New Jersey Medical Spa Laws: Supervision, Lasers, and Penalties

New Jersey medical spa regulations treat these businesses as medical practices rather than salons, which means they fall under the State Board of Medical Examiners and the same statute that governs physicians’ offices. Any method of treating a human ailment, disease, pain, injury, deformity, or physical condition counts as practicing medicine under state law,¹ and injectables, lasers, and body contouring all fit that definition. The practical consequences cover ownership, staffing, supervision, patient evaluations, advertising, and recordkeeping, with civil penalties reaching $10,000 for a first violation and $20,000 for each one after.²

What Services Trigger Medical Oversight

The dividing line in New Jersey runs through the skin. A skin care specialty shop license covers waxing, eyelash extensions, conventional makeup, and surface facials. Anything using devices or substances that affect the living cells beneath the outermost layer of skin is explicitly prohibited under the cosmetology statute and requires medical credentials instead.³

Botulinum toxin and dermal fillers qualify because they involve prescription medications injected into tissue. Laser hair removal, intense pulsed light treatments for pigmentation or vascular concerns, infrared devices, microneedling, body contouring, and platelet-rich plasma procedures all land on the medical side as well. If the service goes below the surface or uses a prescription product, it belongs in a medical practice.

Who Can Own a New Jersey Medical Spa

Ownership is where many entrepreneurs run into trouble. A medical spa must be owned solely by one or more licensed health care professionals.⁴ If the business is structured as a partnership, professional association, or LLC, every partner, member, or shareholder has to be licensed to render the same or a closely allied health care service in New Jersey.

“Closely allied” ties back to the Professional Service Corporation Act and reaches professions licensed by the state boards under the Division of Consumer Affairs, including medicine, nursing, dentistry, and podiatry. In practice, though, the clinical supervision at a spa performing aesthetic procedures must come from a practitioner with an equal or plenary medical license, so a physician (M.D. or D.O.) needs to be in the ownership structure. A general business investor, a non-clinical entrepreneur, or an esthetician cannot hold a stake. Splitting professional fees with unlicensed individuals is prohibited, and the Board enforces that rule.

Who Can Perform Which Procedures

Credentials determine scope, and the hierarchy is specific.

Physicians have the broadest authority. An M.D. or D.O. can perform any aesthetic medical procedure, prescribe medications, and delegate specific tasks to qualified staff.
Physician assistants can perform medical services their supervising physician delegates, including injections, administering medications, and procedures listed in a signed delegation agreement. The agreement defines the boundary.⁵
Advanced practice nurses still work under collaborative arrangements with physicians for cosmetic treatments. The 2026 legislation expanding independent APN practice applies to primary and behavioral health care and does not reach aesthetic procedures.⁶
Registered nurses can carry out specific treatments at a physician’s direction after completing training on the particular device or medication. They cannot independently evaluate patients or create treatment plans.
Estheticians cannot perform any procedure that penetrates or affects cells below the outermost skin layer. Botox, fillers, laser hair removal, microneedling, body contouring, and PRP facials are all off-limits.³

Device-specific and medication-specific training is required before anyone performs a new procedure. A nurse trained on one type of laser is not automatically cleared on another.

Medical Director Supervision and Delegation

Every medical spa needs a designated medical director, a physician who takes legal responsibility for clinical operations. The director does not have to perform every procedure personally, but delegation has to be documented and verified.

When a physician delegates to a PA, the scope must be spelled out in a written delegation agreement, and any procedures outside the PA’s default scope must be specifically authorized.⁵ The physician has to verify the person performing the procedure has the right training and is competent with that specific treatment. “They’re a nurse, so they can handle it” is not an adequate framework.

Availability requirements depend on the procedure. Some tasks require the physician to be physically present. For others, the physician must be reachable by reliable voice communication so they can give real-time guidance if something goes wrong. The physician remains accountable for complications either way, which is why most medical directors maintain detailed protocols for each treatment type.

Rules for Lasers and Light-Based Devices

The application of lasers, intense pulsed light, and infrared devices to the body counts as medical practice, and the rules here are tighter than general delegation.

A physician may direct a registered nurse or PA to perform laser hair removal, IPL, or infrared treatments, but only after that professional completes approved continuing education on the specific device type. The training must cover indications, contraindications, potential complications, laser safety, and proper equipment cleaning.

Before any course of laser treatment starts, a physician must take a medical history, perform a physical exam, and develop a treatment plan with the estimated number of sessions. A nurse or PA can conduct the history and exam, but the physician has to personally review those findings and examine the treatment area before the first session. The physician must also assess the patient’s progress once the series concludes.

During treatment, either the physician or another licensed health care provider must be on-site. If the physician is not physically present, voice communication has to be available. A spa cannot schedule laser appointments on days when no medical professional is in the building.

