Important Disclaimer
This guide is a clinical operations resource, not legal advice.
The items in this checklist reflect best practices for Arizona medspa and wellness clinic compliance based on Arizona Board of Nursing guidance, Arizona Medical Board requirements, and clinical operating experience. Regulations change. Individual practice circumstances vary. Before relying on any compliance determination for your specific practice, consult a licensed healthcare attorney familiar with Arizona law. Nothing in this guide constitutes legal advice or creates an attorney-client relationship.
Arizona is one of the most favorable states in the country for NP-led medspa and wellness practice — full practice authority means board-certified nurse practitioners can prescribe, administer, and oversee clinical services without a physician collaborator. But full practice authority does not mean no requirements. It means the NP holds the prescriptive authority and clinical responsibility that a physician would hold in other states. The documentation requirements are the same. The obligation to have standing orders, emergency protocols, and clinical oversight structures in place is the same. What changes is who signs them.
This checklist is organized in the way a compliance audit actually works: foundation documents first, then service-specific requirements layered on top. A practice offering only injectables needs the foundation layer plus the injectables section. A practice offering IV therapy plus hormone optimization needs the foundation layer plus both of those sections. Work through every section that applies to your current service menu.
Section 1: The Foundation Layer
These items are required for every medspa, wellness clinic, or aesthetic practice in Arizona — regardless of service mix. If any of these are missing, the practice is operating without a clinical compliance foundation. Start here before anything else.
Medical Director Agreement — Current, Signed, on File
A written agreement between the practice and the medical director that specifies the scope of services covered, the director's responsibilities, the chart review frequency, the emergency consultation availability terms, and the agreement duration. This document must be current — an expired or unsigned agreement provides no legal protection. If your director is an NP, the agreement must establish that they hold full practice authority under Arizona law.
Board Review Item
License Verification on File for All Clinical Staff
Current license certificates or verified board lookup records for every provider performing clinical procedures — including the medical director. Licenses must be active and unencumbered. An NP or RN with a lapsed or disciplined license cannot legally provide services. Verify license status on the Arizona Board of Nursing's public lookup at the start of every employment relationship and annually thereafter.
Board Review Item
Standing Orders — Written, Signed, Service-Specific
Written authorization from the medical director for each clinical service performed by RNs or other non-independent providers. Standing orders must be specific to the medication, dose, route, and indication — not generic. "Administer Botox as clinically indicated" is not a standing order. "Administer onabotulinumtoxinA 4 units/0.1mL intramuscularly to the frontalis, glabella, and periorbital area per the attached protocol" is a standing order. Every service line requires its own document.
Board Review Item Scope-of-Practice
Emergency Response Protocols — Written, Site-Specific
A written emergency response plan for every adverse event type that can occur in your specific service mix. At minimum: anaphylaxis/allergic reaction, vasovagal syncope, and the service-specific emergencies for each treatment you offer. Each protocol must include step-by-step response instructions, the medications and equipment required, and the escalation pathway (call 911 / transfer to ED). Templates from another clinic are insufficient — the protocol must name your actual address, your actual emergency kit contents, and the specific products you use.
Board Review Item
Emergency Kit — Stocked, Documented, Regularly Checked
A physical emergency kit containing at minimum: epinephrine 1:1000 (for anaphylaxis), diphenhydramine, oral glucose or dextrose, a blood pressure cuff, pulse oximeter, and the equipment needed to respond to your specific service mix. The kit must be physically present in the practice, not stored off-site. Contents must be checked monthly for expiration and documented. The check log is a compliance record.
Board Review Item Best Practice
Patient Consent Forms — Service-Specific, Clinically Reviewed
A separate, written informed consent form for each service offered. Consent forms must describe the procedure, its mechanism, expected outcome range, known risks and adverse events, the off-label or investigational status where applicable, and the patient's right to refuse or withdraw. They must be reviewed and signed by the medical director before being used with patients. Generic templates downloaded from the internet are not clinical consents — they require professional review and customization to your specific service menu and patient population.
Patient Intake & Screening Forms — Contraindication-Complete
Medical history intake forms that capture every contraindication relevant to your service mix. A practice offering injectables, IV therapy, and hormone optimization cannot use a single generic health history form — each service has specific contraindications that must be systematically screened. Forms must be completed before the first treatment and updated at regular intervals or when medical history changes are reported.
