Alabama Healthcare
Compliance Guide

Alabama presents a moderately conservative regulatory environment for healthcare companies, balancing patient access with strict oversight, particularly concerning the Corporate Practice of Medicine (CPOM) and controlled substance prescribing. While the state has embraced telehealth as a legitimate mode of care delivery, its implementation is subject to specific requirements regarding provider-patient relationship establishment and modality use. Key regulatory bodies, including the Alabama Board of Medical Examiners (ABME) and the Alabama Board of Nursing (ABN), play a crucial role in defining the scope of practice and compliance standards. The state has shown a willingness to adapt its laws to integrate telehealth, particularly post-pandemic, but maintains stringent rules around professional licensure and the commercial aspects of healthcare. Recent legislative actions have focused on solidifying telehealth parity and addressing the opioid crisis, impacting prescribing practices. For businesses expanding into Alabama, understanding the nuances of its CPOM doctrine and the specific requirements for establishing a valid practitioner-patient relationship via telehealth is paramount. The business climate requires careful structuring to ensure compliance, often necessitating a Professional Corporation (PC) model or a robust Management Services Organization (MSO) arrangement to navigate CPOM restrictions. Overall, Alabama is not an 'easy' state for healthcare market entry without diligent compliance planning, but it offers a stable regulatory framework for those who adhere strictly to its rules. The state's emphasis on in-state licensure and the direct oversight of professional boards means that out-of-state entities must be prepared for a thorough compliance process.

Alabama maintains a robust Corporate Practice of Medicine (CPOM) doctrine, which generally prohibits corporations, lay entities, or non-licensed individuals from employing physicians or owning medical practices. The legal basis for Alabama's CPOM is primarily derived from common law and reinforced by various statutes and regulations that define the practice of medicine and the roles of licensed professionals. The Alabama Medical Practice Act, specifically Ala. Code § 34-24-50 et seq., defines the practice of medicine and limits it to licensed physicians. The Alabama Board of Medical Examiners (ABME) has consistently interpreted these provisions to uphold the CPOM doctrine, emphasizing that medical decisions, patient care, and professional judgment must remain under the sole control of licensed physicians. This means that non-physicians cannot directly employ physicians or control the delivery of medical services. Ownership structures are significantly impacted. Generally, only licensed physicians or professional corporations (PCs) owned by licensed physicians are permitted to own medical practices. Non-physicians are typically prohibited from holding equity in entities that directly provide medical services. This restriction extends to telehealth companies, medspas, dental practices, and wellness clinics that offer services considered to be the practice of medicine. For instance, a medspa providing Botox injections or laser treatments, which are medical procedures, must be owned by a physician or a physician-owned PC. Similarly, a telehealth company providing physician consultations and prescribing services must ensure that the medical entity is physician-owned and controlled. The CPOM doctrine in Alabama is not explicitly codified as a single statute but is a well-established principle enforced through licensing board actions and interpretations of existing professional practice acts. The ABME's Rules and Regulations, particularly those concerning professional conduct and advertising, also implicitly support the CPOM by requiring that medical services be rendered by and under the control of licensed physicians. This framework necessitates the use of a Professional Corporation (PC) for the medical services entity, with all shares owned by licensed physicians. Non-physician entities can provide administrative and management services through a Management Services Organization (MSO) model, but the MSO must not interfere with clinical decision-making or exercise control over the medical practice. Fee-splitting arrangements between licensed professionals and lay entities are also generally prohibited, reinforcing the CPOM. Any arrangement where a non-physician entity receives a percentage of professional fees for medical services is highly scrutinized and likely considered illegal. Therefore, careful structuring is essential to ensure that the MSO's compensation is based on fair market value for legitimate administrative services, independent of the volume or value of referrals or professional services rendered.

