What Med Spa & Wellness Practices Need to Know Now That Indiana SB 282 Has Passed

If you run a med spa or wellness practice in Indiana, you’re already aware: SB 282 is now law. Signed by the Governor, passed by both chambers. It’s official.

The statute is final. The reality of how your business will operate under it is not.

Right now, quietly and largely out of view, the most important decisions are being made during the rulemaking phase. These decisions will determine whether your current model survives intact, needs restructuring, or stops working altogether.

SB 282 establishes the framework. The operational details that actually affect your day-to-day are still being defined.

The Indiana Medical Board and the Board of Pharmacy are actively building that framework now, with registration requirements expected to begin in January 2027.

What’s at stake isn’t abstract. It’s concrete:

• Who can own what
• Who has to be present, and how often
• What qualifies as compliant oversight
• Where services can legally be delivered

Those answers are not fully written yet. Once they are, they won’t be easy to change.

What SB 282 Actually Does

At a high level, the law forces transparency and accountability into a space that has historically operated with wide variability.

Non-physician-owned practices offering aesthetic, wellness, hormone, IV therapy, or peptide services must register with the state. Each registered practice must designate a “responsible practitioner” (MD/DO, NP, or PA) who is publicly listed and accountable for both the services provided and the qualifications of the people providing them.

That’s not a nominal role. That practitioner is expected to:

• Know what treatments are being offered
• Know who is performing them
• Ensure those individuals are appropriately trained and qualified

Their name is on a public registry. The risk is personal and visible by design.

The law also applies across the board: to injectables, lasers, RF, and other energy-based devices. Delegation still exists, but oversight is no longer a best practice. It’s a statutory requirement.

Where Things Get Complicated

The statute uses broad language. Rulemaking will decide what that language actually means.

From a compliance standpoint, these are the pressure points:

“Responsible practitioner” has no clear operational definition yet.
The term appears in the statute, but what it actually requires — how often that person must be present, what their involvement must look like — is entirely up to rulemaking. Don’t assume the statute answers this. It doesn’t.

Ownership structure is a looming fault line.
The statute uses the term “physician’s office” — not “physician-owned practice.” That distinction may seem minor. It isn’t. Whether your structure qualifies as a physician’s office versus a non-physician-owned practice subject to registration could hinge entirely on how rulemaking defines that phrase. MSOs, co-owned entities, and hybrid structures are all sitting in that grey zone right now. The rules will decide who has to register and who doesn’t.

Good faith exams are no longer flexible.
The statute indicates GFEs must be performed by a prescriber — MD, DO, NP, or PA. If RNs are conducting GFEs in your current model, that’s the direction this is heading. Rulemaking will confirm the specifics, but don’t wait on this one.

Mobile and home-based services are directly exposed.
The law requires treatments to occur in registered clinical locations. Mobile IV, concierge Botox, pop-ups: these don’t fit cleanly into the statute as written.

Telehealth has limits.
Remote oversight won’t carry the same weight. The law anticipates real, physical practitioner involvement. Not just a name on paper.

Who Feels This Most

Not all practices are equally exposed.

The ones most at risk:

• RN-owned practices with minimal physician or prescriber oversight
• Mobile or home-based service models
• Practices relying on absentee medical directors

These are common operating models. Not edge cases.

For NP- and PA-owned practices with strong clinical governance, this is more manageable. But even those operators should expect to tighten documentation, oversight protocols, and delegation structures once rules are finalized.

The Bigger Picture: Why This Bill Exists

SB 282 didn’t emerge in a vacuum.

It started as a compounding bill, largely tied to pressure around the GLP-1 market — specifically, legislation pushed in response to the GLP-1 compounding boom. Med spas were pulled into the conversation because regulators were already hearing concerns about inconsistent practices in aesthetics.

And the uncomfortable truth: many of the people shaping this legislation did not fully understand how med spas operate.

Testimony included basic, misaligned questions about investigations and compounding practices. Signals that the regulatory lens was broad, not precise.

This matters because the rules now being written will fill in those gaps, potentially without enough real-world input.

Indiana Is Being Used as a Test Case

If you’re outside Indiana, this is not something to ignore.

This wasn’t a one-off bill. Nearly identical legislation was introduced across multiple states (Florida, Arizona, Colorado, Iowa, Massachusetts) at the same time.

Indiana just got there first.

What regulators decide here — how strict they get, how they define oversight, how they enforce — will absolutely influence what comes next in your state.

What Comes Next Will Decide Everything

The rulemaking phase will define:

• What “responsible practitioner” actually means in practice
• How often that practitioner must be present
• What qualifies as a “physician’s office”
• How registration applies to complex ownership and location models
• How aggressively compliance is enforced

This is where the real law gets written.

And if the industry isn’t paying attention — or worse, assumes this will “work itself out” — regulators will make those decisions without meaningful operator input.

What MedSpire Recommends Right Now

At MedSpire Health, compliance isn’t something we layer on after the fact. It’s the foundation we help practices build on. Here’s what we’re telling our clients:

Audit your oversight structure.
Document who your responsible practitioner is, what they know about your operations, and how often they’re on-site. If you can’t answer those questions clearly today, you won’t be able to answer them for a regulator tomorrow.

Review your GFE workflow and start building the right protocol now.
The law takes effect July 1, 2026, but registration requirements don’t begin until January 1, 2027, after rules are finalized around October 2026. That doesn’t mean you wait. Use this window to audit your GFE workflow and build the right protocol now, before rulemaking closes the door on easy fixes.

Map your locations against future registration requirements.
If you operate mobile, home-based, or multi-site services, start mapping each location against the registration requirements. Identify which sites may not qualify and develop contingency plans. Do not assume they will be grandfathered in.

Track the rulemaking process closely.
The statute is just the starting line. The rules that emerge over the next six months will determine how this law actually operates. Stay connected to industry associations tracking this in real time.

Stop thinking of this as “an Indiana issue.”
If you’re operating in any state with pending med spa legislation, the compliance questions are the same. Get ahead of it.

Key Dates to Know

• July 1, 2026: Law takes effect
• October 2026 (est.): Rulemaking finalized
• January 1, 2027: Registration requirements begin

The Bottom Line

SB 282 isn’t the end of the regulatory conversation for med spas. It’s the opening statement. The real impact will be shaped by rulemaking decisions being made over the next six months, and practices that engage now will be in a far stronger position than those scrambling to catch up in January 2027.

If your compliance infrastructure isn’t ready for this kind of regulatory shift, MedSpire Health can help. We work with med spas, wellness clinics, and telehealth platforms to build the operational and compliance frameworks that keep you practicing confidently, no matter what the regulatory landscape looks like.

Questions about how SB 282 affects your practice? Reach out to the MedSpire Health team at info@medspire-health.com.

By Paula Kokko, Founder & CEO, MedSpire Health

This post is for informational purposes only and does not constitute legal advice. Consult with a qualified healthcare attorney for guidance specific to your practice.