Pennsylvania's Healthcare Labyrinth: Navigating CPOM, Telehealth, and Prescribing in the Keystone State — Updated for 2026

By Shannon Smith, DNP, APRN, FNP-C, PMHNP-BC, PMHNP-C · 2026-04-18

Pennsylvania presents a complex and evolving regulatory landscape for healthcare businesses. From its nuanced Corporate Practice of Medicine doctrine to specific telehealth and prescribing mandates, understanding the Keystone State's rules is critical for compliant and sustainable operations. This guide provides a comprehensive roadmap for navigating Pennsylvania's unique healthcare environment.

Pennsylvania, often referred to as the Keystone State, is a critical market for healthcare innovation and expansion. However, its regulatory environment is anything but straightforward, presenting a unique set of challenges and opportunities for telehealth founders, medspa owners, and established practices alike. Navigating Pennsylvania's healthcare labyrinth requires a deep understanding of its Corporate Practice of Medicine (CPOM) doctrine, evolving telehealth statutes, and stringent prescribing rules. At TrueEval, we empower healthcare organizations to build resilient compliance frameworks, and this deep dive into Pennsylvania's landscape is designed to be your definitive guide.

> For more on this topic, see our analysis: [Illinois Unpacked: Navigating the Prairie State's Complex Healthcare Regulatory Terrain for National Expansion](/blog/illinois-healthcare-regulatory-terrain).

The Nuance of Pennsylvania's Corporate Practice of Medicine (CPOM)

Unlike states with explicit statutory prohibitions against CPOM, Pennsylvania's doctrine is largely common law-based, meaning it has evolved through judicial decisions rather than direct legislative action. While less overtly strict than New York or California, Pennsylvania's CPOM doctrine still prohibits lay corporations from practicing medicine or controlling the clinical judgment of licensed professionals. This means that entities not owned by licensed healthcare professionals generally cannot employ physicians or other licensed practitioners to provide medical services directly.

Key Implications for Business Structures:

Management Services Organization (MSO) Model: The MSO model is widely adopted in Pennsylvania to navigate CPOM. Under this structure, a non-clinical, non-professional entity (the MSO) provides administrative, technical, and non-clinical support services (e.g., billing, marketing, IT, real estate, equipment) to a professional corporation (PC) or professional limited liability company (PLLC) owned by licensed practitioners. The PC/PLLC directly employs or contracts with the clinical staff and delivers the medical services.
Preserving Clinical Autonomy: The critical element for MSO compliance in Pennsylvania is ensuring the MSO has no control over clinical decision-making, physician employment (hiring/firing of clinical staff), or professional fees. Any arrangement that could be construed as the MSO dictating patient care, influencing diagnoses, or improperly sharing professional fees risks violating CPOM and anti-kickback statutes. The Pennsylvania State Board of Medicine and other professional licensing boards vigilantly uphold the independence of professional judgment.
Dental and Chiropractic Practices: While the primary focus of CPOM is often medicine, similar principles apply to dental and chiropractic practices. Their respective state boards (Pennsylvania State Board of Dentistry, State Board of Chiropractic) maintain oversight to ensure that non-licensed entities do not exert undue influence over professional practice. MSO structures for these specialties must also be carefully constructed to preserve professional independence.

Enforcement History: While Pennsylvania may not have the high-profile CPOM enforcement actions seen in some other states, its professional boards consistently take disciplinary action against licensed practitioners who compromise their professional independence or engage in prohibited fee-splitting arrangements. Businesses found to be illegally practicing medicine can face injunctions, civil penalties, and even criminal charges.

Telehealth in Pennsylvania: A Post-PHE Evolution

Pennsylvania has made significant strides in codifying telehealth services, moving beyond the temporary flexibilities of the COVID-19 Public Health Emergency (PHE). The state's telehealth laws aim to integrate virtual care permanently into its healthcare delivery system, but with specific guardrails.

