Massage Therapy Code of Ethics: Consent, Boundaries, and Scope

The massage therapy code of ethics published by the National Certification Board for Therapeutic Massage and Bodywork sets at least seventeen enforceable provisions that every board-certified therapist has to follow, and a companion set of Standards of Practice spells out what those provisions look like in a treatment room. Together they govern consent, draping and sexual conduct, scope of practice, honest advertising, confidentiality, dual relationships, and continuing education. Breaking them can cost you your NCBTMB certification, bring separate discipline from your state licensing board, and in the most serious cases lead to criminal referral.

Get Consent Before You Touch Anyone

No hands go on a client until consent is established. The NCBTMB Standards of Practice require voluntary and informed consent before a session begins, and the Code of Ethics adds that consent can be written or verbal but must be recorded either way.¹²

Informed consent in practice means explaining the techniques you plan to use, the areas you intend to work on, and what the client should expect. Most therapists use an intake form covering medical history, current complaints, and a liability acknowledgment. The form alone is not enough. A verbal conversation confirming the client understands and agrees to the plan is what ethics boards expect to see.

Consent is also revocable. Provision XI of the Code protects a client’s right to refuse, modify, or terminate treatment at any point, regardless of what they agreed to earlier.² A client who signed off on deep tissue work on their lower back can ask you to stop or switch techniques mid-session, and there is no negotiation involved. Making that clear up front is what separates real informed consent from a signature on paper.

Screening for contraindications is part of the same obligation. The Code requires practitioners to acknowledge contraindications and refer clients to appropriate health professionals when needed.² Deep vein thrombosis, active skin infections, recent fractures, and certain cardiovascular conditions can make massage dangerous. A thorough health history intake is the tool for catching these, and skipping it to save time is a serious ethical lapse.

Boundaries and the Sexual Misconduct Rule

The boundary provisions are among the most strictly enforced parts of the whole framework. Provision XIV of the Code prohibits any sexual relationship or sexual conduct with a client, consensual or not, from the moment the therapeutic relationship begins and for a minimum of six months after it ends. The only carve-out is a sexual relationship that already existed before the therapeutic one started.² That six-month cooling period catches a lot of therapists off guard, and violating it is treated as seriously as misconduct during an active session.

The Code also requires draping and treatment that ensures the safety, comfort, and privacy of the client.² Proper draping is an enforceable standard, not a personal preference. Only the area being actively worked on should be uncovered.

Responsibility for the power dynamic sits with the therapist. A client lying undressed on a table with their eyes closed is vulnerable by default, and the Code requires practitioners to respect client boundaries around privacy, disclosure, emotional expression, and beliefs.² Verbal comments with sexual overtones, suggestive gestures, and any contact outside recognized therapeutic technique are boundary violations. State boards treat sexual misconduct as among the most serious offenses in the profession, and outcomes routinely include permanent license revocation and criminal referral.

Stay Inside Your Scope of Practice

Scope is where newer therapists get into trouble more than almost anywhere else. The Code requires practitioners to acknowledge the limitations of and contraindications for massage and to refer clients to appropriate health professionals when the situation calls for it.² Anything outside the manual application of structured touch to soft tissue is off-limits without separate credentials.

The restrictions that catch the most therapists:

Diagnosing medical conditions. You can note tension, reduced range of motion, or visible skin changes, but attaching a label like “torn ligament,” “scoliosis,” or “arthritis” is a medical diagnosis and requires a different license.
Prescribing medications or supplements. Recommending a specific over-the-counter pain reliever or herbal remedy is outside scope, even when it feels harmless.
Performing invasive or restricted procedures. Spinal manipulation, dry needling, acupuncture, and electrical stimulation each require separate licensure. A massage therapist performing a chiropractic adjustment is practicing without a license.
Providing psychological counseling. Listening is fine. Offering therapeutic advice for anxiety, depression, or trauma crosses into mental health practice.
Giving specific dietary advice. General encouragement toward healthy eating is acceptable; meal plans and nutritional prescriptions are not.

Working outside scope exposes you to license revocation, civil liability for any resulting harm, and potential criminal charges for practicing a restricted profession without authorization. Liability insurance typically will not cover services delivered outside your approved scope, which means the financial exposure lands squarely on you.

Represent Yourself Honestly

Honest representation runs through the whole Code. Therapists have to describe their education, credentials, and affiliations truthfully, and tell clients and the public accurately what massage therapy can and cannot do.² NCBTMB certification numbers and the NCBTMB logo can appear on business cards, brochures, and advertising only within the board’s published guidelines.¹ Listing a certification you have not earned, or advertising a technique you have not been trained in, is one of the fastest routes to a disciplinary complaint.

