Utah's Draft Med Spa Supervision Bill: What Florida Med Spa Owners, Injectors, and Medical Directors Should Read Into It

Utah lawmakers have a draft bill in front of them that puts a number on something most states leave vague: how far a supervising practitioner can be from the nurse holding the syringe. For Botox and filler, 60 minutes or 60 miles. For IV drips, peptides, and hormone shots, inside the building.

Utah's draft sets supervision by service: 60 minutes or 60 miles for Botox and filler, inside the building for IV drips, peptides, and hormone shots.

The draft is not law, and it may never become law. Read it anyway if you own a med spa, inject in one, or serve as the medical director for one. It is a clean preview of the questions an investigator asks, in Florida or anywhere else, when a supervision problem turns into a criminal file.

Key Takeaways

• Utah's draft Health Care Services Amendments, reviewed September 16, 2026, is proposed 2027 legislation, not law, with a May 5, 2027 effective date if enacted.
• The draft limits delegated cosmetic and wellness injections to registered nurses and caps APRN and PA compounding at immediate-use preparations.
• Florida already prosecutes unlicensed practice as a felony with a one-year mandatory minimum under Fla. Stat. § 456.065, and scope violations feed that charge.
• Compounding outside 21 U.S.C. § 353a, which covers only licensed pharmacists and physicians, is charged as misbranding under 21 U.S.C. §§ 331 and 333.
• Florida's own med spa licensing bill died in committee in March 2026, so Southern and Middle District of Florida cases still run on existing statutes.

What Utah's Draft Says, and What It Does Not

On September 16, 2026, Utah's Business and Labor Interim Committee heard a presentation from the state's Office of Professional Licensure Review and took up a working draft titled Health Care Services Amendments. The office cited unclear rules on who can do what, a lack of oversight from medical directors, and patient harm tied to compounding by non-pharmacists. The draft is slated for the 2027 General Session, lists Norman K. Thurston as chief sponsor, has no bill number yet, and would take effect May 5, 2027 if enacted.

The med spa section would do the following:

• Define a medical spa as any facility offering a minor cosmetic medical procedure, a cosmetic injection, or a wellness injection, and bar anyone else from advertising under that name.
• Put a physician, an APRN, or a qualifying PA in charge as the responsible cosmetic medical practitioner.
• Allow delegation of cosmetic injections and wellness injections only to registered nurses. Master estheticians and LPNs would be limited to minor cosmetic procedures such as laser treatments.
• Set supervision by service. For cosmetic injections, the supervisor must be within 60 minutes or 60 miles of the spa and available in person for complications. For wellness injections, defined to include IV fluids, vitamins, hormones, and peptides, the supervisor must be in the spa.
• Require the responsible practitioner, before delegating, to evaluate the patient in person or by telehealth, write a patient-specific treatment plan, set emergency protocols, and confirm the delegate's competency.
• Restrict compounding to pharmacists and physicians, with APRNs and PAs limited to immediate-use preparations: three or fewer sterile products, administered within four hours of starting preparation.

The same draft separately regulates psychiatric ketamine clinics and restricts prescribing ketamine for at-home use.

What the Government Is Building

Scope and supervision rules are how a licensing problem becomes a criminal case. Once a rule says only a registered nurse may inject, and only with a supervisor within a fixed distance, an investigator has a checklist. Who injected? Under what license? Where was the supervisor? Was the patient evaluated before the order was written? Who mixed the vial?

Every answer sits in records the clinic created: the scheduling software, the charts, payroll, supplier invoices, and the medical director's own calendar.

Every one of those answers sits in records the clinic created: the scheduling software, the charts, payroll, supplier invoices, and the medical director's own calendar. Two of Utah's stated concerns, the absent medical director and back-room compounding, are the same two facts that anchor federal med spa files. FDA flagged them in a 2021 compounding risk alert that named IV hydration clinics, medical spas, and mobile IV services.

