The Compliance Crucible: Navigating DOJ Scrutiny, Evolving Telehealth Rules, and CPOM Minefields

By Shannon Smith, DNP, APRN, FNP-C, PMHNP-BC, PMHNP-C · 2026-04-18

The healthcare regulatory landscape continues its rapid evolution, presenting both opportunities and significant risks. This week's digest delves into intensified DOJ enforcement, the intricate web of state-specific telehealth regulations, and the persistent challenges of Corporate Practice of Medicine doctrines, offering critical insights for executives navigating this complex environment.

The healthcare industry is in a perpetual state of flux, driven by technological innovation, shifting patient expectations, and an ever-watchful regulatory eye. For founders, operators, and compliance officers, staying ahead of these changes isn't just good practice—it's essential for survival and sustainable growth. This week, we dissect key developments that underscore the critical need for proactive, meticulous compliance.

> For more on this topic, see our analysis: [The Compliance Crucible: Navigating CPOM, Telehealth Prescribing, and DOJ Scrutiny in a Rapidly Evolving Healthcare Landscape](/blog/compliance-crucible-cpom-telehealth-doj-scrutiny).

DOJ Intensifies Scrutiny on Telehealth Fraud and Kickbacks

The Department of Justice (DOJ) has unequivocally signaled its intent to aggressively pursue fraud and abuse within the telehealth sector. This isn't a new trend, but the intensity and breadth of enforcement actions are escalating, impacting a wide spectrum of healthcare businesses, from direct-to-consumer (DTC) telehealth platforms to medspas and traditional practices integrating virtual care. The core message is clear: the rapid expansion of telehealth, while enhancing access, has also opened new avenues for illicit activities, and federal authorities are keenly focused on rooting them out.

Recent enforcement actions highlight common pitfalls:

Billing for Medically Unnecessary Services: The DOJ is targeting schemes where providers bill federal healthcare programs for services that lack medical necessity or are not rendered at all. This often involves high-volume prescribing of certain medications or durable medical equipment (DME) without a legitimate patient-provider relationship or clinical justification.
Illegal Kickbacks: A significant focus remains on arrangements that incentivize referrals or orders through disguised payments. The Anti-Kickback Statute (AKS) prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals for services reimbursable by federal healthcare programs. This includes seemingly innocuous arrangements like marketing fees, administrative services agreements, or consulting contracts that are not structured at fair market value or are tied to referral volume. Any financial relationship with lead generators, laboratories, pharmacies, or other service providers must be meticulously structured to comply with AKS safe harbors.
False Claims Act (FCA) Violations: Many DOJ actions ultimately lead to FCA charges, which carry severe civil penalties (up to three times the damages sustained by the government plus penalties per claim) and potential criminal charges. The FCA applies broadly to false or fraudulent claims submitted to federal healthcare programs, whether knowingly or through reckless disregard.

What This Means for Your Practice: For telehealth brands, medspas, dental practices, and chiropractic offices, a robust compliance program is no longer optional. It is a fundamental operational necessity. Scrutinize all third-party vendor relationships, particularly those involving marketing, lead generation, or referral services. Ensure all compensation arrangements are documented, commercially reasonable, and reflect fair market value for legitimate services rendered. Conduct regular internal audits of billing practices, medical necessity documentation, and provider credentialing. The cost of proactive compliance pales in comparison to the potential penalties and reputational damage from a DOJ investigation.

Navigating the Labyrinth of State-Specific Telehealth Regulations

While federal flexibilities during the Public Health Emergency (PHE) provided a temporary reprieve, the post-PHE landscape has reverted to a complex patchwork of state-specific telehealth regulations. This fragmentation poses a significant challenge for any healthcare entity operating across state lines, particularly in areas like sexual wellness, controlled substance prescribing, and even chiropractic care.

