The 5-Day Adverse Event Reporting Rule

Indiana has added a very specific reporting deadline that med spas cannot afford to miss. Under SB 282, medical spas must report any serious adverse event to the Indiana Medical Licensing Board within five days of when the event occurs. This is part of the state's broader 2026 med spa reform package, which also includes registration, responsible-practitioner requirements, inspection authority, and stronger oversight of compounded drugs.

For operators, the biggest takeaway is simple: this is no longer something that can be handled casually after the fact. Once a serious complication happens, the reporting clock starts immediately.

What Counts as a Serious Adverse Event

Indiana's summary gives a practical definition. A serious adverse event includes any unexpected complication, hospitalization, or significant patient harm related to services performed at the med spa.

That means the reporting rule is not limited to one type of procedure or one type of medication. It applies to serious complications tied to the services your med spa actually provides.

The operational challenge is that clinics do not always recognize these events quickly enough. A complication that begins as a treatment concern can become a reportable event fast if it leads to a hospital visit, major patient harm, or an unexpected medical outcome.

The Deadline Is Shorter Than Many Clinics Expect

The most important part of the rule is the timeline.

Indiana requires reporting no later than five days after the event occurs. The uploaded brief also warns that failing to report within that timeframe may itself become a compliance problem and can lead to disciplinary action.

That is what makes this more than a documentation issue. A clinic may be managing the patient appropriately in real time, but if the reporting process is disorganized, the business can still create a second problem by missing the deadline.

This Rule is Part of a Bigger Accountability Shift

The 5-day reporting requirement did not arrive on its own. It sits inside Indiana's broader effort to formalize med spa accountability.

SB 282 requires all Indiana med spas to register by January 1, 2027, designates a responsible practitioner for each location, authorizes Board inspections, and places oversight responsibility for compounded drug use on the responsible practitioner. In that context, adverse-event reporting is one more way the state is connecting med spa operations to named clinical accountability.

This matters because Indiana is not asking for passive oversight. It is expecting a med spa to know who is responsible, what happened, and how quickly the event was addressed and reported.

Why the Responsible Practitioner Matters Here

Indiana's law requires each registered med spa to designate a responsible practitioner who has prescriptive authority, training in the services and medications used at the facility, and responsibility for making sure staff are properly licensed and trained. That role becomes especially important when a serious complication occurs. If the clinic does not have a clear escalation path, it becomes much harder to decide:

• whether the event is reportable
• who gathers the facts
• who prepares the report
• who makes sure the deadline is met

What Med Spas Should Have in Place Before an Event Happens

The Indiana brief is direct about what med spas should do to comply. It recommends establishing a formal adverse-event reporting protocol with clear timelines, auditing staff licenses and training records, and preparing for Medical Licensing Board inspections. In practice, clinics should already have:

• a written internal escalation process
• a designated person responsible for reporting
• a way to document when the event occurred
• a way to gather treatment records and staff accounts quickly
• a process for deciding whether the event meets the "serious" threshold
• a system that keeps the five-day deadline visible from the moment the issue is identified

Why This Rule Matters Even More for Higher-risk Services

Some med spas carry more reporting exposure than others.

Indiana's law also tightened oversight of compounded drugs, including GLP-1 medications and other compounded injectables used in wellness and aesthetic settings. The responsible practitioner bears oversight responsibility for compounded drug use at the facility, and all compounded drug administration must be performed by appropriately licensed personnel using products sourced from licensed compounding pharmacies.

That means med spas offering injectable, compounded, or medically complex services should be especially serious about adverse-event readiness. The higher the service risk, the more important it becomes to have clean protocols, clear documentation, and a fast reporting workflow.

What Operators Should Do Now

Indiana med spas should not wait until a complication happens to figure out the reporting process. A practical readiness plan should include:

• identifying who decides whether an event is reportable
• documenting the exact internal timeline for reporting within five days
• training staff to escalate complications immediately
• reviewing how hospitalizations, unexpected complications, and major patient harm are documented
• confirming that the responsible practitioner is actively involved in incident review
• making sure records can be pulled quickly if the Board asks questions later

Why Emergency Protocols Matter

This is where strong director-level oversight becomes operationally valuable.

A med spa that already has clear emergency protocols, escalation steps, and clinical leadership in place is much less likely to miss the reporting deadline. The problem is not only the event itself. The problem is what happens in the hours and days after it.

When a serious complication occurs, the clinic needs more than a physician name attached to the business. It needs a real process for recognizing the event, stabilizing the patient, documenting what happened, and triggering the reporting workflow before the five-day window closes.

That is exactly why emergency protocols are not optional in a state like Indiana.

The Bottom Line

Indiana now requires med spas to report serious adverse events within five days. A serious adverse event includes unexpected complications, hospitalization, or significant patient harm related to services performed at the med spa, and failure to report on time may create additional compliance exposure.

The simplest way to think about this rule is that it turns adverse-event readiness into an operational requirement. Clinics need to know what counts, who is responsible, and how the report gets filed before the clock runs out.