The Scrutiny of Control: Navigating California's Aggressive CPOM Enforcement in 2025-2026

2026-07-30

California's regulatory landscape for healthcare is undergoing a significant transformation, with the Attorney General actively intensifying enforcement of the Corporate Practice of Medicine (CPOM) doctrine. This shift targets PC/MSO models and other innovative structures, demanding a critical re-evaluation of how clinical and administrative functions are truly separated. Understanding the nuances of 'de facto control' is now paramount for telehealth, medspa, dental, and multi-state practices to avoid severe penalties.

The healthcare industry thrives on innovation, yet beneath the surface of new technologies and expanded access lies a bedrock of complex regulatory frameworks. Among these, the Corporate Practice of Medicine (CPOM) doctrine stands as a formidable guardian of clinical independence and patient welfare. For years, many healthcare businesses, particularly those operating under the Professional Corporation/Management Services Organization (PC/MSO) model, navigated CPOM with careful structuring. However, a seismic shift is underway, particularly in California, where enforcement has moved from passive oversight to aggressive, active prosecution. This demands an immediate and critical re-evaluation for every telehealth founder, multi-state practice owner, medspa operator, and compliance officer. Ignoring this evolving landscape is no longer an option; understanding its intricacies is the key to sustained, compliant growth.

> For more on this topic, see our analysis: [Unmasking De Facto Control: Navigating CPOM Enforcement in 2025-2026](/blog/cpom-de-facto-control-enforcement-2025-2026).

Understanding the Corporate Practice of Medicine (CPOM) Doctrine

At its core, the Corporate Practice of Medicine (CPOM) doctrine prohibits corporations or other unlicensed entities from practicing medicine or employing licensed healthcare professionals to provide medical services. Its historical rationale is deeply rooted in protecting the integrity of the patient-physician relationship, preventing commercial interests from unduly influencing clinical judgment, and ensuring that healthcare decisions are made by those with clinical qualifications, not financial motivations. These prohibitions typically extend beyond physicians to include other licensed professionals, such as dentists, chiropractors, and advanced practice nurses, depending on state law.

> For more on this topic, see our analysis: [Unmasking De Facto Control: Navigating CPOM Enforcement in 2025-2026](/blog/cpom-de-facto-control-enforcement-2025-2026).

While the fundamental principle is clear, the application varies significantly by state. Some states, like California, Texas, and New York, maintain strict interpretations of CPOM. They generally prohibit lay corporations from employing physicians, owning medical practices, or otherwise exercising control over professional medical decisions. Other states may have more relaxed rules, or specific carve-outs for certain types of entities (e.g., hospitals, non-profits, or even publicly traded companies in some contexts). This patchwork of regulations creates a complex compliance challenge for any healthcare business seeking to operate across state lines.

The Rise and Regulatory Scrutiny of the PC/MSO Model

The Professional Corporation/Management Services Organization (PC/MSO) model emerged as a widely adopted strategy to navigate CPOM restrictions while still allowing for non-physician investment and scalable operational efficiencies. In this model, the Professional Corporation (PC), owned by licensed healthcare professionals (e.g., physicians, dentists), directly employs the clinical staff and provides the clinical services. The Management Services Organization (MSO), typically a non-licensed entity, enters into an agreement with the PC to provide a broad range of non-clinical, administrative, and management services. These services often include billing, scheduling, IT, marketing, human resources, facilities management, and equipment leasing.

The theoretical elegance of the PC/MSO model lies in its clear legal separation: the PC handles clinical matters, while the MSO handles administrative functions, leaving clinical independence intact. However, in practice, the lines can blur, making the model susceptible to regulatory challenge, especially when the MSO's influence over the PC extends beyond purely administrative support. Regulators are increasingly scrutinizing whether the MSO, through its contractual arrangements or operational practices, exercises de facto control over the PC's clinical decisions or its fundamental professional operations.

California's Intensified Enforcement: A Precedent for Vigilance

Recent intelligence confirms that California has dramatically intensified its enforcement of CPOM restrictions, particularly targeting PC/MSO structures. The California Attorney General has transitioned to active enforcement, signaling a profound shift from a largely passive or reactive stance. This aggressive posture has critical implications for virtually all healthcare businesses operating in the state, from telehealth providers and medspas to dental and chiropractic practices.

California's focus is no longer solely on the formal legal ownership but on the substance of control. Regulators are scrutinizing contractual arrangements that grant MSOs or investors actual, functional control over medical practices, thereby undermining the clinical autonomy of the licensed professionals. A recent $2.3 million settlement with a dental services organization serves as a stark warning, highlighting the state's heightened scrutiny on MSO influence over:

Clinical Decisions: Any MSO involvement in setting treatment protocols, dictating patient care pathways, or influencing professional judgment.
Practice Ownership & Governance: Arrangements where the MSO effectively controls the PC's business decisions, including hiring and firing of clinical staff, despite the PC being the legal employer.
Financial Control: MSO fees that are not fair market value, or financial incentives that could lead to over-utilization or under-utilization of services.
Public Communications: Advertising or branding that creates the impression that the MSO, rather than the licensed professionals, is providing the clinical services or controls the professional practice.

