North Carolina med spa advertising rules come from four regulators: the NC Medical Board, HIPAA, the FTC, and the FDA. Most marketing advice in this niche cites other blogs instead of the law; this guide points at the regulations themselves. It is an educational overview from a marketing practice, not legal advice; every med spa should have a healthcare attorney.
Four regulators, one ad
A single med spa Instagram ad can implicate the North Carolina Medical Board (who is allowed to practice and advertise medicine), HIPAA (whose photo and story that is), the FTC (what the testimonial claims), and the FDA (what the injectable is approved to treat). None of these agencies coordinates with the others, and compliance with one is not compliance with the rest.
| What it governs | The rule | What it means for marketing |
|---|---|---|
| Who owns and advertises a med spa in NC | NC Medical Board Position Statement 10.1.2 (corporate practice of medicine) | Medical practices must be physician-owned; marketing should make the supervising physician identifiable |
| Before/after photos and patient stories | HIPAA - 45 CFR §160.103 (PHI definition) and §164.508 (authorizations) | Identifiable photos are protected health information; marketing use needs a specific signed authorization |
| Testimonials and results claims | FTC Endorsement Guides, 16 CFR Part 255 (revised 2023) | A testimonial is your claim; you must be able to substantiate it as typical |
| What injectables can be advertised for | FDA approval labeling | Off-label uses are legal to perform but cannot be advertised as FDA-approved |
North Carolina: the ownership question behind every med spa
The NC Medical Board's position - stated in Position Statement 10.1.2 on the corporate practice of medicine, most recently amended in September 2025 - is that businesses practicing medicine in North Carolina must be owned by holders of active NC medical licenses. That is why NC med spas operate through physician-owned professional entities, often with a management services organization (MSO) handling the business side, and why a physician medical director actively supervising treatments is not a formality. The marketing consequence: the board expects the medical side of the operation to be real and visible - naming the medical director on the website and advertising only services your clinicians are actually licensed to provide are both board-recommended practice, and both NC boards have publicly noted increased investigation activity around med spas in recent years.
HIPAA: the before/after photo is not yours
Before-and-after photos are the currency of aesthetics marketing, and they are the most commonly mishandled asset in it. A photo connected to an identifiable person and their treatment is protected health information. Using it in marketing requires a valid, specific HIPAA authorization signed by the patient - plain-language, covering that marketing use, kept on file for six years. A general photo consent buried in an intake packet does not meet that bar.
- Get a dedicated, signed marketing authorization for every identifiable photo - not an intake checkbox.
- Keep the signed forms; the retention obligation is measured in years, not campaigns.
- A patient posting their own results publicly does not authorize you to repost them with treatment details.
- The review-reply trap: responding to a Google review with treatment specifics - or even confirming the reviewer was a patient - is itself a disclosure. Reply warmly and generically.
FTC: your testimonial is your claim
Under the FTC's Endorsement Guides (16 CFR Part 255, substantially revised in 2023), a customer testimonial in your marketing is treated as a claim you are making. If the result it describes is not what a typical client should expect, the ad is deceptive - and the FTC has been explicit that a "results not typical" disclaimer does not fix it. Health-related claims sit under an even higher bar: the FTC's health products guidance expects competent and reliable scientific evidence behind efficacy claims, and liability reaches the business owners personally, not just the entity.
FDA: approved, off-label, and the ads that confuse them
Botox Cosmetic's FDA approval covers a short, specific list of treatment areas - the glabellar frown lines, crow's feet, and forehead lines. Popular treatments like lip flips or jawline slimming are off-label: legal for a licensed provider to perform in their clinical judgment, but advertising them as FDA-approved is false advertising, and dramatic efficacy language ("clinically proven to erase wrinkles instantly") invites exactly the scrutiny a growing med spa does not need. The safe pattern is simple: describe off-label treatments honestly as what they are, and keep FDA language attached only to what the label actually says.
What this means for whoever runs your marketing
Most of the med spa marketing sold to Charlotte businesses is produced by out-of-market template agencies, and almost none of it is built by people who have read any of the above. The pattern to insist on from any agency: photo authorizations tracked before creative ships, testimonial claims that survive the typicality test, FDA language checked against labels, review replies written to disclose nothing, and the medical director presented the way the board expects. None of it limits good marketing - it limits the shortcuts that turn into board complaints.
Sources
- NC Medical Board Position Statement 10.1.2: Corporate Practice of Medicine - Adopted March 2016, amended September 2025: businesses practicing medicine in North Carolina must be owned entirely by holders of active NC licenses.
- 45 CFR §160.103 - Definitions (protected health information)
- 45 CFR §164.508 - Uses and disclosures for which an authorization is required - §164.508(a)(3): an authorization is required for any use or disclosure of PHI for marketing; §164.508(c) sets the required elements and the plain-language rule.
- 16 CFR Part 255 - Guides Concerning the Use of Endorsements and Testimonials in Advertising - Revised 88 FR 48102, July 26, 2023. §255.2(b): an ad must disclose the generally expected performance, with substantiation.
- FTC: Health Products Compliance Guidance - December 2022. Competent and reliable scientific evidence standard; 'results not typical' disclaimers are insufficient; liability reaches individuals who control the marketing.
- BOTOX Cosmetic (onabotulinumtoxinA) prescribing information - DailyMed, National Library of Medicine - Labeled indications: moderate to severe glabellar lines, lateral canthal lines, forehead lines, and platysma bands.