How to Start an NP Weight Loss Clinic: Compliance Checklist

A nurse practitioner opening a cash-pay weight loss practice has to clear fifteen separate legal and operational gates, and most of them are set by a different regulator: the state board of nursing, the DEA, the FDA, the FTC, a state pharmacy or medical board, and a city or state consumer-protection office. Most “how to start a weight loss clinic” pages say “check your state” and sell a template kit. This guide is the sequenced version: what to settle first, who sets the rule, and where the answer changes by state.

The question that decides everything else is whether you may practice and own the clinic at all, and that one has its own deep guide. Our 50-state ownership guide covers practice authority, entity type, corporate practice of medicine, and collaborative agreements with a primary source per state. This post is the checklist that sits on top of it and the rest of the wellness cluster. Each step below states the governing rule with its citation, and links the deep guide where one exists. Where none exists yet, the step carries more detail here, including DEA registration, PDMP accounts, phentermine rules, the first visit, in-office dispensing, injections, marketing, and records.

Everything here is based on primary sources fetched on October 22, 2026. Current as of October 2026.

The checklist at a glance

Work the steps in order. Steps 1 to 4 are gates: nothing downstream is lawful until they are settled. The wellness hub collects the rest of the cluster.

1. Can I practice and prescribe without a physician in my state?

It depends on your state’s practice category, and the category is set by statute, not by what the clinic offers. AANP’s 2026 Nurse Practitioner State Practice Environment (map updated 05/2026) sorts every state into three groups. Full Practice means “State practice and licensure laws permit all NPs to evaluate patients; diagnose, order and interpret diagnostic tests; and initiate and manage treatments, including prescribing medications and controlled substances, under the exclusive licensure authority of the state board of nursing.” Reduced Practice means “State law requires a career-long regulated collaborative agreement with another health provider in order for the NP to provide patient care, or it limits the setting of one or more elements of NP practice.” Restricted Practice means “State law requires career-long supervision, delegation or team management by another health provider in order for the NP to provide patient care.”

The map is a graphic, so the ownership guide reads it state by state and cites the statute behind each category, including the full-practice states that still require a transition period before independence.

Two cautions belong at this step. First, an autonomous pathway can be narrower than “full practice” sounds. Florida’s autonomous registration under Fla. Stat. 464.0123 requires “at least 3,000 clinical practice hours” within the 5 years before registration, and an autonomous APRN may “Engage in autonomous practice only in primary care practice” (family medicine, general pediatrics, and general internal medicine are the named examples). A weight management practice in Florida should not assume the autonomous pathway covers it without asking the board (statute as fetched October 22, 2026).

Second, there is no multi-state shortcut for NPs. The Nurse Licensure Compact’s FAQ says “The NLC pertains to RN and LPN/VN licenses only” and “An APRN must hold an individual APRN license in each state of APRN practice.” If you plan to treat patients in more than one state, each state needs its own APRN license.

2. Can I own the clinic, and what entity do I form?

Scope of practice and ownership are separate questions. The AANP category describes who may treat patients. Ownership turns on each state’s professional-entity statute and, where one exists, the corporate practice of medicine doctrine. In some states an NP may own the practice outright, in some only a nursing professional entity, and in CPOM states the usual structure is a physician-owned professional entity plus a management services organization that handles the business side.

The ownership guide holds the 50-state table with a primary source per row, the list of CPOM states (California, Texas, New York, New Jersey, Tennessee, Georgia, Illinois, Michigan, and Oregon), and the limits on MSO arrangements. We do not restate it here. Settle the entity before you sign a lease, open a bank account, or apply for registrations, because the NPI, DEA, and malpractice applications below all carry the entity name.

3. Do I need a collaborating physician, and what will it cost?

If your state is a reduced or restricted practice state, yes, and the agreement is a condition of practice. Whether the collaborating physician may be your employee also differs by state, and the ownership guide cites the states that say no.

On cost, the best available figure comes from a marketplace, not a regulator. NP Collaborator’s Fair Price for Collaboration Report, Edition 1 (released August 18, 2026) says it is built from “2,000+ real signed collaboration contracts,” with state medians reported for the 20 states with the largest samples. It reports a national median of $549 per month and a medical weight loss median of $499 per month. The figures are “total monthly fees including physician fees, platform fees, and physician malpractice insurance” and exclude your own malpractice policy and state fees. Treat this as one marketplace’s own report, not an independent survey, and get quotes in writing before you budget.

