Med Spa Standing vs. Patient-Specific Orders Explained
Understand the delegation rule that trips up med spas: standing orders vs. patient-specific orders, state rules, and chart requirements. August 2026
TL;DR
5 key points- 01Standing orders and patient-specific orders are both legally required delegation documents; treating without one is unauthorized practice of medicine
- 02A standing order only covers patients who meet its pre-defined eligibility criteria and must carry a current physician signature, with several states setting an explicit review interval
- 03California and Arizona now require patient-specific orders for higher-risk treatments, and regulators flag missing or generic orders as a top inspection failure
- 04Your chart must confirm protocol eligibility under a standing order or document prescriber clinical reasoning under a patient-specific order, or the authorization collapses
- 05Decoda Health's AI Scribe generates real-time visit notes, and role-based permissions restrict record access by staff role
What Is a Standing Order in a Med Spa Context?
A standing order is a written authorization signed by a supervising physician (or, in states that grant full practice authority, a nurse practitioner) that permits delegated clinical staff to perform specified treatments without waiting for a real-time, patient-by-patient directive. The treating provider doesn't need to be present for each appointment. The order is already on file.
The concept originated in hospital and primary care settings, where staff needed clear authority to act quickly on routine protocols. As aesthetic medicine grew more medically complex, the model followed, giving med spas a way to delegate injections, laser procedures, and IV therapy without requiring a physician's direct sign-off on every appointment.
What Is a Patient-Specific (Individual) Order?
A patient-specific order (PSO) is a direct clinical authorization issued by a licensed prescriber for one named patient, for one treatment, at one visit. Where a standing order covers a category of patients meeting defined criteria, a PSO is tied to a person. The prescriber has reviewed that patient's history, assessed their clinical picture, and authorized the specific treatment based on what they found.
That evaluation step is the key distinction. A PSO requires the prescriber to form a clinical judgment about that individual before the order exists. In practice, this happens either through an in-person visit or a good-faith exam conducted via telehealth. The order follows their assessment, not the other way around.
PSOs carry a higher standard of clinical accountability. The prescriber's name and judgment are attached to one patient's treatment. If something goes wrong, the paper trail leads directly to a documented clinical decision about that specific person, not a generalized standing authorization.
How Standing Orders and Individual Orders Differ: Side-by-Side
Dimension | Standing Order | Patient-Specific Order |
|---|---|---|
Who issues it | Supervising physician or NP (where full practice authority applies) | Licensed prescriber who assessed the patient |
When it applies | Any patient meeting pre-defined eligibility criteria | One named patient, one visit, one treatment |
Patient exam required | No exam at time of treatment | Yes, prior to the order being issued |
Documentation | A single signed protocol on file covers qualifying patients | Separate order generated per patient, per visit |
Liability anchor | Supervising provider who signed the protocol | Prescriber who reviewed and authorized for that individual |
The dividing line between these two order types is the pre-treatment evaluation. Standing orders work when the protocol itself defines who qualifies and the delegated provider applies clinical judgment at the point of treatment to confirm eligibility. With a patient-specific order, the prescriber makes that eligibility call first, and the order follows.
The Delegation Rule at the Center of the Debate
Every medical treatment a delegated provider performs in a med spa needs legal authorization from a licensed prescriber. That authorization is either a standing order or a patient-specific order. Without one of those two documents in place, the treatment is the unauthorized practice of medicine.
Delegation rules vary by state, but the underlying structure is consistent: Texas med spa law makes clear that standing orders authorize non-physician personnel to act "under defined circumstances without a direct patient-specific order" only when the supervising physician has signed off on the protocol and its scope. That signature is what makes the delegation legal. Let it lapse without renewal, and the authorization disappears with it.
The 2026 state-by-state med spa compliance reference identifies missing or generic provider orders as one of the most-flagged gaps regulators are finding during inspections. Practices working through these changes can find a current breakdown in this 2026 med spa laws state guide.
When Standing Orders Are Legally Valid
Standing orders hold up legally when they meet specific structural requirements. Most state boards look for all of the following:
- Written and signed by a licensed physician (or NP where full practice authority applies)
- Each covered procedure identified by name, not described in general terms
- Patient eligibility criteria and contraindications spelled out explicitly
- Staff roles authorized to perform each treatment specified by license type
- A renewal cycle, typically annual, with a fresh physician signature
That last point trips up a lot of practices. A standing order written three years ago and never reviewed is not a compliance asset. The supervising physician's authority to delegate only extends as far as their current, active signature. An expired order is functionally the same as no order at all when a regulator comes looking.
