Navigating North Carolina's Healthcare Compliance Landscape: A Strategic Roadmap for Expansion — Updated for 2026

By Shannon Smith, DNP, APRN, FNP-C, PMHNP-BC, PMHNP-C · 2026-04-18

North Carolina presents a dynamic yet complex regulatory environment for healthcare businesses. From its nuanced Corporate Practice of Medicine doctrine to evolving telehealth statutes, understanding the state's specific requirements is critical for compliant and sustainable operations. This deep dive provides a strategic roadmap for founders, operators, and investors eyeing the Tar Heel State.

North Carolina's healthcare sector is experiencing significant growth, attracting innovative telehealth platforms, expanding medspas, and national practice groups. However, the state's regulatory framework, while often seen as more moderate than some of its stricter counterparts, still demands meticulous attention. For any healthcare business considering operations or expansion within the Tar Heel State, a comprehensive understanding of its unique compliance landscape is not merely advisable – it is absolutely essential for mitigating risk and ensuring long-term viability.

> For more on this topic, see our analysis: [Georgia's Healthcare Regulatory Blueprint: Navigating CPOM, Telehealth, and Prescribing for Multi-State Expansion](/blog/georgia-healthcare-regulatory-blueprint).

Corporate Practice of Medicine (CPOM) in North Carolina: A Nuanced Approach

North Carolina maintains a Corporate Practice of Medicine (CPOM) doctrine, generally prohibiting lay corporations from employing physicians or controlling medical practice. This means that non-physician-owned entities cannot directly employ licensed medical professionals (physicians, PAs, NPs) to deliver clinical services or dictate medical decision-making. The rationale behind CPOM is to protect patient care from commercial influence and preserve the independence of clinical judgment.

However, North Carolina's enforcement posture is often described as more flexible than states like New York or California. This flexibility often allows for the strategic use of Management Services Organization (MSO) models. Under a compliant MSO structure, a non-physician-owned MSO provides administrative, non-clinical support services (e.g., billing, marketing, IT, real estate, equipment) to a physician-owned professional entity (PE). The PE, in turn, employs or contracts with the licensed healthcare professionals who deliver patient care.

Key Compliance for MSOs in NC: * Physician Autonomy: The professional entity must retain absolute control over all clinical decisions, hiring and firing of clinical staff, setting professional fees, and patient care protocols. The MSO cannot influence or dictate these aspects. * Fair Market Value: All services provided by the MSO to the PE, and the associated fees, must be at fair market value and documented. Any fee structures that appear to be disguised profit-sharing or fee-splitting based on patient volume or revenue could trigger regulatory scrutiny. * No Control Over Referrals: The MSO cannot directly or indirectly control patient referrals to the PE. * Transparency: Contractual agreements must clearly delineate the roles and responsibilities, ensuring a bright line between administrative support and clinical practice.

While this MSO model is widely utilized, businesses must not mistake flexibility for permissiveness. The North Carolina Medical Board (NCMB) and other professional licensing boards retain the authority to investigate and prosecute arrangements that violate CPOM principles or constitute the unlicensed practice of medicine. For dental and chiropractic practices, similar principles apply, with their respective boards overseeing compliance.

Telehealth Regulations: A Post-PHE Evolution

North Carolina has been proactive in codifying telehealth regulations, particularly in the wake of the COVID-19 public health emergency (PHE). The state has largely embraced telehealth as a permanent modality for healthcare delivery, but with specific requirements:

Establishment of Patient-Provider Relationship: North Carolina permits the establishment of a patient-provider relationship via telehealth, meaning an initial in-person visit is generally not required if the standard of care can be met virtually. This is crucial for telehealth brands seeking to onboard new patients remotely.
Synchronous Audio-Visual: While some exceptions exist, synchronous audio-visual communication (live video) is generally preferred and often required for initial assessments and complex medical decision-making to ensure a thorough evaluation. Audio-only may be permissible for established patients or in specific circumstances where clinically appropriate and documented.
Informed Consent: As highlighted in broader regulatory intelligence, informed consent for telehealth is critical. North Carolina requires providers to obtain informed consent from patients before delivering telehealth services. This consent must include disclosures about the nature of telehealth, potential risks (e.g., technology failures, privacy concerns), and patient rights. Providers must clearly document this consent.
Licensure: Providers must be fully licensed in North Carolina to provide telehealth services to patients located in the state at the time of the service. Interstate compacts (e.g., Interstate Medical Licensure Compact, Enhanced Nurse Licensure Compact) facilitate multi-state licensure for eligible professionals.
Documentation: All telehealth encounters must be thoroughly documented, meeting the same standards as in-person visits. This includes patient identity verification, medical necessity, diagnosis, treatment plan, and a summary of the telehealth interaction.

Recent Changes: North Carolina has moved to make many of its PHE telehealth flexibilities permanent, signaling a commitment to virtual care. However, specific rules, especially around prescribing and out-of-state providers, continue to evolve. Businesses must monitor updates from the NCMB and other relevant boards.