Examples of 'De Facto Control' Red Flags in California:

Unilateral MSO Authority over PC Budget/Spending: If the MSO dictates how the PC spends its clinical revenue or makes major purchasing decisions for clinical equipment without the PC's genuine, independent approval.
MSO Control over Clinical Staffing: The MSO making final decisions on the hiring, firing, compensation, or performance reviews of licensed professionals and clinical support staff, rather than the PC.
Indemnification Clauses: Agreements where the PC indemnifies the MSO for liabilities arising from clinical decisions, effectively shifting risk while the MSO exerts control.
Extensive MSO Management Clauses: Contractual language granting the MSO broad, ill-defined management rights that could be interpreted as control over the PC's professional practice.
Profit-Sharing Arrangements: Fee structures (e.g., percentage-based fees) that are not clearly tied to the fair market value of specific management services and could be perceived as impermissible fee-splitting or revenue-sharing that incentivizes clinical decision-making.
MSO Dictating Scope of Services: The MSO determining which clinical services the PC will offer or discontinue, rather than the PC's licensed owners.
Shared Branding & Marketing: While co-branding is common, if marketing materials imply the MSO is the service provider, or if the MSO dictates all aspects of clinical patient communications.

CPOM Across Other Key States: A Patchwork of Risk and Compliance

While California stands out for its aggressive enforcement, other states also maintain strict CPOM doctrines, each with its own nuances that multi-state operators must carefully consider.

Texas: Texas is another notoriously strict CPOM state. It prohibits corporations from practicing medicine and employing physicians. A unique challenge in Texas is the "goodwill" issue, where a non-physician entity cannot acquire the "goodwill" of a medical practice. MSO agreements in Texas must be meticulously crafted, ensuring MSO fees are based on fair market value for administrative services and do not create an appearance of the MSO controlling the professional practice or deriving revenue directly from medical services.
New York: New York generally prohibits the practice of medicine by professional corporations not owned by licensed physicians or certain other licensed professionals. The state is strict regarding physician employment by lay entities. PC/MSO models must ensure clear separation, with the PC maintaining full control over professional decision-making, staff, and patient care, and MSO services limited to purely administrative support.
Florida: Florida's CPOM doctrine is often considered less strict than California or Texas in some respects, but it is by no means absent. While Florida allows certain corporate entities to employ physicians, it has strong prohibitions against fee-splitting, kickbacks, and false claims. Any PC/MSO arrangement must navigate these anti-fraud and abuse laws meticulously. The potential for a de facto CPOM violation in Florida often arises when MSO fees are not commercially reasonable or when the MSO exerts undue influence over patient referrals or treatment decisions, crossing into prohibited areas like the Patient Brokering Act or Stark Law equivalents if federal programs are involved.
Colorado: Colorado offers a more flexible regulatory environment compared to strict CPOM states. While it has a general prohibition against the corporate practice of medicine, it also provides specific exceptions, such as allowing for a professional service company (PSC) to employ physicians, provided certain conditions are met and the ultimate professional control remains with the licensed individuals. Despite this flexibility, the core principle of maintaining professional autonomy and preventing unqualified entities from directing clinical care remains paramount. MSO structures in Colorado still require careful design to avoid regulatory pitfalls, particularly concerning the actual exercise of clinical authority.

For any healthcare business operating in multiple jurisdictions, the imperative is clear: a state-specific legal analysis for each state where the PC and MSO operate is non-negotiable. What is compliant in one state may be a significant violation in another.

Beyond Formal Structure: The Substance of Control

Regulators are increasingly looking beyond the four corners of a contract. They examine the operational reality to determine if a PC/MSO arrangement truly respects professional independence or if it's a mere papering over of unlawful corporate control. The key question is whether the licensed professionals within the PC retain unequivocal autonomy over all clinical decisions, including:

Patient diagnosis and treatment plans.
Hiring, firing, and supervision of clinical staff (nurses, medical assistants, other licensed practitioners).
Procurement of clinical supplies and equipment.
Development and implementation of clinical protocols and quality standards.
Billing and coding decisions that impact medical necessity.

Any indicia that the MSO dictates these clinical elements will raise severe red flags, regardless of how perfectly the underlying MSO agreement is drafted.

Mitigating CPOM Risk in Your PC/MSO Model: A Practical Compliance Checklist

To navigate this heightened enforcement environment, healthcare businesses leveraging PC/MSO models must implement robust compliance measures. This is not merely about avoiding penalties; it's about building a sustainable, defensible operational structure.

Comprehensive Document Review:
Operational Safeguards & Clear Delineation of Roles:
Marketing and Branding Accuracy:
Governance and Reporting Structure:
Regular Compliance Training:
Periodic Legal & Operational Audits:

What This Means For Your Practice: Looking Ahead

The intensified CPOM enforcement in California serves as a bellwether for a broader trend: regulators are becoming savvier, looking beyond superficial structures to the substance of control. For telehealth platforms, which inherently rely on multi-state operations and often utilize PC/MSO models, this means increased scrutiny. The convenience and accessibility of virtual care must be paired with an uncompromising commitment to regulatory compliance.

Operators in the medspa, dental, chiropractic, and wellness sectors, often characterized by innovative service delivery models and investor interest, are also squarely in the crosshairs. Any growth strategy involving MSO structures or third-party management must be built upon a foundation of meticulous CPOM compliance.

The regulatory environment is dynamic, not static. What was considered acceptable five years ago may now trigger enforcement action. The trend is clear: substantive compliance, where the spirit of the law is met in addition to the letter, is paramount. Businesses must be proactive, not reactive, in adapting their structures and operations to this evolving landscape. This requires ongoing legal counsel, robust internal compliance programs, and a deep understanding of state-specific requirements. TrueEval provides the infrastructure and intelligence necessary to navigate these complex challenges, helping your practice build a compliant, sustainable, and defensible foundation for the future.

In an era of rapid healthcare innovation, the imperative to safeguard clinical independence and patient welfare through strict CPOM enforcement will only grow. Those who proactively align their business models with these foundational principles will be best positioned for long-term success.