What Must Be Included in a Standing Order Document
A standing orders packet that can survive a board audit needs more than a physician signature. A complete document covers:
- Supervising physician's name, license number, and scope of practice
- Names of delegated staff authorized to perform treatments, by license type
- Locations where the orders apply
- Each covered procedure listed explicitly (Botox, fillers, laser, IV therapy, etc.)
- Patient eligibility criteria and contraindications per procedure
- Step-by-step clinical protocols for each treatment
- Consent and pre-treatment assessment requirements
- Physician availability and supervision terms
- Staff training and competency verification records
- Expiration date and renewal schedule
Generic language anywhere in this list is a liability. Regulators who find a standing order covering "aesthetic injectables" without naming specific treatments, dosage ranges, or eligible patient criteria will treat the document as incomplete.
When a Patient-Specific Order Is Required Instead
Standing orders cover a lot of ground, but certain circumstances take them off the table entirely.
California has moved toward requiring patient-specific orders for medical aesthetic treatments, and Arizona's 2026 Board of Nursing advisory opinion now requires a written provider order from an MD, DO, or NP for every Level II/III treatment, mirroring California's patient-specific standard. Even in states without an explicit mandate, a patient-specific order is generally required when:
- A patient is new and hasn't been assessed under the practice's standing order criteria
- The patient's medical history falls outside the protocol's eligibility parameters
- A good faith exam has been conducted, and its findings must be tied to a specific treatment authorization
- A procedure carries a higher risk that the standing order's criteria don't adequately account for
The global medical spa market has expanded sharply, and regulators have responded in kind, particularly around high-growth service lines like GLP-1 peptide programs. A standing order considered sufficient three years ago may not satisfy a board inspection today.
The Good Faith Exam and Its Relationship to Both Order Types
A good faith exam is a clinical evaluation that determines whether treatment is appropriate for a specific patient. The order, whether standing or patient-specific, is what authorizes the treatment to happen. These are two distinct documents serving two distinct functions.
Where the GFE fits depends on which order type governs the visit. Under a standing order, the GFE confirms the patient meets the eligibility criteria already defined in that protocol. If the patient falls outside those criteria, the standing order cannot cover them regardless of what the GFE finds. Under a patient-specific order workflow, the prescriber reviews the exam findings and issues an order for that patient's treatment directly.
Arizona's 2026 Board of Nursing advisory opinion makes this distinction concrete: it requires a written provider order for every Level II/III treatment, and conducting a GFE without generating a patient-specific authorization afterward does not satisfy that standard. The exam must be followed by an individual order.
How State Law Shapes Which Order Type You Need
State-level rules determine whether standing orders are even viable for a given treatment category. No single national template covers every state.
Texas maintains a standing order framework under Texas Medical Board delegation rules, giving practices real structural flexibility when protocols are properly drafted and signed. Documentation obligations extend beyond orders. Before-and-after photo compliance is another area regulators audit carefully. New York sits at the other end: the New York State Education Department requires RNs to execute medical regimens ordered for a specific patient in most cases, with non-patient-specific orders permitted only under narrow, defined conditions. California and Arizona have both moved toward individual provider orders for higher-risk treatment categories, while Illinois, a reduced-practice NP state, requires physician-led oversight structures that shape how standing orders can be issued at all.
Your delegation model must be built around your state's specific board rules, not industry convention.
Common Mistakes Med Spas Make With Standing Orders
Regulators auditing med spas return to the same documentation failures repeatedly. The errors below are the ones most likely to surface during a board investigation or malpractice review.
- Using a boilerplate template. A generic standing order downloaded from the internet and signed by a physician rarely meets state board standards. Auditors look for procedure-specific detail: named treatments, dosage parameters, contraindication criteria. Vague language covering "aesthetic injectables" broadly is treated as an incomplete document.
- Services not listed in the order. If a practice adds laser treatments or IV therapy after the original standing order was signed, those services are not covered. Only procedures explicitly named in the signed order fall within its authorization.
- No annual renewal. A standing order signed two years ago with no subsequent physician review has functionally lapsed. Most states expect periodic re-authorization, and an undated renewal carries the same risk.
- Unlisted providers performing treatments. If a newly hired RN is not named in the standing order, they are not authorized under it. Every delegated staff member must appear in the document by name and license type. Practices offering IV therapy or peptide services should also review how a med spa EMR handles lab ordering to keep order documentation complete.
