Navigating the Peach State: A Comprehensive Guide to Healthcare Compliance in Georgia

2026-06-05

Georgia's vibrant healthcare market offers immense opportunities, but its complex regulatory landscape demands meticulous attention. From stringent Corporate Practice of Medicine doctrines to evolving telehealth rules and controlled substance protocols, understanding the nuances of Georgia law is critical for sustainable growth. This guide provides an authoritative roadmap for healthcare businesses seeking to operate or expand within the Peach State.

Georgia, a burgeoning economic hub in the Southeast, presents a compelling landscape for healthcare innovation and expansion. Its population growth, coupled with a robust business environment, makes it an attractive target for telehealth platforms, national practice groups, medspas, and specialized clinics. However, the state's healthcare regulatory framework is intricate, demanding a sophisticated understanding of both statutory mandates and interpretive enforcement actions. For any healthcare entity considering operations here, a proactive and well-informed compliance strategy is not merely advisable – it is imperative for long-term viability.

> For more on this topic, see our analysis: [The Ohio Compliance Compass: Your Roadmap to Healthcare Operations in the Buckeye State](/blog/ohio-compliance-compass-healthcare-roadmap).

The Enduring Grip of Georgia's Corporate Practice of Medicine (CPOM) Doctrine

Georgia stands firm as a strong Corporate Practice of Medicine (CPOM) state, a foundational principle that dictates who can own and operate a medical practice. This doctrine, primarily enshrined in O.C.G.A. § 43-34-26, prohibits corporations or other non-physician entities from employing physicians or owning medical practices. The legislative intent is to prevent commercial influences from compromising clinical judgment and the integrity of the physician-patient relationship.

> For more on this topic, see our analysis: [Arizona's Healthcare Frontier: Navigating CPOM, Telehealth, and Prescribing in the Grand Canyon State — Updated for 2026](/blog/arizona-healthcare-frontier-cpom-telehealth-prescribing).

Core Prohibition: Non-physicians cannot directly employ physicians or own an entity that delivers medical care. This means that a standard C-corp or LLC owned by non-clinicians cannot directly bill for physician services or dictate clinical decisions.
Professional Corporations/LLCs: Physicians, and certain other licensed professionals, are generally required to form Professional Corporations (PCs) or Professional Limited Liability Companies (PLLCs) to offer professional services. These entities must be majority-owned and controlled by licensed professionals (e.g., physicians for medical practices, dentists for dental practices).
Enforcement History: The Georgia Composite Medical Board (GCMB) and the state's Attorney General have historically shown willingness to investigate and take action against arrangements that appear to circumvent CPOM. While high-profile cases might not frequently make headlines compared to states like California, the underlying risk is significant. Violations can lead to disciplinary actions against the licensed professionals involved, voided contracts, and potential civil penalties for the corporate entity.

The Management Services Organization (MSO) Model: A Double-Edged Sword

Given Georgia's strict CPOM, the Management Services Organization (MSO) model has become the primary operational structure for non-clinical investors and businesses looking to support healthcare delivery. In this model, an MSO (owned by non-physicians) provides administrative, non-clinical services (e.g., billing, marketing, IT, real estate, human resources) to a physician-owned professional entity, which retains full clinical autonomy and directly employs the physicians.

Critical considerations for an MSO in Georgia:

Clinical Independence is Paramount: The MSO must *never* exert control over clinical decision-making, patient care, or physician hiring/firing related to clinical performance. The physician practice must maintain ultimate authority.
Fair Market Value (FMV) Compensation: All fees paid by the physician practice to the MSO must be at fair market value for legitimate services rendered. This is crucial to avoid violations of anti-kickback statutes (both federal and Georgia-specific) and fee-splitting prohibitions.
No Impermissible Fee-Splitting: The MSO cannot receive a percentage of professional fees (e.g., a percentage of collections) unless structured meticulously to avoid being construed as unlawful fee-splitting. Fixed fees, per-service fees, or cost-plus arrangements are generally safer.
Risk Mitigation: Robust MSO agreements, meticulously drafted by Georgia healthcare counsel, are essential. These agreements must clearly delineate responsibilities, ensure physician independence, and establish FMV compensation.