Procedure Note Template & Chart Documentation Standard
A defined standard for how procedures are documented in the patient chart. Every treatment session must be recorded with the date, provider name and license, service performed, products used (including lot numbers for injectables), dosing, injection sites or treatment areas, patient response, and post-procedure instructions given. Undocumented treatments are among the most common findings in board investigations of adverse event complaints.
Best Practice
Chart Review Records — Documented, Ongoing
Evidence that your medical director is actively reviewing patient charts on a regular basis — not just at onboarding. The frequency should be defined in the Medical Director Agreement (monthly is best practice for active practices). The review should be documented: which charts were reviewed, by whom, on what date, and whether any findings required follow-up. A director who cannot show documented chart review history is not providing real oversight.
Board Review Item
HIPAA Compliance — Privacy Notice, BAAs, Staff Training
A current Notice of Privacy Practices posted in the practice and available to patients. Business Associate Agreements with all third-party vendors who handle PHI (EHR platforms, billing services, texting platforms, Google Workspace). Documented HIPAA training for all staff who touch patient records. HIPAA violations are reported to the Office for Civil Rights, not the state board — but they carry substantial penalties and are often triggered by patient complaints that begin as clinical complaints.
Legal Requirement
Section 2: Injectables & Aesthetic Services
Applies to any practice offering neuromodulators (Botox, Dysport, Xeomin, Jeuveau), dermal fillers (HA, Sculptra, Radiesse, Bellafill), lip augmentation, or other injectable aesthetic services. This section also applies to microneedling and PRP facial services.
Neuromodulator Standing Orders — Product-Specific, Dose-Specific
Separate standing orders for each neuromodulator brand used. Orders must name the specific product (onabotulinumtoxinA, abobotulinumtoxinA, incobotulinumtoxinA, etc.), the dilution protocol, the maximum session dose, the treatment areas authorized, and the contraindication criteria. An RN cannot substitute one brand for another without a separate standing order — the units and dosing ratios differ between products.
Board Review Item
Vascular Occlusion Emergency Protocol
A written response protocol specifically for vascular occlusion — the most serious acute complication of dermal filler. Must include: immediate recognition criteria (blanching, pain, reticulate erythema, capillary refill assessment), the hyaluronidase intervention protocol (for HA fillers), dosing and injection technique for emergency hyaluronidase, and the escalation pathway. Hyaluronidase must be physically stocked in the practice if HA fillers are offered — not available to order, physically present.
Board Review Item
Product Storage Conditions — Temperature-Monitored
Neuromodulators and most HA fillers require refrigeration within defined temperature ranges. Storage temperature must be monitored with a calibrated thermometer and logged. A product used after a refrigeration failure (power outage, equipment malfunction) that cannot be verified as having remained within spec is not suitable for patient use. Document temperature logs and the corrective action taken for any excursion.
Lot Number Documentation in Every Chart Note
The lot number and expiration date of every injectable product used must be recorded in the patient chart. This is not optional — it is the mechanism by which a product recall can be traced to specific patients. Any practice that cannot identify which patients received a recalled product because lot numbers were not charted is in a defensible position for neither the patient nor the manufacturer.
Best Practice
Facial Anatomy Competency Documentation for All Injectors
Evidence that each injector has completed formal training in facial anatomy, vascular danger zones, and complication recognition — and that the medical director has reviewed their credentials before authorizing them to inject under standing orders. Training certificates, course completion records, and the director's written authorization should be in the staff file.
Best Practice
Before & After Photo Protocol — Consent-Documented
A consistent before-and-after photo protocol with documented patient consent specifically authorizing photography. The consent must specify how photos may be used: internal clinical records only, marketing with or without identifying information, social media. Clinical photos used for marketing without specific written consent for that use are a HIPAA violation. Photos should be standardized lighting, angle, and framing to be clinically useful.
Section 3: IV Therapy & Infusion Services
IV therapy carries materially higher adverse event risk than most aesthetic services. Anaphylaxis, air embolism, phlebitis, fluid overload, and infusion-rate complications are real and potentially life-threatening. The compliance requirements reflect that risk. This section applies to any practice offering IV drips, push injections, ozone therapy (MAH), or IM injections administered in a clinical setting.
High Risk Service Line
IV therapy requires a medical director with personal IV therapy experience.
A medical director who has never personally administered or supervised IV infusion therapy is not qualified to write IV standing orders or emergency protocols for an infusion practice. If your director was trained exclusively in aesthetics or another specialty, their signature on IV protocols does not create clinical cover — it creates liability when something goes wrong and it becomes clear that the protocols were not written by someone with actual IV competency.
