Insurance and workplace safety for California med spas
What insurance and safety rules apply to a California med spa as an employer?
Workers' compensation is required from the first employee
A California med spa must carry workers' compensation insurance as soon as it has one employee, whether that person is a nurse injector or a receptionist.
The Department of Industrial Relations states that California employers are required by law to have workers' compensation insurance even if they have only one employee, and that the employer must pay workers' compensation benefits when employees are hurt or made ill by their work. A needlestick is exactly that kind of injury.
In a two-entity structure, each entity that employs people needs its own cover. Clinical staff usually belong to the medical corporation; front-desk staff may belong to the management company, as the MSO page describes.
The California Department of Industrial Relations states that employers are required by law to have workers' compensation insurance even if they have only one employee. — California Department of Industrial Relations, retrieved 2026-09-27
Which entity is the employer decides whose policy responds
In a two-entity med spa, the workers' compensation duty falls on whichever company actually employs each person, so the payroll records and the policies have to line up.
The Department of Industrial Relations frames the obligation around the employer: if employees are hurt or become ill because of their work, the employer is required to pay workers' compensation benefits. A nurse employed by the medical corporation is that corporation's responsibility; a receptionist on the management company's payroll is the management company's.
Mismatches are common when a management company "lends" clinical staff to the practice. The Medical Board's guidance already places hiring and firing of clinical staff with the physician practice, and keeping clinicians on the practice's own payroll keeps the workers' compensation picture consistent with that rule.
The Department of Industrial Relations states that if employees are hurt or become ill because of work, the employer is required to pay workers' compensation benefits. — California Department of Industrial Relations, retrieved 2026-09-27
The Medical Board's guidance names lay control of the hiring and firing of healthcare staff among the business arrangements that violate the law. — Medical Board of California, retrieved 2026-09-27
Any injecting practice needs a written exposure control plan
Cal/OSHA's bloodborne pathogens standard requires every employer whose staff are exposed to blood to keep a written exposure control plan, reviewed at least once a year.
Title 8, section 5193 of the California Code of Regulations applies to all occupational exposure to blood or other potentially infectious materials. A med spa that injects neurotoxin or filler, or performs microneedling, has that exposure. The employer must establish, implement and maintain an effective written plan designed to eliminate or minimise it.
The standard requires the plan to be reviewed and updated at least annually and whenever tasks, technology or positions change. Adding a new treatment, such as a new device that breaks the skin, is a trigger for review.
8 CCR 5193Cal/OSHA's standard at 8 CCR 5193 requires employers with occupational exposure to blood to maintain a written exposure control plan. — California Department of Industrial Relations, Cal/OSHA, retrieved 2026-09-27
The exposure control plan must be reviewed and updated at least annually and whenever necessary to reflect new tasks, technology or positions. — California Department of Industrial Relations, Cal/OSHA, retrieved 2026-09-27
Hepatitis B vaccination and the sharps injury log have fixed deadlines
Employees exposed to blood must be offered hepatitis B vaccination within 10 working days of starting, and every sharps injury must be logged within 14 working days of being reported.
Section 5193 requires the employer to make the vaccine available within 10 working days of initial assignment, unless the employee has already been vaccinated, is immune, or has a medical contraindication. An employee who declines signs a declination form, and the practice keeps it.
The sharps injury log records each exposure incident involving a sharp, including the date and time, the type and brand of device, a description of the incident, and whether an engineered safety feature was in use. The practice has 14 working days from the report to record it.
| Requirement | Deadline |
|---|---|
| Written exposure control plan review | At least annually |
| Hepatitis B vaccine offered to exposed staff | Within 10 working days of assignment |
| Sharps injury log entry | Within 14 working days of the report |
10 working daysUnder 8 CCR 5193, hepatitis B vaccination must be made available to exposed employees within 10 working days of initial assignment. — California Department of Industrial Relations, Cal/OSHA, retrieved 2026-09-27
14 working daysUnder 8 CCR 5193, each sharps exposure incident must be recorded in the sharps injury log within 14 working days of being reported. — California Department of Industrial Relations, Cal/OSHA, retrieved 2026-09-27
Complications are the physician's responsibility, so plan for them
The supervising physician is responsible for treating complications and emergencies arising from delegated treatments, so the practice needs written emergency protocols and professional liability cover sized to that role.
The Medical Board's med spa guidance states that physicians who perform or delegate treatments are responsible for their patients' care and must ensure back-up systems and emergency plans are in place. For an injecting practice that means a written plan for vascular occlusion, anaphylaxis and laser burns, with the physician reachable to act on it.
The medical corporation's liability wall does not cover a clinician's own negligence, as the entity page explains. Professional liability insurance is what responds to that exposure, and each clinician's policy should name the practice setting and the procedures performed.
The Medical Board states that physicians who perform or delegate treatments are responsible for their patients' care and must ensure back-up systems and emergency plans are in place. — Medical Board of California, retrieved 2026-09-27
Informed consent is part of the practice's risk file
Every medical procedure in a California med spa must be preceded by informed consent covering the treatment's nature, risks and benefits, and the alternatives, including no treatment.
The Medical Board's guidance sets out that minimum from California case law and assigns the responsibility to the physician, even where a nurse performs the treatment. A signed consent form tailored to each procedure is the record that the conversation happened.
Consent forms, the exposure control plan and the standardized procedures belong in one file that is reviewed together each year. Who can perform treatments covers the supervision paperwork that sits alongside them, and the annual calendar is where the review date goes.
The Medical Board's guidance states that all medical procedures must be preceded by informed consent covering the treatment's nature, risks and benefits, and alternatives including no treatment. — Medical Board of California, retrieved 2026-09-27
Questions
Does California require med spa physicians to carry malpractice insurance?
This page does not state a general statutory mandate, because none was confirmed in the sources reviewed. The physician's responsibility for delegated treatments and complications is clear, which is why cover sized to that role is standard practice.
Does a practice with only an owner physician and no employees need workers' compensation?
The Department of Industrial Relations requirement is triggered by having employees. Once the practice hires its first nurse or receptionist, cover is required even for that one person.
Does the bloodborne pathogens standard apply to a laser-only practice?
It applies wherever employees have occupational exposure to blood or other potentially infectious materials. A practice that never breaks the skin may have little exposure, but most med spas add injectables or microneedling, which bring it within scope.