The healthcare regulatory landscape continues its rapid evolution, presenting both opportunities and significant compliance challenges for providers and businesses alike. This week, we've observed a pronounced tightening of enforcement, particularly in the telehealth space, coupled with persistent scrutiny of business structures under Corporate Practice of Medicine (CPOM) doctrines. For telehealth founders, multi-state practice owners, and compliance officers, understanding these shifts is not merely advisable – it is mission-critical for sustainable operations.
For more on this topic, see our analysis: TrueEval's Compliance Briefing: Navigating the Shifting Sands of Telehealth, CPOM, and Controlled Substance Enforcement.
DEA and DOJ Intensify Telehealth Controlled Substance Scrutiny
The Department of Justice (DOJ) and the Drug Enforcement Administration (DEA) are unequivocally signaling a zero-tolerance approach to illicit prescribing of controlled substances via telehealth. This isn't just about bad actors; it's about systemic failures and the perceived lack of 'legitimate medical purpose' in some telehealth models.
For more on this topic, see our analysis: TrueEval's Compliance Briefing: Navigating the Shifting Sands of Telehealth, CPOM, and Controlled Substance Enforcement.
Key Developments:
- DOJ Enforcement Surge: The DOJ has significantly increased its prosecution of telehealth companies and practitioners involved in illegal prescribing and distribution of controlled substances. This trend underscores the critical importance of strict adherence to federal and state prescribing regulations, particularly regarding the Ryan Haight Act and the 'legitimate medical purpose' requirements for telehealth encounters. The focus is on whether telehealth platforms facilitate or encourage practices that circumvent the standard of care, even if technical compliance with emergency waivers was achieved. For any practice prescribing controlled substances, robust protocols, meticulous documentation, and a culture that prioritizes patient safety over rapid acquisition are non-negotiable.
- DEA's Evolving Rules for Telehealth Prescribing: The DEA's proposed rules for prescribing controlled medications via telehealth, including buprenorphine for opioid use disorder (OUD), highlight a fundamental shift. While the COVID-19 Public Health Emergency (PHE) flexibilities offered a temporary reprieve (extended until November 11, 2024, for relationships established during the PHE), the eventual return to stricter requirements is imminent. This means an in-person medical evaluation will likely be required for initial prescriptions of Schedule II and certain Schedule III-V controlled substances, with specific, limited exceptions for buprenorphine. Telehealth platforms must prepare for a future where a hybrid model, combining virtual consultations with in-person assessments or referrals, becomes the standard for these types of prescriptions. This impacts not only OUD treatment but also pain management, mental health, and even some aesthetic treatments if controlled substances are involved.
- Multi-State DEA Registration Complexity: For businesses operating across state lines, the complexity of DEA registration is amplified. Providers must not only be licensed in the state where the patient is located but also hold a DEA registration in that state if they intend to prescribe controlled substances. This necessitates a robust credentialing and compliance infrastructure capable of tracking provider licenses, DEA registrations, and state-specific prescribing rules across all operational jurisdictions. Failure to comply can lead to DEA investigations, license revocation, and severe civil and criminal penalties.
Actionable Insight: For any telehealth business involved in controlled substance prescribing, a comprehensive audit of prescribing protocols, provider training, and technological safeguards is immediately necessary. Ensure every prescription is backed by a comprehensive, individualized medical evaluation that meets federal and state standards. Prioritize legitimate medical purpose and patient safety above all else.
Corporate Practice of Medicine (CPOM) Continues to Shape Business Structures
The Corporate Practice of Medicine (CPOM) doctrine remains a formidable barrier for many innovative healthcare business models, particularly in states with strict interpretations. This week's intelligence underscores the critical need for meticulous legal structuring to avoid severe penalties.
Key State-Specific Developments:
- Iowa's Strict CPOM: Iowa stands out with a particularly stringent CPOM doctrine, generally prohibiting non-licensed entities from employing licensed healthcare professionals or owning medical practices. This means traditional corporate structures are largely impermissible. For telehealth brands and medspas in Iowa, this necessitates forming a professional corporation (PC) or professional limited liability company (PLLC) owned by licensed Iowa professionals, which then contracts with a management service organization (MSO) for administrative and technical services. The MSO must meticulously avoid any influence over clinical decision-making, fee-splitting, or direct employment of clinical staff. This is a high-impact area where non-compliance can lead to license revocation, corporate dissolution, and significant fines.
- Kentucky's Moderate Enforcement: Kentucky also maintains a CPOM doctrine, though it's considered a moderate enforcement state. This still requires careful adherence to exceptions and compliant MSO models. Telehealth providers and medspas must ensure the entity providing medical services is professionally owned and controlled, with MSOs strictly limited to administrative, marketing, and technological support, without dictating clinical decisions or sharing professional fees. The MSO agreement must clearly delineate the separation of clinical and administrative functions.
- DTC Telehealth Weight Loss Under Scrutiny: Direct-to-consumer (DTC) telehealth weight loss brands, particularly those prescribing GLP-1 agonists, face critical CPOM challenges across numerous states (e.g., CA, TX, NY, IL, FL, GA). The tension between scalable, technology-driven business models and laws designed to protect physician independence is acute. Clinical decisions, prescribing, and patient care must remain solely under the control of licensed medical professionals, not corporate entities. MSO models must be structured with extreme care, ensuring fair market value for administrative services and avoiding any appearance of fee-splitting or corporate control over medical judgment.
