The convergence of rapid innovation in healthcare delivery and heightened regulatory scrutiny creates a complex environment for businesses. As TrueEval, we observe a clear trend: authorities are moving beyond general guidance to specific enforcement actions, particularly in the burgeoning telehealth and aesthetic sectors. Understanding these shifts is not merely about avoiding penalties; it's about building a resilient, compliant enterprise ready for sustainable growth.
For more on this topic, see our analysis: Navigating the Regulatory Gauntlet: Critical Updates for Telehealth, Medspas, and Clinical Practices.
The Enduring Challenge of Corporate Practice of Medicine (CPOM)
Corporate Practice of Medicine (CPOM) doctrines continue to be a foundational, yet frequently misunderstood, regulatory pillar. These state-specific laws generally prohibit corporations from employing physicians or controlling the practice of medicine, aiming to preserve physician autonomy and protect patient care from commercial influence. However, the interpretation and enforcement vary dramatically, creating a patchwork of compliance requirements.
For more on this topic, see our analysis: Navigating the Regulatory Gauntlet: Critical Updates for Telehealth, Medspas, and Clinical Practices.
New York's Strict Stance: A Blueprint for Caution
New York stands out with one of the nation's strictest CPOM doctrines. The state unequivocally prohibits non-professional entities from practicing medicine or employing licensed professionals to deliver clinical services. This has profound implications for telehealth companies, medspas, and other healthcare businesses operating or expanding into the Empire State.
For telehealth brands, the Physician-Controlled Management Services Organization (PC-MSO) model is not just advisable, but essential. This structure mandates that the professional entity (PE) — owned and controlled by licensed New York physicians — retains absolute clinical autonomy. The Management Services Organization (MSO) is strictly limited to providing non-clinical administrative, technical, and management services. Any perceived influence by the MSO over clinical decision-making, patient care, or professional employment can trigger severe violations, leading to investigations by the New York State Education Department (NYSED) Office of Professional Discipline (OPD) or the Office of the Attorney General.
Key Takeaway for NY Operations:
- Meticulous Agreements: Management Services Agreements (MSAs) must clearly delineate responsibilities, ensuring the PE maintains ultimate authority over clinical matters.
- Fair Market Value: Fee structures must be at fair market value and demonstrably not tied to patient volume or revenue generation in a way that could be construed as illegal fee-splitting.
- Physician Control: The PE must be genuinely physician-owned and physician-controlled, with the MSO acting purely in a supportive capacity.
Nevada's Nuance: Flexibility with Firm Boundaries
In contrast to New York, Nevada's CPOM enforcement is often considered more flexible. While the state generally prohibits lay corporations from practicing medicine, it allows for well-structured MSO models, particularly beneficial for telehealth and medspa businesses. This flexibility, however, is not a license for permissiveness.
Nevada's approach still demands that MSO agreements are meticulously drafted to ensure the non-physician-owned MSO does not exert control over clinical decision-making, physician employment, or fee-splitting. The critical aspect is preserving physician autonomy. The Nevada State Board of Medical Examiners actively monitors arrangements to ensure the PC retains full control over medical judgments, hiring/firing of clinical staff, and setting professional fees.
Actionable Insight for Nevada:
- Even in states with perceived flexibility, robust legal counsel is crucial to design MSO models that are resilient against CPOM challenges. Do not assume flexibility means an absence of regulation.
CPOM and Direct-to-Consumer (DTC) Telehealth Weight Loss Brands
The growth of DTC telehealth weight loss brands has brought CPOM into sharp focus. These platforms often face significant compliance challenges due to the inherent tension between their corporate structure and the requirement for physician autonomy. The Department of Justice (DOJ) has intensified enforcement against telehealth fraud and kickback schemes, often targeting arrangements that blur the lines of CPOM and anti-kickback statutes.
Compliance Imperatives for DTC Brands:
- Physician Autonomy: Ensure that physicians, not the corporate entity, maintain ultimate clinical authority over treatment protocols and prescribing decisions.
- No Illegal Inducements: Scrutinize all revenue-sharing models and compensation arrangements to ensure they are fair market value and do not constitute illegal fee-splitting or inducements for referrals or prescriptions.
- MSO/PC Structures: Implement genuine MSO or PC structures that unequivocally preserve physician independence. This is critical to avoid allegations of corporate control over clinical practice.