The Patient-Provider Relationship and Controlled Substances

For telehealth platforms, especially those in sexual wellness, the establishment of a valid patient-provider relationship is a critical compliance hurdle. Many states have specific requirements for initial consultations, often mandating synchronous audio-visual communication, while others may allow audio-only for established patients. The DEA's Ryan Haight Act continues to cast a long shadow over controlled substance prescribing via telehealth, generally requiring an in-person evaluation unless specific exceptions (like the PHE waiver or future proposed rules) apply. State medical and pharmacy boards often layer additional restrictions on top of federal law, including limits on Schedule II substances or prohibitions on prescribing controlled substances for certain conditions via telehealth without prior in-person visits.

Chiropractic Telehealth: A Niche, Yet Complex, Frontier

Even within specialized fields like chiropractic care, state boards are actively defining the scope of telehealth. Many states still require an in-person initial visit to establish a legitimate patient-practitioner relationship, limiting fully remote care. This necessitates hybrid models or careful patient vetting. For practices integrating telehealth, clear protocols are needed to distinguish services appropriate for virtual versus in-person delivery, ensuring HIPAA-compliant technology and meticulous documentation.

Informed Consent: A State-by-State Mandate

Beyond the modalities and prescribing rules, the very foundation of patient care—informed consent—is subject to diverse state requirements. There is no single federal standard for telehealth informed consent. Each state may mandate specific disclosures, such as the potential for technology failures, data privacy considerations, or the limitations of virtual care. For multi-state operators, this means implementing dynamic consent workflows that can present state-specific disclosures and regularly reviewing and updating consent forms as regulations evolve.

What This Means for Your Practice: A state-by-state legal analysis is non-negotiable for any telehealth operation. This involves reviewing medical board rules, pharmacy board regulations, and state statutes for every jurisdiction where you operate or have patients. Invest in compliance technology that can manage and track state-specific requirements for patient-provider relationship establishment, prescribing, and informed consent. Ensure your providers are licensed in the patient's state and are fully aware of and compliant with that state's specific guidelines. Ignoring these variations can lead to license revocation, civil fines, and even criminal charges.

The Enduring Challenge of Corporate Practice of Medicine (CPOM)

Corporate Practice of Medicine (CPOM) doctrines remain a formidable barrier for non-physician-owned entities seeking to deliver or manage healthcare services, particularly in states like New York, California, and Texas. While some states, like Nevada, offer more flexibility, the underlying principle—preventing lay corporations from controlling medical practice—is consistently enforced.

Strict CPOM States: New York's Unyielding Stance

New York stands out with one of the nation's strictest CPOM doctrines. Here, any business model where a non-professional entity directly controls or profits from the delivery of medical services is at high risk. For telehealth companies, medspas, dental practices, and chiropractic offices, this mandates a robust Physician-Controlled Management Services Organization (PC-MSO) structure. The professional entity (PE) must be physician-owned and controlled, retaining complete clinical autonomy and control over all medical decision-making. The MSO's role is strictly limited to providing non-clinical administrative, technical, and management services. Any perceived influence over clinical aspects can trigger severe penalties from the New York State Education Department (NYSED) or the Office of the Attorney General.

Nuanced CPOM States: Nevada's Flexible Framework

In contrast, Nevada is often considered more flexible, allowing for MSO models, especially for telehealth and medspa businesses. However, this flexibility does not equate to permissiveness. The critical compliance point is ensuring the MSO does not exert control over clinical decision-making, physician employment, or fee-splitting arrangements. MSO agreements must be meticulously drafted to delineate clear boundaries, explicitly stating the PC retains full control over medical judgments, hiring/firing of clinical staff, and setting professional fees.

DTC Telehealth Weight Loss Brands Under the CPOM Microscope

Direct-to-Consumer (DTC) telehealth weight loss brands face heightened scrutiny under CPOM. The tension between the corporate structure of a DTC platform and the requirement for physician autonomy is acute. This means scrutinizing physician employment agreements, revenue-sharing mechanisms, and any influence on treatment protocols. If a platform dictates specific treatments or formularies without independent physician judgment, it risks violating CPOM. Similarly, revenue-sharing models tied directly to patient volume or prescription type can be construed as illegal fee-splitting or inducements.

