Illinois med spa marketing built on the medical ad law, the laser exam rule and BIPA

In Illinois the owner's license decides what the spa may sell. Every treatment page and ad has to fit it, so ownership comes up before the first campaign does.

The IDFPR and IDPH med spa memo says a med spa must be owned and run by physicians. For some services an APRN may own and run it instead. Nobody else may be a shareholder, officer, director or manager.

A salon cannot work around this. The same memo says a salon registration cannot be used to run a med spa. A salon also may not use "medical" in its business name. So check the name on the sign, the Google profile and the ad account before any money is spent.

The treatment menu needs the same check. IDFPR's statement on prohibited practices, dated April 6, 2026, names treatments that are the practice of medicine and sit outside cosmetology and esthetics:

• Botox and collagen injections
• Chemical peels beyond superficial ones
• Microneedling and radio frequency
• Liposuction

Microblading is on that list but expressly excepted. On our reading, an esthetics room can keep advertising facials and light peels. Microneedling and radio frequency belong on the medical side of the menu, with the provider who performs them named. The med spa page covers how each treatment line is marketed once that split is right.

A skin analysis tool that maps a client's face can bring a lawsuit in Illinois when the paperwork is missing. Before-and-after photos follow a different law with its own consent rule.

The Biometric Information Privacy Act covers face geometry. Three of its details shape a spa's booking flow:

• The release can be electronic. Since August 2, 2024, an electronic signature counts as the written release. A consent step inside online booking can carry it.
• The data has an end date. It must be destroyed once its purpose is met, or within three years of the client's last interaction with the spa, whichever comes first.
• Mistakes are priced per violation. BIPA sets damages at $1,000 for a negligent violation and $5,000 for an intentional or reckless one, plus attorney fees.

The act has two carve-outs spa owners hear about. Photographs are not biometric identifiers. Information captured from a patient in a health care setting is excluded too. Whether a cosmetic face scan falls under that second carve-out is a question for counsel, so until counsel says otherwise we would collect the release. The Illinois page covers the act's wider reach, and the same question applies to any AI phone agent that builds voiceprints.

Photos in ads answer to the Right of Publicity Act. Using a person's name, photo or voice for a commercial purpose needs their written consent first. Since January 1, 2025, the act also reaches anyone who knowingly shares audio or video with an unauthorized digital replica of a person.

So keep a signed release with every before-and-after set. And never let an AI tool turn a real client's result into an invented face.

Illinois has fewer texting rules than some states, but it sets firm calling hours and a new price rule is coming. Most spa promotions touch at least one of them.

A live person selling by phone has to stop at 9 p.m. and wait until 8 a.m., under the Telephone Solicitations Act. Your front desk should open each sales call by saying who is calling, for which spa and why. Then they ask whether the client is happy to talk.

Recorded-message calls run on a tighter clock. The Automatic Telephone Dialers Act sets $500 in statutory damages per violation. It bars these calls from 9 p.m. until 9 a.m. People who asked for the calls, and people the spa already does business with, are exempt.

Illinois keeps no do-not-call list of its own, since its registry act was repealed. Texts fall to the federal TCPA, which our texting and AI answering playbook covers. That is our reading of the statutes, not a court's.

Prices come next. From July 1, 2027, the Consumer Fraud Act makes it unlawful to advertise a price that leaves out mandatory fees or surcharges. A neurotoxin price with a required consult fee on top would need that fee folded in. Only the Attorney General can sue under this part.

The same act already bans gag clauses. Since January 1, 2018, a consumer contract may not waive a client's right to speak about the business, and threatening to enforce such a clause is itself unlawful. So a membership agreement or photo release cannot quietly forbid a bad review. Not legal advice; confirm with counsel.