Alabama has established a clear framework for telehealth, recognizing it as a legitimate mode of healthcare delivery, provided specific conditions are met. A provider-patient relationship can be established via telehealth in Alabama, as long as it adheres to the standards of care applicable to in-person encounters. The Alabama Board of Medical Examiners (ABME) Rules, specifically Chapter 540-X-15, govern the practice of telemedicine. These rules explicitly state that a physician-patient relationship may be established through telemedicine, but it must be based on an appropriate prior examination, which may be performed via real-time interactive audio-visual technology. An online questionnaire alone is insufficient. The permitted modalities for telehealth include real-time interactive audio-visual communication (video conferencing), which is the preferred method for establishing a new patient relationship and for complex consultations. Store-and-forward technology is permitted for specific applications, such as radiology or dermatology, where the asynchronous transmission of medical information is appropriate for diagnosis and treatment. Audio-only telephone calls may be used for follow-up care or for established patients in certain circumstances, but generally not for initial evaluations or prescribing controlled substances. Asynchronous communication, such as secure messaging or email, is typically limited to adjunct communication with established patients and is not considered sufficient for establishing a new patient relationship or for primary diagnostic and treatment purposes. There are no specific telehealth registration requirements for providers beyond their standard professional licensure in Alabama. However, providers must be fully licensed by the appropriate Alabama professional board (e.g., ABME for physicians, ABN for nurses) to provide telehealth services to patients located in Alabama. Informed consent requirements are critical. Before providing telehealth services, providers must obtain informed consent from the patient, which should include information about the nature of telehealth, potential risks, confidentiality, and the patient's right to withdraw consent. This consent should be documented in the patient's medical record. Alabama law does not impose geographic restrictions within the state for telehealth services, meaning a licensed Alabama provider can treat a patient anywhere within Alabama via telehealth. However, providers must be physically located within the United States when providing telehealth services to Alabama patients. The ABME's rules emphasize that the standard of care for telehealth services is the same as for in-person services, and providers must maintain comprehensive medical records. Failure to adhere to these standards can result in disciplinary action. The state has actively worked to ensure telehealth parity, meaning that telehealth services are reimbursed at the same rate as in-person services by state-regulated health plans, as codified in Ala. Code § 27-48-1 et seq.

Alabama maintains stringent rules for prescribing controlled substances via telehealth, particularly under the Alabama Uniform Controlled Substances Act (Ala. Code § 20-2-1 et seq.) and regulations from the Alabama Board of Medical Examiners (ABME) and the Alabama Board of Pharmacy (ABP). For telehealth, the ability to prescribe controlled substances is generally limited. While the Ryan Haight Online Pharmacy Consumer Protection Act of 2008 sets federal guidelines, Alabama's state laws often impose additional restrictions. Historically, the establishment of a legitimate medical purpose and a valid practitioner-patient relationship, typically requiring an in-person examination, was a prerequisite for prescribing controlled substances. Post-COVID-19, federal waivers (which are temporary) allowed for more flexibility, but Alabama state law still emphasizes a robust relationship. For Schedule II-V controlled substances, an in-person examination is generally required before an initial prescription, or at minimum, a real-time interactive audio-visual examination that meets the standard of care for an in-person visit. Audio-only encounters are generally not sufficient for initial controlled substance prescriptions. The ABME's rules (Chapter 540-X-15) specify that a physician-patient relationship established solely via an online questionnaire is insufficient for prescribing controlled substances. Specific DEA requirements apply, including the need for a DEA registration tied to the physical location where the prescriber is licensed. The DEA's proposed rules, once finalized, will further clarify federal requirements for telehealth prescribing of controlled substances, potentially reinstating some in-person exam requirements for initial prescriptions. PDMP checking is mandatory in Alabama. Ala. Code § 20-2-210 et seq. requires prescribers to review the Alabama Prescription Drug Monitoring Program (PDMP) database before prescribing Schedule II, III, IV, or V controlled substances. This check must occur before the initial prescription and periodically thereafter, typically every 90 days, for ongoing therapy. Quantity or refill limitations are also in place. For example, initial prescriptions for Schedule II opioids for acute pain are generally limited to a five-day supply, with exceptions for certain medical conditions. Refills for Schedule II substances are generally prohibited, while Schedule III-V substances may have up to five refills within six months. Special rules apply to specific drug classes. For GLP-1s (e.g., Ozempic, Wegovy), while not controlled substances, prescribing must align with FDA-approved indications or accepted medical practice, requiring a thorough patient evaluation. Testosterone and other hormone therapies, though not all controlled, require comprehensive diagnostic workups and ongoing monitoring. Stimulants (e.g., Adderall, Ritalin), which are Schedule II, face the most stringent requirements, often necessitating an in-person evaluation for diagnosis and initial prescription, and close monitoring thereafter. Telehealth prescribing of these high-risk medications is subject to intense scrutiny, and providers must ensure strict adherence to state and federal guidelines to avoid regulatory enforcement actions.

