The regulatory stack for an IV clinic in Florida
Most IV clinic owners discover the regulatory stack one citation at a time. Below is the consolidated map of the provisions that apply, with primary-source links. Not every clinic triggers every layer — a wholly cash-based, physician-owned drip lounge in a strip mall has a different footprint than a multi-location mobile-IV service billing commercial insurance — but every IV clinic has to know which pieces apply to its model and have the documentation to prove compliance.
- § 458.348 — supervisory agreement & 25-mile rule. The supervisory framework that authorizes an ARNP or PA to prescribe and supervise the IV procedure under a written protocol with a Florida-licensed physician. The supervising physician must generally be within 25 miles of the practice location (with statutory exceptions). See our § 458.348 explainer and the statute at flsenate.gov/Laws/Statutes/2024/458.348.
- § 400.9905 — AHCA Health Care Clinic licensure. The threshold question of whether your IV business needs an AHCA HCC license at all, governed by the Health Care Clinic Act (Chapter 400, Part X) and Rule 59A-33. See our AHCA HCC explainer and the program page at ahca.myflorida.com.
- USP <797> — sterile compounding. The United States Pharmacopeia general chapter governing the conditions, training, and documentation for compounding sterile preparations (CSPs). Applicable in-house when you compound; pushed upstream to your 503A or 503B vendor when you don't. See usp.org/compounding/general-chapter-797.
- § 893.03 — controlled-substance schedule. Relevant only if your clinic dispenses or administers actual DEA-scheduled drugs by IV (rare for hydration menus; more common for ketamine clinics, anabolic protocols, or testosterone IV programs). Standard vitamin and amino acid IVs do not contain Schedule II–V drugs. Flag this honestly with your healthcare attorney before assuming it does or does not apply.
- FAC 64E-16 — biomedical waste. Florida Administrative Code Chapter 64E-16 governs biomedical waste generation, segregation, storage, transport, and the manifest log every generator must maintain. IV clinics generate biomedical waste at every appointment (used IV catheters, sharps, gauze with blood). Find the current rule via flrules.org Department 64.
- 21 CFR 1271 — HCT/Ps. The federal framework for human cells, tissues, and cellular and tissue-based products. Relevant only if your clinic infuses a cellular product (exosomes, stem-cell derived material, autologous cell therapy). Most hydration-and-vitamin IV clinics never touch this regime. If you do, it's a separate compliance build entirely.
- OIG/LEIE — 42 USC § 1320a-7. The federal Office of Inspector General exclusion database. Triggered when your clinic bills any federal payor (Medicare, Medicaid, TRICARE). Even a mostly cash clinic that bills a single Medicare claim must screen every employee, contractor, and vendor against the LEIE monthly. See the OIG search at exclusions.oig.hhs.gov.
- Board of Medicine Rule 64B8-9.009 — Good Faith Exam. The Board of Medicine standard for office-based supervision and protocols, which is the substantive source of the GFE requirement for prescription IV procedures. See our Good Faith Exam explainer.
- § 456.47 — telehealth. Florida's telehealth statute, governing whether and how a practitioner-patient relationship may be established for an IV procedure remotely (rare for IV, since the IV itself is in-person, but relevant for the GFE in mobile IV models).
- § 456.062 — deceptive healthcare advertising. The provision Florida uses to police marketing claims about IV therapy outcomes ("cures hangovers," "boosts immunity," "anti-aging"). Off-label products and unsubstantiated claims have triggered Department of Health complaints — your website and Instagram should be reviewed by your healthcare attorney before launch.
- OSHA 29 CFR 1910.1030 — Bloodborne Pathogens. Federal OSHA's BBP standard applies to every IV clinic with employees. Exposure control plan, training, hepatitis B vaccination offer, and sharps injury log are required. See our OSHA BBP checklist.
The supply-chain question — 503A vs 503B for IV bag sourcing
Almost every IV clinic in Florida sources its bags, vitamin vials, and additives from a compounding pharmacy or an outsourcing facility. The two regulatory categories — Section 503A and Section 503B of the Federal Food, Drug, and Cosmetic Act — look similar from a clinic owner's seat but have very different documentation, inspection, and lot-tracking implications.
503A — patient-specific compounding pharmacies
A 503A pharmacy is a traditional compounding pharmacy regulated primarily by its state Board of Pharmacy. It is permitted to compound a sterile preparation pursuant to an individual prescription for an identified patient. It is not registered with the FDA as an outsourcing facility, is not subject to current Good Manufacturing Practice (cGMP), and is generally inspected by the state rather than the FDA (though FDA may inspect on cause). The practical implication for an IV clinic: when you source from a 503A, every bag must trace back to a patient-specific prescription on file. You cannot keep "office stock" of 503A-compounded product the way you can with 503B.