The Required Patient Evaluation

Before any cosmetic medical treatment, the patient needs an in-person evaluation by someone qualified to decide whether the procedure is safe and appropriate. This “good faith examination” has to include a review of medical history, an assessment of current health, and a discussion of risks. A physician, nurse practitioner, or PA can conduct it. It cannot be skipped or handed to someone without prescriptive authority.

The evaluation also serves a legal function: it establishes the provider-patient relationship that must exist before any medical intervention. The examiner has to document a specific treatment plan in the chart before the procedure is delegated to another staff member. Running patients through treatments without a documented evaluation is the kind of shortcut that triggers Board scrutiny.

For procedures involving prescription products like botulinum toxin or dermal fillers, the evaluation also determines whether the prescription is clinically appropriate. Writing a prescription without a proper exam, or letting someone without prescriptive authority direct these treatments, violates fundamental medical practice standards.

Advertising Rules That Catch Spa Owners Off Guard

Advertising by a medical licensee that contains any false, fraudulent, misleading, or deceptive statement is professional misconduct under Board regulations.⁷ Several specific prohibitions apply to medical spas:

Guaranteeing a specific outcome from any procedure is prohibited.
Claiming your services or materials are “superior” to what is ordinarily available in the profession, without substantiation, violates the rules.
Patient testimonials about a specific procedure must truthfully reflect the patient’s actual experience and must carry conspicuous disclaimers that the procedure may not be suitable for every patient and that risks should be discussed with the physician.
If a person giving a testimonial received any compensation, that must be conspicuously disclosed using the specific language “Compensation has been provided for this testimonial.”⁷
Sharing any fact, data, or information that could personally identify a patient requires advance signed written permission.
Paying or accepting fees for patient referrals is prohibited.

Testimonial documentation must be kept for at least three years from the last use of the advertisement. These rules apply to social media posts and website content the same way they apply to traditional advertising.

Federal rules sit on top of all of this. The FTC Act prohibits unfair or deceptive advertising, and Section 12 specifically reaches false advertising for drugs, devices, services, and cosmetics.⁸ For spas using influencer marketing or paid endorsements, the FTC requires clear disclosure of any material connection between the business and the endorser.⁹ Burying “#ad” at the end of a long caption does not meet that standard.

Records and HIPAA Compliance

Patient records at a medical spa are medical records. Individual charts have to be retained for at least 10 years after the most recent discharge, or until the patient reaches age 23, whichever is later.¹⁰ Before-and-after photos, treatment plans, consent forms, and visit notes all fall inside that window.

Because spas collect health information and often communicate about it electronically, they have to comply with HIPAA. Clinical photos should not live on staff phones or move through consumer messaging apps. Patient records need encryption, role-based access controls, and audit logs. Any third-party vendor that handles patient data, including scheduling platforms, payment processors, and marketing tools, needs a Business Associate Agreement describing how it protects that information.

Staff access should follow the minimum-necessary standard. Each employee gets access only to the patient information their role requires, and individual logins with role-based permissions should replace shared credentials.

Penalties and Enforcement

The State Board of Medical Examiners has broad investigative powers over medical spas. It can require written statements under oath, examine practitioners, inspect premises, review records, and impound documents to preserve evidence.² Inspections can happen without notice and verify everything from medication storage to whether the medical director is actually reachable while procedures are happening.

Under the Uniform Enforcement Act, conduct that violates the Board’s regulations carries a civil penalty of up to $10,000 for a first violation and up to $20,000 for each subsequent violation.² The Board can also order practitioners to cease and desist, suspend or revoke licenses, and require skills assessments.

Enforcement is not theoretical. In 2024, the Division of Consumer Affairs settled with the owner of a Passaic County skin care spa for $10,000 in civil penalties and imposed a 10-year ban on operating a skin care specialty spa, after finding the facility had been providing invasive aesthetic treatments only licensed medical professionals can legally perform.³ The Division has said publicly it will keep investigating anyone providing aesthetic services they are not licensed or qualified to perform.

1
Justia. New Jersey Code 45:9-5.1 – Practice of Medicine or Surgery Defined
2
New Jersey Division of Consumer Affairs. New Jersey Uniform Enforcement Act
3
New Jersey Division of Consumer Affairs. New Jersey Division of Consumer Affairs – Press Release
4
Cornell Law School. N.J. Admin. Code 13:35-6.16 – Professional Practice Structure
5
Cornell Law School. N.J. Admin. Code 13:35-2B.4 – Scope of Practice
6
State of New Jersey. Governor Sherrill Signs Legislation Eliminating Practice Requirements
7
Cornell Law School. N.J. Admin. Code 13:35-6.10 – Advertising and Solicitation Practices
8
Federal Trade Commission. Health Products Compliance Guidance
9
Federal Trade Commission. Endorsements, Influencers, and Reviews
10
State of New Jersey. State of New Jersey Records Retention Schedule