Indiana Governor Mike Braun officially signed Senate Bill 282 (SB 282) into law in March 2026, signaling a significant turning point in the regulation of the state’s aesthetic medicine industry. For the first time, Indiana will implement a dedicated regulatory structure for medical spas, introducing mandatory registration, designated medical oversight, and formal adverse event reporting.
A New Era of Oversight
Historically, Indiana medical spas operated under general medical practice rules. SB 282 changes this landscape by creating a formal registry and setting specific operational standards.
SB 282 rolls out in two distinct phases, and missing either could result in significant penalties. Think of July 1, 2026, as your operational deadline and January 1, 2027, as your visibility deadline.
- Phase 1: July 1, 2026 – Operational Standards: On this date, the rules governing how you source drugs, manage compounding, and maintain records go into effect. This is also the date the ban on mobile services and the new medical director transition rules become enforceable.
- The Regulatory Bridge: October 1, 2026: By this date, the Board of Pharmacy is required to publish the formal procedures for facility registration.
- Phase 2: January 1, 2027 – Mandatory Registration: This is the hard deadline for your facility to be formally registered with the state. Operating without a valid registration after this date is illegal and carries fines of up to $5,000 for non-compliance.
Key Requirements of the New Law
The legislation introduces several critical mandates designed to enhance patient safety and professional accountability:
- Mandatory Facility Registration: Any facility qualifying as a medical spa must register with the Indiana Medical Licensing Board. This includes disclosing ownership structures and the specific services offered.
- Designated Responsible Practitioner: Each facility must name a “Responsible Practitioner” who is personally accountable for ensuring the spa complies with all clinical protocols, supervision requirements, and safety standards.
- Adverse Event Reporting: For the first time, medical spas will be legally required to report serious complications to the state. This move toward transparency mirrors a national trend in aesthetic medicine regulation.
- Restrictions on Mobile Services: The law effectively prohibits “mobile” or “pop-up” treatments. Services must now be performed at the registered facility address, with limited exceptions for educational or training purposes.
The Impact on Compounding and Peptides
Beyond facility operations, SB 282 reinforces strict adherence to the federal Food, Drug, and Cosmetic Act. This has immediate implications for the use of “Research Use Only” (RUO) peptides. The law makes it clear that substances not approved by the FDA or permitted on federal bulk compounding lists cannot be legally compounded or administered in Indiana medical spas.
Why This Matters for Providers
The transition from a “general medical practice” model to a dedicated regulatory registry represents a significant increase in professional liability and administrative risk for Indiana practitioners. Providers can no longer rely on third-party “Good Faith Exam” platforms or remote oversight to shield themselves from regulatory scrutiny; if a complication occurs or an audit is triggered, the state will hold the responsible practitioner and the facility directly accountable.
Furthermore, the new mandate for mandatory adverse event reporting and the strict limitations on mobile services fundamentally change the business of aesthetics. By requiring treatments to occur at a registered physical address, the state is treating medical spas like specialized clinical centers, effectively ending the culture of concierge home visits.
Next Steps for Indiana Operators
Practices should begin auditing their current structures immediately. To ensure a smooth transition before the deadlines, owners should:
- Review Supervision Models: Ensure your medical director or responsible practitioner has meaningful, documented oversight.
- Audit Treatment Locations: Prepare to transition any mobile or off-site services back to a brick-and-mortar facility.
- Implement Documentation Systems: Establish formal internal protocols for tracking and reporting adverse events.