503B — FDA-registered outsourcing facilities
A 503B outsourcing facility is registered with the FDA under Section 503B of the FD&C Act. It is subject to cGMP, is inspected by FDA on a risk-based schedule, must submit adverse-event reports, and may compound office-stock (non-patient-specific) sterile preparations for clinic use. For an IV clinic, 503B sourcing is operationally simpler — you can keep inventory of standard hydration bags, NAD+ ampules, glutathione vials — but it requires verification that your specific vendor is currently FDA-registered (the registration list is public and updates regularly) and that you have a current Business Associate Agreement on file if PHI flows to the vendor.
Which one matters for what
- BAA: needed when PHI flows. A 503B that ships office-stock based on a clinic PO with no patient name may not need a BAA; a 503A filling a patient-specific prescription always does. Confirm with the vendor and your healthcare attorney.
- Lot tracking: matters for both, but the burden differs. With 503A, the lot is tied to the patient prescription from the moment it leaves the pharmacy. With 503B, the lot lands in your office stock, and you have to maintain the bridge from lot # to the specific patient who received it (the bag's bar code or the lot card on the IV pole, captured in the procedure note).
- FDA inspection: 503B vendors are FDA-inspected; 503A vendors are typically not. For your clinic, this means a 503B BAA failure or recall has a more direct FDA paper trail; a 503A failure shows up as a state Board of Pharmacy disciplinary action.
- DEA registration: orthogonal to 503A/503B. A vendor of DEA-scheduled drugs needs DEA registration separately from its 503A or 503B status. Vitamin and amino acid IVs are generally not DEA-scheduled.
Typical IV clinic supply vendors operating in or shipping to Florida include Olympia Compounding, Empower Pharmacy, AmeriPharma, and Vivacare — verify your specific vendor's 503A or 503B status, FDA registration where applicable, and BAA on file before each ordering cycle. Vendor regulatory status changes; a pharmacy that was 503A-only last year may have spun up a 503B facility, or vice versa. The defensible documentation pattern is an annual vendor file refresh with the current registration evidence and BAA, plus a quarterly check of the FDA 503B registration list for any vendor that ships your office-stock product.
What ProofOps does for your IV clinic specifically
ProofOps Medical is not another compliance software seat you log into and maintain yourself. It is a done-for-you compliance department — your fractional compliance desk for the IV vertical — working quietly across your EMR, your calendar, your vendor inbox, and the Florida primary-source license databases. Technology does the heavy lifting in the background; a real person on our side reviews the output and signs off before anything lands in your file. You don't lift a finger. For an IV clinic specifically, here is what we handle for you and what you don't:
- We keep the active-ingredient tracking log for every IV bag, vitamin vial, and additive — B12, glutathione, NAD+, Myer's components, taurine, magnesium, B-complex — from vendor through patient. Each lot # is captured at the bay, bridged to the patient chart, and surfaced in the procedure note, then reviewed and signed off by a real person on our side. You don't maintain a separate lot log; we hand you the lot-to-patient and active-ingredient view on demand for any recall or adverse-event inquiry.
- We capture the Good Faith Exam for each IV indication at point of service, attached to patient + provider + lot #, so the chain of medical-professional delegation for every IV placement is documented end to end. The GFE is the patient-level instantiation of your supervisory protocol; we make sure the GFE on file actually covers today's IV formulation before the appointment runs, and text the medical director when it doesn't. We handle it for you.
- We chase 503A and 503B vendor BAAs annually from ops@proofopsmedical.com. The vendor receives a templated request, we log the response, and the executed BAA lands in your vendor file. Lapsed BAAs trigger a 90-day pre-expiration warning so you don't get caught with an out-of-date agreement at inspection.
- We assemble the proof of correct medical-professional delegation for your IV placements. We pull MD chart-review samples weekly for ARNP-administered IVs — the default sample is 10% of the prior week's ARNP-supervised IV procedures, queued Mondays 9:30 AM ET for the supervising physician's review. The protocol under § 458.348 requires ongoing physician review of the delegated IV procedure; we run that loop for you and keep the signed-off evidence that the right licensed professional authorized and supervised each placement.