Navigating the Labyrinth of Telehealth Prescribing and Informed Consent
The post-PHE environment has solidified telehealth as a permanent fixture in healthcare, but it has also brought a renewed focus on the specifics of virtual care delivery, particularly around prescribing and patient consent.
State-Specific Telehealth Prescribing: Sexual Wellness and Controlled Substances
Telehealth platforms, especially those in sensitive areas like sexual wellness, face a complex patchwork of state-specific regulations. The lack of a uniform federal standard for establishing a valid patient-provider relationship and prescribing controlled substances means compliance requires meticulous attention to each state's medical practice acts, telemedicine laws, and pharmacy board rules.
Controlled Substances: The DEA's Ryan Haight Act generally requires an in-person medical evaluation before prescribing controlled substances via telemedicine. While the DEA has proposed new rules post-PHE, the landscape remains dynamic. State medical boards often impose additional restrictions, including limits on Schedule II substances, specific documentation requirements, and prohibitions on prescribing controlled substances via telehealth without prior in-person visits. This directly impacts how platforms can operate if they consider prescribing medications that fall under controlled substance classifications.
Example: District of Columbia Board of Pharmacy Regulations: The DC Board of Pharmacy sets specific rules for telehealth prescribing, compounding, and medication fulfillment. Providers must ensure their initial patient assessments meet prescribing standards, even for non-controlled substances. Medspas prescribing injectables or topical treatments via telehealth must align with DC's requirements, including maintaining comprehensive patient records and verifying prescription legitimacy. Any compounding must adhere to USP standards and DC regulations, with fulfillment by DC-licensed pharmacies.
Key Action Points:
- State-by-State Analysis: Conduct robust legal analysis for every jurisdiction of operation to understand requirements for initial exams, synchronous communication, and permissible prescribing methods.
- DEA Rules: Stay abreast of DEA's evolving rules for controlled substance prescribing via telehealth, and understand how state medical boards overlay additional restrictions.
- Pharmacy Board Compliance: Understand and comply with state pharmacy board regulations for prescribing, compounding, and fulfillment, ensuring all partner pharmacies are properly licensed and compliant.
Informed Consent: A State-Specific Mandate
Informed consent in telehealth is not a one-size-fits-all proposition. There is no single federal standard, compelling a meticulous, state-by-state approach. Simply having a general consent form is insufficient; practices must tailor their consent processes to meet the explicit mandates of each jurisdiction where they operate and where their patients reside.
Variations to Consider:
- Disclosure Requirements: Some states mandate explicit disclosure of potential technology failures; others require specific language regarding patient data privacy in a telehealth context.
- Method of Consent: Requirements vary for obtaining consent (e.g., written, electronic, verbal with documentation).
- Scope and Limitations: If a virtual consultation leads to an in-person procedure, the initial telehealth consent must address the scope and limitations of the virtual interaction versus the in-person treatment.
Compliance Strategy:
- Dynamic Workflows: Implement dynamic consent workflows that can present state-specific disclosures based on patient location.
- Regular Audits: Conduct comprehensive audits of current consent practices against the requirements of every state served.
- Technology Integration: Invest in robust compliance technology to manage and track state-specific consent forms and documentation.
Supervisory Requirements and Scope of Practice: The Washington State Example
The Washington State Medical Commission (WMC) and Nursing Care Quality Assurance Commission (NCQAC) have clarified requirements for physician and Advanced Registered Nurse Practitioner (ARNP) supervision and delegation, particularly relevant for telehealth and medspa services. This highlights a national trend towards more rigorous oversight of delegated medical functions.
Implications for Practices:
- Telehealth Brands: Must implement robust, documented processes for ongoing collaboration, chart review, and availability for consultation between supervising physicians/collaborating ARNPs and their supervisees. Remote care must meet the same quality and safety standards as in-person care.
- Medspa Businesses: Due to the nature of aesthetic procedures, medspas must ensure delegating practitioners verify the PA or ARNP's training and competency for each procedure, including understanding complications and emergency protocols. Meticulous records of delegation agreements, training, and ongoing supervision are essential.
- All Practices: Any delegated medical functions or collaborative agreements must adhere to WMC and NCQAC guidelines, with clear delineation of responsibilities, established communication pathways, and regular review of patient care. The supervising/collaborating practitioner bears ultimate responsibility.
Consequences of Non-Compliance: Disciplinary action against practitioners, potential legal liability for the practice, and reputational damage. Proactive engagement with these regulations is critical.
