The healthcare regulatory environment is a dynamic and often challenging terrain. For telehealth innovators, expanding medspa operators, and traditional clinical practices, staying abreast of evolving rules, enforcement trends, and agency guidance is not merely good practice—it is an existential imperative. This briefing cuts through the noise, offering a concise yet comprehensive analysis of recent critical developments that demand your immediate attention.
For more on this topic, see our analysis: Navigating the Regulatory Tides: Critical Updates for Telehealth, Medspas, and Clinical Practices.
DOJ and DEA Intensify Scrutiny on Telehealth Prescribing
Recent actions from the Department of Justice (DOJ) and the Drug Enforcement Administration (DEA) signal a significant tightening of the reins on telehealth-based controlled substance prescribing. This is not a subtle shift; it's a critical enforcement priority that could have profound implications for any practice or platform involved in virtual prescribing.
For more on this topic, see our analysis: Navigating the Regulatory Tides: Critical Updates for Telehealth, Medspas, and Clinical Practices.
The 'Legitimate Medical Purpose' Under the Microscope
The DOJ has intensified enforcement against telehealth controlled substance prescribing violations, underscoring that the 'legitimate medical purpose' standard is non-negotiable. Enforcement actions are increasingly targeting systemic failures and fraudulent schemes, not just isolated incidents. This means that while emergency waivers (like those related to the Ryan Haight Act during the COVID-19 Public Health Emergency, or PHE) provided temporary flexibility, they did not absolve providers of the fundamental requirement to ensure medical necessity and prevent diversion. For instance, recent indictments have highlighted cases where telehealth platforms allegedly facilitated the distribution of Adderall and other controlled substances without proper medical evaluation, leading to criminal charges, substantial fines, and exclusion from federal healthcare programs.
Actionable Insight: Telehealth brands must rigorously re-evaluate patient intake protocols, provider training, and technological safeguards. Every prescription for a controlled substance must be underpinned by a comprehensive, individualized medical evaluation that meets federal and state standards, including appropriate physical examinations where necessary. Robust compliance programs, regular audits of prescribing patterns, and clear policies prioritizing patient safety over rapid patient acquisition are essential.
DEA's Evolving Stance on Telehealth Prescribing for Controlled Substances
Complementing the DOJ's enforcement, the DEA has been working to establish a permanent framework for telehealth prescribing of controlled substances. While the initial proposed rules were quite strict, requiring an in-person medical evaluation for initial prescriptions of Schedule II and certain Schedule III-V controlled substances (including buprenorphine), the DEA later issued a supplemental proposed rule. This rule extended the COVID-19 PHE flexibilities until November 11, 2023, and for an additional year (until November 11, 2024) for patient-prescriber relationships established during the PHE. This provides a temporary reprieve but underscores the eventual return to stricter requirements.
Reference: DEA Proposed Rule, “Telemedicine Prescribing of Controlled Substances,” 88 Fed. Reg. 18982 (March 1, 2023); Supplemental Notice of Proposed Rulemaking, 88 Fed. Reg. 42520 (July 3, 2023).
Actionable Insight: Telehealth providers, especially those offering Opioid Use Disorder (OUD) treatment, must prepare for a future where an initial in-person visit or a referral from a practitioner who has conducted one will likely be necessary for new buprenorphine patients. For all other controlled substances, a hybrid model combining virtual consultations with in-person assessments will become the standard. Practices operating across state lines must also navigate DEA registration requirements, ensuring providers hold DEA registrations in every state where they prescribe controlled substances to patients. This necessitates a robust credentialing and compliance infrastructure.
Corporate Practice of Medicine (CPOM) Continues to Shape Business Structures
The Corporate Practice of Medicine (CPOM) doctrine remains a significant hurdle for innovative healthcare business models, particularly in states with strict enforcement. This doctrine generally prohibits corporations from employing physicians or controlling medical decision-making, aiming to protect professional independence and prevent commercial exploitation of medical services.
Strict Enforcement in Key States
States like Iowa and Kentucky maintain strict CPOM doctrines. In Iowa, for example, non-licensed entities are generally prohibited from employing licensed healthcare professionals or owning medical practices. This directly impacts telehealth brands and medspas that often rely on corporate structures. For a national telehealth company, direct employment of Iowa-licensed providers by a non-professional corporation is likely non-compliant. Instead, models like forming an Iowa professional corporation (PC) or professional limited liability company (PLLC) owned by licensed Iowa professionals, which then contracts with the telehealth platform for administrative services, become necessary.
Reference: Iowa Code Chapter 496C (Professional Corporations), Iowa Administrative Code 653-13.1 et seq. (Board of Medicine).
Actionable Insight: For telehealth weight loss brands and medspas operating in CPOM states, meticulous attention to legal structures, such as compliant Management Service Organization (MSO) models, is paramount. The MSO must provide only administrative services and cannot dictate medical judgment, set physician compensation based on patient volume, or engage in fee-splitting. The financial relationship between the MSO and the professional entity must be at fair market value for administrative services, independent of referrals or medical services. Failure to comply can lead to license revocation, corporate penalties, and even criminal charges.
State Boards Increase Scrutiny on Telehealth and Medspa Operations
Beyond federal regulations, state medical and professional boards are actively monitoring and enforcing regulations specific to telehealth and medspa operations. These actions often stem from issues like unprofessional conduct, scope of practice violations, and inadequate supervision.
