or unstable skin disease, and then authorize a specific plan with parameters and limits. A consent form and a questionnaire filled in at the front desk aren't an examination, and unlicensed staff can't supply one.

Before the first treatment: A licensed prescriber assesses in person or, where the state permits it, by real-time video.

Whenever something changes: A new modality, a different area, more depth or intensity, a new medication, or an adverse reaction triggers a fresh exam.

When nothing has changed: Many practices set an internal cadence, commonly annual, so the authorization doesn't go stale.

Regulatory Reality

A single examination at the front of an open-ended series can't authorize years of treatments, and without a valid exam the treatment is unauthorized and the delegation has no foundation, leaving both the treating staff member and the physician exposed regardless of how well the procedure went.

What written protocols or standing orders does a supervising physician need to put in place before anyone treats a patient?

Protocols are what make a delegation auditable, and one that could apply to any clinic in the country is usually the sign nobody thought it through. Build them in this order and the file holds up when an investigator asks to see it.

Name the specifics: Identify the exact procedure and device, plus patient selection criteria and absolute and relative contraindications.
Set the authority: State who may perform it and under which supervision tier.
Fix the parameters: Define depth ranges, passes, endpoints, treatment intervals, and the areas that are off limits.
Draw the stop line: Spell out when the delegate must call the physician first and when they must stop treating outright.
Plan the emergency: Cover complication recognition and management, the escalation path with names and numbers, in-date medications physically on site, and the transfer plan.
Sign and review: Date the signature, review on a stated cycle, and re-sign after any device, technique, or staffing change.

Pro Tip

A vendor template adopted unchanged isn't the medical judgment the delegation depends on, so every protocol needs the supervising physician's dated signature alongside a delegate file holding the license or certification, documented device-specific training, and an observed competency sign-off.

How is legal liability divided between the supervising physician and the person actually holding the device?

Here's what people get wrong when they take a job under somebody else's license: liability doesn't split cleanly, it attaches to everyone at once for different reasons. Being supervised on paper won't move your exposure onto the physician, and the physician's agreement won't move theirs onto you.

Exposure	Supervising physician	Person performing the treatment
Civil claims	Vicarious liability plus direct negligent delegation	Personal liability for own technique and judgment
Board discipline	License at risk even with no patient harm	License or certificate at risk on the same facts
Documented failures	Weak protocols, no competency check, unavailable	Treating outside parameters or without authorization
Insurance	Coverage written around authorized services	Out-of-scope work can put coverage in question

Critical Warning

Indemnification clauses in a medical director agreement can shift money between the parties after the fact but can't shift regulatory responsibility, and a finding that the treatment fell outside the delegate's lawful scope can void professional liability coverage and turn a defensible claim into a personal, uninsured one.

What documentation has to exist to prove that supervision genuinely happened?

Supervision you can't evidence is, for regulatory purposes, supervision that didn't happen. The chart carries most of the weight, and the gaps that do the real damage are never the exotic ones.

Treatment entry: Who performed it and their credential, the authorizing prescriber, device, settings, areas, endpoints, consent, aftercare.
Authorization file: The good faith exam note, the protocol in force on that date, the delegate's competency file.
Proof of availability: A call log, a named supervising clinician of the day, a schedule, or escalation threads.
Review cadence: Chart reviews dated and initialed as they happen, never back-signed in a batch before an inspection.

Critical Insight

The gaps that cause the most damage are charts that don't say who performed the treatment, an examination that exists only as a signed consent form, and a protocol dated years before the device it supposedly governs was purchased.

How many providers or locations can a single supervising physician realistically oversee?

There's no single national number, and the question really splits in two: what the rules permit, and what one physician can actually do. Wide arrangements fail on the second half, because a physician covering a dozen locations across a metro area can't be immediately available to all of them, can't review charts at any meaningful cadence, and has usually never watched most of the delegates perform the procedure.

Your state sets a numeric ratio: Count your delegates and sites against it, and treat any travel radius or response time as a hard cap.

Your state sets no number: Adequacy is the standard, judged on availability, chart review, and whether the physician has observed each delegate.

Your medical director leaves or goes on vacation: Name a covering prescriber in advance with the same authority and access to the protocols.

Code Requirement

On the day a medical director agreement lapses every subsequent treatment is unsupervised, so a departure is a stop-work event rather than a paperwork item, and coverage has to survive vacation, illness, and resignation.

How are medical director agreements typically structured and what do they cost?

The agreement is a governance document, not a receipt, and the ones that fail in front of a regulator are always the short ones. Retainers swing widely with market, scope, and the number of delegates and sites, so the useful question isn't the number, it's whether that number could buy the hours the agreement promises.

Scope: Names the specific procedures and devices covered, the supervision tier, and expected availability.
Physician duties: Good faith exams, protocol authorship and annual review, competency checks, chart review at a stated frequency.
Compensation: A flat retainer or hourly rate set at fair market value for the work actually performed.
Termination: Notice, custody of records, pending patients, and a hard stop on delegated procedures.

The Cost Reality

Tying a medical director's pay to clinic revenue, treatment volume, or a percentage of collections runs into state fee-splitting prohibitions and, where federal healthcare program business is involved, anti-kickback exposure, which is why defensible agreements use a flat fair-market retainer.

What are the warning signs of a supervision arrangement that exists only on paper?

If you're the one holding the device, you're the person a paper arrangement endangers most, because practicing beyond a license is charged against whoever performed the act. These arrangements have a recognizable profile, and you can usually spot it within a week of starting.

The reachability test: Nobody on the floor can name the supervising physician without checking a wall certificate.

They've never spoken with them and wouldn't know what number to call mid-treatment.

The document set: No written protocols, no competency sign-offs, no chart review, no record of the physician on site.

Generic vendor-supplied templates left unsigned are the standard finding in enforcement actions.

The intake pattern: The client fills in a form, pays, and is treated the same day with no prescriber assessing them.

Treatment parameters get decided by the front desk or by whatever the client asks for.

The Real Risk

A nominal arrangement doesn't shield the employee, so the correct response is to stop performing the delegated procedure, ask in writing for the protocol, the examination record, and the supervising physician's contact details, and verify the requirements directly with the state boards rather than accepting an employer's assurance.

Written by Daniel Zengel

Medical Writer

Daniel Zengel is the principal owner of H-SHOT and H-Shot Training, a medical writer covering platelet-rich plasma and hair restoration. He draws on more than a decade in pharmaceutical and medical device roles, with a focus on regenerative medicine and the device standards and provider training that make PRP results consistent from clinic to clinic.