Drip-Specific Standing Orders — Every Formulation Separately
A separate standing order for every IV formulation offered. The standing order must specify the formulation by ingredient and dose, the infusion rate (in mL/hour or drop rate), the maximum session volume, the minimum screening requirements before administration, and any monitoring requirements during infusion. A single "IV therapy standing order" covering all drips is not adequate — different formulations have meaningfully different risk profiles and rate requirements.
Board Review Item
Anaphylaxis Protocol — Epinephrine Stocked, Staff Trained
A written anaphylaxis response protocol specific to infusion events. Must include recognition criteria (urticaria, angioedema, bronchospasm, hypotension), the epinephrine 1:1000 dose and IM injection site, secondary medications (diphenhydramine, corticosteroids), patient positioning, monitoring requirements, and 911 activation criteria. All staff present during IV sessions must have completed anaphylaxis response training and the training must be documented. Epinephrine must be physically present in the infusion space — not in a back office.
Board Review Item
Cardiac and Renal Screening for High-Risk Formulations
Written screening criteria for formulations that carry cardiac or renal risk. High-dose vitamin C requires G6PD deficiency screening before administration — a patient with G6PD deficiency who receives high-dose IV vitamin C can develop acute hemolytic anemia. NAD+ infusions at doses above 500mg require cardiac history review. Large-volume infusions require renal function adequacy assessment. The screening form for each high-risk formulation must be specific and must be completed before infusion begins.
Board Review Item
NAD+ Protocol — Rate, Titration, and Side Effect Management
NAD+ infusions require a written protocol specifying: starting dose and infusion rate, titration schedule for rate increases, maximum rate, the monitoring required during infusion (patient must be observed throughout — NAD+ infusions cannot run unattended), and the management protocol for common side effects including flushing, chest tightness, nausea, and lightheadedness. Providers who infuse NAD+ at rates that are too fast produce patient experiences that generate complaints and board reports. This is one of the most common compliance issues Naomi finds in IV practice audits.
Board Review Item
Pharmacy Sourcing Documentation
All IV formulation ingredients sourced from a licensed compounding pharmacy. The pharmacy must be a 503A or 503B facility registered with the State of Arizona and in good standing with the Arizona Board of Pharmacy. IV compounds obtained from unlicensed or unregistered compounders expose patients to sterility risks and expose the practice to regulatory action. Keep the pharmacy's current license and your purchasing agreements on file.
Legal Requirement
Ozone (MAH) Protocol — Contraindication Screening Required
Ozone major autohemotherapy has specific absolute contraindications: G6PD deficiency, uncontrolled hyperthyroidism, thrombocytopenia, and pregnancy. The written protocol must include all absolute contraindications, the blood volume per session, ozone concentration and volume parameters, and the re-infusion timing. Ozone administered without contraindication screening is one of the higher-liability services in the IV wellness space.
Vital Signs Monitoring and Documentation
Pre-infusion vital signs (blood pressure, heart rate, SpO2) recorded and charted for every IV session. Post-infusion or mid-infusion vitals as specified in the drip-specific protocol. A patient who has an adverse event during infusion and whose pre-infusion vitals were not recorded leaves the practice unable to demonstrate baseline clinical status at the time of treatment — a significant liability in any subsequent investigation.
Section 4: Hormone Optimization & Compounded Medications
Applies to practices offering BHRT (bioidentical hormone replacement therapy), TRT (testosterone replacement therapy), thyroid optimization, GLP-1 weight management programs, peptide protocols, or any service involving compounded prescription medications.
Prescriber Has Active DEA Registration for Controlled Substances
Testosterone (Schedule III) and certain other hormones and peptides used in optimization protocols are DEA-controlled substances. The prescribing provider must hold an active, unencumbered DEA registration. An NP prescribing testosterone without a DEA registration is committing a federal crime. Verify that your prescribing provider's DEA certificate is current, covers the right schedule, and is registered to your practice address (or includes a practice-site exception).
Federal Requirement Board Review Item
Licensed 503A/503B Pharmacy Relationship for All Compounded Medications
All compounded hormone and peptide preparations must be sourced from a licensed 503A compounding pharmacy (patient-specific) or 503B outsourcing facility (bulk). The pharmacy must be registered with the State of Arizona Board of Pharmacy. Practices sourcing compounded medications from unregistered compounders — including overseas suppliers or unregistered "wellness pharmacies" — are in federal violation of FDCA regulations. Keep a copy of the pharmacy's current AZ license and your dispensing agreements on file.
