The Compliance Crucible: Navigating DEA Scrutiny, CPOM Landmines, and Telehealth's Evolving Frontier

By Shannon Smith, DNP, APRN, FNP-C, PMHNP-BC, PMHNP-C · 2026-04-17

This week's digest unpacks critical shifts in healthcare compliance, from intensified DEA enforcement on telehealth prescribing to the pervasive challenges of Corporate Practice of Medicine doctrines. We analyze how these developments impact everything from medspas to national telehealth platforms, offering actionable insights for navigating a rapidly evolving regulatory landscape.

The healthcare regulatory landscape is a dynamic and often unforgiving terrain. For telehealth innovators, expanding medspa chains, and brick-and-mortar practices eyeing national growth, staying abreast of compliance shifts isn't just good practice—it's existential. This week, we dissect several pivotal developments that underscore the growing scrutiny on virtual care, controlled substance prescribing, and foundational business structures, offering a strategic roadmap for sustained, compliant growth.

> For more on this topic, see our analysis: [The Compliance Crucible: Navigating DEA Scrutiny, CPOM Landmines, and Telehealth's Evolving Landscape](/blog/compliance-crucible-dea-cpom-telehealth).

DEA's Unyielding Focus: Telehealth Controlled Substances Under the Microscope

The Department of Justice (DOJ) and the Drug Enforcement Administration (DEA) are sending an unequivocal message: the era of unchecked telehealth prescribing for controlled substances is over. Recent intelligence highlights a significant increase in DOJ enforcement actions against telehealth companies and practitioners involved in illegal prescribing and diversion of controlled substances. This isn't merely about technical non-compliance; it's about the fundamental requirement of a 'legitimate medical purpose' for every prescription.

> For more on this topic, see our analysis: [The Compliance Crucible: Navigating DEA Scrutiny, CPOM Landmines, and Telehealth's Evolving Landscape](/blog/compliance-crucible-dea-cpom-telehealth).

The DEA's proposed rules for telehealth prescribing, particularly concerning buprenorphine for Opioid Use Disorder (OUD), further cement this shift. While the COVID-19 Public Health Emergency (PHE) flexibilities offered a temporary reprieve, extending until November 11, 2023, and for an additional year for established patient-prescriber relationships, the long-term trajectory is clear: an initial in-person medical evaluation will likely become the standard for Schedule II and most Schedule III-V controlled substances. Exceptions for buprenorphine will exist, but they will be tightly defined.

Key Takeaways for Prescribing Controlled Substances via Telehealth: * Ryan Haight Act Returns: The expiration of PHE waivers means a return to the core principles of the Ryan Haight Act, generally requiring an in-person evaluation before prescribing controlled substances via telehealth. Temporary extensions provide limited breathing room, but prepare for the permanent framework. * Legitimate Medical Purpose: The DOJ is scrutinizing whether telehealth platforms facilitate or encourage practices that circumvent this standard. This demands robust patient intake protocols, comprehensive medical evaluations, and rigorous documentation. * State-Specific DEA Registration: For multi-state operations, providers must not only be licensed in the patient's state but also hold a DEA registration in that state if they intend to prescribe controlled substances there. This adds layers of complexity to credentialing and compliance infrastructure. * Buprenorphine Nuances: While buprenorphine has specific, slightly more flexible proposed rules, the general trend is towards requiring an initial in-person visit or a referral from a practitioner who has conducted one for new OUD patients.

This intensified scrutiny means that telehealth platforms, mental health providers, pain management clinics, and even medspas or dental practices considering controlled substance prescribing via telehealth, must audit their prescribing practices with extreme diligence. The consequences of non-compliance are severe, ranging from loss of DEA registration and substantial fines to civil and criminal charges.

Corporate Practice of Medicine (CPOM): A Persistent Structural Challenge

While federal agencies focus on prescribing, state-level regulations continue to dictate the fundamental structure of healthcare businesses. The Corporate Practice of Medicine (CPOM) doctrine remains a critical, often misunderstood, barrier for non-physician-owned entities seeking to operate medical practices. This week's intelligence highlights its impact across various states and business models.

State-Specific CPOM Enforcement: * Iowa's Strict Stance: Iowa maintains a strict CPOM doctrine, generally prohibiting non-licensed entities from employing licensed healthcare professionals or owning medical practices. This necessitates professional corporation (PC) or professional limited liability company (PLLC) models owned by licensed Iowa professionals, or meticulously structured Management Service Organization (MSO) agreements. * Kentucky's Moderate Approach: Kentucky is considered a moderate enforcement state. While CPOM is recognized, specific statutory exceptions or common practices may allow for certain compliant structures. However, the core principle of maintaining physician independence and avoiding control over clinical decisions by lay entities remains paramount. * Michigan's Broad Public Health Code: While not explicitly a CPOM state in the same vein as Iowa, Michigan's Public Health Code (MCL 333.16101 et seq.) broadly governs health professions. The Michigan Board of Medicine's increased scrutiny of telehealth and medspa operations often touches upon issues of scope of practice and delegation, which are closely related to CPOM principles, particularly regarding who can own and direct medical services.