Georgia's Telehealth Framework: Evolution and Requirements

Georgia has made significant strides in embracing telehealth, particularly accelerated by the COVID-19 Public Health Emergency (PHE). However, its regulatory environment, primarily governed by Georgia Medical Board Rule 360-3-.07 (Telemedicine Rules), maintains a focus on patient safety and standard of care.

Licensure: Perhaps the most critical requirement for telehealth providers is full Georgia licensure. Unlike some states that offer temporary or compact licenses for telehealth, Georgia generally requires out-of-state practitioners to obtain a full, unrestricted license to practice medicine within its borders, even if providing care remotely to Georgia residents.
Established Patient Relationship: The GCMB rules emphasize the need for a bona fide physician-patient relationship. While the rules allow for the initiation of a patient relationship via telehealth, it must be sufficient to meet the standard of care for an in-person encounter. This means proper patient identification, medical history review, and an appropriate physical examination (which can be done remotely using technology when feasible, or deferred if clinically appropriate and well-documented).
Standard of Care: Telehealth services in Georgia must meet the same standard of care as in-person services. This applies to diagnosis, treatment, and prescribing. Telehealth is a modality of care, not a lower standard of care.
Informed Consent: Patients receiving telehealth services must provide informed consent, which should include an understanding of the technology, potential risks, and privacy considerations. This should be clearly documented.
Recordkeeping: Medical records for telehealth encounters must be maintained consistent with traditional medical records, ensuring confidentiality and accessibility.
Reimbursement: Georgia has telehealth parity laws that generally require commercial insurers to reimburse for telehealth services at rates comparable to in-person services for specific CPT codes, when medically necessary. Georgia Medicaid also covers a wide range of telehealth services, including audio-only for certain situations.

Medical Board Requirements for Telehealth Providers

Beyond general telehealth rules, the GCMB holds specific expectations for physicians delivering care virtually:

Provider-Patient Relationship: The establishment of the physician-patient relationship must be through appropriate means, which can include real-time audio-visual communication. For certain complex conditions or controlled substance prescribing, a prior in-person examination may still be required.
Emergency Protocols: Telehealth providers must have a clear plan for managing emergencies and referrals for in-person care when necessary.
Prescribing: Prescribing through telehealth must adhere to all state and federal regulations, particularly for controlled substances. O.C.G.A. § 26-4-100 et seq. governs Georgia's Prescription Drug Monitoring Program (PDMP).

Collaborative Practice and Supervision Requirements

Georgia has specific requirements for mid-level practitioners that are crucial for scaling operations involving PAs and NPs.

Physician Assistants (PAs): PAs in Georgia operate under delegated authority from a supervising physician. The supervising physician is responsible for the PA's medical acts. The GCMB's rules (e.g., Rule 360-5-.03) outline the requirement for a supervision agreement or protocol, which must specify the scope of practice and the types of delegated medical acts. While the physical presence of the physician is not always required, direct supervision mandates the physician's availability for consultation and review of patient charts. The ratio of PAs to supervising physicians is limited.
Nurse Practitioners (NPs): NPs in Georgia also practice under delegated medical acts as authorized by a physician's protocol agreement. This is a significant distinction from states with full practice authority for NPs. The protocol agreement, governed by Georgia Board of Nursing Rule 410-12-.03, must be signed by both the NP and the delegating physician and specifies the parameters of the NP's practice. It requires the delegating physician to be available for consultation. NPs cannot practice independently and must have a collaborating physician, which adds a layer of administrative and compliance complexity for practices utilizing NPs.

