Federal regulators have intensified oversight of medical spas after years of treating the sector as a low-priority target. A recent indictment in Utah and a Department of Justice referral involving a major telehealth company indicate that the luxury aesthetic industry now faces the same scrutiny as traditional healthcare providers.
The Utah case that changed enforcement
A Utah grand jury indicted a licensed physician in April 2026 for allegedly distributing unapproved peptides across state lines. The products, including Semaglutide and Tirzepatide, were sourced from China and sold to patients. This case represents one of the first federal actions targeting the medspa supply chain for unapproved drugs.
Earlier in February, telehealth provider Hims and Hers received a DOJ referral for potential violations of the Federal Food, Drug, and Cosmetic Act. These developments show agencies moving from discretionary oversight to active enforcement.
Four compliance risks medspas frequently ignore
Attorneys advising medspa owners or investors warn that many operators mistakenly believe they operate in a regulatory gray area. That belief is now proving expensive. Four areas, in particular, are attracting regulatory attention.
The sterile compounding risk
Preparing intravenous hydration therapies or peptides on-site can classify a medspa as an unlicensed pharmacy. Pharmacy boards in California, Ohio, and Kentucky have determined that mixing IV bags qualifies as sterile compounding, requiring strict permits and compliance with USP Chapter <797> standards. These include ISO-certified air environments and stability testing.
Related: New Tool Tracks Financial Consumer Harm
Facilities should obtain premixed products from authorized 503A pharmacies or 503B outsourcing facilities. Mixing outside a sterile hood raises the risk of adulteration or misbranding, which can result in felony charges.
Standing orders and oversight gaps
Some medspas operate like upscale spas, allowing patients to choose treatments without direct physician involvement. This model often uses standing orders, where a prescriber authorizes treatments in advance, enabling non-prescribers to administer them without further review.
Regulators are rejecting this approach. Each patient must undergo a documented, individualized exam by a licensed prescriber before receiving any drugs or fluids. Nurses cannot independently diagnose or prescribe, and boards in Arizona and Mississippi are addressing what they describe as scope creep.
Nominal medical directorships
Some medspas employ physicians as medical directors in title only, essentially renting their licenses to bypass oversight. These arrangements often include blanket authorizations allowing non-prescribers to dispense drugs without proper supervision.
Legal advisors should examine whether a medical director agreement functions as intended. The critical question is not whether such an agreement exists but whether it works in practice.
Marketing violations and trademark issues
Aggressive promotion of compounded GLP-1 weight-loss drugs has created significant legal exposure. Some clinics market their products as generic Ozempic or suggest FDA approval, drawing lawsuits from branded drug manufacturers and investigations from state attorneys general in Ohio and Connecticut.
Related: Lawyers Face New Litigation Tax Rule
These cases involve more than false advertising. They address whether medspas mislead patients about treatment safety and legitimacy. The FDA has stated that unapproved peptides are not equivalent to approved drugs, and misrepresenting them can lead to civil and criminal liability.
DOJ’s updated compliance standards
The Department of Justice now treats healthcare compliance as essential in mergers and acquisitions. In March 2026, the DOJ introduced a Corporate Enforcement Policy offering a safe harbor to acquiring companies that disclose misconduct within six months of closing. The policy reflects a shift toward expecting proactive due diligence rather than relying on a target’s assurances.
The change is not hypothetical. DOJ’s False Claims Act recoveries reached $6.8 billion in 2025, with medspas now part of that enforcement focus. The FBI, FDA, and FTC are coordinating efforts, using data analytics to detect fraud patterns in the aesthetic sector.
The Utah indictment and Hims and Hers referral signal a market shift. The regulatory gray area many medspas assumed they occupied was never legally protected—it was merely a period of limited enforcement. That period has ended.
Operators must now address risks in business law to avoid costly violations.
Leave a Reply