4. What registrations do I need before the first prescription?

Four credentials, in a specific order: NPI, then state authority, then DEA, then the state prescription monitoring account, with e-prescribing for controlled substances (EPCS) set up alongside.

NPI. Under 45 CFR 162.410(a), a covered health care provider must “Obtain, by application if necessary, an NPI from the National Provider System (NPS) for itself,” “Use the NPI it obtained from the NPS to identify itself on all standard transactions,” and “Disclose its NPI, when requested, to any entity that needs the NPI.” CMS says “For the most efficient application processing and the fastest receipt of NPIs, use the web-based application process” at NPPES (CMS). In practice, pharmacies, e-prescribing networks, and PDMPs identify prescribers by NPI and DEA number, so get the NPI first even in a cash-only practice.

DEA registration. It is required before any controlled-substance prescribing or dispensing. Under 21 CFR 1301.11(a), “Every person who manufactures, distributes, dispenses, imports, or exports any controlled substance or who proposes to engage in” those activities must obtain a registration unless exempt. The sequence matters because DEA registration depends on state authority first: under 21 U.S.C. 823(g)(1), the Attorney General registers practitioners “if the applicant is authorized to dispense … controlled substances under the laws of the State in which he practices.” Your state APRN license, state prescriptive authority, and any state controlled-substance registration come before the DEA application. DEA defines “mid-level practitioner” to include “nurse practitioners … who are authorized to dispense controlled substances by the State in which they practice” (21 CFR 1300.01).

One registration per location, with one exception. A separate registration is required for each “principal place of business or professional practice at one general physical location” where controlled substances are dispensed. Under 21 CFR 1301.12(b)(3), an office where controlled substances are “prescribed but neither administered nor otherwise dispensed” does not need its own registration, provided you are registered at another location in the same state and the office keeps no supply of controlled substances. A prescribe-only clinic needs one registration. A clinic that stocks phentermine at a second site needs a registration there.

State controlled-substance credentials. Some states layer a credential on top of DEA. Louisiana requires an APRN with controlled-substance authority to comply with 21 U.S.C. 821 to 831 “including, but not limited to, obtaining and possessing an active Louisiana controlled dangerous substance license and Drug Enforcement Administration registration number prior to prescribing or distributing controlled substances” (LAC 46:XLVII.4513). In Alabama, the Board of Nursing FAQ says the “QACSC certificate and required educational classes are offered solely by the Alabama Board of Medical Examiners (ABME)” (Alabama Board of Nursing).

PDMP account. Open it before the first phentermine prescription. The check mandates assume you have an account, and they differ by state and by drug.

EPCS. Federal rule requires two-factor authentication to sign an electronic controlled-substance prescription: under 21 CFR 1311.115(a), the application “must require the practitioner to authenticate” using two of three factor types (something you know, something you are, something you have). State mandates add to this. Florida requires e-prescribing for a prescriber who maintains an electronic health record system, or who prescribes as an owner, employee, or contractor of a licensed facility or practice that maintains one, with listed exceptions (Fla. Stat. 456.42(3)). State EPCS mandates reach cash-pay prescriptions; the Medicare Part D mandate does not. The DEA telemedicine guide has the Part D detail.

5. What malpractice coverage do I have to carry?

It depends on the state, and many states set no requirement at all. Where the law speaks, it is specific. Kansas says an APRN “shall maintain malpractice insurance coverage … as a condition of rendering professional clinical services as an advanced practice registered nurse in this state” and “shall provide proof of insurance at the time of licensure and renewal of license,” with no dollar amount in the statute and exemptions for APRNs practicing solely in tort-claims-act employment, solely as charitable providers, or on active military duty (K.S.A. 65-1130(d)(5)). Florida autonomous APRNs need “professional liability coverage in an amount not less than $100,000 per claim” with an annual aggregate of at least $300,000, or a letter of credit in the same amounts (Fla. Stat. 464.0123(2)(a)1). Both as fetched October 22, 2026.

Whatever the statute requires, ask the carrier in writing whether the policy covers compounded products, telehealth across state lines, and in-office dispensing. A collaborating physician’s fee may include the physician’s malpractice coverage, but never yours (see step 3).

