The medspa and medical wellness industry has a medical director problem — not a shortage of people willing to serve as one, but a widespread misunderstanding of what the role actually requires. Practices that believe they have a compliant directorship because they have a signed agreement may be operating with less protection than they think. And directors who believe their liability ends at the edge of the contract may be wrong about that too.

This guide is written from the perspective of an active clinician who both serves as medical director for Arizona practices and runs her own medspa in Phoenix. The job is not abstract to me — I know exactly what it looks like when it's done properly, and I've seen what happens to practices when it isn't.

What a Medical Director Actually Is

A medical director for a medspa or wellness clinic is a licensed healthcare provider — physician, NP, or PA depending on state law — who takes documented clinical responsibility for the practice's protocols, standing orders, emergency preparedness, and ongoing quality of care. The word that matters is documented. A directorship is not a relationship; it's a set of records that prove a clinical relationship exists and is active.

In Arizona, a board-certified nurse practitioner holds full practice authority and can serve as medical director with complete independent authority — no physician co-signature, no collaboration agreement, no supervision requirement. What remains constant regardless of the director's license type is the documentation requirement. The standing orders must be signed. The protocols must exist. The chart review must be happening and recorded. Full practice authority changes who is signing the documents; it does not eliminate the documents.

The Core Distinction
A medical director is not a name. They are a set of documented clinical functions.

Every medspa medical director relationship should produce, at minimum: a signed directorship agreement, written standing orders for each service offered, emergency response protocols for each service-specific adverse event, consent form review and co-signature, a patient intake framework, and records of ongoing chart review. If your current arrangement cannot show all of these — it is not a compliant directorship, regardless of what the contract says.

The 7 Core Responsibilities

These are the functions that a medical director must actively perform — not promise to perform, not be available to perform, but actually perform and demonstrate through documentation.

1
Write and sign service-specific standing orders

Standing orders are written authorizations from the director that allow non-prescribing staff (RNs, MAs under an NP) to administer specific medications and procedures. They must be specific to the product, dose, route, and indication — not generic templates. "Administer injectables per clinical judgment" is not a standing order. If the practice adds a new service, new standing orders must be written before that service is offered to patients.

2
Develop and maintain emergency response protocols

A written emergency plan specific to every adverse event type that can occur in the practice's service mix. This means anaphylaxis for IV and injectable practices, vascular occlusion protocols for filler practices, vasovagal response protocols for every practice, and service-specific complications beyond these. The protocols must name the actual medications stocked in the practice, the specific dosing, the escalation pathway, and the 911 criteria. Generic templates from another clinic are not adequate.

3
Review and co-sign patient consent forms

Consent forms are legal documents. A director who has not reviewed and signed the consent forms being used in the practice has not accepted responsibility for the informed consent process. Consent forms must describe the actual procedure, its regulatory status (off-label where applicable), its known risks, and the patient's right to refuse. Downloaded templates require director review before use.

4
Design patient intake and screening frameworks

Every service requires a patient intake process that systematically screens for contraindications. A practice that uses a single generic health history form for IV therapy, hormone optimization, and dermal fillers is not conducting adequate pre-treatment screening. The director must establish service-specific intake requirements and approve the forms used to collect that information.

5
Conduct and document regular chart review

Chart review is how a director verifies that clinical care in the practice is being delivered in accordance with protocols, within scope, and at an appropriate standard. The review must be documented — which charts were reviewed, by whom, on what date, and whether any findings required follow-up. Monthly review of a representative sample is best practice for an actively operating clinic. A director who cannot show documented chart review history has not been doing the job.

6
Remain available for clinical consultation

When a provider in the practice encounters a clinical question — an unexpected reaction, a patient's atypical history, an uncertain contraindication — the medical director must be reachable for consultation. This is not a 24/7 on-call obligation, but it is a real-time availability requirement during operating hours. A director who takes days to respond to clinical questions is not serving the function the role requires.

7
Update protocols when services or staff change

Protocols and standing orders written at the time of the initial directorship engagement become stale the moment the practice adds a new service, changes a product, adds a new staff member, or modifies a treatment approach. The director's ongoing obligation includes reviewing and updating documents whenever any of these changes occur — not just at annual renewal. A practice that added IV therapy six months ago but whose medical director hasn't updated the standing orders since onboarding is operating outside its documentation.

Active vs. Passive: The Real Difference

The distinction between an active and passive medical director is not about personality or communication style. It's about whether the documentable functions of the role are actually being performed. The table below describes each function in both scenarios — and why the distinction matters from a liability standpoint.