Financial ethics sit in the same section. The Standards require therapists to recognize the influential position they hold with clients and prohibit using that relationship for personal gain. In practice that means no pressuring clients into supplements, no steering them into package deals they do not need, and no accepting gifts intended to shape referrals or treatment decisions. Sanctions for professional conduct violations run up to permanent revocation of NCBTMB certification.¹

The Standards also require certificants to obey all applicable local, state, and federal laws governing their work.¹ That is broader than it sounds. It means keeping your license current, following local zoning and business permit rules, collecting applicable sales tax where required, and carrying professional liability insurance.

Confidentiality and Client Records

The Code requires therapists to safeguard client identity and information in all conversations, advertisements, and any other context, unless the client authorizes disclosure in writing or disclosure is medically necessary or required by law.² That covers intake forms, session notes, personal disclosures made during treatment, and the simple fact that a particular person is your client. Mentioning a client’s name in casual conversation, or posting about a session on social media without naming the person, can still violate the standard if the client is identifiable. The duty continues after the professional relationship ends.

There is a common misconception worth clearing up about HIPAA. The federal Health Insurance Portability and Accountability Act applies to health care providers only if they transmit health information electronically in connection with standard transactions, primarily insurance billing.³ Many massage therapists work cash-pay only and never submit electronic claims, which means they may not technically be HIPAA-covered entities. HIPAA’s privacy and security standards still represent best practice regardless. Therapists who do bill insurance electronically are fully subject to it.

Records should be stored securely in any format. Locked file cabinets for paper, encrypted and password-protected systems for electronic. Access limited to the therapist and authorized staff. When records reach the end of their required retention period, which varies by jurisdiction, they have to be disposed of in a way that renders the information unreadable, such as shredding or secure electronic deletion.

Dual Relationships

Standard V(d) of the Standards of Practice tells certificants to avoid dual or multidimensional relationships that could impair professional judgment or result in exploitation of a client or anyone else where a power differential exists.¹ A dual relationship is any alliance, social, familial, or business, that runs alongside the therapeutic one.

Complete avoidance is not always realistic, especially in small towns. The standard is not that you can never treat someone you know. It is that you recognize the risk and manage it, which means keeping the same protocols for intake, draping, consent, and documentation regardless of how well you know the person. The moment you start cutting corners because the client is your sister-in-law is the moment the boundary starts to go.

Digital spaces count too. Accepting a current client’s friend request on a personal account blurs the professional line in ways that are hard to undo. Keeping separate professional and personal accounts, and treating anything posted anywhere as visible to clients, is the safer default. A vague post about a “tough session today” can become a problem if a client recognizes themselves.

Keeping Your Certification Current

Board certification is not a one-time credential. To maintain it, therapists have to complete 24 hours of continuing education from NCBTMB-approved providers in each two-year renewal cycle, and at least three of those hours have to be in ethics. Up to four hours can be in self-care courses, and up to four hours can come from courses worth fewer than two credits, but neither of those categories is required.⁴

The ethics hours exist to make therapists revisit consent, boundaries, confidentiality, and scope as their careers develop. The remaining hours can go to anatomy, physiology, kinesiology, business, or advanced technique training. Missing the deadline means your certification lapses, and practicing with lapsed certification is itself the kind of credential misrepresentation the Code prohibits.

State licensing boards set their own continuing education requirements, which often differ from NCBTMB’s. Some states require more hours, mandate specific topics like human trafficking awareness or infection control, or run on a different renewal cycle. You are responsible for meeting both sets, and they do not always overlap.

What Happens When the Rules Are Broken

Anyone who experiences or witnesses a violation can file a complaint with the NCBTMB, though the board can only act on complaints involving therapists who hold current NCBTMB certification.⁵ For non-certified therapists, or for violations of state law rather than NCBTMB standards, the state licensing board is the right destination. In serious cases it makes sense to file with both.

NCBTMB handles complaints through its published disciplinary procedures, with sanctions ranging from required additional education up to permanent revocation. State boards run their own investigations, which may involve formal hearings before a review committee, and their disciplinary actions are typically recorded on public databases a prospective client can check.

Therapists also have reporting obligations that extend beyond their own practice. Many states designate massage therapists as mandatory reporters of suspected child or elder abuse, which legally requires them to report signs of abuse observed during treatment. The Code reinforces this by allowing disclosure of client information when required by law.²

Human trafficking is an area where the massage industry faces particular scrutiny. The Federation of State Massage Therapy Boards directs anyone with suspicions to the National Human Trafficking Resource Center hotline at 888-373-7888, which operates around the clock in more than 200 languages.⁶ Recognizing the signs and knowing where to report is increasingly treated as a core professional competency.

1
National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice
2
National Certification Board for Therapeutic Massage & Bodywork. Code of Ethics
3
U.S. Department of Health and Human Services. Covered Entities and Business Associates
4
National Certification Board for Therapeutic Massage & Bodywork. Board Certification Renewal
5
National Certification Board for Therapeutic Massage & Bodywork. File a Complaint
6
Federation of State Massage Therapy Boards. Countering Human Trafficking