- We watch the FAC 64E-16 biomedical-waste manifest interval. If your sharps pickup is on a 30-day cycle, we warn at day 31 and escalate to danger at day 60. The manifest log is assembled month over month so the binder is current. (We don't replace your pickup vendor — Stericycle, Daniels, or your regional provider — we make sure their manifest is logged.)
- We assemble the AHCA inspection-ready binder for IV bay-specific surfaces on demand. The surface includes: AHCA HCC license, medical director designation, supervisory protocols, sampled patient charts with GFE + IV order + active-ingredient lot trace, the standing order or formulary, the 503A/503B vendor file, your USP <797> sterile compounding policies and records where applicable, the FAC 64E-16 manifest log, staff licensure verifications, and OIG/LEIE evidence. You ask; we deliver the inspection-ready PDF — you don't build it.
- We monitor every staff member's FL DOH license status daily; OIG/LEIE monthly. A lapse on the DOH primary-source registry — RN, LPN, ARNP, MD — surfaces within 24 hours. An OIG/LEIE match prompts a draft self-disclosure letter, prepared for your healthcare attorney's review (we don't send it; we draft it).
- We build the malpractice-renewal exhibit 60 days before policy renewal. The exhibit is the underwriter-friendly version of your compliance posture — current licenses, GFE sample rate, incident log, training-completion percentages, vendor BAA register. A clean, well-documented exhibit can support a more favorable renewal conversation; any premium outcome is determined solely by your carrier and your history, not by us.
What an AHCA inspector typically asks for at an IV bay
AHCA Health Care Clinic surveys are usually unannounced and follow a standard Form 3020 deficiency framework. At an IV bay specifically, the inspector's request list is reasonably predictable. The documentation should be retrievable in minutes, not days. The list below is the practical inspection surface — the file you want on a tablet at the front desk, not in a binder in the storage closet.
- Current AHCA HCC license, posted and within renewal window.
- Medical director designation form (AHCA Form 3110-1024) for the current designated MD.
- Supervisory protocols under § 458.348 for every ARNP and PA on staff, including the IV procedures and formulations covered, the supervising physician of record, and the practice location.
- Sample patient charts (typically 5-10 per visit) including the GFE, the IV order, the procedure note, lot numbers of products administered, and the patient consent.
- The standing order or formulary for the IV menu, signed and dated by the medical director.
- Vendor file: 503A and 503B BAAs, current FDA 503B registration evidence where applicable, vendor licensure evidence.
- USP <797> policies and competency records if any in-house sterile compounding occurs (even reconstitution of a powder can trigger this depending on the configuration — confirm with your healthcare attorney).
- FAC 64E-16 biomedical waste manifest log for the prior 12 months.
- Staff licensure verifications from the FL DOH primary-source registry, dated within the prior 30 days.
- OIG/LEIE exclusion check evidence (only required if federal payor billing applies).
- OSHA BBP exposure control plan, training records, hepatitis B offer log, and sharps injury log.
- Patient complaint log and incident reports under your incident reporting policy.
The common patterns in Florida IV clinic audits
Across published AHCA deficiency records and the Florida IV-clinic regulatory landscape, a small number of patterns recur. None are exotic; all are fixable with documentation discipline. We list them here because if you recognize your clinic in any of these, the fix is operational, not legal.
- Template-only GFE. A GFE note that is identical across 50+ patients — same history, same exam findings, same risk-benefit language — is the single most cited deficiency. Each GFE should reflect the actual encounter with the actual patient. EMR templates are fine; verbatim copies are not.
- Lot-to-patient gap. The IV menu shows a Myer's Cocktail; the vendor invoice shows three lot numbers received last month; the patient chart shows "Myer's administered" with no lot recorded. The lot bridge is the chart entry, captured at the bay, that links the specific lot # to the specific patient.
- Lapsed supervisory protocol. The protocol was executed two years ago for the original IV menu and never amended when NAD+, glutathione, or peptide injectables were added. A protocol amendment is the defensible path when the scope expands.
- 503B BAA expired. The vendor file shows a BAA executed three years ago; annual renewal language was not triggered; the vendor has since updated its template. Annual vendor file refresh closes this gap.
- Off-label marketing. Website copy promises that an IV "boosts immunity," "cures hangovers," or "reverses aging." § 456.062 covers deceptive healthcare advertising; the Department of Health can act on complaint. Have your healthcare attorney review website, Instagram, and Google Business Profile copy.
- RN scope creep. An RN is reading patient histories and verbally authorizing formulation changes between appointments without an updated order. The order must precede administration; mid-session changes need a current prescriber's authorization (which can be by phone or telehealth, but documented).