Function Active Directorship Passive Directorship
Standing orders Service-specific, current, signed — written for the actual products used with actual dosing and contraindications Generic or absent — template language that doesn't name specific products or apply to the practice's actual service mix
Emergency protocols Specific to service mix — name the medications stocked, the dosing, and the site-specific escalation pathway Generic or absent — "call 911" documents that don't specify the medications required or the service-specific adverse events to manage
Chart review Documented, recurring — dated review records with findings and follow-up actions on file Unrecorded or absent — director states they "review charts when asked" but there is no documentation it ever occurred
Availability for consultation Responsive — reachable during business hours; responds to clinical questions same day Inaccessible — days to respond; providers stop asking because they know it won't be answered quickly
Protocol maintenance Updated on change — standing orders updated when a new service, product, or staff member is added Static — original documents never revised; practice has grown significantly since they were written
Clinical currency Active clinician — personally administers or has recent direct experience with the services being directed No relevant experience — has never administered IV therapy, performed an O-Shot, or seen a hormone optimization patient
What it looks like after an adverse event Defensible — complete documentation of protocols, reviews, and engagement demonstrates real oversight Indefensible — investigation reveals a name on a contract and no record of clinical oversight ever occurring
Liability Reminder
Passive directorship doesn't protect the practice. Or the director.

A medical director who signed standing orders that were inadequate — too generic, missing contraindications, not updated when the service mix changed — can be included in any legal or regulatory action following a patient adverse event. "I didn't know what they were doing" is not a defense when your name and license number are on the practice's protocols. Active oversight is not just the practice's protection. It's the director's too.

Five Things a Medical Director Should Never Be

These are specific scenarios that should disqualify a candidate from directing your practice — or prompt you to re-evaluate an existing relationship. None of them are obscure edge cases. They describe patterns that appear regularly in the medspa market.

1
Someone who has never done what they're signing off on

A physician who has never administered IV therapy is not qualified to write IV protocols or sign off on your drip menu — not because of their license, but because they cannot write a clinically adequate protocol for a service they have no direct experience with. The same applies to hormone optimization, sexual wellness procedures, and ozone therapy. Clinical currency is not a preference; it is a prerequisite for credible oversight. When a director has never performed the procedure their name is authorizing, the protocols they produce will reflect that gap — and investigators will find it.

2
Someone who treats chart review as optional

Chart review is the mechanism by which a director verifies that clinical care in the practice is being delivered correctly. A director who has signed an agreement but conducted no documented chart review in 18 months has not been directing anything — they have been lending their name to the practice's paperwork. If a patient complaint triggers a board investigation and the investigator asks for chart review records, "we just didn't get around to it" is not a satisfactory answer.

3
Someone who took the engagement for the check

Medical directorship has become a side-income stream for some licensed providers, particularly physicians who accumulate multiple medspa clients with minimal oversight of any of them. The warning sign is a director who has more agreements than they can meaningfully serve — who is not reachable for consultation, whose chart reviews are backlogged, and whose protocols are identical across multiple practices because they were generated from the same template. Your medical director's engagement with your specific practice matters. A director who serves twenty practices and cannot name your service menu is a director in name only.

4
Someone whose license is not in good standing

This sounds obvious, but it's skipped more often than it should be. Before entering a directorship agreement, verify the candidate's license on the Arizona Board of Nursing or Arizona Medical Board's public verification tool. Look specifically for any history of disciplinary action, conditions, or probation. A director with a disciplined or conditional license is not an adequate clinical overseer — and a practice that knowingly or negligently operates under a director with a license problem carries significant exposure if that relationship is later examined. Verify at the start of every new directorship relationship and annually thereafter.

5
Someone who won't put anything in writing

A medical director who is willing to "oversee" your practice verbally, informally, or without a signed agreement, signed standing orders, and documented chart review is not a medical director — they are a person willing to be associated with your practice without accepting any of the responsibilities the role requires. Every legitimate directorship relationship is built on written documents: the agreement, the standing orders, the protocols, the consent review, the chart review records. A director who resists putting the substance of their oversight in writing is telling you exactly what the oversight is worth.

What Investigators Actually Look at

When a patient files a complaint with the Arizona Board of Nursing or Arizona Medical Board, the investigation process follows a consistent sequence. Understanding what investigators prioritize helps clarify why the documentation requirements in this guide are not bureaucratic overhead — they are the primary defense available to a practice owner when a formal inquiry begins.

The first document request in a medspa-related board investigation almost always covers the same items:

Practices that can produce all of these immediately, and whose documents are specific, current, and signed, typically resolve initial-stage investigations without formal findings. Practices that cannot produce them — or produce generic templates that clearly don't reflect actual clinical practice — are at far greater risk of a full investigation, corrective action order, or license action.

