The rapid expansion of telehealth and the burgeoning medspa industry have brought the antiquated, yet fiercely enforced, Corporate Practice of Medicine (CPOM) doctrine into sharp focus. For healthcare entrepreneurs, investors, and compliance professionals, navigating CPOM across multiple states isn't just a legal formality; it's a make-or-break strategic imperative. As we look to 2025-2026, regulatory scrutiny is intensifying, demanding sophisticated compliance frameworks to mitigate significant operational and financial risks.
For more on this topic, see our analysis: The Compliance Crucible: Navigating Intensified Enforcement in Telehealth and Digital Health.
At its core, CPOM prohibits corporations or non-licensed individuals from employing physicians or otherwise controlling medical decision-making. The intent is to protect the integrity of the physician-patient relationship from commercial influence. However, its application varies wildly by state, creating a patchwork of regulations that can ensnare even the most well-intentioned businesses.
For more on this topic, see our analysis: The Compliance Crucible: Navigating Intensified Enforcement in Telehealth and Digital Health.
The Evolving Landscape: Why CPOM is More Critical Than Ever
The post-pandemic healthcare environment has cemented telehealth as a permanent fixture, driving unprecedented innovation and market growth. Simultaneously, the medspa sector continues its explosive trajectory, blending aesthetic services with medical procedures. Both industries, by their very nature, often involve significant capital investment from non-physician entities and aim for multi-state scalability – precisely the scenarios CPOM laws were designed to scrutinize.
Recent regulatory intelligence underscores this heightened focus:
- State Board Scrutiny: Boards like Michigan's are actively monitoring telehealth and medspa operations, with disciplinary actions often stemming from scope of practice violations and inadequate supervision. While not direct CPOM, these actions highlight the broader push for professional integrity and physician oversight, which CPOM aims to protect.
- DOJ Enforcement: The Department of Justice's intensified enforcement against telehealth controlled substance prescribing violations, while focused on a different area, signals a broader governmental commitment to policing the 'legitimate medical purpose' of healthcare delivery, a principle intrinsically linked to CPOM's goals.
- DTC Telehealth Weight Loss: Direct-to-consumer (DTC) telehealth brands, particularly in high-growth areas like weight loss (e.g., GLP-1 agonists), face critical CPOM challenges. The tension between a scalable, technology-driven business model and laws designed to protect physician independence from commercial influence is palpable. Regulators are keenly watching for arrangements that could be construed as fee-splitting or corporate control over clinical judgment.
These trends converge to create a regulatory environment where understanding and meticulously adhering to CPOM principles is non-negotiable for sustainable growth.
Understanding the CPOM Spectrum: States to Watch
CPOM enforcement varies significantly, generally falling into three categories:
- Strict Enforcement States: These states rigorously prohibit non-physician ownership or control of medical practices. Examples include Iowa and California. In these jurisdictions, even subtle attempts by a lay entity to influence clinical decisions or share professional fees can lead to severe penalties.
- Moderate Enforcement States: These states recognize CPOM but may have specific statutory exceptions or common practices that allow for certain compliant structures, often through carefully crafted Management Service Organization (MSO) models. Kentucky falls into this category.
- No (or Limited) CPOM: A minority of states have either repealed CPOM or never formally adopted it, allowing for more flexible corporate structures. However, even in these states, other regulations (e.g., fee-splitting prohibitions, scope of practice) still apply.
Case Studies in CPOM Strictness:
- Iowa (Strict): Iowa's stringent CPOM doctrine prohibits non-licensed entities from employing licensed healthcare professionals or owning medical practices. For telehealth, this means direct employment of Iowa-licensed providers by a national telehealth company (not an Iowa professional corporation) is likely non-compliant. Medspas face similar issues, requiring a professional entity owned by licensed professionals to provide medical services.
