Running a wellness business in New York means stacking several bodies of law on top of each other: state licensing rules for some services, scope-of-practice limits that apply whether you’re licensed or not, consumer protection statutes that reach every operator, data security obligations under the SHIELD Act, employment and workers’ compensation requirements, ADA accessibility standards, and the usual tax and entity rules. Wellness business compliance in New York isn’t one checklist. It’s several, and which ones apply depends on what you offer, who works for you, and how you take payment.
Start with the question of whether the state licenses what you do at all. That answer sets the tone for everything else.
Who Needs a State License
Massage therapists need a license from the New York State Education Department (NYSED) before touching a client. Under Education Law Section 7804, you must graduate from an NYSED-registered program, pass a qualifying exam, be at least 18, and show good moral character.1New York State Senate. New York Education Law 7804 – Requirements for a Professional License
Dietitians and nutritionists need certification through NYSED’s Office of the Professions under Education Law Article 157. The titles “Certified Dietitian,” “Certified Nutritionist,” and “Certified Dietitian-Nutritionist” are protected: you cannot use them in New York without the credential, which requires a qualifying degree, an exam, and at least 800 hours of supervised practice under a registered dietitian.2New York State Office of Mental Health. Dietitians Dietitian 2
Personal trainers and holistic practitioners such as energy healers or naturopathic consultants are not licensed by New York. No state law requires a trainer to hold a specific credential, though employers and liability insurers typically expect certification from a recognized body like the National Academy of Sports Medicine or the American Council on Exercise. Being unlicensed is not the same as being unregulated. The scope, advertising, consumer protection, and data rules below still apply.
Staying Inside Your Scope of Practice
Scope is where careers end quickest. New York defines massage therapy under Education Law Section 7801 as work on the muscular structure through techniques like stroking, kneading, tapping, and vibrating for therapeutic purposes.3New York State Senate. New York Education Law 7801 – Definition of Practice of Massage Therapy That authorization does not include chiropractic adjustments, physical therapy, or diagnosing medical conditions. If a client’s symptoms suggest something beyond muscle tension, refer them to a licensed healthcare provider.
Certified dietitians and nutritionists under Article 157 can assess dietary habits, build nutrition plans, and counsel clients on food choices. They cannot prescribe medication, order diagnostic tests, or diagnose. The boundary between nutrition counseling and medical nutrition therapy gets blurry in practice, and crossing it puts the certification at risk.
Personal trainers can design exercise programs. Writing rehabilitation protocols, diagnosing injuries, or telling a client to stop taking a prescribed medication is practicing medicine. Holistic practitioners offering Reiki, herbalism, or similar services need to avoid representing their work as medical treatment. The Office of Professional Discipline (OPD) investigates licensees who stray, and anyone practicing a licensed profession without authorization faces potential criminal charges.
What You Can and Cannot Say to Clients
Marketing is one of the easiest ways to generate a complaint, because every claim you publish is evidence.
Advertising Rules for Licensees
Any advertising by an NYSED-licensed professional that is false, fraudulent, deceptive, or misleading counts as professional misconduct under the Rules of the Board of Regents.4Legal Information Institute. New York Comp. Codes R. and Regs. Tit. 8 29.1 – General Provisions That reaches your website, social accounts, flyers, and business cards. “Guaranteed pain relief” or “cures all ailments” is off-limits unless substantial scientific evidence backs it up. Using credentials or titles you haven’t earned sends you straight to a disciplinary hearing.
GBL 349 Reaches Everyone
Unlicensed operators are not exempt from advertising rules. New York General Business Law Section 349 prohibits deceptive business practices across the board. A “free consultation” that is really a sales pitch, or a “limited-time offer” that runs indefinitely, can qualify as deceptive.5New York State Senate. New York General Business Law 349 – Deceptive Acts and Practices Unlawful A harmed consumer can sue for actual damages or $50, whichever is greater, and the court can treble damages up to $1,000 and award attorney’s fees if the violation was willful.
