The CPOM Gauntlet: Navigating Corporate Practice of Medicine Across State Lines in 2025-2026

By Shannon Smith, DNP, APRN, FNP-C, PMHNP-BC, PMHNP-C · 2026-04-18

The Corporate Practice of Medicine (CPOM) doctrine remains a formidable challenge for healthcare businesses expanding nationally. This deep dive dissects state-specific nuances, offering actionable strategies for telehealth platforms, medspas, and other practices to build compliant, resilient operational structures.

The healthcare landscape is rapidly evolving, driven by technological innovation and a growing demand for accessible care. However, the foundational regulatory principle known as the Corporate Practice of Medicine (CPOM) doctrine continues to present a significant, often bewildering, compliance challenge for healthcare businesses, particularly those operating across state lines or embracing innovative models like telehealth and medspas. In 2025-2026, navigating the CPOM gauntlet is not merely a legal formality; it is a strategic imperative for sustainable growth and risk mitigation.

> For more on this topic, see our analysis: [The Unseen Hand: Navigating Corporate Practice of Medicine (CPOM) in a Multi-State Telehealth Landscape](/blog/cpom-multi-state-telehealth-2025-2026).

At its core, CPOM generally prohibits corporations, or other non-physician-owned entities, from practicing medicine or employing physicians to provide medical services. The intent is to safeguard physician autonomy, prevent commercial exploitation of healthcare, and protect the public from undue corporate influence on clinical decision-making. While the underlying principle is consistent, its interpretation and enforcement vary dramatically from state to state, creating a complex patchwork of regulations that demands meticulous attention.

> For more on this topic, see our analysis: [The Unseen Hand: Navigating Corporate Practice of Medicine (CPOM) in a Multi-State Telehealth Landscape](/blog/cpom-multi-state-telehealth-2025-2026).

Understanding the CPOM Spectrum: From Strict to Flexible

The most critical insight for any healthcare business is that there is no uniform federal CPOM law. Instead, states have adopted their own versions, ranging from highly restrictive to more permissive. This spectrum dictates the permissible business structures and operational models for telehealth brands, medspas, dental practices, chiropractic offices, and even traditional brick-and-mortar practices contemplating national expansion.

The Strict Enforcement States: New York, California, Texas, and Beyond

States like New York, California, and Texas are widely recognized for their stringent CPOM enforcement. In these jurisdictions, the prohibition against corporate control over medical practice is deeply ingrained in statute, regulation, and case law. For example, New York's stance is particularly rigid, requiring that professional entities (PEs) delivering clinical services be truly physician-owned and physician-controlled. Any arrangement where a non-professional entity exerts influence over clinical decisions, physician employment, or fee structures is ripe for regulatory scrutiny.

New York (NYSED Office of Professional Discipline): NY's CPOM is among the strictest. Telehealth companies, medspas, and other practices must implement Physician-Controlled Management Services Organization (PC-MSO) structures. The professional entity (PE) must retain complete clinical autonomy, control over medical decision-making, patient care, and professional employment. The MSO's role is strictly limited to administrative, technical, and management services. Fee structures must be fair market value and not tied to patient volume or revenue generation in a way that could be construed as fee-splitting. Non-compliance can lead to license revocation, civil penalties, and even criminal charges.
California (Medical Board of California): California also maintains a strict CPOM doctrine. Similar to New York, MSO models are prevalent, but the agreements must clearly delineate the MSO's administrative role from the PE's clinical responsibilities. The Medical Board of California actively investigates arrangements that appear to compromise physician independence or involve illegal fee-splitting. Telehealth platforms, especially those in high-growth areas like direct-to-consumer (DTC) weight loss, must ensure their physician employment agreements, marketing practices, and revenue-sharing models are compliant.
Texas (Texas Medical Board): Texas, while allowing certain exceptions for non-profit hospitals and academic medical centers, generally prohibits the corporate practice of medicine. The Texas Medical Board is vigilant about arrangements that could be interpreted as a lay entity controlling medical decisions or employing physicians. MSO structures are common but require careful drafting to avoid the appearance of control over clinical practice.

These states demand meticulous attention to contractual agreements, operational workflows, and financial arrangements. The Management Services Agreement (MSA) between the MSO and the professional entity must explicitly state that the PE retains ultimate authority over all clinical matters. Compensation to the MSO must be at fair market value for the services rendered, and not tied to patient volume or revenue in a manner that could be deemed illegal fee-splitting. The professional entity itself must be genuinely owned and controlled by licensed professionals.

