Understanding Good Faith Exams in the Med Spa World
Good faith exams are one of those regulatory requirements that everyone in the med spa space deals with daily, but most people don't actually understand how they're supposed to work. I've spent years watching med spas try to cut corners on this, and it's usually the first thing that goes wrong when audits happen. A good faith exam is a medical evaluation performed by a licensed provider—typically a physician, nurse practitioner, or physician assistant depending on your state—before a patient receives certain cosmetic or medical treatments. The exam has to be documented, dated, and kept on file. It's not just a checkbox. In practical terms, it means the patient needs to have their medical history reviewed, current medications checked, contraindications identified, and the treatment plan signed off before anything irreversible happens. The rules vary significantly by state. California requires specific elements in the exam documentation. Texas has different requirements for nurse-led med spas versus physician-owned ones. If you're operating in a state where physician oversight is mandated, the good faith exam needs to be performed or co-signed by a physician, not just any licensed provider.
How It Actually Works in Practice
Most med spas handle good faith exams through one of three models. The first is having an in-house NP or PA perform the exam as part of the patient's initial consultation. The second is requiring a recent exam from the patient's primary care physician, which gets reviewed and co-signed by the supervising physician. The third is a hybrid approach where an external telehealth service provides the exam documentation for a fee. I've seen the telehealth option cause real problems. One of my clients switched to a cheap online good faith exam service because it was faster and cheaper than hiring additional staff. Six months later, a state auditor flagged several of those exam documents because the service was using blanket templates with minimal patient-specific details. The audit trail showed the same generic assessment being used for completely different treatment types—Botox candidates with the same documentation as patients receiving laser hair removal. That's not a good faith exam. That's a liability waiting to happen. The workaround was straightforward but expensive. We pulled all affected patients back in, had our own NP re-evaluate them properly with individualized notes, and rebuilt the records. It took about three weeks and cost us significantly more than the telehealth service ever saved. The lesson was simple: when someone offers you a good faith exam solution that seems too streamlined, it probably is.
Key Requirements You Can't Skip
Every legitimate good faith exam needs several specific components. Patient identification and demographics. A review of systems relevant to the proposed treatment. Current medication list with dosages. Allergy history, especially to lidocaine, botulinum toxins, or contrast dyes depending on the procedure. Vitals if they're relevant to the treatment. The provider's assessment and medical necessity rationale. Signature, date, and credentials of the examining provider. Any modifications to the treatment plan based on findings. What most med spas get wrong is the timing. The exam has to happen before the treatment. Not the same day after the fact. Not retroactively added to the chart because the auditor asked for it. I've seen entire practices shut down temporarily because their good faith exam dates were after the treatment dates in the medical records. It sounds obvious but it's incredibly common in my experience.
Get the Full Details
Documentation Standards
The exam document itself needs to meet medical record standards. It's not a consent form. It's not a waiver. It's a clinical evaluation that should read like any other medical note you'd find in a physician's office. SOAP format works well here. Subjective complaints or patient goals. Objective findings from the exam. Assessment of risk factors and suitability. Plan that ties the treatment to the clinical indication. Retention matters too. Most states require medical records to be kept for six to ten years depending on the patient's age at the time of treatment. If you're using a third-party EHR or practice management system, make sure you actually own the data or have a guaranteed export path. I've encountered med spas where the practice management software company went under and took years of patient records with it. That included all their good faith exam documentation.
Common Pitfalls
Let me list a few things I've actually seen go wrong. Using a good faith exam template that was written for a different treatment type and never customized. Having the exam performed by someone who isn't licensed to practice in your state. Storing exam documents separately from the main patient record so they can't be retrieved during an audit. Letting exams expire without scheduling follow-up evaluations for patients on long-term treatment plans. And the biggest one—assuming that a single exam covers all future treatments indefinitely. Most states and licensing boards expect periodic reassessment, especially for patients receiving ongoing injectable treatments. The most reliable approach I've found is to integrate the good faith exam into your patient onboarding workflow rather than treating it as a separate step. When a new patient books their first appointment, the system should flag whether a current good faith exam on file. If not, schedule the exam as part of that initial visit before any treatment is discussed in detail. Train your front desk to recognize when an exam is missing. Train your providers to document thoroughly. Use a standardized template that's been reviewed by your medical director and compliance attorney, not a generic download from the internet. If you run a multi-location med spa, standardize the process across all sites but account for state-specific variations. A template that works in Florida won't work in Nevada. Keep a matrix of requirements by state and update it whenever regulations change. I maintain a living document for my own operations and check it quarterly. It takes about twenty minutes and has prevented three compliance issues I know of.
When Good Faith Exams Aren't Enough
There are situations where a standard good faith exam doesn't cover everything. Patients with complex medical histories involving cardiology, neurology, or autoimmune conditions often need additional clearance beyond the standard med spa exam. Cosmetic surgery patients heading into the OR need pre-operative workups that go well beyond a routine good faith exam. Patients on blood thinners or immunosuppressants require specialized assessment protocols. If your med spa handles any of these cases, you need explicit protocols for when a standard exam is insufficient and how to obtain additional clearance. Good faith exam documentation is foundational compliance work for any med spa. It's not glamorous, it doesn't drive revenue, and it won't show up in your marketing materials. But it's the difference between operating smoothly and facing fines, suspensions, or worse when regulators come knocking. Get it right from the start and stop trying to find shortcuts. The shortcuts always cost more in the end.