- Substituting a standing order for a required good faith exam. A standing order authorizes a category of treatment for eligible patients. It does not replace the clinical evaluation required before certain procedures or patient profiles.
How Documentation and Recordkeeping Connect to Order Type
The order type governs the treatment and what has to be in the chart afterward.
Under a patient-specific order, the record must reflect the prescriber's clinical reasoning: what they found during evaluation, why the treatment was appropriate, what was authorized, and at what dose. The chart is the evidence that a licensed provider made an individualized clinical decision before anything was injected or applied.
Under a standing order, the chart must show the patient met eligibility criteria, that contraindications were screened, and that the treatment matched what the signed protocol permitted. A chart entry that records the treatment without confirming protocol eligibility is the most common reason a standing order defence collapses during a board investigation or malpractice dispute. Structured clinical charting tools help providers consistently capture every required field at the point of care.
Chart Element | Standing Order Visit | Patient-Specific Order Visit |
|---|---|---|
Eligibility criteria met | Required | Not applicable |
Prescriber clinical rationale | Not applicable | Required |
Contraindication screening | Required | Required |
Treatment delivered vs. authorized | Must match protocol | Must match individual order |
Provider who administered | Must be listed in standing order | Must align with prescriber authorization |
How Decoda Health Supports Delegation Compliance Documentation
Compliant delegation documentation happens at the point of care, not during an audit scramble. Decoda Health's ambient AI Scribe generates clinical notes in real time for each patient visit, producing the individual treatment records that patient-specific order frameworks require. Digital intake forms and consent workflows capture eligibility data before any authorization decision is made. For multi-provider practices, role-based permissions restrict clinical record access by staff role, directly supporting the supervision documentation state medical boards are auditing.
Final Thoughts on Standing Orders and Patient-Specific Orders in Med Spas
The choice between a standing order and a patient-specific order is less about preference and more about what your state board requires and what your patient population actually looks like. Both order types work when they are drafted correctly, kept current, and matched to the right clinical situation. Where things break down is in the details: missing procedures, unlisted staff, and charts that never confirmed eligibility. Book a call with Decoda Health to see how real-time clinical documentation supports the compliance record your practice needs.
Frequently Asked Questions
What's the difference between a med spa standing order and a patient-specific order?
A standing order is a written protocol signed by a supervising physician that authorizes delegated staff to treat any patient who meets pre-defined eligibility criteria — no real-time prescriber sign-off required per visit. A patient-specific order is issued for one named patient after a licensed prescriber has evaluated them directly. The practical difference is who makes the eligibility call: under a standing order, the delegated provider confirms the patient fits the protocol at the point of treatment; under a patient-specific order, the prescriber makes that determination first and the authorization follows.
Do med spa standing orders need to be renewed, and how often?
Yes — most state boards expect periodic re-authorization, typically annual, with a fresh physician signature. A standing order written two or three years ago without documented review has functionally lapsed. During a board investigation or malpractice dispute, an expired order carries the same legal weight as no order at all, which shifts the treatment into unauthorized practice of medicine territory regardless of how routine the procedure was.
Which states require patient-specific orders instead of standing orders for aesthetic treatments?
California and Arizona have both moved toward requiring individual provider orders for higher-risk treatment categories. Arizona's Board of Nursing advisory opinion on medical aesthetic procedures requires a written order from an MD, DO, or NP for every Level II/III treatment — conducting a good faith exam alone does not satisfy that requirement without a follow-on patient-specific authorization. New York permits non-patient-specific orders for RNs only under narrow defined conditions. Texas maintains a standing order framework with real structural flexibility when protocols are properly drafted and signed. Because rules vary by state and treatment category, your delegation model has to be built around your specific board's requirements.
Can a good faith exam substitute for a patient-specific order in states that require one?
No. A good faith exam is a clinical evaluation that determines whether treatment is appropriate for that patient. The order — standing or patient-specific — is the separate document that authorizes the treatment to proceed. Under Arizona's 2026 standard, completing a GFE without generating a written provider order afterward does not meet compliance requirements. The two documents serve different legal functions and one cannot replace the other.
What should a med spa's standing orders packet include to survive a board audit?
A complete standing orders packet names the supervising physician with their license number, lists every delegated staff member by name and license type, identifies each covered procedure explicitly (not described in general terms like "aesthetic injectables"), spells out patient eligibility criteria and contraindications per procedure, includes step-by-step clinical protocols, documents consent and pre-treatment assessment requirements, states supervision terms, and carries an expiration date with a renewal schedule. Generic language anywhere in that list is an audit risk — regulators who find vague scope language treat the document as incomplete, regardless of whether a physician signature is present.