The Most Expensive Lesson
Building compliance infrastructure after a complaint costs 10x what it costs before one.

Practices that discover their directorship was inadequate during a board investigation are often ordered to produce compliant documentation within 30–90 days — under time pressure, with a compliance officer monitoring the remediation, and at significantly higher cost than a proactive compliance audit would have involved. The practices that call Naomi in this situation would uniformly tell you the same thing: do this before you need to.

How to Evaluate a Medical Director Candidate

If you're currently searching for a medical director, or reconsidering an existing arrangement, these are the questions that distinguish a real candidate from a passive one. They are uncomfortable to ask, which is exactly why they are the right questions.

  1. Can you show me a sample standing order you've written for a practice similar to mine? A director who has written real standing orders can produce them. A director who has been using generic templates will offer something vague or will refuse. The sample should be specific — it should name a product, a dose, a route, and contraindications.
  2. How many practices do you currently direct? Not as a number, but as a workload question — do they have enough capacity to review charts monthly, respond to consultation same-day, and update protocols when your service menu changes? A director serving fifteen practices at $200/month each is not providing fifteen real directorships.
  3. Have you personally performed the services you would be directing? For IV therapy, sexual wellness, hormone optimization, and PRP: this is a required question. The quality of protocols for these services is directly correlated with whether the person writing them has done the work.
  4. What is your process for chart review, and how do you document it? The answer should include: frequency, sample size, what they look for, how findings are communicated, and what records they retain. An answer of "I review charts when you send them to me" is not a chart review process.
  5. What happens if I add a new service after we sign the agreement? A director who says "let me know and I'll write new standing orders" before the first patient is placed correctly. A director who says "the agreement covers everything you might want to do" has never actually written service-specific standing orders.

Frequently Asked Questions

Does a medspa medical director have to be a physician? +
No — not in every state. In full practice authority states like Arizona, a board-certified nurse practitioner can serve as medical director with independent prescriptive authority and no physician collaboration required. The medical director must hold active licensure and prescriptive authority in the state where the practice operates, and must have clinical competency in the services they are directing. Whether that person is an MD, DO, NP, or PA depends on state law and the specific services offered. Read our full guide to NP medical director eligibility in Arizona.
How often should a medical director review patient charts? +
Best practice for an actively operating medspa or wellness clinic is monthly chart review of a representative sample — typically 10–20% of charts from the prior month. The frequency should be defined in the medical director agreement and the reviews should be documented with dates and reviewer signatures. A director who cannot show a record of ongoing chart review has not been providing real oversight, regardless of what the contract says. Quarterly is the minimum that holds up in most regulatory contexts; monthly is what Naomi recommends for active practices.
What is the difference between an active and passive medical director? +
An active medical director writes the practice's protocols, reviews and signs standing orders that are specific to the actual services offered, reviews patient charts on a documented schedule, remains reachable for clinical consultation, and updates documents when service lines change. A passive medical director signs an agreement, lends their name and license number to the practice's paperwork, and has no meaningful ongoing engagement with clinical operations. Passive directorship provides the appearance of compliance without the substance — and when something goes wrong, it protects neither the practice nor the director.
Can a medical director be held liable for a patient adverse event they weren't present for? +
Yes. A medical director who signed off on the standing orders and protocols under which a service was administered can be included in any legal or regulatory action following a patient adverse event — whether or not they were physically present. The strength of their defense depends almost entirely on whether the protocols were clinically adequate, whether they reflect the director's active oversight, and whether there is documented evidence of ongoing engagement with the practice's clinical operations. A passive director whose name appears on inadequate standing orders has materially less protection than an active director whose documentation demonstrates genuine oversight.
Can an NP who owns their own practice serve as their own medical director? +
In Arizona, yes — a board-certified NP with full practice authority can own and operate a medspa and function as their own medical director. The same documentation requirements apply: standing orders (which the NP-owner writes and signs themselves), emergency protocols, consent form review, intake frameworks, and a defined chart review process. Many NP practice owners choose to bring in an external director for chart review anyway, because having an independent clinical review of your own work adds meaningful defensibility — particularly in the event of a complaint. But the legal authority for an Arizona NP to self-direct is clearly established under state law.
The Bottom Line
A medical director is a clinical function, not a title. Evaluate accordingly.

The question to ask about any directorship arrangement — current or prospective — is not "do we have an agreement signed?" It's "could I produce, right now, a complete set of current standing orders, emergency protocols, and chart review records that demonstrate this director has been actively engaged with my practice?" If the answer is no, the arrangement needs to change before something happens that makes the answer matter.