Federal Requirement
Lab Baseline Required Before Prescribing
A documented laboratory baseline (relevant hormone panels, CBC, CMP or relevant metabolic markers) completed before initiating hormone therapy. Prescribing testosterone, thyroid, or GLP-1 medications without baseline labs is below the standard of care and indefensible in an adverse event review. Labs must be ordered by the prescribing provider, results reviewed and documented, and clinical decision rationale recorded in the chart before the prescription is written.
Board Review Item
Follow-Up Lab Schedule & Documentation
A defined follow-up lab schedule for each hormone protocol — not just at initiation but throughout treatment. Testosterone therapy requires periodic hematocrit monitoring (polycythemia risk), estradiol monitoring in male patients (aromatization), and PSA consideration for males over 40. Thyroid optimization requires TSH and free thyroid hormone levels at defined intervals. The schedule must be in writing and adherence must be documented in the chart. Patients who are months overdue for required monitoring should not be receiving refills without documented clinical rationale.
GLP-1 Program Protocol — Including Dose Titration Schedule
For semaglutide or tirzepatide programs using compounded formulations: a written protocol covering the starting dose, titration schedule, monitoring parameters, management of GI adverse effects, contraindications (personal or family history of medullary thyroid carcinoma, MEN2), and the criteria for dose reduction or discontinuation. Programs that titrate patients to maximum doses in week two to produce faster visible results generate adverse events. The titration schedule exists for clinical reasons, not manufacturer preference.
Best Practice
FTC-Compliant Marketing for Hormone and Peptide Services
Marketing claims for hormone optimization and peptide protocols must not promise specific outcomes, imply FDA approval for compounded formulations, or use testimonial language that violates FTC endorsement guidelines. Compounded semaglutide is not FDA-approved — it is legal to prescribe but not legal to market as equivalent to FDA-approved Ozempic or Wegovy. The FTC has issued guidance specific to weight loss and wellness marketing that applies directly to GLP-1 program advertising.
FTC Compliance
Section 5: Sexual Wellness Services
Applies to practices offering the O-Shot, P-Shot, GAINSWave/low-intensity shockwave therapy, Vampire Breast Lift, or other sexual wellness procedures. Most of these services involve PRP (Platelet-Rich Plasma), which is derived from the patient's own blood and carries a different risk profile than pharmaceutical products — but still requires full protocol and consent documentation.
Off-Label / Investigational Status Disclosure in Consent
PRP for sexual wellness indications (vaginal injection for arousal or incontinence, penile injection for erectile dysfunction) is not FDA-approved for these uses. The consent form must explicitly state that the procedure uses PRP in an off-label or investigational application, that clinical evidence exists but the procedure has not undergone FDA approval for this specific indication, and that results cannot be guaranteed. A consent form that presents the O-Shot or P-Shot as an FDA-approved treatment for a specific diagnosis is misrepresenting the regulatory status of the service.
FTC & Consent Requirement
PRP Centrifuge Protocol — Written, Specific to Your System
A written centrifuge protocol that specifies your exact equipment (brand, model), tube system, spin speed (RPM or RCF), spin duration, and the steps for plasma separation and quality verification. The protocol must be specific to your centrifuge system — spin parameters that produce adequate PRP concentration on one device may not produce the same result on a different device. This is the document your medical director reviews and co-signs, and it is what investigators examine when a PRP-related complication is reported.
Board Review Item
Contraindication Screening — Platelet Disorders, Active Infection, Anticoagulation
A written patient screening checklist specific to PRP services covering absolute contraindications: active platelet disorders (thrombocytopenia, essential thrombocythemia), anticoagulant therapy, active local or systemic infection, recent cancer diagnosis or active malignancy, and pregnancy. These contraindications must be screened at every visit — not just at the initial consultation. A patient who starts anticoagulant therapy between their first and second O-Shot is not a safe candidate for the second treatment without medical director review.
FTC-Compliant Marketing — Outcome Claims Reviewed
Marketing for O-Shot and P-Shot services must not use guaranteed outcome language ("restore your sex life," "cure erectile dysfunction," "guaranteed orgasm improvement"), imply broader FDA approval than exists, or use patient testimonials that violate FTC endorsement guidelines. Several practitioners have received FTC warning letters for sexual wellness marketing claims. Any marketing language that makes specific clinical outcome promises should be reviewed by an attorney before publication.
