Unlocking the Old Line State: A Comprehensive Guide to Healthcare Compliance in Maryland

2026-06-17

Navigating Maryland's healthcare regulatory landscape demands precision and foresight. From strict Corporate Practice of Medicine doctrines to a maturing telehealth framework and nuanced controlled substance prescribing rules, the state presents unique challenges and opportunities. This guide provides an authoritative roadmap for healthcare businesses looking to thrive compliantly in the Old Line State.

Maryland, often referred to as 'America in Miniature,' offers a diverse and dynamic healthcare market, attracting innovators and established practices alike. Yet, beneath its vibrant economy lies a complex web of state-specific regulations that can trip up even the most experienced healthcare operators. For telehealth founders, multi-state practice owners, medspas, and other wellness entities, understanding the nuances of Maryland's compliance environment is not merely advisable – it is imperative for sustainable growth and risk mitigation. TrueEval is here to illuminate this path, providing the authoritative insights needed to confidently expand into or operate within the Old Line State.

> For more on this topic, see our analysis: [Navigating the Show-Me State: A Deep Dive into Missouri Healthcare Compliance](/blog/navigating-show-me-state-missouri-healthcare-compliance).

The Corporate Practice of Medicine (CPOM) Doctrine: A Persistent Guard in Maryland

Maryland maintains a clear, albeit nuanced, stance on the Corporate Practice of Medicine (CPOM), generally prohibiting corporations from employing physicians or controlling their professional judgment. This doctrine is rooted in the state's Health Occupations Article, § 14-301 et seq., which reserves the practice of medicine for licensed individuals or professional entities owned by licensed individuals. The core principle is to protect the integrity of the physician-patient relationship from commercial influences.

> For more on this topic, see our analysis: [Navigating the Show-Me State: A Deep Dive into Missouri Healthcare Compliance](/blog/navigating-show-me-state-missouri-healthcare-compliance).

What this means for your structure:

Professional Entities Required: Medical practices, including those offering telehealth, must typically be structured as professional corporations (PC) or professional limited liability companies (PLLC) owned and controlled by licensed physicians. Similar rules apply to other licensed professionals like dentists, chiropractors, and nurse practitioners.
Management Service Organizations (MSOs): The MSO model is a common and legally permissible strategy in Maryland, allowing non-licensed individuals or entities to provide administrative, non-clinical support services (e.g., billing, marketing, IT, real estate) to professional medical practices. However, MSO agreements must be meticulously drafted to ensure they do not cross into the prohibited practice of medicine. Key considerations include:

Maryland's regulatory bodies, particularly the Maryland Board of Physicians (MBP) and the Office of the Attorney General, consistently scrutinize arrangements that appear to circumvent CPOM. While specific large-scale enforcement actions solely on CPOM are less publicized than federal fraud cases, the underlying principle is a constant consideration in every disciplinary action related to professional conduct or improper business arrangements.

Maryland's Evolving Telehealth Framework: From Pandemic Flexibility to Permanent Integration

Maryland has emerged as a leader in codifying robust telehealth regulations, transitioning many of the flexibilities introduced during the COVID-19 Public Health Emergency (PHE) into permanent law. This commitment to telehealth expansion makes Maryland an attractive, albeit carefully regulated, environment for virtual care providers.

Key aspects of Maryland's telehealth landscape:

Definition of Telehealth: Maryland defines telehealth broadly as the use of interactive audio and video technology to deliver health care services. Audio-only calls are generally not considered telehealth for reimbursement purposes unless specifically permitted for certain services.
Licensure Requirements: Full Maryland licensure is a fundamental prerequisite for any healthcare professional providing services to patients located in Maryland. The state does not currently participate in the Interstate Medical Licensure Compact (IMLC) for physicians, though it has been debated. Advanced Practice Registered Nurses (APRNs) in Maryland are part of the APRN Compact, allowing multi-state practice for eligible NPs.
Establishment of Patient-Provider Relationship: Maryland law explicitly permits the establishment of a patient-provider relationship via telehealth, provided the standard of care is met. This means an initial in-person exam is not generally required solely for relationship establishment, unless clinically indicated.
Informed Consent: Providers must obtain informed consent from patients for telehealth services, documenting that the patient understands the mode of delivery, potential risks, and privacy implications.
Payment Parity: Maryland enacted significant payment parity laws through HB 123 (2021), requiring health insurers, health maintenance organizations, and the Maryland Medical Assistance Program (Medicaid) to reimburse for telehealth services at rates comparable to in-person services, subject to certain conditions. This parity applies to both professional and facility fees.
Originating and Distant Sites: Maryland has specific rules regarding eligible originating (patient's location) and distant (provider's location) sites, though these have been significantly broadened. Providers can deliver services from various locations, including their homes, as long as privacy and security are maintained.