6. Branded or compounded GLP-1?

Semaglutide, tirzepatide, and liraglutide are not controlled substances, and the compounded GLP-1 guide checked DEA’s list for that. Phentermine is Schedule IV (21 CFR 1308.14(f)(9), DEA code 1640).

The compounding exemption is narrow. Under 21 U.S.C. 353a, the 503A exemptions apply where a drug is “compounded for an identified individual patient based on the receipt of a valid prescription order.” A compounder may not compound “regularly or in inordinate amounts” drugs that are “essentially copies of a commercially available drug product.” A product is not essentially a copy if a change made for an identified individual patient produces “a significant difference” as determined by the prescribing practitioner.

FDA’s April 1, 2026 statement adds three points. FDA does not intend to act against a compounder that “fills four or fewer prescriptions of that compounded drug product during a calendar month.” The copy restriction does not apply where “a prescriber determines and documents the compounded drug product contains a change that produces a significant difference” for an identified patient. And “Tirzepatide and semaglutide do not currently appear on the 503B bulks list or on FDA’s drug shortage list.” The same page records the tirzepatide shortage as resolved December 19, 2024 and the semaglutide shortage as resolved February 21, 2025.

Know whose obligation is whose. The four-or-fewer count belongs to the compounder, not the prescriber. The significant-difference determination belongs to you and must be documented on the prescription. Under FDA’s January 2018 guidance, a notation such as “No Dye X, patient allergy” is sufficient, patient name and formulation alone is not, and lower price is not a reason.

The decision rule: use the approved product unless the chart can state the patient-specific attribute of the approved product that makes it unsuitable and the change the compounded product makes. Price, convenience, a B12 add-on, or a strength within 10 percent of an approved strength are not a significant difference. The compounded GLP-1 guide has the detail and cites FDA’s April 1, 2026 notice for the 10 percent example.

7. Will I prescribe phentermine?

Phentermine is the one common weight loss drug that is a controlled substance, so every step in step 4 applies, and the label and state rules narrow it further. The Adipex-P label says it is “indicated as a short-term (a few weeks) adjunct in a regimen of weight reduction based on exercise, behavioral modification and caloric restriction in the management of exogenous obesity for patients with an initial body mass index ≥ 30 kg/m2, or ≥ 27 kg/m2 in the presence of other risk factors (e.g., controlled hypertension, diabetes, hyperlipidemia).” In plain terms: BMI 30 or above, or 27 or above with other risk factors. The label carries “CIV” (Schedule IV).

Federal law adds the standard for every controlled-substance prescription. Under 21 CFR 1306.04(a), it must be “issued for a legitimate medical purpose by an individual practitioner acting in the usual course of his professional practice,” and “a corresponding responsibility rests with the pharmacist who fills the prescription.”

State diet-drug rules are where practices get caught, and they vary widely. A state-by-state phentermine guide is forthcoming. Three examples show the range:

• Mississippi. The Board of Nursing’s Part 2840, Rule 1.5(E) says “The APRN shall not prescribe any Schedule II controlled substance for the exclusive treatment of obesity, weight control, or weight loss.” Before starting a controlled substance, the APRN must determine from records that the patient “has made a substantial good-faith effort to lose weight” in a non-drug program and that it was ineffective, and must obtain “a thorough history” and perform “a thorough physical examination.” The APRN must stop a stimulant when the patient has failed to lose weight over 90 days, and “shall not issue a prescription for a stimulant for any greater than a ninety (90) day supply.”
• Louisiana. An APRN granted controlled-substance authority “shall not utilize such substances in connection with the treatment of … obesity” (LAC 46:XLVII.4513).
• Florida. The obesity-drug rule discussed in steps 9, 10, and 15 applies to any drug used for medically assisted weight loss, phentermine included.

The telehealth rules in step 8 apply to phentermine, and the DEA telemedicine guide covers the federal side. All of the above as fetched October 22, 2026.

8. Will I see patients by telehealth?

For phentermine, the federal flexibility that allows video-only prescribing runs through December 31, 2026, and what follows it is not yet published. For GLP-1s, DEA’s telemedicine rules do not apply because they are not controlled substances.

