New York med spa marketing that keeps client quotes out of the physician's ads

In New York, the injections and prescriptions on your menu are medicine. So the law reads your ads the way it reads a doctor's ads, and the physician's license carries the risk.

New York's definition of medicine covers treating any physical condition and prescribing for it. The New York page explains why a spa is owned around a physician. Our guide to opening a med spa covers ownership and who may inject. This section is about what that structure does to the marketing.

The physician misconduct law lists advertising that is not in the public interest. Four items on that list catch spa ads most often:

• Testimonials. A client's quoted words in a paid ad are the plain case. "Best decision I ever made" under a lip filler video is a testimonial.
• Guarantees. "Guaranteed results" or "love it or it's free" on a neurotoxin ad guarantees a service.
• Claims you cannot prove. The licensee carries the burden of proof for claims about results and prices. "The most natural lips on the Upper East Side" needs proof the spa can produce.
• Sensational or flamboyant ads. The law uses both words. A flashing "last chance" countdown on a filler special invites that reading.

Nurses work under a different set of rules. The Regents rules for nurses and other professions allow a patient portrayal when the patient agrees in writing and no testimonial is fictional. An injector's personal nursing page and the spa's ads under the physician's license can therefore sit under different rules. We write the spa's ads to the stricter one.

The law's text does not say whether a before-and-after photo counts as a testimonial. Reviews clients post on Google or Yelp on their own are not ads you placed. Reposting one inside a paid ad is where the question starts. Not legal advice; confirm with counsel.

A text that sells a treatment counts as telemarketing in New York. That brings set hours, a duty to stop on request and a limit on who you may hand a client's number to.

New York's telemarketing law covers "electronic messaging texts" as well as calls. It also reaches businesses texting New Yorkers from outside the state. Sales messages may go out from eight in the morning until nine at night, by the clock where the client is, unless the client chose other hours.

• Stop means stop. An existing client falls out of the customer exception once they say they no longer want the messages.
• No list swaps. You may not pass a client's name, phone number or email to another business without their agreement in writing or electronic form. That covers a swap with the salon next door or a bridal shop.
• Calls follow a script. Within the first 30 seconds, a sales call gives the caller's name and the spa's name, then offers to put the client on the spa's own do-not-call list.
• Records last two years. Keep telemarketing records for 24 months.

After a hearing, the telemarketing law lets state regulators impose a fine as high as $20,000 per violation.

Federal rules sit on top. The FCC's telemarketing rule asks for signed written consent before autodialed marketing texts and gives a stop request ten business days at most.

So we keep two lists. Appointment reminders go to everyone who booked. Promotions go only to clients whose consent is on file, with the time stamp. When a new client calls and nobody picks up, an AI receptionist can answer and book. A promotion sent to that caller later is a separate message under these rules.

Three newer New York laws touch how spa ads are made and what the website collects. One took effect in June, one was vetoed and one was widened.

Synthetic models. From June 9, 2026, a spa that knowingly puts an invented, software-made person in an ad must label it plainly, under the synthetic performer law. The same law sets $1,000 for a first violation and $5,000 for each later one. Audio-only ads are exempt. The law covers people who do not exist. An AI-retouched photo of a real client is a different problem, since an altered result misleads on its own.

Health data. The health information privacy bill would have reached health data held by businesses outside HIPAA, which includes many cash-pay spas. It was vetoed on December 19, 2025. No state law yet requires consent before an ad pixel fires on a spa's booking page. We still keep treatment details off pages that carry ad tags, so the spa is ready if a bill like it returns.

Breaches. The SHIELD Act still applies to intake forms and booking records. If a breach exposes residents' private information, notice to them is due within 30 days of discovery.

Unfair and abusive acts. The FAIR Business Practices Act, signed December 19, 2025, took effect on February 17, 2026. It widened New York's consumer protection law from deceptive acts to "unfair, deceptive, or abusive" ones. Clients can still sue only over deception, and the Attorney General brings the rest. A false ad can also cost up to $5,000 per violation in an Attorney General action under the false advertising penalty law.