- Missing biomedical waste manifest months. Manifest logs with gaps — months where no pickup is recorded — trigger inspector follow-up. Even zero-pickup months should have a log entry. We assemble the manifest log month over month so gaps don't appear.
Mobile IV services — the same rules, plus a few
Mobile IV services (IV at the patient's home, hotel, or office) are increasingly common in Florida. The applicable rules are largely the same as fixed-location IV clinics, with several additions:
- The supervisory protocol must contemplate off-site administration and the supervisory availability requirements at the point of delivery.
- The Good Faith Exam must precede the visit — typically by audio + video telehealth under § 456.47, with the documentation standard the same as an in-person GFE.
- The IV cart or bag transport must maintain the cold chain where the product requires it, with logged temperature monitoring.
- The biomedical waste generated at the patient's location must be transported back to the clinic's manifest under FAC 64E-16; "leave the sharps with the patient" is not a defensible pattern.
- The 25-mile rule under § 458.348 between the ARNP/PA and supervising physician affects which service area is covered by the protocol.
- Vehicle and equipment inventory should be tracked, including emergency-response equipment (the reasonable carrier-acceptable kit for anaphylaxis or vasovagal events).
Telehealth and the IV GFE
For a mobile IV service or any clinic where the prescribing practitioner is not on site at the moment of IV initiation, the Good Faith Exam is performed by telehealth under § 456.47. The standard is the same as an in-person GFE: synchronous audio + video, of meaningful duration, documented with patient identification (full legal name + DOB or MRN, not initials), medical history, current medications, allergies, IV-access tolerability, the rationale for the specific formulation, and the authorization. Telephone-only and text-only encounters do not satisfy the standard.
The supervisory protocol should explicitly contemplate telehealth GFEs if your model uses them. An out-of-state telehealth provider registered under § 456.47 does not have the same authority as a Florida-licensed practitioner — confirm scope with your healthcare attorney before assuming an out-of-state physician can serve as the GFE prescriber for in-Florida patients.
SB 1728 and the IV clinic conversation
SB 1728 / HB 1429 — the Medical Spa Prescription Drug Oversight Act — would have introduced explicit statutory language around the Good Faith Exam and supervisory protocols for esthetic and wellness clinics, including IV bars under most readings. The bill died in subcommittee on March 13, 2026. The existing framework — § 458, § 456.47, § 400.9905, Board of Medicine Rule 64B8-9.009, USP <797>, FAC 64E-16 — remains the controlling regime. A revived bill in 2027 may codify what the standard of care already expects. See our SB 1728 explainer.
Frequently asked questions
Do I need an AHCA Health Care Clinic license for an IV bar in Florida?
It depends on the ownership structure and the billing model. Florida § 400.9905 defines a "health care clinic" as an entity that provides health care services to individuals and bills any third-party payor (including Medicare, Medicaid, or commercial insurance). A wholly physician-owned IV clinic that bills only cash and only under the licensed physician's name may qualify for one of the statutory exemptions; an entity that is owned by non-licensees, or that bills any third-party payor, generally needs AHCA HCC licensure under Chapter 400, Part X and Rule 59A-33. The exemption analysis is fact-specific — confirm with your Florida-licensed healthcare attorney before assuming you're exempt.
Can an RN administer IV hydration in a Florida med spa without a physician on site?
Yes, an RN can administer an IV under a valid practitioner's order — but the practitioner doesn't have to be physically on site at the moment of administration. What is required is a current Good Faith Exam by an authorized prescriber (MD, DO, ARNP, or PA acting within a § 458.348 supervisory protocol), a written prescription or standing order specific to the patient and the IV formulation, and supervisory availability per the protocol. The order must precede administration; an RN cannot independently establish the practitioner-patient relationship or authorize the IV.
Does every patient need a Good Faith Exam for IV vitamin therapy?
Yes. IV vitamin therapy involves a prescription medical procedure — placement of a peripheral IV catheter and infusion of a compounded prescription product. The Good Faith Exam framework under Florida Administrative Code Rule 64B8-9.009 and § 458.331(1)(t) applies. A patient must have a documented GFE — performed by a Florida-licensed physician, ARNP, or PA — establishing the medical history, current medications, allergies, IV access tolerability, and authorization for the specific IV formulation. Standing orders alone, intake forms alone, and copy-pasted template notes are not defensible GFEs.
What's the difference between 503A and 503B for IV bag sourcing?