What happens to treatments already performed if a standing order is found to have lapsed during a board investigation?
Treatments performed under an expired standing order are treated as unauthorized practice of medicine from the moment the order lapsed, regardless of how routine the procedure was. The delegated provider and the supervising physician can both face disciplinary action, and the practice's malpractice coverage may not apply to those visits since the authorization underlying them was invalid.
Can a newly hired RN perform treatments on their first day if the practice already has a standing order on file?
Only if that RN is explicitly named in the standing order by name and license type. A standing order covers the staff listed in the document at the time it was signed. Adding a new provider to the practice without updating the standing order means they have no legal authorization to treat under it — the order must be amended with the supervising physician's signature before that provider can work within the protocol.
Should I use standing orders or patient-specific orders for GLP-1 and peptide programs at my med spa?
Peptide and GLP-1 services typically require patient-specific orders because they involve prescriber-evaluated clinical parameters — dosing, eligibility, and contraindications that vary meaningfully from patient to patient. A standing order may cover routine eligibility screening, but any service line where the prescriber's individual clinical judgment directly shapes dosing or treatment selection generally needs a documented per-patient authorization to hold up under audit.
How granular do staff access controls need to be in a med spa EMR to support delegation compliance?
Role-based permissions need to be granular enough to restrict who can create, edit, or view clinical records by license type — not just by job title. State boards auditing delegation compliance look for evidence that unlisted or unauthorized staff could not access or modify treatment records. A system that lets a front desk coordinator edit a clinical note carries the same audit risk as a standing order that names the wrong staff roles.
What is the liability difference between a standing order and a patient-specific order when a patient outcome is disputed?
Under a standing order, liability anchors to the supervising physician who signed the protocol and the delegated provider who confirmed eligibility at the point of treatment. Under a patient-specific order, the prescriber who evaluated the individual patient and issued the authorization bears direct clinical accountability for that treatment decision. Patient-specific orders create a cleaner paper trail to one clinical decision-maker, which cuts both ways: the documentation is stronger, but the prescriber's individual judgment is more directly on the line.
What's the fastest way to check whether my standing orders actually cover the services my team is currently performing?
Pull your signed standing order and compare the procedure list against your active service menu. Every treatment your delegated staff performs needs to appear in the order by name — not by category. Laser services added after the original signature date, new injectable products, and IV formulations are common gaps. Any service not explicitly listed in the signed document is not covered, regardless of how long the practice has been offering it.
How does a med spa handle documentation when a patient doesn't meet standing order eligibility criteria during a visit?
When a patient presents and the delegated provider determines they fall outside the protocol's eligibility parameters, the standing order cannot be used for that visit. The provider must either pause the treatment and obtain a patient-specific order from a licensed prescriber who evaluates that patient, or decline the service. The chart should document why the standing order did not apply and what step was taken next — leaving that gap undocumented is a separate audit risk.
How does Decoda Health's AI Scribe support standing order compliance documentation at the point of care?
Decoda Health's ambient AI Scribe generates a clinical note in real time during each visit, capturing the treatment delivered, the provider who administered it, and the clinical context around eligibility screening. For practices operating under standing orders, that note is where protocol eligibility gets documented — the Scribe produces the per-visit record that shows the patient met criteria and contraindications were reviewed, which is exactly what a board audit looks for when evaluating whether the standing order defense holds.
Is it enough to have a medical director on paper, or does the supervising physician need to be actively involved in standing order oversight?
A medical director relationship exists on paper carries no compliance weight if the physician is not actively engaged in reviewing and renewing protocols, responding to clinical escalations within the timeframe your state requires, and maintaining the level of oversight your board defines as supervision. Regulators distinguish between a physician of record and a physician who actually supervises. An investigation that surfaces a physician who signed orders without meaningful clinical oversight can expose both the physician and the practice to disciplinary action.
What documentation should be in a patient chart after a visit conducted under a patient-specific order?
The chart needs to reflect the prescriber's clinical reasoning: what the evaluation found, why the treatment was appropriate for that individual, what was authorized by name and dose, and how the treatment delivered matched the written order. A chart that records the procedure without connecting it to the prescriber's documented clinical rationale gives auditors no way to verify the authorization was valid. The gap between what was ordered and what is documented in the chart is where patient-specific order defenses most often break down during malpractice review.