The Flexible Enforcement States: Nevada and Others

Conversely, some states, while technically having a CPOM doctrine, exhibit a more flexible enforcement posture. Nevada is a prime example. While it generally prohibits corporations from employing physicians, its enforcement is often considered more accommodating, particularly for MSO models in telehealth and medspa businesses.

Nevada (Nevada State Board of Medical Examiners): Nevada allows MSO models, provided specific guidelines are followed to preserve physician autonomy. The critical compliance point is ensuring the MSO does not exert control over clinical decision-making, physician employment, or fee-splitting. Agreements must clearly delineate boundaries, stating the PC retains full control over medical judgments, hiring/firing of clinical staff, and setting professional fees. This flexibility, however, does not mean permissiveness; robust legal counsel is still essential.

Even in these more flexible states, the core principle of physician autonomy must be upheld. Businesses must not mistake flexibility for an absence of regulation. The risk of regulatory challenge, though potentially lower, still exists if the MSO model is not meticulously structured and executed.

Key Compliance Considerations for Multi-State Operations

For any healthcare entity operating or expanding across state lines, a multi-faceted approach to CPOM compliance is essential. This is particularly true for telehealth platforms and medspas, which inherently cross jurisdictional boundaries.

1. The Physician-Controlled Management Services Organization (PC-MSO) Model

The PC-MSO model remains the gold standard for navigating CPOM in most states. It involves two distinct entities:

Professional Entity (PE): This entity is owned by licensed healthcare professionals (e.g., a physician, dentist, chiropractor, or group of such professionals). The PE employs or contracts with the clinical staff and is solely responsible for delivering all clinical services, making medical decisions, and maintaining professional licenses.
Management Services Organization (MSO): This entity is typically non-physician owned and provides administrative, non-clinical support services to the PE. These services can include billing, marketing, IT, real estate, equipment leasing, HR, and other back-office functions.

The critical distinction is that the MSO cannot control clinical decisions, influence treatment protocols, dictate hiring/firing of clinical staff, or engage in illegal fee-splitting. The MSA must clearly define the scope of services, compensation (fair market value), and explicitly state the PE's ultimate authority over clinical matters.

2. Avoiding Illegal Fee-Splitting and Inducements

CPOM doctrines often intertwine with prohibitions against illegal fee-splitting and anti-kickback statutes. Any financial arrangement that incentivizes referrals or influences clinical decisions based on financial gain rather than medical necessity can trigger severe penalties. This is a major focus for the Department of Justice (DOJ), which continues to intensify enforcement against telehealth fraud and kickback schemes.

Fair Market Value (FMV): All compensation arrangements between the MSO and PE, or with any third-party vendors (e.g., lead generators, pharmacies), must be for services actually rendered and at fair market value. They should not be tied to patient volume or revenue in a way that could be seen as an inducement.
No Influence on Clinical Decisions: The MSO cannot share in the professional fees generated by the PE. Any profit-sharing arrangements must be carefully structured to avoid the appearance of the MSO profiting directly from the delivery of medical services.
Transparent Referrals: Referrals for ancillary services (e.g., labs, durable medical equipment, specialty consultations) must be based solely on clinical need, not on financial incentives or arrangements with the MSO or its affiliates.

3. State-Specific Licensing and Scope of Practice

Beyond CPOM, each state has its own licensing boards (Medical, Dental, Chiropractic, Nursing) that define the scope of practice for their respective professionals. Telehealth platforms and medspas must ensure that:

Provider Licensure: All practitioners are appropriately licensed in the state where the patient is located at the time of service.
Scope of Practice: Services rendered align with the practitioner's scope of practice in that specific state. For example, a nurse practitioner's autonomy and prescriptive authority can vary significantly by state.
Supervision and Delegation: For PAs and ARNPs, state-specific supervision and delegation requirements (e.g., Washington State Medical Commission) must be meticulously followed, including documented collaboration, chart review, and availability for consultation. This is particularly critical in medspa settings where PAs and ARNPs often perform advanced procedures.

4. Documentation and Transparency

Robust documentation is not just good practice; it's a compliance necessity. This includes:

Informed Consent: Adhering to state-specific telehealth informed consent requirements, which vary widely across all 50 states and D.C. This includes disclosures about technology failures, data privacy, and the limitations of virtual care.
Patient Records: Maintaining comprehensive patient records that clearly document the medical necessity of services, the modality used, and the clinical rationale for all decisions.
Compliance Policies: Implementing clear internal policies and procedures for CPOM, anti-kickback, billing, and other regulatory requirements. Regular staff training is crucial.