Medical Board Requirements for Telehealth Providers

The North Carolina Medical Board (NCMB) is the primary regulatory body for physicians, physician assistants (PAs), and anesthesiologist assistants (AAs) in the state. Its rules are paramount for telehealth providers:

Standard of Care: The NCMB mandates that telehealth services must meet the same standard of care as in-person services. This means providers must exercise sound medical judgment to determine if a condition can be safely and effectively treated via telehealth.
Prescribing: The NCMB has specific rules regarding prescribing via telehealth, particularly for controlled substances.
Patient Records: Comprehensive and confidential patient records must be maintained, accessible to the patient, and transferable upon request.
Emergency Protocols: Providers must have clear protocols for managing medical emergencies that may arise during or after a telehealth encounter.
Supervision and Delegation: For PAs and NPs, supervision and collaborative practice agreements must adhere to NCMB and North Carolina Board of Nursing (NCBON) rules, respectively. This includes clear delineation of responsibilities, regular review of charts, and availability for consultation, especially in medspa and complex telehealth settings.

Collaborative Practice and Supervision Requirements

North Carolina has distinct requirements for collaborative practice and supervision, which are critical for integrated care models and medspas:

Physician Assistants (PAs): PAs in North Carolina require supervision by a licensed physician. The NCMB requires a Supervision Agreement outlining the scope of practice, methods of supervision (e.g., chart review, direct consultation), and emergency protocols. The supervising physician is ultimately responsible for the care provided by the PA. This is particularly relevant for medspas where PAs often perform aesthetic procedures.
Nurse Practitioners (NPs) / Advanced Practice Registered Nurses (APRNs): NPs in North Carolina operate under a supervising physician model, requiring a written Collaborative Practice Agreement (CPA). The CPA must define the scope of practice, consultation and referral processes, and methods for quality assurance. The NCBON and NCMB jointly regulate NP practice. Recent legislative efforts have aimed to expand NP autonomy, but a CPA remains a foundational requirement. Medspas employing NPs must ensure their CPAs are robust and compliant with both boards' expectations.

Controlled Substance Prescribing Rules

Prescribing controlled substances via telehealth is one of the most heavily regulated areas, and North Carolina has stringent rules, often exceeding federal baseline requirements:

DEA Requirements: Federal law (Ryan Haight Act) generally requires an in-person medical evaluation before prescribing controlled substances via telemedicine, with exceptions for public health emergencies. While the DEA has proposed new rules post-PHE, state laws often add further restrictions.
North Carolina Specifics: The NCMB and the North Carolina Board of Pharmacy (NCBOP) have established rules for controlled substance prescribing. Generally, a legitimate patient-provider relationship, established through an appropriate medical evaluation (which can be via synchronous audio-visual telehealth if clinically appropriate), is required. Prescribing Schedule II controlled substances often carries additional scrutiny and may be prohibited via telehealth without a prior in-person examination, depending on the specific substance and clinical context. For example, the NCMB has historically been conservative regarding prescribing opioids or benzodiazepines via telehealth without a prior in-person visit.
Prescription Drug Monitoring Program (NC Controlled Substances Reporting System - CSRS): North Carolina mandates that prescribers check the CSRS database before prescribing Schedule II, III, and IV controlled substances to identify potential drug-seeking behavior and ensure patient safety. This is a non-negotiable step for all prescribers, including those utilizing telehealth.
Sexual Wellness Platforms: For platforms specializing in sexual wellness, careful attention to prescribing rules is paramount. While many common sexual wellness medications are not controlled substances, any that fall into controlled categories (e.g., certain medications for anxiety or sleep often co-occurring with sexual health issues) would be subject to these strict regulations. The legitimacy of the patient-provider relationship and the medical necessity of the prescription are always under intense scrutiny.

State-Specific Licensing and Registration Requirements

Beyond professional licensure for individual practitioners, businesses operating in North Carolina must navigate several state-specific requirements:

Business Registration: All entities must register with the North Carolina Secretary of State. This includes foreign entities (those formed outside NC) wishing to do business in the state.
Professional Corporations/LLCs: If operating under a professional entity model (e.g., for CPOM compliance), these entities must be properly formed and registered with the Secretary of State and adhere to specific rules for professional corporations or limited liability companies.
Facility Licensing: While most telehealth platforms do not require facility licensing, certain brick-and-mortar operations (e.g., ambulatory surgical centers, certain clinics) may require licensure from the North Carolina Department of Health and Human Services (NCDHHS).
Pharmacy Licensure: If a business intends to operate a pharmacy (e.g., for dispensing medications directly), it must be licensed by the North Carolina Board of Pharmacy. This also applies to out-of-state pharmacies shipping into North Carolina.

