The medical spa industry is booming—but regulation hasn’t kept pace. Iowa’s new legislation could change that.
The Problem: A $20 Billion Industry Operating in the Shadows
Medical spas and wellness clinics have exploded across America, offering everything from Botox injections to prescription weight-loss medications. The industry is expanding so rapidly that it’s outstripping existing regulatory frameworks, creating serious risks for patient safety.
The numbers tell a concerning story: Only 13 states have issued med spa regulations or guidance, and just four of those require med spas to be licensed or registered. Iowa is now stepping up to address this regulatory vacuum.
Enter Iowa HSB 591: The Medical Spa Oversight Act
On January 28, 2026, the Partnership for Safe Medicines (PSM) urged Iowa’s House Health and Human Services Committee to support House Study Bill 591 (HSB 591), legislation that would fundamentally transform how medical spas operate in the state.
What HSB 591 Would Require:
1. State Board of Pharmacy Licensing
Medical spas and wellness clinics would be required to obtain licenses from Iowa’s Board of Pharmacy, bringing them under the same regulatory umbrella as traditional pharmacies.
2. DSCSA Compliance
Perhaps most significantly for pharmaceutical tracking, med spas would be required to comply with dispensing requirements under the Drug Supply Chain Security Act (DSCSA). This means:
-
Electronic traceability for all pharmaceutical products
-
Package-level tracking with EPCIS data exchange
-
Verification of NDC, lot, expiration, and serial numbers
-
6-year record retention requirements
-
Complete audit trail of all transactions
3. Enhanced Oversight Measures
The Iowa Board of Medicine would have primary oversight authority and could seek injunctions to prevent violations. Administrative penalties of up to $500 per violation would apply.
Why This Matters: The Regulatory Gap
The med spa regulatory gap represents a significant threat to patient safety. These businesses operate on the edge of existing regulatory frameworks, often handling prescription medications—including controlled substances like GLP-1 weight-loss drugs—without the same oversight required of traditional pharmacies.
The Current Reality:
Uneven Regulation Across States
-
Only 13 states have any med spa regulations
-
Only 4 states require licensing or registration
-
Most med spas operate with minimal pharmaceutical oversight
-
No standardized requirements for drug handling, storage, or tracking
Growing Safety Concerns
Medical spas are increasingly dispensing high-value prescription medications, including:
-
Injectable weight-loss medications (semaglutide, tirzepatide)
-
Botox and other neurotoxins
-
Prescription skincare products
-
Hormone therapies
-
Compounded medications
Without proper tracking and verification systems, these facilities become vulnerable to counterfeit drugs, diversion, and compliance violations—putting patients at risk.
The DSCSA Connection: Why Pharmacies Should Pay Attention
Here’s what many people don’t realize: The DSCSA requirements that apply to traditional pharmacies are now extending to med spas under Iowa’s proposed legislation.
What This Means:
If HSB 591 passes, Iowa med spas will need to implement the same serialization, verification, and tracking systems that independent pharmacies have been preparing for ahead of the November 27, 2026 enforcement deadline.
Required Systems Include:
-
✅ Package-level serialization tracking
-
✅ Electronic data exchange capabilities (EPCIS)
-
✅ Product verification at point of receipt
-
✅ 6-year transaction record retention
-
✅ Exception handling and quarantine procedures
-
✅ Audit-ready documentation and SOPs
This creates a significant compliance burden for med spas that have been operating without these systems—and a potential business opportunity for DSCSA compliance solution providers.
Industry Response: Mixed Reactions
The bill has garnered interesting support and hesitation:
In Favor:
-
Partnership for Safe Medicines (PSM) – Strong endorsement
-
Major pharmaceutical companies (Eli Lilly, Novo Nordisk, Genentech)
-
Patient safety advocates
Undecided:
-
Iowa Medical Society
-
Iowa Pharmacy Association
-
Iowa Biotechnology Association
Concerns:
Some critics worry about the provision allowing the Board of Medicine to keep financial penalties confidential, arguing it reduces transparency in enforcement actions.
What Happens Next?
House Study Bill 591 has advanced through a House subcommittee unanimously and moved into the full House Health and Human Services Committee. If passed, the Iowa Board of Medicine would be required to adopt rules to implement and administer the new chapter.
Timeline:
-
The bill does not specify an effective date
-
Implementation would require rulemaking by the Iowa Board of Medicine
-
Med spas would need time to come into compliance with licensing and DSCSA requirements
The Bigger Picture: A National Trend?
Iowa’s move could signal the beginning of a broader regulatory shift. As the med spa industry continues to grow and handle increasingly complex pharmaceutical products, other states are likely watching Iowa’s approach closely.
Key Questions for the Industry:
-
Will other states follow Iowa’s lead? If HSB 591 proves successful, expect similar legislation in other states with large med spa industries.
-
Can med spas afford DSCSA compliance? The technology and training required for full DSCSA compliance represents a significant investment—potentially pricing smaller operators out of the market.
-
What about existing pharmacies? Traditional pharmacies already complying with DSCSA may see this as leveling the playing field against med spas that have operated with fewer regulatory burdens.
-
Will this improve patient safety? Proponents argue yes—bringing med spas under the same pharmaceutical tracking requirements as pharmacies should reduce counterfeit drug risks and improve supply chain security.
What This Means for Your Business
If You’re a Med Spa in Iowa:
Start preparing now. Even if HSB 591’s effective date is months away, implementing DSCSA-compliant systems takes time. You’ll need:
-
Serialization tracking software
-
Staff training on verification procedures
-
Standard operating procedures (SOPs)
-
6-year data retention systems
-
Vendor partnerships with DSCSA-compliant suppliers
If You’re an Independent Pharmacy:
This legislation validates what you’ve been working toward. The November 27, 2026 DSCSA deadline applies to you regardless of Iowa’s med spa legislation, but HSB 591 demonstrates that regulators are serious about closing compliance gaps across the entire pharmaceutical supply chain.
If You’re a DSCSA Solution Provider:
Iowa’s med spa market just became a significant opportunity. Hundreds of med spas will need affordable, easy-to-implement compliance solutions—and they’ll need them fast if this bill passes.
The Bottom Line
Iowa HSB 591 represents a significant step toward closing the regulatory gap around medical spas and wellness clinics. By requiring Board of Pharmacy licensing and DSCSA compliance, Iowa is acknowledging what patient safety advocates have been saying for years: businesses that handle prescription medications need the same oversight, regardless of whether they call themselves a pharmacy or a spa.
The Partnership for Safe Medicines put it clearly in their endorsement: this bill “will go a long way to protect patients by closing the regulatory gap around med spas.”
As the November 27, 2026 DSCSA enforcement deadline approaches for independent pharmacies, Iowa’s legislation serves as a reminder that pharmaceutical compliance is becoming universal—and the regulatory net is widening.
Resources & Next Steps
Stay Informed:
-
Track HSB 591’s progress: Iowa Legislature Bill Tracker
-
Read PSM’s full endorsement: Partnership for Safe Medicines
-
Learn about med spa regulatory gaps: PSM Med Spa Report
Get DSCSA Compliant:
Whether you’re a traditional pharmacy or a med spa preparing for new regulations, the time to act is now. The November 2026 deadline is approaching, and compliance takes time to implement properly.
Need help getting DSCSA compliant? Contact TrackTraceRX for affordable solutions designed for independent pharmacies and small healthcare businesses.
About the Author: Christian is a pharmaceutical compliance specialist focused on helping independent pharmacies and healthcare businesses navigate DSCSA requirements. For more information about DSCSA compliance solutions, visit www.tracktracerx.com or call 1-321-418-7147.
