Med spa regulation is a patchwork, but it’s tightening fast. States are increasingly focused on who can hold the needle, who can operate the energy device, and what a medical director is allowed to delegate.
A few recent examples:
- Rhode Island passed its Medical Spas Safety Act in 2025
- Colorado, Texas, and New York have all moved on scope-of-practice and consumer-protection bills in the same window
What almost no state regulates yet is the facility itself, the way a hospital or an ambulatory surgery center is regulated as its own licensed entity.
That could be the next shift, and it’s worth getting ahead of.
What QUAD A’s CEO Told Us
We spoke directly with Tom Terranova, CEO of QUAD A (formerly AAAASF, the American Association for Accreditation of Ambulatory Surgery Facilities), the physician-founded nonprofit that has set outpatient safety and quality standards since 1980.
Here’s what he told us:
- He’s seen draft legislation in two states that would require facility-level accreditation for med spas
- He expects more states to follow
- He draws a direct comparison to how ambulatory surgery centers were pulled into accreditation over the past two decades
That’s his read on where the industry is headed, not a confirmed mandate anywhere yet. But it lines up with everything else moving in this space right now. It’s exactly the kind of shift a practice does not want to be caught flat-footed by.
The practices that build real compliance discipline now will be ready if and when that happens. The ones that wait will be retrofitting it under a deadline, with a lot more on the line.
This is exactly the gap our Med Spa Consulting work is built to close, with compliance as one of its core pillars, not a side offering.
You can read more about the full Med Spa Consulting engagement here.
Watch the full interview below:
Why Compliance Is Harder Than It Looks
Most owners assume compliance means a binder of policies sitting in a drawer somewhere. It doesn’t.
Terranova put it plainly: a consultant who hands over a polished policy binder and walks away is setting a practice up for failure.
When a surveyor asks a front desk staffer how they’d respond to an emergency, and that staffer has never rehearsed it, the response takes twenty minutes instead of two. That’s not compliance. That’s a false sense of security.
Real compliance means:
- Staff who can execute protocols under pressure, not just read about them
- Delegation and supervision structures that match your state’s actual rules
- SOPs that are lived daily, not laminated and forgotten
That last point is the one practices underestimate most. The standards themselves aren’t complicated. QUAD A publishes them openly, and Terranova was blunt about it: if you can fog a mirror, you can read the standards.
The hard part is the discipline to follow them every single day, regardless of which provider is on duty.
What We Actually Do
Compliance work is built into our Med Spa Consulting engagements, around the same principle Terranova described as the difference between real preparation and a false sense of security: knowledge transfer, not paperwork.
That looks like:
- State-specific guidance on delegation rules, supervision requirements, and what your medical director can and can’t hand off
- SOP structures built to protect your license, your providers, and your practice, not just check a box
- Operational discipline that holds up when someone unfamiliar walks in and asks hard questions, whether that’s a surveyor, a regulator, or a plaintiff’s attorney
We’re not handing you a binder. We’re making sure your team can perform under the exact kind of scrutiny Terranova described, calmly and without cramming.
Why This Is Worth Getting Ahead Of
Terranova was careful about how much he could share, but he was direct on one point: he’s seen draft legislation in two states already.
He expects more to follow the same path surgical facilities went down. In that scenario, a state effectively says “go get accredited,” because it doesn’t have the resources to write and enforce facility-level rules itself.
That’s not a law on the books today. It’s an informed prediction from someone who runs the organization states would likely point to if it happens.
Whether or not accreditation itself becomes mandatory, the underlying trend is not in question: delegation, supervision, and documentation standards for med spas are getting stricter across the board, not looser.
The practices building that discipline now are the ones that will absorb whatever comes next without disruption.
The ones waiting for a law to force their hand will be doing it under a deadline, with patients, staff, and their license on the line.
If you want to know where your practice actually stands on delegation, supervision, and SOP structure before a regulator asks, that’s part of the conversation we have inside a Med Spa Consulting engagement.