- Kentucky (Moderate): Kentucky generally recognizes CPOM, but compliant MSO models are common. The key is ensuring the MSO provides administrative support without dictating clinical decisions, employing licensed professionals who render medical services, or sharing professional fees. The MSO agreement must meticulously separate clinical and administrative functions.
- California (Strict): California is notorious for its strict CPOM enforcement. Any entity providing medical services must be owned by licensed physicians. This makes MSO structures complex and requires meticulous adherence to fair market value for services and a clear separation of clinical and administrative control. For DTC telehealth brands, this means the professional entity must be truly independent.
The MSO Model: A Common, Yet Complex, Solution
The Management Service Organization (MSO) model has emerged as the most prevalent strategy for navigating CPOM. In this structure, a non-clinical entity (the MSO) provides administrative, marketing, and technological support services to a professional medical corporation (PC) or professional limited liability company (PLLC) owned by licensed healthcare professionals. The PC/PLLC is the entity that actually employs the clinicians and delivers medical services.
However, the MSO model is not a panacea and is fraught with potential pitfalls if not structured meticulously. Regulators are increasingly scrutinizing MSO agreements to ensure they are not merely a façade for CPOM violations. Key considerations include:
- True Independence: The professional entity must maintain complete clinical autonomy. The MSO cannot dictate treatment protocols, patient care decisions, or hire/fire clinical staff based on non-clinical metrics.
- Fair Market Value (FMV): All services provided by the MSO to the PC/PLLC, and vice versa, must be compensated at fair market value. Payments cannot be tied to the volume or value of referrals, or the number of prescriptions written, to avoid anti-kickback or fee-splitting violations.
- No Fee-Splitting: The MSO cannot share in the professional fees generated by the PC/PLLC. Revenue streams must be clearly delineated, with the MSO receiving payment for its administrative services, not a percentage of medical revenue.
- Ownership and Control: The PC/PLLC must be owned by licensed professionals who are actively practicing and making clinical decisions. The MSO cannot have ownership or control over the professional entity.
- Marketing and Branding: While the MSO can manage marketing, it must be clear to the public that medical services are provided by independent, licensed professionals, not the MSO itself.
Practical Implications for Telehealth and Medspa Operators
For Telehealth Brands:
- Licensure & DEA Registration: Ensure all practitioners are licensed in the patient's state and, if prescribing controlled substances, hold a DEA registration in that state. This is a foundational requirement, separate from CPOM, but critical for multi-state operations.
- Professional Entity Formation: In strict CPOM states, establish state-specific professional corporations or PLLCs owned by licensed physicians (or other appropriate licensed professionals) to employ practitioners and deliver medical services.
- Robust MSO Agreements: Draft MSO agreements with extreme precision, clearly defining the scope of administrative services, ensuring FMV compensation, and explicitly stating the professional entity's clinical independence.
- Clinical Oversight: Implement strong clinical governance structures within the professional entity, ensuring medical directors are actively engaged and exercising genuine oversight, not merely serving as a signatory.
- Patient Intake & Consent: Ensure patient-provider relationships are established compliantly, including proper informed consent that clarifies the structure of care delivery (e.g., who the employing entity is).
For Medspa Owners:
- Physician Ownership/Medical Director: In CPOM states, the medical director must be a genuinely engaged, licensed physician (or other appropriate professional) who owns the professional entity providing medical services. They cannot be a figurehead.
- Scope of Practice: Meticulously delineate services that fall under the medical scope of practice from aesthetic services. Medical services must be delivered by the professional entity.
- Delegation & Supervision: Ensure all delegated medical procedures are performed by appropriately licensed and trained personnel under the direct supervision required by state law. This often means on-site supervision for certain procedures.
- Financial Structures: Avoid revenue-sharing arrangements with non-medical owners that could be construed as fee-splitting. All financial arrangements must be at FMV for services rendered.
- Marketing Accuracy: Clearly communicate that medical services are provided by licensed professionals within an independent medical practice, even if the brand name is associated with a non-medical entity.
