The healthcare regulatory landscape is in constant flux, a dynamic environment where vigilance is not just advisable, but essential for survival and growth. This week, we've seen a convergence of federal enforcement, critical state-level rulings, and proposed federal regulations that collectively underscore a sharpening focus on compliance across the telehealth and broader healthcare sectors. For founders, operators, and compliance officers, understanding these shifts is paramount to mitigating risk and seizing opportunities.
For more on this topic, see our analysis: Telehealth's Tightening Grip: DEA, DOJ, and State Boards Redefine Compliance for 2024 and Beyond.
Federal Scrutiny Intensifies: DEA and DOJ Target Telehealth Controlled Substance Prescribing
The Department of Justice (DOJ) and the Drug Enforcement Administration (DEA) are sending an unmistakable message: the era of unchecked telehealth prescribing, particularly for controlled substances, is over. The DOJ has significantly increased its focus on prosecuting telehealth companies and practitioners involved in illegal prescribing and distribution. This isn't merely about technical non-compliance; it's about a fundamental re-assertion of the 'legitimate medical purpose' standard. As the DOJ's actions highlight, mere adherence to emergency waivers (like those related to the Ryan Haight Act during the COVID-19 PHE) is insufficient if the underlying medical practice lacks a legitimate medical purpose or if the platform incentivizes or enables diversion. This means robust compliance programs, regular audits of prescribing patterns, and clear policies prioritizing patient safety and regulatory adherence are no longer optional.
For more on this topic, see our analysis: Telehealth's Tightening Grip: DEA, DOJ, and State Boards Redefine Compliance for 2024 and Beyond.
Adding to this, the DEA has issued proposed rules outlining requirements for prescribing controlled medications via telehealth, including buprenorphine for opioid use disorder (OUD). While the COVID-19 PHE flexibilities for OUD treatment have been extended until November 11, 2024, for relationships established during the PHE, the eventual return to stricter requirements is inevitable. For new patients, an in-person medical evaluation will likely become the standard for initial prescriptions of Schedule II and certain Schedule III-V controlled substances. This impacts not just OUD treatment platforms, but any practice considering telehealth for pain management, weight loss (e.g., GLP-1s), or other conditions requiring controlled substances. The complexity is further amplified for practices operating across state lines, where providers must hold both state licensure and DEA registration in each state where the patient is located. This necessitates a sophisticated credentialing and compliance infrastructure to track these requirements.
Actionable Insight: Telehealth platforms prescribing controlled substances must immediately review and fortify their patient intake, provider credentialing, and prescribing protocols. Implement rigorous internal audits to ensure every prescription meets the 'legitimate medical purpose' standard and complies with both federal and state DEA requirements. Prepare for a hybrid care model that incorporates in-person evaluations or robust referral networks.
State-Level Corporate Practice of Medicine (CPOM) Enforcement Heats Up
While federal agencies focus on controlled substances, state medical boards and attorneys general are increasingly scrutinizing business structures, particularly in the rapidly expanding medspa and direct-to-consumer (DTC) telehealth sectors. The Corporate Practice of Medicine (CPOM) doctrine remains a formidable barrier in many states, prohibiting corporations from employing physicians or controlling medical decision-making. We've seen critical intelligence emerge from states like Iowa, which maintains a strict CPOM doctrine, and Kentucky, which is considered a moderate enforcement state. Both present significant challenges for non-physician owned entities.
For telehealth brands, especially DTC weight loss brands prescribing GLP-1s, CPOM is a critical compliance hurdle. The core challenge is the tension between scalable, technology-driven business models and state laws designed to protect the physician-patient relationship from commercial influence. This necessitates meticulous attention to legal structures, such as Management Service Organization (MSO) models, where the corporate entity provides administrative services to an independently owned and operated professional medical corporation or professional limited liability company. The MSO agreement must clearly delineate responsibilities, ensuring the MSO does not dictate medical judgment, set physician compensation based on patient volume or prescriptions, or engage in fee-splitting.
Medspas face similar, if not heightened, scrutiny. In states like Iowa, non-physician ownership of a medspa that provides medical services (e.g., injectables, laser treatments) is highly problematic. The medical director must be genuinely overseeing and supervising medical services, not merely serving as a figurehead. Any MSO arrangement must clearly separate clinical and administrative functions, preventing the MSO from influencing clinical protocols or interfering with professional judgment.
Actionable Insight: All healthcare businesses, especially those with non-physician ownership or those expanding into new states, must conduct a thorough legal review of their corporate structure against the CPOM laws of every state in which they operate. Ensure MSO agreements are meticulously crafted to preserve physician independence and avoid any appearance of corporate control over clinical decisions or impermissible fee-splitting. Proactive legal counsel specializing in state-specific healthcare regulatory law is indispensable.