Actionable Insight: For any healthcare business operating in or expanding to CPOM states, particularly Iowa, Kentucky, or those targeting DTC models, proactive legal counsel is indispensable. Review your corporate structure, MSO agreements, and physician employment contracts to ensure clear separation of clinical and administrative functions, physician independence, and fair market value compensation. Do not assume your structure is compliant without expert review.
State Boards Increase Scrutiny of Telehealth and Medspas
Beyond federal enforcement and CPOM, state medical and professional boards are actively issuing guidance and taking enforcement actions, particularly in the rapidly expanding telehealth and medspa sectors.
Key State-Level Trends:
- Michigan's Targeted Enforcement: The Michigan Board of Medicine is actively monitoring and enforcing regulations related to telehealth and medspa operations. Disciplinary actions often stem from unprofessional conduct, scope of practice violations, and inadequate supervision. For telehealth brands, this means ensuring all practitioners are appropriately licensed in Michigan, establishing patient-provider relationships in accordance with state law, and strictly adhering to Michigan's Public Health Code for prescribing. Medspa operators face scrutiny on scope of practice and delegation, requiring active medical director engagement and direct, on-site supervision where mandated. This is a critical impact area for businesses in Michigan.
- DC's Strict Telehealth Prescribing Rules: The District of Columbia has specific regulations requiring an initial real-time, interactive audio-visual examination to establish a valid provider-patient relationship for telehealth prescribing, with limited exceptions. This directly impacts business models relying on asynchronous or audio-only initial consultations. Practices must ensure technology platforms support robust real-time audio-visual interactions and that clinical protocols integrate these requirements to avoid disciplinary action.
- Chiropractic Telehealth Regulations Evolve: State chiropractic boards are increasingly issuing guidance on telehealth use for initial consultations, follow-up visits, and remote patient management. The permissibility of services via telehealth, patient consent requirements, and documentation standards vary significantly by state. Chiropractic practices must meticulously review their state's board rules, especially regarding the definition of a 'physical examination' and its adaptation for telehealth. This is a high-impact area for chiropractic practices leveraging virtual care.
Actionable Insight: State-specific regulations are not uniform. For multi-state operations, a state-by-state compliance matrix is essential. Regularly review updates from relevant state boards (Medical, Nursing, Dental, Chiropractic, etc.) and ensure your telehealth platforms and operational protocols align with each jurisdiction's unique requirements, particularly concerning initial patient encounters, scope of practice, and supervision.
CMS Expands Telehealth, Creating Opportunities and New Compliance Needs
While enforcement tightens in some areas, the Centers for Medicare & Medicaid Services (CMS) continues its commitment to integrating telehealth into the permanent healthcare landscape, expanding eligible services and provider types under Medicare.
Key Opportunity:
- Broadened Medicare Reimbursement: CMS has continued to expand the list of services eligible for Medicare reimbursement when furnished via telehealth, along with broadening the types of providers who can deliver these services. This represents a growing market opportunity for telehealth brands, medspas (with medical professionals), and even some dental practices (for specific consultations). However, this expansion comes with the imperative for meticulous attention to billing codes, documentation requirements, and compliance with originating and distant site rules. Providers must ensure their systems can accurately capture and submit claims for these newly eligible services, adhering to specific CPT codes and modifiers.
Actionable Insight: Stay current with CMS updates on telehealth-eligible CPT codes. Invest in robust billing and documentation systems that can support these new requirements. Train staff on proper coding, modifiers, and documentation for telehealth services to maximize reimbursement while mitigating audit risk. This expansion is an opportunity, but only for those who can navigate the complex billing and compliance landscape effectively.
What This Means For Your Practice
The current regulatory environment demands a proactive, sophisticated approach to compliance. The days of treating telehealth as an unregulated frontier are long gone. Here's how to position your practice for success:
- Invest in Robust Compliance Infrastructure: This is no longer optional. Implement systems for credentialing, licensing, policy management, and ongoing audits. Consider compliance software solutions that can track multi-state requirements and evolving regulations.
- Prioritize Legal Review: Before launching new services, expanding into new states, or modifying business structures, engage experienced healthcare legal counsel. CPOM and telehealth prescribing laws are complex and state-specific; generic advice won't suffice.
- Train and Re-Train Your Team: Ensure all clinical and administrative staff are thoroughly trained on federal and state telehealth regulations, prescribing rules, documentation standards, and anti-fraud policies. Regular refreshers are critical.
- Document Everything: From patient consent for telehealth to the 'legitimate medical purpose' for every controlled substance prescription, meticulous documentation is your best defense in an audit or enforcement action.
- Embrace a Culture of Compliance: Foster an organizational culture where compliance is seen as a core value, not just a burden. Leadership must model this commitment.
Looking Ahead
We anticipate continued federal and state regulatory activity, particularly as the DEA finalizes its proposed telehealth prescribing rules. The trend is clear: telehealth is here to stay, but it will operate under increasingly stringent oversight. Businesses that proactively embed compliance into their DNA, rather than treating it as an afterthought, will be best positioned to thrive in this evolving landscape. TrueEval remains committed to providing the intelligence and tools you need to navigate these complex waters with confidence.
Further Reading
- TrueEval's Compliance Briefing: Navigating the Shifting Sands of Telehealth, CPOM, and Controlled Substance Enforcement
- Telehealth's Tightening Grip: DEA, DOJ, and State Boards Redefine Compliance for 2024 and Beyond
- Telehealth Tensions: Navigating DEA Scrutiny, CPOM Landmines, and State Board Enforcement in a Post-PHE World
- Medspa Expansion: Navigating the Regulatory Minefield for Compliant Growth
