Postoperative Cosmetic Care Is the Next Med Spa Enforcement Gap: Federal and Florida Exposure Providers Should Understand Now

Maryland just tried to define who is allowed to provide postoperative cosmetic care. The bill did not pass, but it put the problem on the record. State analysts admitted in writing that these services are not directly regulated under current law. That gap is where criminal exposure lives. When no one is certain which license covers a service, the person performing it absorbs the risk.

When no one is certain which license covers a service, the person performing it is the one who absorbs the risk.

Key takeaways

• Maryland HB1263 documented that postoperative cosmetic and body-altering services by nonphysician practitioners are not directly regulated, a gap that exists in many states.
• Operating in that gap can support unlicensed practice charges under Florida law, including Fla. Stat. § 458.327 (unlicensed practice of medicine, a felony) and § 456.065.
• Federal exposure follows when cosmetic recovery operations bill federal payors or cross state lines: 18 U.S.C. § 1347 (healthcare fraud) and § 1349 (conspiracy).
• The Anti-Kickback Statute, 42 U.S.C. § 1320a-7b, applies whenever surgeons and recovery providers exchange referrals for anything of value.
• South Florida is one of the most active federal healthcare enforcement districts in the country, and med spa models are squarely on the radar.

What Actually Happened in Maryland

Maryland HB1263 proposed a Workgroup on Postoperative Cosmetic Care. It was first read on February 12, 2026, passed the House, and was referred to the Senate Finance Committee, where the last recorded action was a hearing on March 24, 2026. It did not advance.

The detail that matters is in the fiscal note. Maryland has 20 health occupations boards, and the Department of Legislative Services stated that postoperative cosmetic and body-altering services provided by nonphysician practitioners are not directly regulated under current law. Support testimony then listed the actual services people are performing: post-liposuction bodywork, lymphatic drainage after cosmetic surgery, specialized wound care, post-surgical edema management, and fibrotic tissue management. Witnesses said these services did not fit cleanly within existing massage, nursing, esthetics, cosmetology, or physical therapy categories.

Maryland is not an outlier. An American Medical Association review found that 36 states lacked clear med spa oversight. The bill failed, but the record it created is the point.

What Regulators Are Actually Building

A study bill that dies in committee is not a non-event. It is a paper trail. When a state legislature and its own analysts put in writing that a service category is unregulated, and then name the specific services providers are billing for, they hand licensing boards and prosecutors a roadmap.

Enforcement does not wait for a statute to pass. Boards issue cease-and-desist letters. State attorneys charge unlicensed practice. And where the money touches a federal payor, or the service is arranged through interstate telehealth, federal agencies open the file. The pattern across med spa enforcement is consistent. Regulators document the gap, and then they close it on the backs of the providers who filled it.

Regulators document the gap, and then they close it on the backs of the providers who filled it. The failed bill is not the end of the story. It is the beginning of the file.

Exposure and Charges

Start with the state side, because that is where most of these cases begin. Florida treats the unlicensed practice of medicine as a felony under Fla. Stat. § 458.327, and Fla. Stat. § 456.065 covers the unlicensed practice of a health care profession more broadly. Performing services that require a medical or nursing license without holding one, or beyond the scope of the license you do hold, is the core risk. A massage therapist managing a surgical wound is not doing massage. A medical assistant directing post-surgical care is not assisting.

The federal exposure is heavier. Healthcare fraud under 18 U.S.C. § 1347 carries up to 10 years per count, and up to 20 years if the violation results in serious bodily injury. Conspiracy under 18 U.S.C. § 1349 carries the same exposure as the underlying offense and is the government's preferred charge because it does not require proving a completed fraud. When referrals move between surgeons and recovery providers in exchange for anything of value, the Anti-Kickback Statute, 42 U.S.C. § 1320a-7b, comes into play. If unapproved or misbranded products are used in recovery protocols, including peptides or compounded drugs, the government can add Food, Drug, and Cosmetic Act charges under 21 U.S.C. §§ 331 and 333. Interstate wires, including telehealth scheduling and billing, support wire fraud under 18 U.S.C. § 1343. On the civil side, the False Claims Act, 31 U.S.C. § 3729, runs in parallel and reaches treble damages.