FTC Compliance
P-Shot Nerve Block — Written Protocol and Emergency Plan
For penile injection services: a written protocol for the penile dorsal nerve block, including anesthetic agent and concentration, maximum dose per session, technique, confirmation of anesthesia before proceeding, and the management protocol for incomplete block or hematoma. A lidocaine toxicity response protocol must also be in place — large-volume lidocaine nerve blocks carry systemic absorption risk that must be addressed in the emergency planning.
Section 6: RN vs. NP — What Changes in Your Documentation
The single most common compliance misconception in Arizona medspa practice is that an NP's full practice authority eliminates the need for formal documentation structures. It doesn’t. What changes is who the prescriber is — not whether the documentation must exist.
| Requirement |
Arizona NP (Full Practice Authority) |
RN Under NP or MD Director |
| Can prescribe medications independently |
YES — if board-certified, active AZ NP license |
NO — cannot prescribe independently |
| Needs written standing orders to administer Rx medications (Botox, fillers) |
Self-signs — NP writes and signs their own standing orders |
REQUIRED — must have signed orders from a prescriber |
| Needs a medical director agreement on file |
Effectively yes — NP serving as own director should document that role formally |
REQUIRED — agreement with NP, PA, or MD must be current and signed |
| Can independently determine treatment plan, dosing, product selection |
YES — within scope and training |
NO — must follow standing orders; cannot deviate without prescriber authorization |
| Emergency protocols required |
REQUIRED — same requirements regardless of prescriber status |
REQUIRED — same requirements regardless of prescriber status |
| Can independently operate a compounding pharmacy relationship and prescribe compounded medications |
YES — with active DEA for scheduled substances |
NO — cannot independently prescribe compounded Rx |
| Needs chart review by a director separate from the treating provider |
Best Practice — self-audit possible but external review adds defensibility |
REQUIRED — chart review by the medical director is a core directorship function |
Key Point for NP Practice Owners
You are your own medical director — which means all the same paperwork applies to you.
An NP who owns and operates their own practice and sees patients independently still needs written protocols, emergency procedures, consent documentation, and a defined chart review process. The signature on those documents is the NP's own rather than an external director's — but the documents must still exist. The compliance burden does not decrease with full practice authority; the accountability is just more directly yours.
The 6 Most Common Compliance Failures in Arizona Medspa Audits
These are the specific gaps Naomi finds most consistently when she conducts a Compliance & Chart Audit for a new consulting client. They appear across practices of all sizes and experience levels. None of them are obscure — they are all items that seem like they should be in place but often aren’t when examined closely.
1
Generic standing orders that don't name specific products or doses
The standing order says "administer Botox as clinically indicated" or "perform IV therapy per patient request." Neither of these is a standing order — they are permission slips. A standing order must name the specific product, the dilution, the dose range, the authorized treatment areas, and the contraindications that preclude administration. Generic orders do not protect the RN who administers the treatment, do not protect the director who signed them, and will be flagged immediately in any board examination.
Found in 70%+ of new audit clients
2
Emergency kit present but not stocked correctly for the service mix
Practices that offer IV therapy but don't stock epinephrine. Practices that offer HA fillers but don't have hyaluronidase on hand. Practices that have a single vial of epinephrine that expired 14 months ago. The emergency kit itself is rarely the problem — the ongoing maintenance of correct contents matched to the current service mix is where compliance breaks down. Any time you add a new service line, your emergency kit requirements change and must be reviewed.
Found in 55%+ of new audit clients
3
No documented chart review by the medical director
The medical director agreement says "quarterly chart review." There are no records of any chart review ever having occurred. No review dates, no reviewer signatures, no notation of findings or follow-up actions. When the practice has been operating for 18 months and cannot show a single documented chart review, the directorship relationship — whatever the contract says — cannot be described as clinically active. This is the single most common finding in practices where the directorship was set up for the signature, not for the oversight.
Found in 65%+ of new audit clients
4
Consent forms that are not specific to the service or jurisdiction
Downloaded from a national training program, not updated since 2019, missing the Arizona-specific scope-of-practice language, or presenting off-label services as FDA-approved. Consent forms are legal documents. They must describe the specific procedure you actually perform, using accurate language about regulatory status, with risk disclosures that match your service's actual adverse event profile. A consent form that does not accomplish this does not protect the practice — it creates the appearance of informed consent without the substance.
