California's supervision requirements determine who can perform specific procedures and under what conditions. Getting this wrong exposes you to both regulatory action and malpractice liability.

Physician Supervision and Good Faith Exams

California requires a "good faith examination" before any medical treatment, including most medspa procedures. A physician must personally examine each patient and establish a treatment plan before delegating procedures to mid-level providers. This examination cannot be performed via telemedicine for new patients receiving aesthetic treatments.

The supervising physician must also be available for consultation during procedures. "Available" typically means on-site or immediately accessible, though requirements vary by procedure type. Laser treatments and injectables generally require closer supervision than non-invasive treatments. Document your supervision protocols thoroughly: this documentation becomes critical evidence if a malpractice claim arises.

Scope of Practice for RNs, NPs, and Estheticians



Registered nurses can perform many medspa treatments under physician supervision, including laser procedures and injectable administration. Nurse practitioners have broader independent authority but still face restrictions on certain aesthetic procedures. Estheticians are limited to non-medical treatments: facials, microdermabrasion, and similar services that don't penetrate beyond the epidermis.

The boundaries matter enormously for insurance purposes. If an esthetician performs a procedure outside their scope, your malpractice coverage may not respond. Your policies should clearly identify covered providers and procedures, and your training programs must reinforce scope limitations.

A comprehensive insurance program for California medspas requires multiple policy types working together. Here's what you need and why.

Professional Liability and Medical Malpractice

Medical malpractice insurance covers claims arising from professional services: botched treatments, allergic reactions, burns, scarring, and similar injuries. California medspas should carry minimum limits of $1 million per occurrence and $3 million aggregate, though many practices opt for higher limits given the state's litigation environment.

Ensure your policy covers all procedures you offer and all providers performing them. "Claims-made" policies require continuous coverage, so budget for tail coverage if you ever change carriers

General Liability and Property Insurance

General liability covers non-medical incidents: slip-and-fall injuries, property damage, and similar claims. Property insurance protects your equipment, furnishings, and improvements. Medspa equipment is expensive, and a single laser device can cost $100,000 or more.

Business interruption coverage deserves attention too. If a fire or flood closes your practice for months, this coverage replaces lost income while you rebuild. California's wildfire and earthquake risks make this coverage particularly relevant.

Cyber Liability and HIPAA Violation Coverage

Medspas handle protected health information, making them HIPAA-covered entities subject to federal privacy requirements. A data breach involving patient records, before-and-after photos, or payment information triggers notification requirements and potential federal penalties.

Cyber liability insurance covers breach response costs, regulatory defense, and third-party claims. Given that California also has its own privacy law (CCPA) with additional requirements, this coverage has become essential rather than optional for medspa operations.

Insurance transfers risk financially, but proper risk management prevents claims from occurring. California imposes specific compliance requirements that directly affect your liability exposure.

Informed Consent and Patient Documentation

California law requires documented informed consent before medical procedures. Your consent forms should describe the procedure, expected outcomes, potential risks, alternative treatments, and the qualifications of the person performing the treatment. Generic forms downloaded from the internet rarely meet California's standards.

Maintain thorough documentation of every patient encounter: consultation notes, treatment records, photos, and follow-up communications. This documentation serves as your primary defense against malpractice claims. When working with clients, Fusco Orsini & Associates often reviews documentation practices alongside insurance programs because poor records can undermine even excellent coverage.

California-Specific Marketing and Advertising Rules



California's Business and Professions Code restricts how medical practices can advertise. You cannot make misleading claims about results, use fake testimonials, or advertise prices in ways that deceive consumers. The Medical Board has pursued enforcement actions against medspas for Instagram posts and website content that violated these rules.

Before-and-after photos require particular care. You need written consent for any patient images used in marketing, and the photos must accurately represent typical results. Digitally altered images that exaggerate outcomes can trigger both regulatory complaints and false advertising claims.

Your medspa's workforce creates significant liability exposure beyond malpractice. California's employment laws are notoriously strict, and violations can result in substantial penalties.

Workers' Compensation and EPLI Requirements

California requires workers' compensation insurance for all employees, with no exceptions for small businesses. This coverage pays medical expenses and lost wages when employees suffer work-related injuries. Medspa workers face specific risks: needle sticks, laser exposure, repetitive strain from performing treatments, and chemical exposure from peels and other products.

Employment Practices Liability Insurance (EPLI) covers claims of wrongful termination, discrimination, harassment, and wage violations. California employees file more employment claims than workers in any other state, and defense costs alone can exceed $50,000 even for frivolous claims. EPLI has become a standard coverage recommendation for California medspas.

Independent Contractor vs. Employee Classification

California's AB5 law created a strict "ABC test" for independent contractor classification. Most medspa workers fail this test and must be classified as employees. Misclassifying workers triggers back taxes, penalties, and potential class action lawsuits.

The financial exposure from misclassification can dwarf typical insurance claims. Audit your worker classifications carefully, and ensure your insurance program accounts for your actual workforce structure rather than how you wish it were structured.

Does my medspa need both malpractice insurance and general liability coverage? Yes. Malpractice covers treatment-related injuries while general liability handles premises accidents and non-medical claims. Neither policy substitutes for the other.

Can a non-physician own a California medspa? Not directly. You'll need an MSO/PC structure where a licensed physician owns the medical practice component. Consult a healthcare attorney before structuring your business.

What happens if an unlicensed staff member performs a medical procedure? Your malpractice coverage likely won't respond, and the supervising physician faces license discipline. The financial and regulatory consequences can be severe.

How much malpractice coverage do California medspas typically carry? Most carry $1-2 million per occurrence with $3-5 million aggregate limits. Your specific needs depend on procedure types, patient volume, and risk tolerance.

Does cyber liability insurance cover HIPAA fines? Many policies cover regulatory defense costs and some penalties, but coverage varies significantly. Review policy language carefully before purchasing.

Running a compliant, properly insured California medspa requires attention to details that many operators overlook until problems arise. The intersection of medical regulations, employment law, and insurance requirements creates complexity that generic coverage programs don't address.

Start by auditing your current structure against CPOM requirements and supervision protocols. Review your insurance policies to confirm they cover your actual operations: the procedures you perform, the providers who perform them, and the entities that employ them. If gaps exist, address them before a claim forces the issue. Contact Fusco Orsini & Associates for a comprehensive coverage review tailored to California medspa operations.