For practices utilizing these advanced practice providers, careful adherence to supervision ratios, protocol documentation, and ongoing physician oversight is paramount to avoid unauthorized practice of medicine charges.

Controlled Substance Prescribing Rules in Georgia

Prescribing controlled substances (CS) in Georgia is highly regulated, a critical area for any practice, especially those involved in pain management, mental health, or weight loss. The state imposes requirements in addition to federal DEA regulations.

Dual Registration: Prescribers must hold both a DEA registration and a Georgia Composite Medical Board registration for controlled substances.
Georgia Prescription Drug Monitoring Program (PDMP): The Georgia PDMP is mandatory. Prescribers are generally required to query the PDMP before prescribing Schedule II, III, IV, or V controlled substances and at least every 90 days thereafter for ongoing prescriptions, with specific exceptions. Failure to query the PDMP is a common compliance pitfall leading to GCMB disciplinary action.
Telehealth and Controlled Substances: Post-PHE, the federal DEA maintained flexibilities that allowed for prescribing controlled substances via telehealth without a prior in-person exam under certain conditions. However, the DEA is actively working on a final rule, which could reinstate an in-person exam requirement for initial Schedule II prescriptions. For now, Georgia generally follows federal guidelines but imposes its own strict standard of care. For Schedule II medications, an in-person exam is almost always required for initial prescriptions, though exceptions might exist for specific circumstances or during a declared emergency. Practices must monitor the evolving federal landscape closely.
Compounded GLP-1s: The FDA's proposed rule to exclude semaglutide, tirzepatide, and liraglutide from the 503B bulks list is a critical development for Georgia medspas and weight loss clinics. If finalized, this would severely restrict the ability of outsourcing facilities to compound these popular GLP-1 medications. Practices in Georgia relying on these compounded drugs must immediately audit their supply chains, prepare for alternative sourcing, or transition patients to FDA-approved branded versions. The June 29, 2026, public comment deadline is a critical window for practices to voice their clinical need to the FDA.

State-Specific Licensing and Registration Requirements

Beyond professional licensure, businesses must navigate various state-level registrations:

Georgia Secretary of State: All business entities (LLCs, corporations) must register with the Georgia Secretary of State.
Professional Licensing Boards: Physicians, PAs, NPs, RNs, dentists, chiropractors, and other healthcare professionals must be licensed by their respective Georgia professional boards (e.g., Georgia Composite Medical Board, Georgia Board of Nursing).
Facility Licensing: While Georgia does not broadly license all outpatient clinics as some states do, specific types of facilities (e.g., ambulatory surgical centers, freestanding emergency departments) are subject to licensing requirements by the Georgia Department of Community Health (DCH).
DEA and GCMB CS Registration: As noted, separate registrations are required for controlled substance prescribing.

Recent Enforcement Actions and Notable Trends

While specific, high-profile Georgia-only enforcement actions can be sporadic, the GCMB consistently issues disciplinary actions for:

Improper Prescribing: This includes violations of PDMP rules, prescribing outside the scope of practice, or prescribing without a legitimate medical purpose.
Boundary Violations and Professional Misconduct: Sexual misconduct, substance abuse, or other ethics violations often lead to license suspension or revocation.
CPOM and Unlicensed Practice: Though less frequently publicized, informal warnings or investigations often occur when MSO structures appear to overstep boundaries or when unlicensed individuals are perceived to be delivering medical care.

Broader federal enforcement trends, such as the Department of Justice's focus on bribery and kickback schemes (as seen in the recent Newark Deputy Mayor sentencing, though not healthcare-specific), serve as a stark reminder for Georgia practices. Healthcare entities in Georgia, as anywhere, must maintain robust anti-fraud and anti-corruption compliance programs, especially when interacting with government programs or seeking various permits and approvals.