Medical Board Requirements for Telehealth Providers

The Maryland Board of Physicians (MBP) expects the same high standard of care for telehealth services as for in-person encounters. Providers must ensure:

Appropriate Technology: The technology used must be secure, HIPAA-compliant, and sufficient for the clinical service being rendered.
Patient Identification: Robust methods for verifying patient identity must be in place.
Medical Record-Keeping: Comprehensive and accurate medical records, consistent with in-person care, must be maintained. This includes documentation of the telehealth visit itself, the technology used, and any limitations encountered.
Privacy and Security: Adherence to HIPAA and Maryland's state-specific privacy laws is paramount. This extends to safeguarding patient data transmitted electronically and ensuring the privacy of the telehealth consultation environment.
Emergency Protocols: Providers must establish clear protocols for managing emergencies or situations requiring in-person intervention, including local referral networks.

Collaborative Practice and Supervision Requirements

Maryland's regulations on collaborative practice vary significantly by profession, which is crucial for multi-specialty practices and those utilizing mid-level providers.

Physician Assistants (PAs): PAs in Maryland operate under the supervision of a physician through a delegation agreement that outlines the scope of services. While supervision can often occur off-site, the supervising physician must be readily available for consultation and maintain appropriate oversight of the PA's practice. The MBP reviews these agreements.
Nurse Practitioners (NPs) / Certified Registered Nurse Practitioners (CRNPs): Maryland is a full practice authority state for CRNPs who have completed at least 18 months or 1,000 hours of clinical practice under physician supervision or collaboration. Once this experience threshold is met, CRNPs can diagnose, treat, and prescribe independently without ongoing physician oversight, making Maryland an attractive state for NP-led practices.
Other Allied Health Professionals: Regulations vary for other professionals (e.g., physical therapists, occupational therapists, psychologists) regarding their ability to provide services independently or under supervision, including via telehealth. Due diligence is required for each profession.

Controlled Substance Prescribing via Telehealth

Prescribing controlled substances via telehealth remains one of the most scrutinized areas of healthcare compliance, combining federal and state regulations. The federal Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires an in-person medical evaluation before prescribing controlled substances, with specific exceptions. While the PHE waivers temporarily broadened these exceptions, many have since expired or are under review.

Maryland's Specifics:

Post-PHE, Maryland's approach largely reverts to aligning with federal guidelines. For initial prescriptions of Schedule II-V controlled substances, an in-person medical evaluation is typically required, or the prescription must fall under an established exception (e.g., legitimate medical emergency, a covering provider for an established patient).
The MBP emphasizes that prescribing controlled substances via telehealth, particularly for chronic pain or psychiatric conditions, requires strict adherence to professional standards, including a thorough patient evaluation, comprehensive medical history, risk assessment, and proper documentation.
Opioid Prescribing: Maryland has additional regulations concerning opioid prescribing, including limits on initial prescriptions for acute pain and mandatory use of the state's Prescription Drug Monitoring Program (PDMP) for all Schedule II-IV controlled substances.

Any practice engaging in controlled substance prescribing via telehealth in Maryland must have robust protocols to ensure compliance with both federal and state laws to avoid significant legal and disciplinary repercussions.

State-Specific Licensing and Registration Requirements

Beyond individual professional licensure, healthcare entities expanding into Maryland must address several state-specific business and operational registrations:

Business Entity Registration: All corporations, LLCs, and other business entities must register with the Maryland Department of Assessments and Taxation (SDAT). Foreign (out-of-state) entities must obtain a Certificate of Authority to transact business in Maryland.
Facility Licensing: Certain types of healthcare facilities (e.g., ambulatory surgical centers, hospitals, nursing homes) require specific licensing from the Maryland Department of Health's Office of Health Care Quality (OHCQ). While telehealth-only practices generally do not require facility licensing, hybrid models or those with physical locations must investigate these requirements.
Specialty Clinics: Depending on the scope, some specialty clinics or urgent care centers may have specific registration or certification requirements.

