# Massachusetts MedSpa Business Facts

## Executive Summary
Massachusetts requires MedSpas to navigate strict Corporate Practice of Medicine regulations, necessitating MSO models for non-physicians. Furthermore, the Board of Registration in Medicine tightly controls what procedures can be delegated, fundamentally changing staffing strategies, and the state's cyber security laws (201 CMR 17.00) require mandatory, documented encryption setups.

**Difficulty Rating:** Hard

## 1. Ownership Rules & CPOM
- **The Core Rule:** Massachusetts heavily enforces the Corporate Practice of Medicine (CPOM). Under state law, non-physicians are prohibited from owning a medical practice or employing physicians to practice medicine.
- **Corporate Structures:** A MedSpa offering medical aesthetic services must legally operate as a Professional Corporation (PC) or a Professional Limited Liability Company (PLLC) owned exclusively by a Massachusetts-licensed physician (or permitted combinations of licensed medical providers).
- **The MSO Model:** Entrepreneurs, nurses lacking independent clinic authority, and marketers who are not physicians must utilize the Management Services Organization (MSO) model. The MSO provides the commercial infrastructure and contracts with the physician-owned PC via a Management Services Agreement (MSA).
- **Fee-Splitting Prohibitions:** The MSO cannot be paid a direct percentage of the medical clinic’s revenue derived from patient care. Management fees must be established at a fair market value (FMV) flat rate or a cost-plus model to avoid regulatory scrutiny under state anti-kickback guidelines.

## 2. Everyday Clinical Operations & BORIM Rules
- **Medical Director:** Must be an active, licensed MA physician (MD or DO) associated with the Professional Corporation.
- **Laser Operations:** Firing a medical-grade laser or IPL alters human tissue and is the practice of medicine. Physicians can delegate laser and IPL treatments to licensed personnel (like RNs, or under specific supervisory constraints, estheticians). However, the physician MUST examine the patient first, issue written protocols, and provide adequate supervision.
- **Injectables:** The administration of Botox and dermal fillers is strictly the practice of medicine. Physicians may delegate injections to an RN, NP, or PA under standing orders following an initial exam. **Delegation of neurotoxins or dermal fillers to unlicensed medical assistants or estheticians is strictly prohibited in Massachusetts.**

## 3. Key Challenges & Common Pitfalls
- **Cyber-Security Ignorance (201 CMR 17.00):** Operating a MedSpa tracking patient leads on unencrypted iPads or laptops. Massachusetts law MANDATES a Written Information Security Program and strict encryption of personal data—violations carry hefty fines from the state Attorney General.
- **Improper Esthetician Delegation:** Allowing a basic esthetician to inject dermal fillers or fire lasers without the direct order and examination by the Medical Director.
- **Improper MSO Structure:** Drafting an MSO agreement where the non-physician exercises "clinical control" over the Medical Director's professional practice.

## 4. Timeline & Costs
- **Legal Setup:** Proper MSO agreements, professional entity formation, and drafting the mandatory cybersecurity protocols (WISP) take time. Expect 3 to 6 months to establish the complete legal framework.
- **Costs:** Legal setup fees for establishing the MSO, PC structure, and ensuring 201 CMR 17.00 compliance typically range from $12,000 to $20,000.