Georgia NP Practice Authority and What It Means for Medspas

Georgia gives nurse practitioners restricted practice authority, not full practice authority. That means an APRN cannot evaluate, treat, prescribe, or order tests without a signed protocol agreement in place. That rule applies to every medspa in the state, no matter who owns it.

• Nurse protocol agreement (NPA): Every APRN in Georgia needs one on file with a delegating physician, filed under O.C.G.A. § 43-34-25 and GCMB Rule 360-32.
• Delegation agreement (DA): Every PA in Georgia works under one, rather than an NPA, as provided in O.C.G.A. § 43-34-103.
• Ownership structure: A non-physician can own and finance a medspa, but cannot stand in for the physician named in the protocol agreement.
• Compliance exposure: A missing or incomplete agreement puts both the delegated provider and the practice at risk of board discipline.

The Georgia Composite Medical Board can request either agreement at any time and reviews it against the services the provider actually performs. An agreement that still lists last year’s service menu is treated the same as no agreement at all.

Georgia Medical Director Requirements for Medspas: 2026 Overview

A Georgia medspa medical director must meet the following core standards under GCMB oversight rules. The Georgia Composite Medical Board typically confirms these standards through a complaint investigation, so gaps often go unnoticed until a patient files one. Every standard applies whether the medical director works on site full time or checks in remotely.

• Licensure: The physician holds an active, unrestricted MD or DO license issued by the Georgia Composite Medical Board, since restricted, probationary, or lapsed licenses do not qualify.
• Direct clinical control: The physician, not the business owner or an outside manager, controls medical judgment, treatment protocols, and prescribing decisions.
• Filed protocol agreements: A written NPA covers every APRN, and a DA covers every PA, both specific to the services the medspa actually offers.
• Chart review: The physician conducts a regular, documented review of patient charts for every delegated procedure, not just a signature at intake.
• Quality assurance: Scheduled QA meetings address outcomes, adverse events, and protocol updates, with minutes kept on file.
• Availability: A defined plan covers physician consultation and emergency response, even when the director is not physically on site.

Meeting these standards on paper is not the same as meeting them in practice. When the Georgia Composite Medical Board investigates a complaint, it looks for documentation, so a chart review log or a set of QA minutes carries more weight than the medical director’s title on a wall license.

What Georgia’s Physician Protocol Requirement Actually Covers

Georgia requires four specific elements in every nurse protocol agreement before the GCMB treats it as valid. Each element has to match the medspa’s actual service menu. Copied templates almost always skip the chart review schedule and the emergency plan, which are the two elements GCMB reviewers check first.

• Authorized procedures: The agreement names the specific procedures the NP is permitted to perform, such as injectables, IV therapy, or laser treatments.
• Prescribing limits: The agreement defines prescribing authority down to the drug class, not a blanket reference to medications in general.
• Chart review schedule: The agreement sets a fixed schedule for the physician to review the NP’s patient charts.
• Emergency plan: The agreement lays out a specific response plan for situations the NP cannot handle alone.

A protocol agreement that still describes general aesthetic services, instead of the specific injectables or devices the medspa actually uses, is the most common reason the GCMB rejects one during a complaint review.

Georgia Medspa Ownership and Licensing Rules

Georgia does not enforce a strict corporate practice of medicine doctrine, so a non-physician can generally own and finance a medspa. The medical director, not the owner, has to direct treatment protocols, prescribing, and delegation decisions. Beyond that oversight requirement, a Georgia medspa needs several additional licenses and permits to operate legally.

• Business license: The medspa needs a standard business license from its county or city.
• Health department permits: The medspa needs permits specific to the medical services it offers.
• DEA registration: The medical director or a delegated provider needs DEA registration if the medspa prescribes controlled substances.
• Laser and device rules: Laser and energy-based devices fall under separate GCMB delegation rules that require documented operator training.

A missing business license or an expired health department permit gives an inspector grounds to shut down operations immediately, even when the medical director relationship is fully compliant.

Common Georgia Medspa Compliance Mistakes

Most Georgia medspa violations trace back to the same handful of gaps. Each one tends to surface during a Composite Medical Board complaint investigation. Fortunately, you can fix all five with better documentation, and doesn’t require a system overhaul.

• Unsigned agreements: An NP treats patients before the nurse protocol agreement is signed and filed, not just drafted.
• Generic service lists: A protocol agreement lists general aesthetic services instead of the specific procedures actually performed.
• Unreviewed signatures: A physician signs a protocol agreement without reviewing it against the medspa’s real service menu.
• Undocumented reviews: Chart reviews happen without a written record, leaving no proof the physician ever looked at them.
• Unreachable directors: A medical director is not reasonably available for consultation, leaving delegated staff without a real point of contact.

Any one of these gaps is enough to trigger a Georgia Composite Medical Board complaint. Fixing them before an inspection is far less costly than fixing them after one.

How Medical Director Co. Serves Georgia Medspas

Medical Director Co. places Georgia-licensed physicians as compliant medical directors for medspas across the state, including the fast-growing Atlanta market and its suburbs. Every placement includes protocol agreements reviewed by our in-house healthcare attorney, so the paperwork matches the services your medspa actually offers, not a generic template. Placement runs $799 a month, with no setup fees and no long-term contract. You get an active, unrestricted Georgia MD or DO, documented chart review, and a director who is genuinely reachable.

Get Your Georgia Medspa MD in 24 Hours

If your Georgia medspa does not have a compliant medical director in place, every day of operation adds risk. Medical Director Co. can place a Georgia-licensed physician, with a signed and reviewed protocol agreement, in 24 hours. That placement includes the physician’s verified license, the reviewed protocol agreement, and a chart review schedule set before you treat your first patient.