What Indiana’s new medical spa law changes for aesthetic practices

Quick summary

• Indiana enacted Senate Bill 282 in 2026. Most of its provisions took effect on July 1, 2026, and medical spa registration with the state medical licensing board begins January 1, 2027.
• The law defines a medical spa by what it does, not by what it calls itself. Facilities that deliver prescription drugs by injection or infusion and market cosmetic or wellness services fall inside the definition.
• Every registered facility must name a responsible practitioner who holds prescriptive authority, and that person carries accountability for who works there and what they are trained to do.
• Serious adverse events must be reported to the board within a defined window, and services must generally be delivered at the registered location.
• Indiana is not an outlier. It is part of a wider shift toward treating med spas as regulated clinical facilities rather than retail businesses.

What the law is and where it came from

Senate Bill 282 moved through the Indiana General Assembly during the 2026 session and was signed into law in March 2026. It addresses two connected subjects, drug compounding and the registration of medical spas, and it is the medical spa portion that has drawn most attention from practices across the country.

The context matters. Aesthetic medicine grew for years inside a structure built for something else. A facility could open, hire injectors, buy devices, and market aggressively without ever appearing on a regulator’s map as a place where prescription medicine is administered. States are now closing that gap, and Indiana’s approach is one of the clearer templates for how they are doing it.

How the law defines a medical spa

This is the section practices should read first, because the definition is functional rather than cosmetic.

Under the law, a facility falls within scope when it provides medical health care services involving prescription drugs delivered intravenously, intramuscularly, or subcutaneously, and markets itself around cosmetic or lifestyle treatments. The examples named in the legislation include weight loss services, wellness offerings, botulinum toxin injections, hair loss treatment, hormone therapies, and laser procedures.

Two consequences follow.

First, branding does not decide the outcome. A business calling itself a wellness studio, a longevity clinic, or an IV bar can still meet the definition if it is injecting prescription products and advertising aesthetic or lifestyle results.

Second, the current wave of injectable wellness services sits squarely inside the frame. Practices that added peptide protocols, hormone services, or weight management injections alongside their aesthetic menu should assume they are covered rather than assume they are not.

What registration actually requires

Registration opens January 1, 2027, with the state medical licensing board directed to establish the procedures beforehand. The application is not a formality. It asks a facility to describe itself in a way that creates a public record.

Applications call for:

• Business and legal names, including names the facility trades under
• Physical address and website address
• The medical services the facility intends to provide
• Whether compounding will take place on site, with compounding defined broadly to include combining, admixing, mixing, diluting, pooling, reconstituting, or otherwise altering a drug
• The responsible practitioner’s name and license number

The compounding disclosure deserves attention. Reconstituting a lyophilized product or diluting a concentrate is routine in aesthetic practice, and under the definition used here those activities are not invisible administrative steps. Practices should be able to describe accurately what they do and where it happens.

The responsible practitioner and why the role is the heart of the law

Each registered medical spa must designate a practitioner who holds prescriptive authority and appropriate training. In practice this means a physician, nurse practitioner, or physician assistant, depending on state licensure and collaborative arrangements.

The duties attached to that designation are broader than a signature on a document. The named practitioner is expected to maintain a level of presence sufficient to ensure the facility operates in compliance, and to verify that everyone delivering services holds the appropriate license and training for what they actually do.

Two points come up repeatedly when practices work through this.

There is no published minimum number of on-site hours

The law does not convert supervision into a timesheet. It anchors the obligation in accountability, which means the standard of care and the practitioner’s own professional judgment determine what adequate oversight looks like for that facility, that treatment menu, and that team.

For practices that have relied on a remote medical director who has never seen the treatment rooms, this is the provision that changes the arrangement.

Outsourcing the role does not outsource the exposure

Medical director services are widely available as a contracted product. Contracting for one does not transfer regulatory responsibility away from the facility, and it does not insulate the named practitioner from accountability for what happens under their designation.

Good faith examinations and delegation

The requirement that gets most attention in staff meetings is the good faith examination.

Under this framework, the examination that establishes a patient can safely receive a treatment must be performed by a prescriber. That means a physician, osteopathic physician, nurse practitioner, or physician assistant. It is not a task that can be delegated downward to staff without prescriptive authority.

Delegation of the treatment itself follows the same logic. Before assigning a procedure, the responsible practitioner needs a genuine basis for believing the person performing it knows how to do it and can recognize and respond to a complication. That applies equally to injectables, laser treatments, radiofrequency devices, and other medical aesthetic procedures.

The practical effect is that a boundary which used to be assumed now has to be explicit and documented. Whatever the internal workflow of a practice looks like, the examination that clears a patient sits with a prescriber, and the assignment of a procedure has to rest on a real basis for believing the person performing it is trained for it.

Adverse event reporting and location restrictions

Two operational provisions round out the picture.

Serious adverse events must be reported to the board within fifteen days. The trigger is an event resulting in hospitalization, a life threatening condition, or death. This creates something the sector has largely lacked, which is a formal reporting channel that generates data regulators can see.

Services must be delivered at the registered location. Exceptions exist for educational purposes, but the general rule constrains the mobile and in-home models that expanded quickly in recent years. A residence used as a treatment site would need to be registered as such.

Facilities also remain subject to Indiana’s existing requirements on health care advertising, which is a reminder that marketing claims sit inside the same compliance perimeter as clinical practice.

What still has to be filled in

Some of the most operationally significant details were left to rulemaking rather than written into the statute. Fee structures, the mechanics of the registration process, penalty schedules, and the exact form of adverse event reporting are being developed by the board, with procedures due to be established ahead of the January 2027 opening.

Practices should treat published summaries, including this one, as an orientation rather than a compliance plan, and confirm current requirements with the board and with counsel licensed in Indiana before making structural decisions.

Why this matters outside Indiana

A single state law would not deserve national attention if it were an isolated event. It is not.

Similar facility registration or licensure proposals have appeared in other states, and the direction of travel is consistent. Regulators are converging on a small set of ideas: that a facility administering prescription medicine should be visible to the state, that a named clinician should be accountable for it, that the examination clearing a patient should be performed by someone with prescriptive authority, and that serious harm should be reported.

This also changes what a practice has to be able to demonstrate. Documentation discipline, a clear record of who is trained for what, accurate scope of practice knowledge, and the ability to explain to a patient why a prescriber must see them first are becoming operational necessities rather than nice extras.

Practices that already run this way will find registration a paperwork exercise. Practices that do not will find it a restructuring.

Sources and references

• Indiana General Assembly. Senate Bill 282, compounding drugs and registration of medical spas, 2026 session.
• Indiana Medical Licensing Board. Registration procedures for medical spas.
• American Med Spa Association. Analysis of Indiana Senate Bill 282 and state medical spa regulation.

Disclaimer: This content is for educational purposes only and does not constitute medical advice, legal advice, or professional guidance.