CPOM's Impact on Modern Healthcare Models: * DTC Telehealth Weight Loss Brands: These brands, especially those prescribing GLP-1 agonists, face critical CPOM challenges. The tension between scalable, technology-driven business models and laws protecting physician independence is acute. MSO agreements must be meticulously crafted to ensure the MSO provides only administrative services at fair market value, without influencing clinical judgment or engaging in prohibited fee-splitting. * Medspas: Non-physician ownership of medspas offering medical services (e.g., injectables, laser treatments) is highly problematic in CPOM states. The medical director must be genuinely engaged, and the entity providing medical services typically needs to be a professional entity owned by licensed professionals. Any MSO arrangement must clearly delineate clinical and administrative responsibilities. * Dental and Chiropractic Practices: These practices are also subject to CPOM principles, even if specific statutes allow for certain corporate ownership models. Any deviation from traditional professional ownership or attempts by non-licensed entities to control clinical practice can trigger violations.

Navigating CPOM requires proactive legal counsel and robust structural compliance. Failure to adhere can lead to license revocation, corporate dissolution, significant fines, and even criminal charges.

Telehealth's Evolving Regulatory Framework: Beyond the PHE

Beyond controlled substances and CPOM, the general regulatory environment for telehealth continues to mature, with states and federal agencies refining their expectations post-PHE.

Key Developments in Telehealth Regulation: * District of Columbia's Strict P-P Relationship: The DC Board of Medicine explicitly requires an initial real-time, interactive audio-visual examination to establish a valid provider-patient relationship for telehealth prescribing, with limited exceptions. This directly impacts business models relying on asynchronous or audio-only initial consultations. * Michigan Medical Board's Scrutiny: The Michigan Board of Medicine is actively monitoring and enforcing regulations related to telehealth, with disciplinary actions stemming from issues like unprofessional conduct, scope of practice violations, and inadequate supervision. This underscores the need for strict adherence to state licensing laws, proper establishment of patient-provider relationships, and compliant prescribing practices. * Chiropractic Telehealth Guidance: State chiropractic boards are increasingly issuing guidance on telehealth for initial consultations, follow-up visits, and remote patient management. This varies significantly by state, impacting the scope of services that can be offered virtually and requiring meticulous review of state-specific rules. * CMS Expansion of Telehealth Services: On a positive note, CMS continues to expand the list of services eligible for Medicare reimbursement via telehealth, broadening provider eligibility. This signals a sustained commitment to integrating telehealth into the permanent healthcare landscape, offering new market opportunities but also demanding meticulous attention to billing codes, documentation, and compliance with evolving originating/distant site rules.

These developments highlight a consistent theme: while telehealth offers immense potential for access and efficiency, the regulatory framework is becoming more defined and, in many areas, more stringent. The days of operating under broad, emergency-driven flexibilities are receding, replaced by a nuanced landscape requiring precise compliance.

What This Means For Your Practice

The current regulatory climate demands a proactive, multi-faceted approach to compliance. Here are actionable steps for healthcare businesses:

Re-evaluate Telehealth Prescribing Protocols: If your practice prescribes controlled substances via telehealth, immediately audit your processes against the DEA's proposed rules and DOJ enforcement trends. Prioritize the 'legitimate medical purpose' standard and prepare for eventual in-person visit requirements. Ensure multi-state DEA registration where applicable.
Audit Business Structures for CPOM Compliance: For any healthcare business, especially those with non-physician ownership or MSO arrangements, conduct a thorough legal review of your corporate structure in every state of operation. Ensure clear separation of clinical and administrative functions, fair market value for services, and absolute physician independence in clinical decision-making.
Intensify State-Specific Telehealth Compliance: Beyond federal rules, meticulously understand and adhere to state-specific telehealth regulations, particularly concerning the establishment of the patient-provider relationship, permissible modalities, and scope of practice for all licensed professionals. This is critical for states like DC and Michigan.
Leverage CMS Expansion Strategically: For practices serving Medicare beneficiaries, stay updated on CMS's expanding list of telehealth-eligible services. Implement robust billing and documentation systems to accurately capture and submit claims for these services, ensuring compliance with all associated modifiers and requirements.
Invest in Continuous Training and Technology: The pace of regulatory change necessitates ongoing compliance training for all staff and providers. Invest in compliance software and secure, HIPAA-compliant technology platforms that support evolving requirements for patient verification, documentation, and secure communication.

Looking Ahead

The regulatory environment for healthcare, particularly in the rapidly evolving telehealth and medspa sectors, will continue to be a crucible for innovation. The trend is clear: increased scrutiny, greater specificity in regulations, and a heightened focus on patient safety and preventing fraud and diversion. Businesses that embed robust compliance frameworks into their core operations, prioritize ethical practice, and proactively adapt to regulatory shifts will not only mitigate risk but also build a foundation for sustainable growth and long-term success. TrueEval remains your indispensable partner in navigating this complex terrain, transforming regulatory challenges into strategic advantages.