DEA’s fourth temporary extension reads: “This rule is effective January 1, 2026 through December 31, 2026,” and “a DEA-registered practitioner is authorized to prescribe schedule II-V controlled substances via telemedicine” without a prior in-person evaluation, subject to the listed conditions (90 FR 61301, December 31, 2025; regulation at 21 CFR 1307.41).

After the flexibility ends, the Ryan Haight Act default returns. 21 U.S.C. 829(e)(1)-(2) requires a valid prescription for a controlled substance delivered by means of the Internet to be issued by “a practitioner who has conducted at least 1 in-person medical evaluation of the patient” or a covering practitioner. DEA’s special registration final rule (RIN 1117-AB40) was received at OIRA on August 25, 2026 and had not been published as of October 22, 2026. The DEA telemedicine guide covers the special registration tiers, fees, and the 90-day plan.

State telehealth law is a separate layer:

• Florida. Under Fla. Stat. 456.47, a telehealth provider conducting an evaluation sufficient to diagnose and treat “is not required to research a patient’s medical history or conduct a physical examination of the patient,” and may not use telehealth to prescribe a Schedule II controlled substance except in four listed situations. The statute does not bar Schedule IV phentermine, but the obesity rule in step 9 still applies.
• California. Bus. & Prof. Code 2242(a) makes prescribing, dispensing, or furnishing dangerous drugs “without an appropriate prior examination and a medical indication” unprofessional conduct, and “An appropriate prior examination does not require a synchronous interaction.” A questionnaire can qualify if the standard of care is met. This section sits in the physician practice act, and NPs in California practice under standardized procedures, so treat it as the standard the supervising physician’s board applies.

9. What does the first visit have to include? (The “good faith exam”)

“Good faith exam” is medical-spa shorthand. It is not a term in the federal rules. The obligations behind it are three: the legitimate-medical-purpose standard in 21 CFR 1306.04 for controlled drugs (step 7), state “appropriate prior examination” rules such as California’s 2242 (step 8), and state obesity-drug rules such as Florida 64B8-9.012(4) and Mississippi Rule 1.5(E) (step 7).

Florida shows what a rule-based first visit looks like. Rule 64B8-9.012(4) requires an initial evaluation before any anti-obesity drug is prescribed, ordered, dispensed, or administered, including a physical examination, a complete history, tests related to medical treatment for weight loss, and referrals as indicated. The evaluation “may be delegated to” a physician assistant licensed under chapter 458 or 459 or an advanced practice registered nurse licensed under chapter 464.

Eligibility has numbers too. For adults, the rule requires “an initial Body Mass Index (BMI) of 30 or above,” or a BMI above 27 with at least one comorbidity, or body fat “equal to or greater than 25% of total body weight for male patients” or 30 percent for female patients. Note that the Florida rule and the phentermine label use slightly different cutoffs: 27 or above with risk factors on the label, above 27 with comorbidity in the rule.

On remote evaluation, say both things and then ask. The rule was last amended 8-8-22, and the flrules.org rule page summarizes the 2022 amendment as one that “allows for the use of telemedicine for such prescribing.” The rule text itself does not use the word telehealth. Ask the Board which evaluation elements can be done remotely before you build a remote intake around it.

10. What does the patient have to sign?

At minimum, a written informed consent, and in some states the rule says so explicitly. Under Florida 64B8-9.012(5) (same rule as step 9), before prescribing, the physician “must obtain written informed consent from the patient” discussing potential benefits versus risks, and “A copy of the signed informed consent shall be included in the patient’s medical record.”

For a compounded product, the consent should add four things: that the product is not FDA-approved and that FDA does not review compounded drugs for safety, effectiveness, or quality (FDA’s statement), the documented reason the approved product is not being used, who the compounder is, and the vial dosing-error risk. The compounded GLP-1 guide lists the seven elements, so use that list rather than this summary.

Build intake and consent in a form tool that signs a business associate agreement. CuratoForm builds the forms, and the HIPAA-compliant form builder guide explains what to require of any vendor.

11. Will I dispense in the office or send to a pharmacy?

Sending to a pharmacy is the simpler default. Dispensing in the office is lawful in many states but adds registration, labeling, and record duties, and for compounded GLP-1s it has a source problem.