Michigan's Focus on Telehealth and Medspa Compliance
The Michigan Board of Medicine is a prime example of a state board with increased scrutiny. Disciplinary actions often arise from issues such as practitioners not being appropriately licensed in Michigan, patient-provider relationships not being established in accordance with state law (e.g., proper initial evaluations, informed consent), and prescribing practices for controlled substances not adhering to Michigan's Public Health Code.
Reference: Michigan Public Health Code (MCL 333.16101 et seq.), Michigan Administrative Code R 338.2301 et seq. (Board of Medicine).
Actionable Insight: For telehealth brands operating in Michigan, ensuring all practitioners are appropriately licensed, patient-provider relationships are properly established, and prescribing practices are strictly compliant is crucial. Medspa operators face unique challenges related to scope of practice and delegation. The Board expects clear delineation of services that can only be performed by a physician, those that can be delegated under appropriate supervision, and those outside the scope of non-medical personnel. Medical directors must be actively engaged and provide direct, on-site supervision as required. Proactive internal audits, comprehensive staff training, and clear documentation are essential.
Telehealth for Chiropractic Care: State-Specific Nuances
State chiropractic boards are also issuing specific guidance on telehealth. For instance, the District of Columbia requires a real-time, interactive audio-visual examination to establish a valid provider-patient relationship for telehealth prescribing, with limited exceptions. This impacts how chiropractic practices can integrate virtual care, particularly for initial consultations and remote patient management.
Reference: DC Municipal Regulations, Title 17, Chapter 46 (Board of Medicine), and specific guidance from the DC Board of Chiropractic.
Actionable Insight: Chiropractic practices and dental practices considering telehealth must meticulously review their state's board rules to ensure compliance, especially regarding the definition of a 'physical examination' and whether it can be adapted for telehealth. The ability to conduct initial consultations, establish a patient-provider relationship, and deliver certain therapeutic interventions remotely varies significantly by state. Robust documentation capabilities for virtual encounters and mechanisms for verifying patient identity and location are critical.
CMS Expands Telehealth Services and Provider Eligibility
On a more positive note for telehealth expansion, the Centers for Medicare & Medicaid Services (CMS) has continued to expand the list of services eligible for Medicare reimbursement when furnished via telehealth, along with broadening the types of providers who can deliver these services. These updates reflect a sustained commitment to integrating telehealth into the permanent healthcare landscape, moving beyond pandemic-era flexibilities.
Actionable Insight: This expansion presents a growing market opportunity for telehealth brands and clinical practices that serve Medicare beneficiaries. However, it also necessitates meticulous attention to billing codes, documentation requirements, and compliance with evolving originating and distant site rules. Practices must ensure their systems can accurately capture and submit claims for newly eligible services, using appropriate CPT codes and modifiers (e.g., 95 for synchronous telehealth). Staying current with CMS updates and investing in robust compliance infrastructure for billing and coding is critical to capitalize on these expansions while mitigating audit risks.
What This Means For Your Practice
The current regulatory climate demands a proactive, multi-faceted approach to compliance. The days of 'wait and see' are over; agencies are actively enforcing existing rules and rapidly developing new ones. Here’s what you need to do:
- Audit Your Telehealth Prescribing Protocols: If you prescribe controlled substances via telehealth, immediately review your processes against DEA proposed rules, DOJ enforcement priorities, and state-specific requirements. Ensure every prescription has a documented, legitimate medical purpose and that initial patient encounters meet current standards.
- Review Your Business Structure for CPOM Compliance: For telehealth companies and medspas, especially those operating in states like Iowa, Kentucky, or other strict CPOM jurisdictions, engage legal counsel to review your corporate structure, MSO agreements, and physician employment/contracting models. Ensure clinical independence and avoid any appearance of fee-splitting or corporate control over medical decisions.
- Stay Abreast of State Board Actions: State medical, nursing, dental, and chiropractic boards are increasingly active. Regularly monitor their guidance, administrative rules, and enforcement actions. Tailor your policies and procedures to meet specific state requirements for licensure, scope of practice, supervision, and informed consent, particularly for telehealth and delegated services in medspas.
- Leverage CMS Expansion Wisely: For practices serving Medicare beneficiaries, understand the expanded list of telehealth-eligible services. Ensure your billing and documentation processes are compliant with CMS guidelines, CPT codes, and modifiers to maximize reimbursement while avoiding audit triggers.
- Invest in Compliance Infrastructure and Training: Robust compliance programs, ongoing staff training, and clear, documented policies are your best defense. Consider compliance software solutions to manage licensing, credentialing, and regulatory changes across multiple jurisdictions.
The regulatory environment is not static; it is a living, evolving ecosystem. By prioritizing compliance and proactively adapting to these changes, healthcare businesses can not only mitigate risk but also build a foundation for sustainable growth and continued innovation in patient care.
Further Reading
- Navigating the Regulatory Tides: Critical Updates for Telehealth, Medspas, and Clinical Practices
- Navigating the New Regulatory Frontier: Critical Updates for Telehealth, Medspas, and Clinical Practices
- The Shifting Sands of Healthcare Compliance: Navigating DEA, CPOM, and State Board Scrutiny in Telehealth and Medspas
- The Compliance Crucible: Navigating DEA Scrutiny, CPOM Landmines, and Telehealth's Evolving Landscape
