FDA and FTC advertising rules for MedSpas: a primary-source guide

MedSpa advertising can trigger several different rule sets. The Federal Trade Commission focuses on whether advertising is truthful, non-deceptive, and properly substantiated. Food and Drug Administration requirements depend on the regulated product and who caused the promotion. State licensing, privacy, and professional advertising rules can add stricter requirements.

This guide is general educational information about advertising compliance. It is not legal or medical advice, does not recommend any prescription drug, device, procedure, or provider, and is not a substitute for review by qualified counsel and the relevant state licensing board. Product labeling and laws change, so verify current FDA labeling and current federal and state requirements before publishing an advertisement. The sources below were reviewed on July 10, 2026.

The short answer

A MedSpa ad should not promise a result that the practice cannot substantiate before publication. A disclosure cannot repair a contradictory headline, image, or overall impression. Patient photos, testimonials, reviews, treatment names, clinical imagery, and pricing can all communicate claims even when the copy avoids an explicit promise.

Use five questions before a claim goes live:

1. What exact express or implied claim will a reasonable viewer take from the complete ad?
2. What evidence existed before publication, and does it match the exact product, use, population, outcome, and duration claimed?
3. Does the ad omit a material limitation, risk, condition, or commercial relationship?
4. Does it imply that FDA approved a clinic, provider, broad treatment category, or use that FDA did not approve?
5. What does the relevant state require for the provider, service, image, testimonial, and price claim?

FTC health-claim substantiation applies to the complete impression

The FTC’s Health Products Compliance Guidance says objective express and implied health claims must be truthful, not misleading, and supported before the ad runs. The FTC evaluates the complete net impression, not isolated sentences. Headlines, procedure names, before-and-after photos, charts, white coats, medical symbols, testimonials, and omitted facts can change that impression.

Health benefit and safety claims generally require competent and reliable scientific evidence. The evidence needed is claim-specific. The FTC does not prescribe one universal number of trials for every appearance claim. Evidence should still match the product or procedure, formulation, dose, route, target population, measured outcome, and claimed duration. Practitioner observations, anecdotes, customer surveys, and testimonials are not substitutes for scientific substantiation.

That makes phrases such as these high risk unless the exact impression is properly supported:

• “100% safe,” “risk-free,” “no side effects,” or “zero downtime”
• “Guaranteed,” “permanent,” or “works for everyone”
• “Clinically proven” without evidence matching the exact advertised use
• “Best,” “safest,” or “number one” without objective, current support
• A precise outcome or timeline that the underlying evidence does not establish

Material limitations and significant safety information should be clear, conspicuous, understandable, close to the claim, and difficult to miss. A fine-print footer or a disclosure behind a link will not necessarily correct a misleading main message. If a qualification cannot prevent deception, the claim should not run.

Before-and-after photos can make performance claims

A before-and-after comparison can imply that the treatment caused the result and that viewers can generally expect something similar. Changed lighting, pose, expression, makeup, focal length, retouching, or timing can create a misleading impression even if the caption is technically accurate.

The FTC guidance also explains why “results not typical” is not a universal cure for an exceptional result. If an ad highlights an atypical outcome, the advertiser generally needs substantiated information about the results people can expect, communicated clearly enough to change the overall impression.

A repeatable photo record should include the procedure, date interval, camera position, focal length, lighting, pose, expression, makeup policy, and retouching policy. The practice should also retain the patient’s specific marketing authorization and check the rules that apply in its state.

Testimonials, free treatment, and reviews need separate checks

Under the FTC’s Endorsement Guides and its endorsement guidance for businesses, an endorsement must reflect an honest experience and cannot make a claim the advertiser could not substantiate directly. An unexpected payment, free treatment, discount, ownership interest, employment relationship, or family relationship may be a material connection that requires a clear and conspicuous disclosure.

Place the disclosure where the endorsement is consumed. It should appear before truncation or a “more” click when practical. Video disclosures may need both visual and audible presentation. A platform’s paid-partnership control does not automatically make every disclosure sufficient.

The FTC Consumer Reviews and Testimonials Rule, effective October 21, 2024, creates additional rules for fake or materially false reviews, sentiment-conditioned incentives, undisclosed insider reviews, deceptive review websites, review suppression, and fake social influence indicators. A clinic may offer a properly disclosed incentive for a review in some circumstances, but it cannot condition the incentive on a five-star or otherwise positive review. The FTC’s rule questions and answers provide current examples.

What “FDA approved” does and does not mean

FDA approval applies to specific regulated products and intended uses. FDA does not approve medical spas or clinicians. FDA’s consumer explanation, “Is It Really FDA Approved?”, also distinguishes drug approval from device clearance and registration, and confirms that compounded drugs are not FDA approved.

Avoid wording such as:

• “FDA-approved MedSpa” or “FDA-approved injector”
• “FDA approved for any wrinkle”
• “FDA-approved filler treatment” without identifying and verifying the exact product and indication
• Language that treats device clearance, registration, and approval as interchangeable

When discussing an approval, verify the current official label or device record. State the exact product and intended use without expanding the approval to the provider, practice, product family, patient population, treatment area, dose, or outcome.