The Intensification of Enforcement: DOJ's Focus on Telehealth Fraud
The Department of Justice (DOJ) continues its aggressive pursuit of healthcare providers and companies engaged in telehealth fraud, illegal kickbacks, and false claims. This signals a clear federal commitment to safeguarding federal healthcare programs and ensuring legitimate patient care, especially as telehealth expands.
Key Areas of DOJ Scrutiny:
- Billing Fraud: Billing for services not rendered, medically unnecessary services, or services provided by unqualified personnel.
- Illegal Kickbacks: Arrangements that incentivize referrals through disguised marketing fees, administrative services, or consulting agreements. Compliance with the Anti-Kickback Statute (AKS) and its safe harbors is paramount.
- False Claims Act (FCA): Violations can lead to criminal charges, civil penalties, and exclusion from federal healthcare programs.
Impact Across Sectors:
- Telehealth Platforms: Must rigorously structure financial relationships with lead generators, laboratories, pharmacies, and other service providers to avoid kickback allegations.
- Medspas, Dental, Chiropractic: Practices integrating telehealth or engaging in referral relationships must ensure all prescriptions and referrals are based solely on clinical need, not financial inducements. The DOJ targets schemes where providers are paid for ordering unnecessary items or services.
Mitigation Strategy: Implement robust internal controls, conduct regular audits, and provide ongoing staff training on fraud, waste, and abuse prevention. Vetting third-party vendors and ensuring fair market value compensation arrangements are non-negotiable.
What This Means For Your Practice
The regulatory environment for healthcare businesses, particularly those leveraging telehealth or operating in specialized fields like medspas, is becoming increasingly complex and enforcement-driven. The days of operating with a 'wait and see' approach are over. Proactive, state-specific compliance is not just a best practice; it is a fundamental requirement for operational sustainability and risk mitigation.
- Audit Your CPOM Structure: If you operate in multiple states, conduct a thorough audit of your corporate structure against each state's CPOM doctrine. For states like New York, ensure your PC-MSO model is genuinely physician-controlled and that all agreements reflect this autonomy. For states like Nevada, ensure your MSO model, while potentially more flexible, still clearly delineates clinical and administrative roles.
- Review Telehealth Prescribing Protocols: For any prescribing via telehealth, particularly for controlled substances or in sensitive areas like sexual wellness, map out the specific requirements for each state where you have patients. This includes rules for establishing the patient-provider relationship, permissible modalities, and any state-specific limitations on drug schedules. Partner with pharmacies that are licensed and compliant in all relevant jurisdictions.
- Update Informed Consent Processes: Move beyond generic consent forms. Develop dynamic, state-specific informed consent processes that address the unique requirements of each jurisdiction, including specific disclosures, methods of obtaining consent, and language requirements. Regularly review and update these as state laws evolve.
- Strengthen Supervision and Delegation Frameworks: If your practice utilizes PAs or ARNPs, especially in telehealth or medspa settings, ensure your supervision and delegation agreements and practices meet the explicit requirements of your state's medical and nursing boards. Document everything, from training to ongoing collaboration and chart review.
- Fortify Anti-Fraud and Anti-Kickback Compliance: Given the DOJ's intensified focus, review all financial relationships with third parties, including marketing firms, lead generators, laboratories, and pharmacies. Ensure all compensation arrangements are fair market value, commercially reasonable, and do not directly or indirectly induce referrals or prescriptions. Implement robust internal controls and conduct regular audits to detect and prevent fraud, waste, and abuse.
Ignoring these critical areas of compliance can lead to severe penalties, including license revocation, substantial civil monetary penalties, exclusion from federal healthcare programs, and even criminal charges. TrueEval provides the expertise and tools to help your organization navigate this intricate regulatory landscape, ensuring your business models are not only innovative but also legally sound and resilient against future challenges. The time to act is now, transforming regulatory complexity into a competitive advantage for your practice.
Further Reading
- Navigating the Regulatory Gauntlet: Critical Updates for Telehealth, Medspas, and Clinical Practices
- Navigating the Regulatory Gauntlet: DOJ Scrutiny, CPOM Tightening, and Telehealth's Evolving Compliance Imperatives
- The Shifting Sands of Healthcare Compliance: Navigating Telehealth Fraud, CPOM, and State-Specific Scrutiny
- The MSO Tightrope: Navigating CPOM Compliance Across Diverse State Landscapes in 2025-2026