Practical Checklists for Your Practice

To navigate the CPOM landscape effectively, consider the following actionable steps:

For Telehealth Founders & Operators: * State-by-State Legal Review: Conduct a comprehensive legal analysis of CPOM, fee-splitting, and telehealth laws in every state you operate or plan to operate. Do not assume uniformity. * Robust PC-MSO Structure: Ensure your MSO agreements are meticulously drafted to clearly separate administrative services from clinical control. The PE must be genuinely physician-owned and controlled. * Fair Market Value (FMV) Assessments: Obtain independent FMV opinions for all MSO fees, physician compensation, and other financial arrangements to mitigate anti-kickback risks. * Provider Credentialing & Licensing: Implement rigorous systems to verify and maintain provider licensure in all relevant states. Ensure providers are aware of and compliant with state-specific telehealth and prescribing rules. * Dynamic Consent Workflows: Develop technology that can present state-specific informed consent disclosures and capture patient acknowledgment. * Audit Trail: Maintain detailed records of all MSO services, PE clinical decisions, and financial transactions.

For Medspa, Dental, Chiropractic, and Wellness Practice Owners: * CPOM Audit: Review your current business structure and contracts (especially with management companies or marketing firms) against your state's CPOM doctrine. If operating in multiple states, audit each jurisdiction. * Professional Entity (PE) Formation: If not already structured as a PE, consult legal counsel on forming one to house your clinical operations, especially if expanding services or integrating telehealth. * Supervision & Delegation Protocols: For practices employing PAs or ARNPs, establish clear, documented protocols for supervision and delegation that meet state board requirements. This is particularly critical for aesthetic procedures. * Prescribing Compliance: If prescribing medications (e.g., for weight loss, hormones, pain management), ensure all prescriptions are medically necessary, based on a legitimate patient-provider relationship, and comply with state pharmacy board regulations (e.g., DC Board of Pharmacy). * Referral Integrity: Ensure all referral relationships are clinically driven and do not involve any direct or indirect financial inducements.

For Healthcare Compliance Officers: * Regulatory Intelligence System: Implement a system to track evolving CPOM, telehealth, and anti-kickback regulations across all relevant states. This is a dynamic landscape. * Internal Audit Program: Conduct regular internal audits of MSO agreements, physician contracts, billing practices, and marketing materials to identify and mitigate CPOM and fraud risks. * Training & Education: Develop and deliver ongoing compliance training for all staff, from clinical providers to administrative personnel, on CPOM, anti-kickback statutes, and documentation requirements. * Vendor Management: Vet all third-party vendors (e.g., marketing agencies, technology providers) for compliance with CPOM and anti-kickback laws, especially regarding compensation structures. * Incident Response Plan: Have a clear plan for responding to regulatory inquiries, audits, or enforcement actions related to CPOM or other compliance issues.

Looking Ahead: The Future of CPOM Enforcement

The trend indicates continued vigilance from state medical boards, attorneys general, and federal agencies like the DOJ. The rapid expansion of telehealth during the COVID-19 Public Health Emergency brought CPOM into sharper focus, as innovative business models emerged that sometimes pushed the boundaries of traditional regulatory frameworks. While some states temporarily relaxed certain rules, the post-PHE environment has seen a return to, and in some cases, a tightening of, established CPOM doctrines.

Expect increased scrutiny on:

DTC Telehealth Models: Especially those offering services like weight loss, sexual health, or mental health, where the line between administrative support and clinical control can blur.
Medspa Operations: Given the growing popularity of aesthetic procedures and the involvement of mid-level practitioners, supervision and delegation, alongside CPOM, will remain key areas of focus.
MSO Structures: Regulators will continue to examine the substance over the form of MSO agreements, looking for any indication of de facto corporate control over clinical practice.
AI-Powered Platforms: As AI integrates further into healthcare, ensuring that AI tools do not inappropriately influence clinical decision-making or create new CPOM risks will be a novel challenge.

What This Means For Your Practice

For telehealth founders, multi-state practice owners, and compliance officers, the message is clear: proactive, state-specific compliance is non-negotiable. Ignoring CPOM can lead to severe consequences, including license revocations, civil monetary penalties, exclusion from federal healthcare programs, and even criminal charges. The financial and reputational damage can be catastrophic.

TrueEval champions a strategic approach to compliance, transforming regulatory challenges into competitive advantages. By meticulously structuring your operations, investing in robust legal counsel, and implementing comprehensive compliance programs, you can navigate the CPOM gauntlet with confidence, ensuring your practice remains resilient, ethical, and poised for sustainable growth in the dynamic healthcare landscape of 2025-2026 and beyond.

Don't let regulatory uncertainty stifle innovation. Partner with experts who understand the nuances of the law and can help you build a compliant foundation for the future of healthcare delivery.