Social Media Disclosures
Posting about products you were paid or gifted to promote triggers the FTC’s endorsement rules. The disclosure must be in the post itself and hard to miss, not buried in a hashtag cluster or on a separate “About Me” page. On video, it belongs in the content, not just the description; on live streams, repeat it so late viewers see it.6Federal Trade Commission. Disclosures 101 for Social Media Influencers “#ad” and “#sponsored” work. “Sp” and “collab” do not.7eCFR. 16 CFR Part 255 – Guides Concerning Use of Endorsements and Testimonials in Advertising
Selling or Recommending Supplements
If you sell or recommend dietary supplements, the FDA allows two kinds of label claims and they are not interchangeable. Structure and function claims (such as “calcium builds strong bones” or “supports immune health”) don’t require FDA preapproval, but every product using one must carry the mandatory disclaimer that the statement has not been evaluated by the FDA and the product is not intended to diagnose, treat, cure, or prevent any disease. The manufacturer also has to notify the FDA within 30 days of first marketing.8U.S. Food and Drug Administration. Dietary Supplement Labeling Guide: Chapter VI – Claims Disease claims like “prevents heart disease” require FDA authorization. Telling a client in person or on social media that a supplement cures a condition exposes you to both FDA enforcement and GBL 349 liability.
Memberships and Auto-Renewal
Recurring billing is where many studios slip. Before you collect consent for an auto-renewing membership, New York requires clear and conspicuous disclosure of the renewal cost, the billing frequency, the cancellation deadline, and the exact cancellation method. All of this has to appear near the point of consent, not several screens away.9New York State Senate. New York General Business Law 527-A – Unlawful Practices
After the customer agrees, you have to send a confirmation they can save that restates the terms, costs, and cancellation steps. The cancellation path must be as easy as the sign-up path. If they joined online, they must be able to cancel online. Forcing a phone call during business hours or an in-person visit violates the statute, as does obstructing cancellation requests or giving false instructions.
If your operation looks like a gym or fitness center, General Business Law Article 30 adds contract length limits, cooling-off cancellation rights, and bonding or escrow obligations designed to protect customers if the business closes. Studios offering gym memberships, group fitness subscriptions, or similar recurring access should check whether they meet the statute’s definition of a health club because the obligations go beyond the general auto-renewal rules.
Protecting Client Data
Almost every wellness business in New York falls under the SHIELD Act, which requires anyone holding New Yorkers’ private information to maintain reasonable cybersecurity safeguards. “Private information” covers names paired with Social Security numbers, financial account numbers, biometric data, and email credentials, so routine intake forms and payment records qualify.10New York State Attorney General. Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) The required safeguards fall into three categories:
- Administrative: designate someone to coordinate security, train staff on data handling, and vet third-party vendors that touch your data.
- Technical: assess software and network risks, detect and respond to system failures, and test your controls regularly.
- Physical: prevent unauthorized access to records in storage or transit and properly destroy data you no longer need.
A breach triggers a notification duty to affected consumers in the most expedient time possible. Notification failures carry civil penalties of up to $20 per incident, capped at $250,000. A separate penalty of up to $5,000 per violation applies for failing to maintain reasonable safeguards in the first place, meaning you can be fined even without a breach if your program is inadequate.
HIPAA layers on top for a narrower group. If you bill health insurance, take physician referrals, or electronically transmit health information, you’re a covered entity and the Security Rule requires administrative, physical, and technical safeguards for electronic health information, including access controls, encryption in transit, and regular testing.11U.S. Department of Health and Human Services. Summary of the HIPAA Security Rule Even outside HIPAA, New York Public Health Law Section 18 gives clients a right to access their records and governs how disclosures are handled.
Hiring Help the Right Way
Contractor or Employee
Many wellness businesses lean on independent contractors: massage therapists renting space, trainers working at multiple studios, instructors paid per class. Misclassification exposes you to back taxes, overtime claims, and penalties. The U.S. Department of Labor uses an “economic reality” test that weighs control over schedule and methods and whether the worker has a genuine chance of profit or loss based on their own initiative and investment.12U.S. Department of Labor. US Department of Labor Proposes Rule Clarifying Employee, Independent Contractor Status What happens on the ground outweighs the contract label. If you set the schedule, supply the equipment, and dictate how the work gets done, the worker is probably an employee.