Telehealth Nuances: State Boards Define Scope and Standards
Beyond CPOM, state boards are actively refining their expectations for telehealth delivery, impacting a broad spectrum of practices from chiropractic care to general medicine. The Michigan Board of Medicine is actively monitoring and enforcing regulations related to telehealth and medspa operations, with disciplinary actions often stemming from issues like unprofessional conduct, scope of practice violations, and inadequate supervision. This signals a critical need for robust compliance frameworks, ensuring appropriate licensing, proper establishment of patient-provider relationships, and strict adherence to prescribing practices.
Similarly, the District of Columbia has specific regulations governing the establishment of a valid provider-patient relationship via telehealth, requiring an initial real-time, interactive audio-visual examination for prescribing. This directly impacts business models reliant on asynchronous or audio-only initial consultations. The standard of care for telehealth must be equivalent to that of in-person care, demanding thorough assessment and documentation.
Even chiropractic practices are seeing increased guidance from state boards on telehealth use. Regulations often define permissible services, require patient consent, and specify documentation standards, influencing how chiropractors can integrate virtual care. The ability to conduct initial consultations, establish a patient-provider relationship, and deliver certain therapeutic interventions remotely varies significantly by state.
Actionable Insight: Review state-specific telehealth regulations for every jurisdiction where your practice operates. Ensure your technology platforms support required interaction types (e.g., real-time audio-visual). Implement comprehensive training for all practitioners on state-specific scope of practice, patient-provider relationship establishment, and documentation standards for telehealth. Regular internal audits of telehealth encounters are crucial to ensure ongoing compliance.
CMS Expands Telehealth: Opportunity Meets Compliance Complexity
On a more positive note for access, the Centers for Medicare & Medicaid Services (CMS) has continued to expand the list of services eligible for Medicare reimbursement when furnished via telehealth, along with broadening the types of providers who can deliver these services. This reflects a sustained commitment to integrating telehealth into the permanent healthcare landscape, moving beyond pandemic-era flexibilities. For telehealth brands, this presents a growing market opportunity, but also necessitates meticulous attention to billing codes, documentation requirements, and compliance with originating and distant site rules.
Medspas and chiropractic offices with licensed medical professionals may find new avenues for patient engagement and follow-up care. However, the scope of practice for these providers must strictly align with state licensure and Medicare's specific service definitions for telehealth. The key for all practices is to understand which CPT codes are designated as telehealth-eligible and to ensure services align precisely with those definitions.
Actionable Insight: Stay current with CMS updates on eligible telehealth services and CPT codes. Invest in robust billing and documentation systems that can accurately capture and submit claims for telehealth services. Ensure your compliance program includes training on Medicare telehealth rules, including patient consent, technology requirements, and state-specific licensure for providers.
What This Means For Your Practice
The intelligence from the past week paints a clear picture: the regulatory environment for healthcare, particularly telehealth and adjacent services like medspas, is maturing rapidly. This maturity brings with it increased scrutiny and a demand for sophisticated, proactive compliance. The days of operating in regulatory gray areas are swiftly coming to an end. Enforcement actions, whether from the DOJ, DEA, or state medical boards, carry severe consequences, including license revocation, substantial fines, and even criminal charges.
For telehealth founders and operators, this means investing in robust compliance infrastructure, legal counsel, and continuous training is no longer a cost center, but a strategic imperative. For brick-and-mortar practice owners expanding nationally, understanding the intricate web of state-specific regulations, from CPOM to telehealth prescribing, is critical before entering new markets. Healthcare compliance officers must be empowered with resources and executive buy-in to implement comprehensive, auditable compliance programs. And for medspa, dental, chiropractic, and wellness practice owners, the message is clear: any service with a medical component must be meticulously aligned with state licensure, scope of practice, and corporate practice doctrines.
Looking Ahead: We anticipate continued federal and state enforcement, particularly as the DEA finalizes its proposed telehealth prescribing rules. State medical boards will likely continue to issue more specific guidance on telehealth, medspa operations, and scope of practice. The trend is towards greater clarity, but also higher expectations for compliance. Proactive engagement with regulatory intelligence and a commitment to building a culture of compliance will be the defining characteristics of successful healthcare businesses in this evolving landscape.
Further Reading
- Telehealth's Tightening Grip: DEA, DOJ, and State Boards Redefine Compliance for 2024 and Beyond
- Telehealth Tensions: Navigating DEA Scrutiny, CPOM Landmines, and State Board Enforcement in a Post-PHE World
- Telehealth's Tightening Grip: DEA, DOJ, and State Boards Signal a New Era of Scrutiny
- Medspa Expansion: Navigating the Regulatory Minefield for Compliant Growth