Florida has no equivalent rulebook. A bill to license medical spas through the Board of Pharmacy, HB 1429, died in a House subcommittee on March 13, 2026. With no single statute, the standard gets assembled after the fact by whoever is investigating, from the practice acts, board rules, and the drug laws.

Florida does have a distance rule that many med spa arrangements fail. Under Fla. Stat. § 458.348(3)(c), and subject to the statute's exceptions, a physician who supervises an APRN or PA at a satellite office offering primarily dermatologic or aesthetic skin care must be board certified or board eligible in dermatology or plastic surgery. The satellite must be within 25 miles of the physician's primary practice or in a contiguous county, never more than 75 miles away, and the physician may supervise only one such office. Sourcing is the other half of these cases, as the indictment of a Utah physician over imported peptides shows.

Exposure and Charges

Start with Florida. Practicing a health care profession without the license the task requires is a third-degree felony under Fla. Stat. § 456.065, with a one-year mandatory minimum term and a minimum $1,000 fine. If the patient suffers serious bodily injury, it becomes a second-degree felony. That is the charge an aesthetician or medical assistant faces for injecting filler, and practicing medicine without a license is a separate felony under Fla. Stat. § 458.327.

Owners and physicians are reached differently, and the difference is often misstated. Aiding an unlicensed person, delegating to someone unqualified, and failing to supervise are grounds for discipline under Fla. Stat. § 458.331. They are not crimes by themselves. The criminal theory runs through Fla. Stat. § 777.011, which treats anyone who aids, hires, or procures the offense as a principal. An owner who put the unlicensed injector on the schedule is charged the same as the person who held the needle.

The federal side

The federal side usually starts with product. Section 503A, 21 U.S.C. § 353a, exempts a compounded drug from approval and labeling requirements only when a licensed pharmacist or licensed physician compounds it for an identified patient on a valid prescription. A nurse or technician compounding peptide or vitamin injections in a back room is outside that exemption. The result is a misbranded, unapproved new drug, and 21 U.S.C. § 331 reaches both shipping it and dispensing it once its ingredients have moved in interstate commerce. Under 21 U.S.C. § 333, that is a misdemeanor without any proof of intent and a felony carrying up to three years with intent to defraud or mislead.

A nurse or technician compounding peptide or vitamin injections in a back room is outside the 503A exemption. The result is a misbranded, unapproved new drug.

Fraud counts follow the marketing. Most aesthetic work is cash pay, so health care fraud under 18 U.S.C. § 1347 is often not the lead count. Wire fraud under 18 U.S.C. § 1343 is, at up to 20 years per count, built on statements that licensed, supervised staff perform the injections or that product comes from a licensed pharmacy. Conspiracy under 18 U.S.C. § 1349 pulls the owner, the injector, and the medical director into one indictment.

Hormone and ketamine services add controlled substance exposure. Testosterone and ketamine are Schedule III drugs. A prescription written outside the usual course of professional practice is charged as distribution under 21 U.S.C. § 841, up to ten years, though Ruan v. United States requires the government to prove the prescriber knew the prescribing was unauthorized. Telehealth prescribing also has to satisfy the in-person evaluation rule in 21 U.S.C. § 829(e) or one of its exceptions, and the prescriber's DEA registration is at stake either way.

At sentencing, fraud cases run through the loss table in §2B1.1 of the Sentencing Guidelines, where the government opens with gross receipts. Licensed professionals also face a two-level increase for abuse of a position of trust or use of a special skill under §3B1.3.

Critical Mistakes People Make Early

• Talking without counsel. Department of Health investigators, FDA criminal agents, and DEA diversion investigators all want statements before you have looked at your own records. A false or shaded answer to a federal agent is a separate felony under 18 U.S.C. § 1001.
• Fixing the paper. Backdating chart reviews, adding evaluation notes, or rewriting protocols after contact turns a licensing problem into obstruction under 18 U.S.C. § 1519, which carries up to 20 years.
• Treating a board complaint or a cease and desist notice as the end of it. The administrative file is often the front end of a criminal referral, and your written response becomes an exhibit.
• Assuming the medical director agreement protects you. For the physician, it proves supervision was promised. For the owner, it proves the owner knew supervision was required.
• Waiting for charges. By indictment, the loss theory and the list of defendants are largely set.