What This Means for Your Practice: Regardless of whether you operate in a strict or more flexible CPOM state, the principle of physician autonomy is paramount. Engage experienced legal counsel to audit your business model, physician contracts, and operational workflows. If utilizing an MSO model, ensure the management services agreement (MSA) is compliant, and that fee structures are fair market value and not tied to patient volume in a way that could be construed as illegal fee-splitting. Non-compliance can result in license revocation, civil monetary penalties, and even criminal charges, jeopardizing your entire operation.

Billing and Coding: The Unseen Compliance Minefield

Beyond clinical and structural compliance, the financial backbone of any healthcare business—billing and coding—presents its own intricate set of regulatory challenges. Missteps here can lead to significant financial recoupments, audits, and allegations of fraud.

Commercial Insurance: Payer-Specific Nuances

Telehealth providers must navigate the highly variable landscape of commercial insurance policies. This requires understanding each payer's specific rules regarding covered services, acceptable modalities (audio-only vs. audio-visual), eligible providers, and state-specific parity laws. Accurate use of CPT/HCPCS codes, telehealth modifiers (e.g., -95, -GT, -GQ, -G0), and place of service (POS) codes (e.g., 02 for telehealth from a location other than the patient's home, 10 for telehealth in the patient's home) is critical. Documentation must meticulously support billed services, including medical necessity, modality, and patient consent.

Self-Pay Models: Transparency and Consumer Protection

While seemingly simpler, self-pay models introduce challenges related to price transparency and consumer protection. The No Surprises Act mandates good faith estimates for uninsured and self-pay patients. Telehealth businesses must provide clear, upfront pricing for all services, avoiding deceptive marketing practices. Failure to do so can trigger consumer complaints and regulatory scrutiny from state attorneys general.

What This Means for Your Practice: Implement robust internal controls, provide ongoing staff training on billing and coding updates, and conduct regular audits. Develop clear policies and procedures for telehealth documentation, billing, and patient financial counseling. For multi-state operations, the complexity multiplies, requiring vigilance in tracking state-specific regulations for both insurance and self-pay. Proactive and diligent billing and coding compliance protects your financial health, reputation, and ability to deliver care.

Looking Ahead: The Imperative of Proactive Compliance

The regulatory environment for healthcare, particularly in the rapidly expanding telehealth and medspa sectors, is characterized by constant evolution and heightened enforcement. The developments of the past week underscore several critical themes:

1. Federal Scrutiny is Enduring: The DOJ's focus on telehealth fraud and kickbacks is not a passing trend but a sustained enforcement priority. Businesses must operate with the assumption that their arrangements will be scrutinized. 2. State-Level Nuance is Non-Negotiable: The absence of uniform federal standards for telehealth means that a granular, state-by-state approach to compliance is absolutely essential for everything from patient-provider relationship establishment to informed consent and prescribing. 3. CPOM Remains a Foundational Challenge: Navigating Corporate Practice of Medicine doctrines requires sophisticated legal structuring and an unwavering commitment to preserving physician autonomy, particularly in strict enforcement states. 4. Operational Compliance is Paramount: Beyond legal structures, day-to-day operational practices—including billing, coding, documentation, and supervision—must align with regulatory requirements to mitigate risk.

For telehealth founders, brick-and-mortar practice owners expanding nationally, compliance officers, and investors, the message is clear: compliance is not a cost center, but a strategic imperative. Investing in robust compliance infrastructure, expert legal counsel, and continuous regulatory intelligence is the only viable path to sustainable growth and mitigating the severe risks inherent in today's healthcare landscape. TrueEval remains committed to providing the insights and tools necessary to navigate this complex terrain with confidence.