Longevity & Healthspan

A longevity or healthspan company’s regulatory profile depends on several company-specific factors, including whether it operates on a B2B or B2C basis, the nature of the product or service it offers, and how it markets and sells that product or service to customers. These factors, in combination, determine which frameworks apply – among them FDA and FTC oversight, health care licensure and care delivery rules, data privacy requirements, and emerging AI regulation.

Every longevity company is, at some level, a data company: Diagnostics, wearables, and AI-driven platforms all depend on collecting and analyzing health, genetic, and biometric data to power personalized insights. This data is typically classified as “sensitive” personal data under state privacy laws, many of which require opt-in consent before such data may be collected, used, or shared. These consent requirements sit alongside data minimization and security obligations that apply more broadly under those laws. Companies must navigate the interplay between these state comprehensive and health-specific privacy statutes, HIPAA (where the company qualifies as a covered entity or business associate), and FTC enforcement. AI chatbots and tools that process health-related data add another layer of scrutiny.

A medical license is generally required to diagnose a disease, prescribe drugs or medical devices, or order lab tests. Longevity companies must assess whether their business activities constitute licensed activity, particularly in models that mix clinical and non-clinical functions, such as a technology platform that employs or contracts with physicians. Many longevity medicine clinics manage this boundary through a management services organization (MSO) structure, which separates the clinic’s business functions from the practice of medicine, which remains with a professional entity owned and controlled by licensed clinicians. Getting this division of responsibilities wrong can expose both the MSO and the clinical practice to liability for violation of licensure, corporate practice of medicine, and fee-splitting laws.

Marketing claims can draw regulatory scrutiny at the state and federal levels – particularly when they relate to health outcomes, disease, or performance – and substantiation and disclosure requirements apply whether the claim appears on product packaging, a website, social media, or elsewhere. The FTC and state attorneys general have sharpened their focus on health, wellness, and anti-aging claims, treating ambitious health assertions as a priority enforcement area. Meanwhile, disease-linked anti-aging claims can expose a product to FDA enforcement as an unapproved drug and for misbranding. False advertising and unfair competition statutes add another layer of exposure, and the plaintiffs’ bar has taken notice, with health and wellness claims as favored targets for consumer class actions. That leaves companies to navigate a real tension: The same claims that make marketing compelling in this fast-moving category are often the ones that draw the most legal risk.

Whether an AI-driven health or wellness app is a regulated medical device generally depends on its intended use and the level of clinical judgment it replaces or otherwise asserts. Apps that provide general wellness information or coaching typically fall outside FDA device regulation, while those that analyze patient-specific data to diagnose, treat, or make clinical recommendations may qualify as software as a medical device and require FDA clearance. As AI models increasingly generate personalized health guidance, companies should also consider FTC compliance, false advertising laws, and emerging state and federal AI-specific regulation.

A laboratory that tests human specimens is required to obtain a CLIA certificate. By contrast, a consumer-facing platform that markets the test, takes orders, and delivers results is not itself CLIA-certified and should avoid suggesting otherwise, since its role is limited to facilitating consumer access. From an FDA perspective, a biomarker test performed entirely within a single CLIA-certified laboratory may qualify as a laboratory-developed test, which the FDA has sought to regulate with increasing scrutiny but has traditionally allowed to operate without separate premarket clearance. FDA clearance requirements become far more likely, however, once a test is sold as an at-home kit, conducted across multiple laboratories, or paired with diagnostic or treatment claims, any of which can cause it to be treated as a medical device – potentially a Class II or III device depending on risk – requiring premarket clearance or approval. The claims made about what a test result means, and whether it is positioned as informational, wellness-oriented, or diagnostic, are critical factors for both the CLIA and FDA analyses.

Peptides sold or administered for longevity and wellness purposes sit at the intersection of FDA, FTC, and health care licensure oversight. Depending on how a peptide is formulated, sourced, and labeled, it may be treated as an unapproved new drug, a dietary supplement, or a research chemical, and the FDA has shown increasing interest in this category. Marketing and health-related claims add another layer of scrutiny from the FDA, FTC, and state regulators, while the manner in which a peptide is prescribed, compounded, or administered may be subject to the oversight of state medical and pharmacy licensing boards. Given how fact-specific and fast-evolving this area is, companies developing or distributing peptide products should seek tailored legal guidance early, before key sourcing, labeling, and marketing decisions are finalized.

Legal needs shift as a longevity company matures. At the pre-seed and seed stages, priorities typically include entity formation, founder equity and vesting arrangements, IP protection and assignment, an early regulatory read on whether the business model triggers FDA or health care licensure regulatory requirements, and guidance on higher-risk marketing claims and practices likely to draw scrutiny. Approaching Series A and later rounds, counsel can help negotiate financing terms, build out data privacy and compliance programs, formalize clinician and vendor relationships, and prepare for heightened investor and regulatory diligence. Engaging counsel before key product, marketing, or data governance decisions are locked in helps longevity companies avoid costly restructuring later.