Recent Enforcement Actions or Notable Cases

While specific, high-profile enforcement actions against telehealth companies in North Carolina are less frequently publicized than in some other states, the NCMB and other boards consistently take disciplinary action against individual licensees for violations related to:

Unprofessional Conduct: Including inadequate documentation, failure to meet the standard of care, or improper prescribing.
Unlicensed Practice: Both by individuals and by entities facilitating such practice (e.g., CPOM violations).
Opioid Prescribing Violations: The state has been aggressive in addressing the opioid crisis, leading to investigations and disciplinary actions against providers who fail to comply with prescribing guidelines and CSRS requirements.

The Department of Justice (DOJ) also maintains a strong presence, investigating and prosecuting federal healthcare fraud and kickback schemes that impact federal programs like Medicare and Medicaid, even if the underlying services are delivered via telehealth within North Carolina. This means businesses must also comply with federal Anti-Kickback Statute (AKS) and Stark Law, which can have significant implications for referral arrangements and financial relationships with vendors or other providers.

Key Compliance Pitfalls and How to Avoid Them

1. Ignoring CPOM Nuances: Assuming North Carolina's CPOM is entirely permissive is a critical error. MSO structures must be meticulously crafted and genuinely adhere to physician autonomy. Pitfall: MSO exerting clinical control or engaging in illegal fee-splitting. Avoidance: Robust, legally vetted MSO agreements; clear operational boundaries; regular compliance audits. 2. Telehealth Standard of Care: Failing to meet the same standard of care as in-person visits. Pitfall: Inadequate patient assessment via telehealth, leading to misdiagnosis or inappropriate treatment. Avoidance: Comprehensive provider training; clear clinical protocols for telehealth; utilizing synchronous audio-visual for initial and complex visits. 3. Controlled Substance Prescribing: Non-compliance with state and federal rules. Pitfall: Prescribing Schedule II substances without proper evaluation or checking the CSRS. Avoidance: Strict adherence to NCMB and NCBOP guidelines; mandatory CSRS checks; continuous monitoring of evolving DEA rules. 4. Inadequate Supervision/Collaboration: For PAs and NPs, insufficient oversight. Pitfall: Lack of a formal, compliant supervision or collaborative practice agreement; absent or undocumented supervision. Avoidance: Well-defined, regularly reviewed agreements; documented chart reviews and consultations; ongoing communication between supervising/collaborating practitioners and PAs/NPs. 5. Billing and Coding Errors: Incorrect application of telehealth modifiers and place of service codes. Pitfall: Claim denials, audits, and potential fraud allegations. Avoidance: Up-to-date knowledge of commercial payer policies and state Medicaid rules; robust internal billing compliance program; regular audits of claims. 6. Incomplete Informed Consent: Failing to capture all state-specific disclosures for telehealth. Pitfall: Regulatory penalties, patient complaints, malpractice claims. Avoidance: Dynamic, state-specific consent forms; clear documentation of consent process.

Comparison with Neighboring States

North Carolina's regulatory environment can be viewed as a middle ground compared to some of its neighbors:

South Carolina: Also has a CPOM doctrine, often interpreted similarly to NC, allowing for MSO models with careful structuring. Telehealth regulations are generally aligned, emphasizing licensure and standard of care.
Virginia: Virginia has a more relaxed CPOM stance, with specific exemptions for certain corporate structures, making it potentially easier for some corporate entities to directly employ physicians. Its telehealth laws are also robust and generally supportive of virtual care.
Georgia: Georgia maintains a CPOM doctrine that is generally less flexible than North Carolina's, with stricter interpretations of what constitutes the practice of medicine by a corporation. This often necessitates more rigid MSO structures.

This comparison highlights that while North Carolina is not the most restrictive, it is far from the most permissive. Businesses cannot assume that a model compliant in one neighboring state will automatically pass muster in NC.

What This Means For Your Practice

Operating successfully in North Carolina's healthcare landscape requires a proactive and informed compliance strategy. For telehealth founders, medspa owners, and practice groups looking to expand:

Engage Expert Counsel Early: Do not rely on generic legal advice. Secure legal counsel specializing in North Carolina healthcare regulatory law to structure your business model, draft MSO agreements, and ensure compliance with CPOM, telehealth, and prescribing rules.
Robust Compliance Program: Implement a comprehensive compliance program that includes clear policies and procedures, regular staff training, internal audits, and a mechanism for reporting and addressing potential violations.
Due Diligence on Providers: Ensure all licensed professionals are appropriately licensed in North Carolina and are fully aware of and compliant with state-specific regulations, particularly for telehealth and controlled substances.
Stay Informed: Regulatory landscapes are dynamic. Continuously monitor updates from the NCMB, NCBON, NCBOP, and NCDHHS. TrueEval provides ongoing intelligence to help you navigate these changes.
Technology for Compliance: Leverage technology solutions that support state-specific informed consent, documentation, and prescribing checks (like CSRS integration).

North Carolina offers a fertile ground for healthcare innovation and expansion. By understanding and meticulously adhering to its regulatory framework, your practice can confidently build a compliant and thriving presence in the state, delivering high-quality care while mitigating significant legal and financial risks.