"For the physician, the medical director agreement proves supervision was promised. For the owner, it proves the owner knew supervision was required."— Aaron M. Cohen, Principal Attorney

Strategic Defense Approach

A med spa defense lawyer's first job is to learn the facts before the government fixes its version of them. That means a privileged review, directed by counsel, of each service line: who performed it, under what license, where the supervisor was, whether an evaluation preceded the order, where the product came from, and who prepared it. The firm's med spa defense practice starts there.

Next, separate the interests. The owner, the injector, the medical director, and the telehealth clinician who signed the evaluations do not carry the same risk, and a shared lawyer or an early joint defense agreement can trap the person with the least exposure.

Then decide how to engage. A Department of Health inquiry, an FDA OCI investigation, and a federal grand jury subpoena call for different responses, and they can run at the same time. Where a client is under federal investigation, pre-charge negotiation with the AUSA can narrow who is charged and with what.

Correct the practice going forward. Tightening supervision, moving compounding into a licensed pharmacy, and documenting real evaluations is defensible, and prosecutors and sentencing judges give it weight. The job of a med spa compliance attorney at this stage is to fix the future without touching the past. If charges come, the work shifts to loss: patients who received real product from licensed staff got value, and that value should come off the government's number.

Why Timing Matters

Nothing in Utah changes unless the legislature passes the bill in 2027, and Florida's licensing proposal is dead for now. Neither fact buys time. Conduct happening this month is what gets charged later, and the general federal limitations period is five years under 18 U.S.C. § 3282. When a legislature finally writes the rule down, prosecutors describe what came before as willful. Other states are asking the same scope questions, as discussed in an earlier post on Texas APRN med spa scope.

Charging decisions are fluid early. Before indictment, a federal criminal defense attorney can put context, clinical judgment, and corrective action in front of the prosecutor. If you have received a subpoena or a letter from the U.S. Attorney's Office naming you as a target, that window is already closing, and a federal target letter attorney should be involved before anyone responds.

Common Questions

Facing a Med Spa Investigation in Florida?

AMC Defense Law represents med spa owners, physicians and medical directors, APRNs, PAs, nurses, and IV therapy clinic operators in federal investigation defense and in Florida licensing and criminal matters. The firm is based in Boca Raton and practices in Palm Beach County, and its Southern District of Florida federal defense work extends to the Middle District of Florida and to federal courts nationwide.

A privileged review of each service line: who performed it, under what license, where the supervisor was, and who prepared the product.

If a Department of Health investigator has called, agents have visited, or a subpoena has arrived, speak with a white collar defense attorney before you respond. Consultations are confidential. Call 561.542.5494 or request a confidential consultation.

If you or your loved ones have been arrested or are under federal investigation, call Aaron M. Cohen, 24 hours a day to get help.

About the author. Aaron M. Cohen is the founder and principal attorney of AMC Defense Law, a criminal defense firm in Boca Raton, Florida, with more than 30 years of experience in state and federal courts. He is admitted to practice in Florida, New York, New Jersey, and the District of Columbia, and before the United States District Courts for the Southern and Middle Districts of Florida, the Southern, Eastern, and Western Districts of New York, the District of New Jersey, and the Northern District of Texas. He appears pro hac vice in other federal districts nationwide. The firm represents clients in federal investigations and prosecutions involving healthcare fraud, Anti-Kickback Statute matters, DME and telemedicine fraud, peptide and compounded-drug enforcement, controlled-substance and drug conspiracy cases, financial crimes, and complex federal litigation, in Florida and nationwide.

This article is for general informational purposes only and is not legal advice. Reading it does not create an attorney-client relationship. The Utah legislation discussed here is a draft and is not law. Every matter turns on its own facts. The hiring of a lawyer is an important decision that should not be based solely upon advertisements. Prior results do not guarantee a similar outcome.