503A pharmacies are traditional compounding pharmacies regulated primarily by the state Board of Pharmacy under Section 503A of the FD&C Act. They compound on a patient-specific basis pursuant to an individual prescription, are not registered with FDA as outsourcing facilities, and are not subject to cGMP. 503B outsourcing facilities are FDA-registered under Section 503B, must comply with cGMP, are inspected by FDA, and may compound office-stock IV bags without a patient-specific prescription. For an IV clinic, the practical implications are: 503A sourcing requires a per-patient prescription on file; 503B sourcing allows in-stock IV bags but requires verification of the facility's current FDA registration and BAA. Verify your specific vendor's status before each ordering cycle.
Is NAD+ FDA-approved for IV infusion in 2026?
No. NAD+ (nicotinamide adenine dinucleotide) is not an FDA-approved drug for any indication. IV NAD+ is compounded by a 503A pharmacy on a patient-specific prescription or by a 503B outsourcing facility; in either case, it is being administered off-label for indications (anti-aging, addiction recovery, cognitive enhancement, athletic recovery) that lack FDA approval. The defensible practice in Florida is to: (a) document a Good Faith Exam that explicitly covers NAD+ as the proposed treatment, (b) obtain an off-label informed consent that names NAD+ and discloses that it is not FDA-approved for the stated indication, and (c) source from a verified 503A or 503B with current BAA and lot tracking. Confirm marketing claims with your healthcare attorney — Florida § 456.062 prohibits deceptive advertising of healthcare services.
What records does an AHCA inspector ask for at an IV bay?
AHCA Health Care Clinic surveys at an IV bay typically request: the current AHCA HCC license; the medical director designation (Form 3110-1024); the supervisory protocols under § 458.348 for any ARNP or PA on staff; sample patient charts including the Good Faith Exam, the IV order, the procedure note, and lot numbers of products administered; the standing order or formulary for the IV menu; the 503A or 503B vendor BAAs and current registration evidence; the USP <797> sterile compounding policies if any in-house compounding occurs; the biomedical waste manifest log under FAC 64E-16; staff licensure verifications (DOH primary source); and the OIG/LEIE exclusion checks if any federal payor billing applies. A missing or template-only GFE and missing lot traceability are the most common Form 3020 deficiencies at IV bays.
Can ARNPs prescribe IV nutrients in Florida?
Yes, within the scope of their license and supervisory protocol. A Florida-licensed ARNP operating under a written supervisory protocol with a supervising physician under § 458.348 may prescribe IV nutrient formulations that fall within the protocol's scope. The protocol must specifically authorize the IV procedure category, the formulations the ARNP may prescribe, dosing parameters, and contraindications. ARNPs with controlled-substance prescriptive authority may additionally prescribe DEA-scheduled IV agents (rarely relevant for standard hydration menus). The supervising physician's practice location and the 25-mile rule under § 458.348 affect where the ARNP may practice under that protocol.
What's the supervision requirement for IV pump operation?
There is no single "IV pump operator" license in Florida. The IV procedure is delegated under § 458.348 from the prescribing physician (or ARNP/PA acting within protocol) to a qualified administering professional — typically an RN, an LPN with documented IV-certification scope under § 464.003, or in some configurations a paramedic operating within facility-specific protocols. Phlebotomists, medical assistants, and estheticians are generally not authorized to perform IV initiation or administration of medications in a Florida IV clinic. The supervisory protocol should explicitly name the categories of personnel authorized to administer IVs, and the staff training and competency records must be on file. Confirm scope-of-practice questions with your healthcare attorney.
This page is informational. It is not legal or medical advice and should not be relied upon as the basis for clinical or business decisions. For interpretation of any provision specific to your clinic, consult your Florida-licensed healthcare attorney and your medical director. Sources: Florida Statutes Chapter 400, Part X (§ 400.9905), Chapter 458 (§ 458.331, § 458.347, § 458.348), Chapter 459, Chapter 464, § 456.47, § 456.062, § 893.03; Florida Administrative Code Rule 59A-33, Title 64B8 (Board of Medicine), Chapter 64E-16 (biomedical waste); United States Pharmacopeia General Chapter <797>; Federal Food, Drug, and Cosmetic Act Sections 503A and 503B; 21 CFR Part 1271; 42 USC § 1320a-7; 29 CFR 1910.1030 (OSHA Bloodborne Pathogens); AHCA Health Care Clinic Licensure program guidance; and Florida Board of Medicine published guidance as of May 2026.