Found in 60%+ of new audit clients
5
Incomplete or absent procedure notes
Procedure notes that say "Botox to face — patient tolerated well" with no product, no lot number, no dose, no injection sites, no consent verification. Or no procedure note at all — the appointment is in the scheduling system but there is no clinical record of what was done. In the absence of a chart note, the standard legal assumption is that it wasn't done. In the context of a complaint or adverse event, an absent or inadequate note is among the most damaging findings a practice can produce.
Found in 50%+ of new audit clients
6
Staff performing services outside their authorized scope under the standing orders
An RN performing a service that the standing orders don't specifically authorize. An MA performing injections under any circumstances. A new RN who started last month and has not yet been added to the standing orders but is already seeing patients. Scope-of-practice violations in medspa settings are one of the most frequently investigated complaint categories at the Arizona Board of Nursing, and they are almost always preceded by a period in which a practice allowed service delivery to outrun the documentation that authorizes it.
Found in 45%+ of new audit clients
Frequently Asked Questions
Does an Arizona medspa owned by an NP still need a medical director?
+
It depends on how the practice is structured and what services it offers. An Arizona NP with full practice authority can independently prescribe and administer most medspa services without a supervising physician. However, if RNs or other non-prescribing staff are administering injectable or IV services, written standing orders signed by a licensed prescriber — which can be the NP owner — are required. The NP in that case is functioning as their own medical director, and all the same documentation requirements apply: written standing orders, emergency protocols, consent review, and chart oversight. Many NP practice owners choose to bring in an external director anyway, specifically for the chart review and protocol development functions, because having a second clinical voice reviewing your work is a meaningful liability protection even when it's not strictly required.
What documents will a state board examiner look for in an Arizona medspa inspection?
+
The Arizona Board of Nursing and Arizona Medical Board inspections of medspa and wellness clinic practices typically examine: the medical director agreement and license verification, signed standing orders for every service offered, emergency response protocols with dated signatures, patient consent forms, a sample of patient charts including intake, clinical notes, and consents, staff credential documentation, and evidence of ongoing medical director engagement such as chart review records. Practices that cannot produce these on demand during an inspection are subject to immediate corrective action requirements. The most common outcome of a compliance inspection that reveals documentation gaps is a corrective action order with a 30–90 day remediation deadline — which requires engaging a qualified clinical resource to produce the missing documents under time pressure, at significantly higher cost than building them proactively.
Can an RN in Arizona administer Botox or dermal filler independently?
+
No. Botox and dermal fillers are prescription medications. In Arizona, an RN can administer them only under the written standing orders of a licensed prescriber — an NP, PA, or physician with prescriptive authority over the specific medications used. The RN cannot independently order, dispense, or administer these treatments without current, signed standing orders from a qualified medical director. An RN who administers injectables without valid standing orders is practicing outside their scope and is subject to Board of Nursing disciplinary action. This applies regardless of how much experience the RN has, whether they completed a training program, or whether patients are satisfied with their results.
How often do standing orders and protocols need to be updated?
+
Arizona does not specify a mandatory update interval for medspa standing orders by statute, but best practice — and what holds up in an adverse event investigation — is annual review and re-signature, plus immediate update whenever a service line changes, a new product or formulation is added, a new staff member begins administering services, or clinical evidence or guidelines change significantly. Standing orders that are several years old without documented review are a compliance liability regardless of their original quality. The date of the director's most recent signature on each document is one of the first things an investigator checks.
What happens if an Arizona medspa has a board complaint filed against it?
+
A board complaint filed with the Arizona Board of Nursing or Arizona Medical Board triggers a formal investigation process. The board will request the practice's clinical documentation — standing orders, protocols, consent forms, the patient's chart — and may request a written response from the provider named in the complaint. If documentation is adequate and the care was within scope, many complaints are resolved at the initial review stage without formal findings. If documentation is missing or the care reveals scope violations, the investigation proceeds and can result in corrective action orders, probation, civil penalties, or license actions. Having a complete, current compliance documentation file is not just about passing inspections — it is the primary defense in a board investigation.
The Honest Summary
The practices that stay out of trouble are the ones that built the paperwork before they needed it.
Compliance documentation is not exciting. Writing standing orders and emergency protocols and consent forms before you’ve seen your first patient feels like administrative overhead when you’re eager to open. But the providers who call Naomi after a board complaint or an adverse event would uniformly tell you the same thing: the documentation would have cost a fraction of what the remediation is costing them now. Build it first.