Dispensing registration, Florida as the worked example. Under Fla. Stat. 465.0276, a practitioner may “dispense such drugs to her or his patients in the regular course of her or his practice.” One who dispenses for a fee must “Register with her or his professional licensing board as a dispensing practitioner,” pay a fee “not to exceed $100” at registration and at each renewal (each board sets the amount), and comply with the laws and rules that apply to pharmacists and pharmacies. The practitioner must give the patient a written prescription and tell the patient the prescription “may be filled in the practitioner’s office or at any pharmacy,” and must label non-manufacturer packages with the practitioner’s name, the patient’s name, the date, the drug name and strength, and directions. A registered dispensing practitioner “may not dispense a controlled substance listed in Schedule II or Schedule III” except in listed situations.

For APRNs, Fla. Admin. Code 64B9-4.011 requires an APRN whose protocol allows dispensing for compensation to “register with the Board of Nursing by submitting a completed Dispensing Application” and to follow the laws that apply to dispensing practitioners under 465.0276. Phentermine is Schedule IV, so the Florida II/III bar does not block it, but registration, labeling, and the written-prescription offer still apply.

Compounded GLP-1 office stock. Non-patient-specific office stock can come only from a 503B outsourcing facility, and FDA’s April 1, 2026 statement (step 6) says tirzepatide and semaglutide are on neither the 503B bulks list nor the shortage list. That leaves no lawful office-stock source for compounded copies. A 503A pharmacy fills patient-specific prescriptions. Ohio’s Board of Pharmacy GLP-1 guidance (issued July 17, 2025) says a prescriber clinic that purchased compounded GLP-1 before the end dates “may continue to dispense and distribute the compounded drug” but “may not engage in the compounding of GLP-1s past the dates.” The compounded GLP-1 guide has the detail.

DEA records if you stock controlled drugs. Under 21 CFR 1304.22(c), each dispense record must show “the name and address of the person to whom it was dispensed, the date of dispensing,” the quantity, and the name or initials of the individual who dispensed or administered it. The separate-registration rule from step 4 applies at every site that stocks. The EHR requirements guide covers the 2-year retention and the biennial inventory. A separate guide on in-office dispensing is forthcoming.

12. Who can give the injection?

The rules on who may inject (RN, LPN, or medical assistant) and who must be on site are state nursing-board and medical-board rules, not federal, and they differ. A separate guide is forthcoming.

California shows how specific they get. Under Bus. & Prof. Code 2069, a medical assistant may administer medication “by intradermal, subcutaneous, or intramuscular injections” and perform skin tests and other technical supportive services “upon the specific authorization and supervision of a licensed physician and surgeon or a licensed podiatrist,” or “upon the specific authorization of a physician assistant, a nurse practitioner, or a certified nurse-midwife.” A nurse practitioner may serve as the supervising practitioner, and supervision means the supervising practitioner “shall be physically present in the treatment facility during the performance of those procedures.”

Weekly GLP-1 injections are usually self-administered at home, so the delegation question bites on in-office injections and on any “injection clinic” model where staff administer doses on a schedule.

13. What can my marketing say?

Less than most weight loss ads suggest, and three regulators are watching.

FTC. The Health Products Compliance Guidance (announced December 20, 2022, press release) extends the FTC’s dietary-supplement guidance “to all health-related products” and says the FTC “expects high quality randomized, controlled human clinical trials” to substantiate health claims. Claims must be backed by “competent and reliable scientific evidence.” “Testimonials that report results more dramatic than users can generally expect are likely to be deceptive” and “should be accompanied by a clear and conspicuous disclosure of the results a typical consumer can actually expect.” A “Results not typical” disclaimer does not cure the problem. The guidance says it does not have the force of law. The rule behind it is Section 5 of the FTC Act (15 U.S.C. 45).

Endorsement Guides. Under 16 CFR 255.2(b), a consumer endorsement about a key attribute is read as representing that “the endorser’s experience is representative of what consumers will generally achieve.” Absent substantiation for that, the advertiser must clearly and conspicuously disclose the generally expected performance. The Guides were revised effective July 26, 2023 (88 FR 48092). A before-and-after photo makes the same representation about results that a written testimonial does, so apply the same disclosure test to it.

FDA. On March 3, 2026, FDA issued 30 warning letters to telehealth companies over compounded GLP-1 marketing, citing “claims implying sameness with FDA-approved products” and branding that obscured the compounder. FDA’s position: “Compounded drugs are not FDA-approved.” The June 8, 2026 NativeMed letter objected to the claim “The same active ingredient in Ozempic® and Wegovy®” and said such claims “represent that the compounded drug products you offer have been FDA-approved.”