Key Telehealth Regulations:

Definition: Pennsylvania defines telehealth broadly as the use of electronic technologies to deliver healthcare services when the patient and provider are in different locations. This includes synchronous (real-time audio-visual or audio-only, where appropriate) and asynchronous (store-and-forward) modalities.
Establishment of Patient-Provider Relationship: A valid patient-provider relationship can generally be established via telehealth in Pennsylvania. However, the standard of care remains the same as for in-person services. This means a thorough assessment must be conducted to ensure the appropriateness of telehealth for the patient's condition.
Consent: Informed consent is a critical requirement for telehealth in Pennsylvania. Providers must obtain informed consent from the patient (or their legal guardian) before delivering telehealth services. This consent must include information about the nature of telehealth, potential risks and benefits, privacy protections, and how to obtain follow-up care. As highlighted in recent regulatory intelligence, this consent must be specific to telehealth and meet all state-specific requirements.
Licensure: Providers must be licensed in Pennsylvania to provide telehealth services to patients located within the state. This applies even if the provider is licensed in another state. There are no interstate compacts for all healthcare professions that would permit widespread cross-state practice without Pennsylvania licensure.
Prescribing: Telehealth prescribing in Pennsylvania is generally permissible, provided a valid patient-provider relationship has been established and the prescribing meets the standard of care. However, specific restrictions apply to controlled substances.
Audio-Only Telehealth: While audio-visual is generally preferred, Pennsylvania permits audio-only telehealth in certain circumstances, particularly for established patients or when clinically appropriate and documented. However, providers must exercise clinical judgment to determine if audio-only is sufficient for the patient's needs and condition.

Recent Changes: Post-PHE, Pennsylvania has largely maintained its expanded telehealth access, signaling a commitment to virtual care. However, regulators are increasingly focusing on quality of care, patient safety, and fraud prevention. This means that while access is broader, the scrutiny on compliant delivery and documentation is intensifying.

Medical Board Requirements for Telehealth Providers

The Pennsylvania State Board of Medicine and the State Board of Osteopathic Medicine are the primary regulatory bodies for physicians and osteopathic physicians, respectively. They have issued guidance and regulations specifically addressing telehealth practice.

Standard of Care: The boards emphasize that the standard of care for telehealth services is the same as for in-person services. Providers must conduct appropriate evaluations, maintain comprehensive medical records, and ensure patient privacy and security.
Documentation: Meticulous documentation is required for all telehealth encounters, including the date and time, modality used, participants, assessment, diagnosis, treatment plan, and rationale for using telehealth. Consent for telehealth must also be documented.
Technology Requirements: Providers must use secure, HIPAA-compliant technology for telehealth services to protect patient information.
Emergency Protocols: Telehealth providers must have clear protocols for managing emergencies, including how to refer patients for in-person care or emergency services when necessary.

Collaborative Practice and Supervision Requirements

Pennsylvania has specific requirements for collaborative practice and supervision, particularly for Physician Assistants (PAs) and Certified Registered Nurse Practitioners (CRNPs).

Physician Assistants (PAs): PAs in Pennsylvania practice under the supervision of a physician. The Supervision Agreement must be in writing, filed with the Board of Medicine, and clearly delineate the scope of practice and supervisory arrangements. The supervising physician is ultimately responsible for the care provided by the PA. This includes regular review of patient charts and availability for consultation. For telehealth and medspa settings, this means the supervising physician must be actively engaged and accessible, not merely a signatory on paper.
Certified Registered Nurse Practitioners (CRNPs): CRNPs in Pennsylvania generally practice under a collaborative agreement with a physician, though the scope of independent practice has expanded. The collaborative agreement outlines the CRNP's scope of practice, referral mechanisms, and consultation protocols. Similar to PAs, the collaborating physician maintains oversight, and the CRNP must practice within their education, training, and experience. Medspas employing CRNPs for aesthetic procedures must ensure strict adherence to these collaborative agreements and that the CRNP is competent to perform the delegated procedures.

Actionable Insight: For multi-state operations or practices expanding into Pennsylvania, it's crucial to understand that supervision and collaborative practice requirements can vary significantly from neighboring states. For example, while Washington State has clear guidelines for PA/ARNP supervision in telehealth and medspas, Pennsylvania's specific statutory and regulatory framework must be consulted independently.