Recent Enforcement Actions and Key Compliance Pitfalls

While the recent FDA debarment and federal kickback charges (as seen in the DOJ's focus on procurement integrity) are federal in scope, their implications are universal for Maryland healthcare providers. Similarly, the federal sentencing of an Illinois chiropractor for healthcare fraud is a stark reminder of the risks of non-compliance, themes that resonate strongly within Maryland's regulatory landscape.

Common compliance pitfalls in Maryland include:

1. CPOM Violations: Improperly structured MSO agreements, non-licensed individuals exercising control over clinical decisions, or profit-sharing arrangements that violate state law. 2. Unlicensed Practice: Allowing individuals not licensed in Maryland to provide services to Maryland patients, particularly in telehealth. 3. Billing Fraud: Upcoding, billing for services not rendered, or misrepresenting services. The Maryland Medicaid Fraud Control Unit actively investigates and prosecutes such cases. Maryland's False Claims Act also provides avenues for whistleblowers and state enforcement actions. 4. HIPAA and State Privacy Breaches: Inadequate safeguards for patient data, leading to breaches. The Maryland Attorney General's Office can also bring actions related to consumer privacy. 5. Lack of Transparency in Advertising: Misleading marketing for services, especially in rapidly growing sectors like medspas or wellness clinics. 6. Scope of Practice Violations: Healthcare professionals operating outside their legally defined scope, or inadequate supervision where required.

Maryland's regulatory bodies, including the MBP, the Maryland State Board of Nursing, the Maryland Board of Pharmacy, and the Office of the Attorney General, are vigilant. Proactive compliance is the only viable strategy.

Comparison with Neighboring States

Understanding Maryland's landscape often benefits from a brief comparison with its neighbors:

Virginia: Similar to Maryland in its general prohibition of CPOM, Virginia also employs the MSO model. However, Virginia has been more cautious with telehealth expansion post-PHE, and its payment parity laws are somewhat less robust than Maryland's. Virginia also participates in the Interstate Medical Licensure Compact.
Pennsylvania: Pennsylvania generally has a less strict CPOM enforcement history, often allowing certain corporate structures that Maryland would prohibit. Its telehealth regulations have also evolved, with a focus on patient access.
Delaware: Delaware also restricts the corporate practice of medicine but has been relatively progressive in its telehealth adoption, including payment parity laws. Its smaller market size offers different considerations for national expansion.

These comparisons highlight that each state presents a unique puzzle, underscoring the necessity of state-specific legal counsel and compliance strategies.

What This Means For Your Practice: A Maryland Compliance Roadmap

Expanding into or operating a healthcare business in Maryland requires a meticulous, multi-faceted compliance strategy. Here are your actionable takeaways:

Structure for CPOM Compliance: If you are a non-physician owner, carefully structure your operations using an MSO model. Ensure your MSO agreements are drafted by legal counsel specializing in Maryland healthcare law, clearly delineating administrative services from clinical control, and adhering to fair market value principles. Avoid any arrangements that could be construed as illegal fee-splitting or undue influence over clinical judgment.
Prioritize Maryland Licensure: Absolutely ensure all providers serving Maryland patients hold current, unrestricted Maryland licenses. For NPs, leverage Maryland's full practice authority model once experience requirements are met. Stay informed on any future adoption of the IMLC for physicians.
Master Telehealth Nuances: Develop comprehensive policies and procedures for telehealth delivery that address patient identity verification, informed consent, documentation, privacy, emergency protocols, and appropriate technology use. Regularly review MBP guidance and legislative updates.
Rigorous Controlled Substance Protocols: If prescribing controlled substances via telehealth, implement stringent protocols that comply with both the Ryan Haight Act and Maryland's specific requirements, including PDMP utilization. An initial in-person exam should be the default for Schedule II-V substances unless a clear, documented exception applies.
Proactive Billing Compliance: Implement robust billing and coding compliance programs to prevent fraud. Conduct regular internal audits and provide ongoing training to staff. Be aware of the Maryland Medicaid Fraud Control Unit's activities and the state's False Claims Act.
Continuous Regulatory Monitoring: Maryland's regulatory environment is dynamic. Partner with a compliance infrastructure like TrueEval to stay abreast of legislative changes, new guidance from the MBP, and enforcement trends. This proactive approach is your best defense against unexpected challenges.

Maryland offers fertile ground for healthcare innovation and growth, but success hinges on an unwavering commitment to compliance. By diligently navigating its regulatory landscape, practices can establish a strong, ethical, and sustainable presence in the Old Line State.