State rules. Florida 64B8-9.012(8) deems weight-loss advertising false, deceptive, or misleading if it promises specific results, raises unreasonable expectations, claims rapid, dramatic, incredible, or safe weight loss, states or suggests that diet or exercise is not required, or suggests weight loss is effortless or magical. Florida also requires that each patient be given the Weight-Loss Consumer Bill of Rights (Fla. Stat. 501.0575) under 64B8-9.012(7); it carries the warning “RAPID WEIGHT LOSS MAY CAUSE SERIOUS HEALTH PROBLEMS” and tells consumers they may receive an itemized statement of the price. A separate guide on GLP-1 marketing under FDA and FTC rules is forthcoming.

14. How do I sell memberships?

With a cancellation path that works the way the consumer signed up, because the law here is moving at the state and city level. The FTC’s 2024 negative-option rule was vacated: “The Eighth Circuit found that the Commission’s failure to issue a preliminary regulatory analysis was ‘procedurally insufficient’ and vacated the 2024 Rule” (Custom Communications, Inc. v. FTC, 142 F.4th 1060 (8th Cir. 2025)). The FTC restored the rule “in the form it existed before the 2024 Rule became effective,” effective February 12, 2026 (91 FR 6507). State law governs today.

New York City’s click-to-cancel rule “takes effect October 1, 2026.” Where consent was obtained in person, the business “must offer cancellation through an online mechanism, such as a website or email.” A violating seller is liable for the amount charged “after the consumer’s first attempt at cancellation,” and the penalty schedule in 6 RCNY 6-47 is $525, $1,050, and $3,500.

The auto-renewal guide lists ten jurisdictions with auto-renewal statutes that reach clinic memberships: California, Minnesota, Massachusetts, New York, New York City, Maine, Maryland, Connecticut, Virginia, and Louisiana. Use it for the table and the notice windows; we do not restate them here.

15. What does the chart have to hold?

The Florida obesity-drug rule is the clearest published list, so use it as the worked example. Florida 64B8-9.012 is a Board of Medicine rule written for physicians, and no Board of Nursing obesity-specific rule was located (searched October 22, 2026). An NP working under a Florida protocol should treat the physician rule as the standard the supervising physician’s board applies.

Other record elements already covered above:

• The significant-difference notation on every compounded prescription (step 6).
• The PDMP check, or the documented reason it was skipped (step 4).
• DEA dispensing records, if you stock controlled drugs (step 11).
• The per-patient in-person evaluation history for controlled prescribing after December 31, 2026 (step 8).

HIPAA. Under 45 CFR 160.103, a health care provider is a covered entity only if it “transmits any health information in electronic form in connection with a transaction covered by this subchapter,” and a business associate is one who “creates, receives, maintains, or transmits protected health information” on the provider’s behalf. A covered entity may let a business associate handle PHI only with “satisfactory assurance that the business associate will appropriately safeguard the information” (45 CFR 164.502(e)). A cash-only clinic that never transmits a standard transaction may fall outside the covered-entity definition, but the safe build is to assume coverage and get a business associate agreement from every vendor that touches PHI: EHR, forms, portal, messaging, and video. The form builder guide covers the intake side, and the EHR requirements guide covers what the record system has to do.

Dates to calendar

This is not legal advice

This guide summarizes primary sources fetched on October 22, 2026. Rules in this area change every year, and several of the dates above are pending. Confirm every step with your state boards and with counsel who knows your state before you open, and recheck before you rely on any single citation.

A weight loss practice runs on the same few workflows this checklist keeps returning to: controlled-substance prescribing, consent on file, documented follow-up, and recurring billing. PrismEHR for wellness and weight loss practices includes eRx with EPCS (EPCS-ready for controlled substances), documentation templates for GLP-1 management, weight management visits, and progress notes with medication tracking, dosage adjustments, and side effect monitoring, a patient portal showing weight and BMI trends with secure messaging, telehealth, and support for packages, subscriptions, and membership billing, with a BAA. Intake and consent forms can be built in CuratoForm with conditional logic and consent documentation. See what the record system itself has to do in our EHR requirements guide for weight loss clinics.