Controlled Substance Prescribing Rules

Prescribing controlled substances via telehealth is one of the most heavily regulated aspects of virtual care. Pennsylvania has specific rules that align with, and sometimes exceed, federal requirements.

Federal Context (Ryan Haight Act): Federally, the Ryan Haight Act generally requires an in-person medical evaluation before prescribing controlled substances via telemedicine, with exceptions for public health emergencies. While the DEA has proposed new rules post-PHE, the landscape remains dynamic.
Pennsylvania's Approach: Pennsylvania generally permits the prescribing of controlled substances via telehealth if a valid patient-provider relationship has been established through an initial in-person examination or an appropriate telehealth evaluation that meets the standard of care. However, there are often restrictions on Schedule II substances and specific documentation requirements.
Sexual Wellness Platforms: For telehealth platforms specializing in sexual wellness, particularly if they involve medications that are controlled substances (e.g., certain testosterone therapies), meticulous adherence to state and federal prescribing rules is paramount. This includes verifying patient identity, conducting thorough assessments, and ensuring the prescription is medically necessary and not for illegitimate purposes. The DC Board of Pharmacy regulations, for instance, highlight the importance of a proper patient-provider relationship for prescribing, a principle echoed in Pennsylvania.
Prescription Drug Monitoring Program (PDMP): Pennsylvania mandates that prescribers and dispensers utilize its PDMP (PMP AWARxE) before prescribing or dispensing Schedule II, III, IV, or V controlled substances. This is a critical tool for preventing drug diversion and abuse.

State-Specific Licensing and Registration Requirements

Operating in Pennsylvania requires adherence to its unique licensing and registration protocols.

Professional Licensure: All healthcare professionals (physicians, PAs, CRNPs, dentists, chiropractors, etc.) must hold a current, active license from their respective Pennsylvania state board to practice in the state.
Facility Licensing: Certain healthcare facilities, such as ambulatory surgical centers, hospitals, and some clinics, require specific facility licenses from the Pennsylvania Department of Health.
Business Registration: Any business entity (e.g., MSO, PC, PLLC) operating in Pennsylvania must be properly registered with the Pennsylvania Department of State. This includes foreign entities (those formed outside Pennsylvania) that intend to conduct business within the state.
DEA Registration: Any practitioner prescribing controlled substances must have a valid DEA registration associated with their Pennsylvania practice location.

Recent Enforcement Actions or Notable Cases

While specific recent high-profile enforcement actions directly related to CPOM or telehealth fraud in Pennsylvania may not always make national headlines, the state's professional boards consistently issue disciplinary actions for violations of professional conduct, scope of practice, and prescribing rules. These often stem from:

Improper Prescribing: Actions against providers for over-prescribing, prescribing without a legitimate medical purpose, or failing to use the PDMP.
Unlicensed Practice: Enforcement against individuals or entities practicing medicine or other licensed professions without proper licensure.
Standard of Care Violations: Disciplinary actions where telehealth services failed to meet the appropriate standard of care, leading to patient harm.
Fee-Splitting/Kickbacks: Investigations into arrangements that violate anti-kickback statutes or prohibitions against fee-splitting, often disguised within MSO or referral agreements. The DOJ's intensified enforcement against telehealth fraud and kickback schemes applies equally to Pennsylvania, meaning federal authorities are also scrutinizing arrangements that impact federal healthcare programs.