To convict under Section 1347, the government must prove a knowing and willful scheme to defraud a health care benefit program, or to obtain its money by false pretenses, in connection with the delivery of or payment for health care. That standard is broad, and prosecutors know how to meet it.

A local scope-of-practice problem becomes a federal prosecution quickly when federal payors or interstate telehealth enter the picture.

Critical Mistakes People Make Early

The first mistake is talking to a board investigator or a federal agent without counsel. People assume a friendly conversation will make the inquiry go away. It does the opposite. It builds the case.

The second is treating a study bill that did not pass as proof that there is no risk. The bill failing does not erase the testimony, the fiscal note, or the services you are already providing.

The third is producing records and marketing materials in response to a board inquiry without a strategy. Your own website, intake forms, and social media often describe services in medical terms that exceed your license. That language becomes the government's evidence.

The fourth is treating a licensing-board inquiry as unrelated to criminal exposure. They feed each other. A board referral can become a criminal referral, and statements made to a board are rarely privileged.

The last is waiting for an indictment. By the time charges are filed, the most valuable defense work is already behind you.

A Strategic Defense Approach

Effective defense in this space starts before anyone is charged. The work is unglamorous and it is decisive. Map every service your practice offers to a specific license and, where required, a supervising physician and a valid good faith examination. Identify any service that cannot be tied to a license and stop or restructure it.

Fix the corporate structure. Many med spa and recovery models are built in ways that violate the corporate practice of medicine doctrine, with nonphysician owners controlling clinical decisions. That structure is both a licensing problem and a fraud theory.

Control the narrative before a board referral becomes a criminal referral. Pre-indictment intervention lets counsel engage with regulators and prosecutors while the facts are still being framed, present the practice in its best and most accurate light, and in many cases prevent charges from being filed at all. If the matter proceeds, the cooperation versus litigation decision should be made deliberately, with a full understanding of the evidence, not under the pressure of a target letter that just arrived.

The goal is to map every service to a license before a regulator does it for you. After charges are filed, the options narrow significantly.

Why Timing Matters

Charging decisions are fluid early in an investigation. Prosecutors are still deciding who is a target, who is a subject, and who is a witness. That is the window where defense counsel can affect the outcome, and it closes quietly.

The practical takeaway is simple. The time to define your scope of practice is before a regulator defines it for you. Maryland just showed the country how these cases get built. The providers who treat that as a warning, rather than as someone else's problem, are the ones who stay out of the file.

Aaron M. Cohen handles federal criminal defense and healthcare fraud investigations from Boca Raton, working cases before charges are filed, not after.

Facing a Med Spa or Cosmetic Recovery Investigation in Florida?

If a licensing board, a state attorney, or a federal agency is asking questions about a med spa, cosmetic recovery, or postoperative care practice, the early decisions matter most. AMC Defense Law represents physicians, nurses, practice owners, and recovery providers in licensing-board inquiries and federal investigations, in Florida and nationwide. Consultations are confidential. Contact AMC Defense Law to discuss your situation before you respond to a regulator or an agent.

Aaron M. Cohen is the founder of AMC Defense Law, a federal and state criminal defense firm based in Florida. The firm represents clients in federal investigations and prosecutions involving healthcare fraud, white-collar crime, peptide and compounded-drug enforcement, financial crimes, and complex federal litigation, in Florida and nationwide.

If you or your loved ones have been arrested or are under investigation, call Aaron M. Cohen, 24 hours a day, to get help.

This article is for general informational purposes only and is not legal advice. Reading it does not create an attorney-client relationship. Laws and their application change and vary by case. If you are facing a criminal charge or investigation, consult a qualified attorney about your specific situation.