FDA prescription-drug promotion has a specific scope

FDA’s Office of Prescription Drug Promotion regulates prescription-drug promotion made by or on behalf of a manufacturer, packer, or distributor, including online and social media promotion. Its Bad Ad Program identifies common problems such as overstated benefits, omitted or minimized risks, lack of fair balance, unsupported claims, misleading comparisons, and distorted study data.

It would be too broad to say that the federal prescription-drug advertising rules automatically govern every independent MedSpa post. Whether a clinic is acting as a distributor or on behalf of a product sponsor is fact-specific. FTC law and applicable state professional advertising rules can still apply to the clinic’s own advertising.

When promotion falls within FDA’s scope, 21 CFR 202.1 contains detailed requirements for prescription-drug advertisements. Product-claim ads generally require a true statement concerning effectiveness, side effects, and contraindications, subject to format-specific rules and exemptions. Material facts cannot be omitted, and risk information must receive fair presentation relative to benefits. Print, broadcast, and other formats do not all use one universal disclosure formula.

A reminder ad is narrow. Naming a prescription product while also suggesting an indication, dose, benefit, or other product representation does not fit the basic reminder-ad concept. The reminder-ad exemption is also unavailable for prescription products with a boxed warning, apart from the limited price-information provision described in the rule. A short social post is not automatically a compliant reminder ad.

Injectable claims must follow the exact product record

BOTOX Cosmetic is a prescription drug with specific approved cosmetic indications. Its current prescribing information contains a boxed warning concerning distant spread of toxin effect and states that product units are not interchangeable with units of other botulinum toxin products. An approval for one product, use, area, population, or outcome should not be generalized to every botulinum toxin treatment.

FDA regulates dermal fillers as medical-device implants. Its dermal filler overview explains that approvals vary by product, material, treatment area, age, and duration. FDA has not approved needle-free devices for filler injection, injectable silicone for aesthetic contouring, or fillers for over-the-counter sale. Its consumer guidance describes potential complications and advises patients to use an appropriately trained, licensed health care provider and authentic FDA-approved products.

This is why a generic statement such as “FDA-approved fillers” can mislead. Verify the exact product’s current approval and indication, or state only that FDA has approved specific fillers for specific uses.

Patient permission and HIPAA are not one universal rule

Not every MedSpa is a HIPAA covered entity or business associate. The threshold depends on the business and its activities. HHS and FTC explain the boundary in their joint consumer health information guidance.

Where HIPAA applies, using or disclosing protected health information for marketing generally requires a valid, specific authorization. A routine treatment consent is not automatically a marketing authorization. HHS also states in its filming and media guidance that a covered provider cannot first expose protected information to a film crew and try to fix the disclosure later by blurring the patient.

Businesses outside HIPAA can still face FTC privacy obligations, state medical-record law, biometric and publicity-right rules, and their own privacy promises. Review our MedSpa HIPAA marketing guide for a focused privacy checklist.

State law can be stricter

Injector scope, supervision, facility ownership, physician-name disclosures, fee advertising, before-and-after presentation, and patient authorization rules vary by state and license type. Do not convert one state’s rule into a national standard.

California illustrates the variation. California Business and Professions Code section 651 includes specific requirements for model identification, actual-patient before-and-after advertising, comparable views, procedure identification, expected-results language, professional superiority claims, scientific claims, and price advertising. Those are California provisions, not a statement of federal law or the rule in every state.

Identify the regulator and questions for local counsel before launch. Verify the current statute, board rule, and license-specific guidance before publication. The separate Google and Meta policy checklist covers the platform review that should follow the legal review.

A 12-point pre-publication checklist

1. Write down every express and implied claim created by the text, image, audio, layout, and omissions.
2. Keep the supporting evidence before launch and confirm that it matches the exact advertised claim.
3. Remove guarantees, universal safety language, unsupported superiority, and inflated timelines.
4. Confirm that benefit and risk presentation is accurate for the content and format.
5. Verify every FDA approval, clearance, and product-label statement against a current official record.
6. Do not imply that FDA approved the clinic or provider.
7. Standardize before-and-after capture conditions and retain the original files.
8. Document specific patient marketing authorization and the applicable privacy analysis.
9. Disclose free treatment, discounts, payment, employment, ownership, and other material connections where viewers will notice them.
10. Do not request or reward a specifically positive review.
11. Check state rules for the service, provider, image, price, and practice name.
12. Save the final creative, landing page, evidence file, approvals, source URLs, and review date together.

Primary sources

• FTC Health Products Compliance Guidance
• FTC Endorsement Guides, 16 CFR Part 255
• FTC Consumer Reviews and Testimonials Rule, 16 CFR Part 465
• FDA Bad Ad Program
• Prescription-drug advertisements, 21 CFR 202.1
• FDA BOTOX Cosmetic prescribing information
• FDA dermal filler overview
• HHS and FTC consumer health information guidance
• California Business and Professions Code section 651

This checklist helps catch public-surface risk, but it is not a legal opinion. The free MedSpa marketing audit also checks visible claims, conversion friction, and local search setup. No call is required.