Key Compliance Pitfalls and How to Avoid Them

1. CPOM Misinterpretation: Assuming Pennsylvania's CPOM is lax. It is not. The common law doctrine is robust. Avoid: Any MSO structure that gives the non-clinical entity control over clinical decision-making, physician employment, or professional fees. Ensure management services agreements are fair market value and do not tie MSO compensation to patient volume or revenue generation in a way that could be seen as illegal fee-splitting. 2. Telehealth Consent Oversight: Underestimating the importance of explicit, state-specific informed consent for telehealth. Avoid: Using generic consent forms. Implement dynamic consent workflows that capture all Pennsylvania-specific requirements, including risks, benefits, and privacy considerations, and document it thoroughly. 3. Cross-State Licensure Issues: Providing telehealth to a Pennsylvania resident without a Pennsylvania license. Avoid: Any provider delivering care to a patient located in Pennsylvania must be licensed by the appropriate Pennsylvania board. This is a fundamental and non-negotiable requirement. 4. Inadequate Supervision/Collaboration: Insufficient oversight for PAs and CRNPs, especially in medspa or telehealth settings. Avoid: 'Paper supervision' where the supervising/collaborating physician is not actively engaged. Ensure robust, documented supervision agreements, regular chart reviews, and readily available consultation, as mandated by the WMC and NCQAC in Washington, similar principles apply in PA. 5. Controlled Substance Prescribing Errors: Failing to adhere to specific state and federal rules for controlled substances via telehealth. Avoid: Prescribing Schedule II substances without a legitimate in-person or robust telehealth evaluation, failing to check the PDMP, or prescribing for non-medical purposes. Sexual wellness platforms must be especially vigilant. 6. Billing and Coding Inaccuracies: Misapplying CPT/HCPCS codes, modifiers, or place of service indicators for telehealth claims, or non-compliant self-pay pricing. Avoid: Generic billing practices. Understand payer-specific policies, use correct POS 02 or 10, and ensure transparent, compliant pricing for self-pay patients, adhering to No Surprises Act principles.

Comparison with Neighboring States

New York (NY): Pennsylvania's CPOM, while strong, is generally considered less explicitly stringent than New York's, which is one of the strictest in the nation. New York's PC-MSO model often requires the professional entity to be truly physician-controlled, with less flexibility than some other states. Pennsylvania offers a slightly more accommodating, though still highly regulated, environment for MSO structures.
Ohio (OH): Ohio also maintains a CPOM doctrine, though its enforcement posture can vary. Like Pennsylvania, MSO models are common, but the same principles of preserving physician autonomy apply. Ohio has also made significant strides in telehealth regulation, generally aligning with Pennsylvania's move towards permanent telehealth access post-PHE.
New Jersey (NJ) & Delaware (DE): Both New Jersey and Delaware also have CPOM doctrines. New Jersey's is often viewed as moderately strict, while Delaware's is common law-based, similar to Pennsylvania, and often considered more flexible than NY or CA. The core MSO compliance principles remain consistent across these states: clinical independence is paramount.

What This Means For Your Practice

Operating successfully and compliantly in Pennsylvania requires a proactive and meticulous approach to regulatory adherence. For telehealth founders, brick-and-mortar practices expanding nationally, medspa owners, and healthcare investors, the following actions are critical:

1. Legal Structure Review: Engage experienced healthcare legal counsel to audit your current or proposed business structure to ensure full compliance with Pennsylvania's CPOM doctrine. This is especially crucial for MSO agreements, ensuring they clearly delineate administrative services from clinical control. 2. Telehealth Protocol Development: Develop state-specific telehealth protocols covering patient intake, informed consent, documentation, technology requirements, and emergency procedures. Ensure all providers are licensed in Pennsylvania and trained on these protocols. 3. Prescribing Policy Implementation: Establish clear, board-compliant policies for prescribing, particularly for controlled substances. Integrate PDMP checks into your workflow and ensure all prescriptions meet the standard of care. 4. Supervision and Collaboration Agreements: For practices utilizing PAs or CRNPs, ensure all supervision and collaborative agreements are current, filed with the appropriate boards, and actively implemented, demonstrating genuine oversight and collaboration. 5. Ongoing Compliance Training: Regularly train all clinical and administrative staff on Pennsylvania's specific regulatory requirements, including HIPAA, billing and coding, and fraud prevention. The DOJ's increased scrutiny means robust internal controls are non-negotiable. 6. Technology Investment: Utilize compliance technology that can adapt to state-specific requirements for consent, documentation, and secure communication, mitigating human error and streamlining compliance efforts.

Pennsylvania offers a vibrant healthcare market, but its regulatory landscape demands respect and diligence. By understanding and proactively addressing these complex requirements, healthcare businesses can build a strong, compliant foundation for sustainable growth and deliver high-quality care to patients across the Keystone State.