Overtime
Employees are entitled to overtime at 1.5 times the regular rate for hours over 40 per week unless they fit a Fair Labor Standards Act exemption. The current salary threshold for the white-collar exemption is $684 per week, or $35,568 annually, after a federal court vacated a higher proposed threshold in late 2024.13U.S. Department of Labor. Fact Sheet 17D: Exemption for Professional Employees Under the FLSA A studio director earning less than that is owed overtime regardless of title. Salary alone isn’t enough: the duties also have to fit a recognized exemption.
Workers’ Compensation
Every for-profit business in New York with employees must carry workers’ compensation insurance. The Workers’ Compensation Board treats anyone under your direct control as your employee for this purpose, even if you issue a 1099. Operating without coverage draws fines of up to $2,000 for every 10 days uninsured. With more than five employees it’s a felony; with five or fewer it’s a misdemeanor.14New York Workers’ Compensation Board. What Business Owners Must Know About Workers’ Compensation On top of the fines, uninsured owners are personally liable for lost wages and medical costs when an employee is hurt.
Making the Space Accessible
Wellness facilities open to the public have to meet the Americans with Disabilities Act. Doorways need a clear width of at least 32 inches, ramps cannot exceed a 1:12 slope, and accessible restrooms need a 60-inch turning space and properly placed grab bars.15U.S. Access Board. Americans with Disabilities Act Accessibility Standards These standards govern new construction and significant renovations; older facilities are expected to remove barriers where it’s readily achievable.
Service animals must be allowed anywhere the public is allowed. Only dogs trained to perform specific tasks for a person with a disability qualify. Emotional support animals do not. When the task isn’t obvious, staff may ask two questions and only two: is the dog a service animal required because of a disability, and what task has it been trained to perform. You cannot ask about the disability, demand documentation, or exclude the dog because another client is allergic or afraid.16U.S. Department of Justice. ADA Requirements: Service Animals A service animal can be removed only if it’s out of control and the handler won’t correct it, or if it isn’t housebroken.
Setting Up the Business and Paying Tax
Most wellness professionals moving past solo practice form a limited liability company. Articles of organization filed with the Department of State cost $200. New York then requires newly formed LLCs to publish a formation notice in two newspapers designated by the county clerk for six consecutive weeks and file a certificate of publication for another $50.17New York Department of State. Forming a Limited Liability Company in New York Newspaper rates vary sharply by county; publication in New York City can run well over $1,000. Miss the 120-day window and your LLC’s authority to do business is suspended.
Sole proprietors and independent contractors owe federal self-employment tax of 15.3% on net earnings (12.4% Social Security and 2.9% Medicare) once net income passes $400 per year.18Internal Revenue Service. Self-Employment Tax (Social Security and Medicare Taxes) That’s on top of income tax, and it catches first-time owners off guard.
If your business pays an independent contractor $2,000 or more during 2026, you must issue Form 1099-NEC. That threshold rose from $600 for tax years beginning after 2025.19Internal Revenue Service. Publication 1099 General Instructions for Certain Information Returns Equipment, continuing education, space rental, and professional liability premiums are typically deductible.
What Enforcement Looks Like
The OPD takes complaints against NYSED-licensed providers. Anyone can file. A substantiated complaint can produce an administrative warning for a minor issue or escalate through censure, probation, suspension, or permanent revocation for serious misconduct. Practicing beyond your authorized scope, fraudulent advertising, and breaching confidentiality all qualify.20New York State Senate. New York Education Law 6510 – Proceedings in Cases of Professional Misconduct
Unlicensed operators are not out of reach. GBL 349 allows private lawsuits with statutory damages, treble damages up to $1,000 for willful violations, and attorney’s fees for the prevailing consumer, and the attorney general can seek injunctive relief and restitution separately. SHIELD Act exposure runs up to $250,000 for notification failures and $5,000 per violation for inadequate safeguards. Workers’ compensation violations add up to $2,000 every 10 days plus potential criminal charges. Repeat conduct or intentional fraud can be prosecuted criminally, especially where clients were harmed physically or financially.