Key Compliance Pitfalls in Georgia and How to Avoid Them

1. CPOM Overreach: Do not allow the MSO to dictate clinical decisions, set physician compensation tied to revenue percentages, or directly employ clinical staff. Solution: Structure MSO agreements with clear delineation of responsibilities, FMV fees, and robust provisions ensuring physician independence. Regularly audit MSO operations and physician compensation structures. 2. Insufficient Telehealth Licensing: Operating with only an out-of-state license for Georgia residents. Solution: Ensure all clinicians providing care to Georgia residents hold active, unrestricted Georgia licenses. Verify licensure status through the GCMB portal. 3. Inadequate Patient Relationships in Telehealth: Prescribing or treating without sufficient patient history, examination, or emergency protocols. Solution: Implement rigorous intake processes, clear protocols for establishing the patient relationship, and a robust emergency referral network. Document everything meticulously. 4. PDMP Non-Compliance: Failing to check the Georgia PDMP before prescribing controlled substances. Solution: Integrate PDMP querying into your EHR workflow and train all prescribers on mandatory check intervals and documentation requirements. 5. Improper NP/PA Supervision: Operating with outdated physician protocols, exceeding supervision ratios, or lacking adequate physician oversight. Solution: Regularly review and update protocol agreements, ensure supervising physicians meet availability requirements, and maintain strict adherence to state-mandated ratios. 6. Compounded GLP-1 Supply Chain Risk: Relying solely on 503B compounded GLP-1s without a contingency plan. Solution: Proactively develop strategies for transitioning patients to FDA-approved alternatives or securing new supply chains from 503A pharmacies (which have different, stricter compounding rules) should the FDA proposal be finalized. Engage legal counsel to understand implications for your existing contracts.

Comparison with Neighboring States

Georgia's regulatory environment contrasts significantly with its neighbors:

Florida (Strong CPOM): Like Georgia, Florida maintains a robust CPOM doctrine, often requiring similar MSO structures. Both states emphasize physician control over medical entities.
Tennessee (Moderate CPOM): Tennessee's CPOM is present but generally less strictly enforced than Georgia's. While physician-owned practices are preferred, the state has historically been more accommodating to certain corporate structures.
South Carolina (Developing Telehealth): South Carolina has also expanded telehealth but shares Georgia's emphasis on licensure and standard of care. Some states are more amenable to interstate compacts for telehealth than Georgia, which predominantly requires full licensure.

Understanding these regional variations is vital for multi-state operators, as a compliant model in one state may not be in another.

What This Means For Your Practice

Operating in Georgia's healthcare market demands a proactive, comprehensive, and continuously updated compliance program. For telehealth founders, national practice owners, medspas, and investors, this means:

Robust Legal Counsel: Engage experienced Georgia healthcare attorneys from the outset, especially when structuring MSO agreements or expanding service lines.
Due Diligence on CPOM: Ensure your organizational structure rigorously complies with Georgia's CPOM doctrine, with clear lines of authority and genuinely independent clinical decision-making.
Strict Licensure Adherence: Prioritize obtaining full Georgia licensure for all clinical providers before commencing services in the state, even for remote consultations.
Telehealth Protocol Development: Develop detailed, state-specific telehealth protocols covering patient intake, informed consent, documentation, emergency plans, and prescribing guidelines.
Controlled Substance Vigilance: Implement airtight policies for controlled substance prescribing, including mandatory PDMP checks and a keen eye on evolving federal DEA rules, particularly regarding telehealth prescribing of Schedule II substances.
Monitor FDA Actions Closely: If your practice relies on compounded GLP-1 medications, the FDA's proposed rule to remove these from the 503B bulks list is a critical threat. Engage with the public comment process and develop contingency plans now to mitigate disruption to patient care and business operations.

The Peach State offers immense potential, but navigating its regulatory orchard requires expert guidance. TrueEval is committed to providing the clarity and strategic insight necessary to build and scale compliant healthcare operations in Georgia and across the nation. Ignoring these foundational principles is not an option; proactive compliance is the only pathway to sustainable success.