For Dental and Chiropractic Practices Expanding Services:
- Professional Practice Acts: Consult your specific state's dental or chiropractic practice acts, as these professions often have their own CPOM nuances or specific allowances for corporate structures. Any expansion into adjunctive medical services (e.g., medspa procedures) will likely trigger the broader CPOM rules.
- MSO Review: If partnering with management companies, ensure the MSO agreement respects the professional independence of the dental or chiropractic practice and does not interfere with clinical judgment or fee structures.
- Scope of Practice: Any new service offerings must strictly adhere to the scope of practice for the licensed professionals delivering them. This is especially true for services that might cross into traditional medical domains.
Checklists for CPOM Compliance
MSO Agreement Checklist:
- Clear Delineation of Services: Does the agreement explicitly list administrative services provided by the MSO and clinical services provided by the PC/PLLC?
- FMV Compensation: Is the compensation structure for MSO services based on fair market value, independent of patient volume or revenue from professional services?
- No Fee-Splitting Language: Does the agreement explicitly prohibit fee-splitting or any direct sharing of professional fees?
- Clinical Autonomy: Does the agreement affirm the PC/PLLC's sole authority over all clinical decisions, hiring/firing of clinical staff, and patient care protocols?
- Term & Termination: Are the term and termination clauses standard and not unduly restrictive on the professional entity?
- No Ownership/Control of PC/PLLC: Does the MSO have any ownership interest or control rights over the professional entity?
- Indemnification: Are indemnification clauses balanced and fair?
Operational Compliance Checklist:
- Separate Entities: Are the MSO and PC/PLLC legally distinct entities with separate bank accounts, EINs, and governance structures?
- Credentialing & Licensing: Is every clinician properly licensed in the patient's state and, where applicable, registered with the DEA in that state?
- Medical Director Engagement: Is the medical director actively engaged, providing genuine oversight, and documented as such?
- Clinical Protocols: Are clinical protocols developed and approved by the professional entity's medical leadership, not the MSO?
- Billing & Collections: Is billing for professional services handled by the PC/PLLC, even if the MSO provides administrative support for the process?
- Marketing Review: Do all marketing materials accurately represent the structure of care delivery, clarifying that medical services are provided by licensed professionals?
- Regular Audits: Conduct periodic internal and external audits of MSO agreements, financial flows, and clinical operations to ensure ongoing compliance.
What This Means For Your Practice: Looking Ahead
The Corporate Practice of Medicine doctrine, far from being an outdated relic, is a dynamic and critical area of healthcare compliance that will continue to shape the industry in 2025-2026. For telehealth brands and medspa operators seeking multi-state expansion, a proactive and meticulously structured approach to CPOM is not optional; it is foundational to long-term success and risk mitigation.
Ignoring CPOM can lead to severe consequences: license revocation for practitioners, corporate dissolution, significant fines, disgorgement of profits, and even criminal charges in egregious cases. The increasing scrutiny from state boards, federal agencies like the DOJ, and the evolving legal interpretations demand that businesses invest in robust legal counsel and compliance infrastructure from the outset.
As the regulatory landscape continues to evolve, staying abreast of state-specific nuances, particularly in strict CPOM states like Iowa and California, will be paramount. The key is to build models that prioritize clinical independence and patient safety, ensuring that the business structure supports, rather than compromises, the integrity of medical practice. TrueEval remains committed to providing the definitive guidance necessary to navigate these complex challenges, ensuring your practice is not just compliant, but positioned for sustainable and ethical growth.
Further Reading
- The Compliance Crucible: Navigating Intensified Enforcement in Telehealth and Digital Health
- The Compliance Crucible: Navigating Intensified Enforcement in Telehealth's Next Chapter
- Telehealth Tensions: Navigating DEA Scrutiny, CPOM Landmines, and State Board Enforcement in a Post-PHE World
- Telehealth's Tightening Grip: DEA, DOJ, and State Boards Signal a New Era of Scrutiny