Alabama's scope of practice for mid-level providers, including Nurse Practitioners (NPs) and Physician Assistants (PAs), is defined by statute and regulatory board rules, generally requiring a collaborative or supervisory relationship with a physician. Alabama does not grant full practice authority to Nurse Practitioners. NPs, licensed by the Alabama Board of Nursing (ABN), must practice under a 'collaborative practice agreement' with a physician. This agreement, governed by Ala. Code § 34-21-80 et seq. and ABN rules (Chapter 610-X-5), outlines the scope of practice, the types of services the NP can provide, and the physician's responsibilities for consultation and oversight. While the agreement grants a degree of autonomy, the NP's practice remains tied to the collaborating physician. The physician must be available for consultation, and the agreement must specify the methods of communication and review of patient records. The ratio of NPs to collaborating physicians is also regulated. For Physician Assistants (PAs), licensed by the Alabama Board of Medical Examiners (ABME), a 'supervisory agreement' with a physician is required. Ala. Code § 34-24-290 et seq. and ABME rules (Chapter 540-X-7) define the PA's scope, which is dependent on the supervising physician's practice and expertise. PAs can perform medical services delegated by their supervising physician, including diagnosing, treating, and prescribing, but always under the physician's oversight. The physician must be readily available for consultation and review a percentage of the PA's charts. The number of PAs a physician can supervise concurrently is also limited. For both NPs and PAs, the ability to prescribe controlled substances is granted but often with additional restrictions compared to physicians, such as limitations on Schedule II prescribing or quantity limits, as determined by their respective collaborative or supervisory agreements and state law. Other mid-level providers, such as Certified Registered Nurse Anesthetists (CRNAs), also operate under specific supervisory or collaborative arrangements. Delegation rules for medical assistants (MAs) in settings like medspas are also critical. MAs in Alabama are generally limited to administrative tasks and basic clinical procedures that do not require independent judgment or advanced skills. They cannot perform procedures that constitute the practice of medicine, such as injections (e.g., Botox, dermal fillers), laser treatments, or advanced skincare procedures, unless directly supervised by a physician who is physically present on-site and the MA is trained for the specific task. The ABME has clarified that procedures requiring medical judgment or a physician's license cannot be delegated to unlicensed personnel. Any medspa or wellness clinic must ensure that all medical procedures are performed by licensed professionals (physicians, NPs, PAs, or RNs operating within their scope and under appropriate supervision/collaboration) and that delegation to MAs is strictly within legal boundaries. Failure to adhere to these supervision and delegation rules can lead to severe disciplinary action for both the supervising physician and the facility.

Navigating Alabama's Corporate Practice of Medicine (CPOM) doctrine is central to compliant business structuring for healthcare companies. The Professional Corporation (PC) – Management Services Organization (MSO) model is frequently employed to achieve compliance. Under this model, the medical services entity (e.g., a telehealth practice, medspa, or dental clinic) must be structured as a Professional Corporation (PC) or Professional Limited Liability Company (PLLC), with all ownership shares held by licensed Alabama physicians (or dentists for dental practices). This PC directly employs the licensed healthcare providers and delivers the clinical services. The MSO, a separate entity that can be owned by non-physicians or investors, provides all non-clinical, administrative, and management services to the PC. These services typically include billing, scheduling, marketing, IT support, facility management, and human resources. The relationship between the PC and the MSO is governed by a comprehensive Management Services Agreement (MSA). The MSA must clearly delineate the services provided by the MSO and, crucially, ensure that the MSO does not exercise any control over the clinical decision-making, patient care, or professional judgment of the PC's licensed providers. The MSO's compensation must be structured at fair market value (FMV) for the services rendered and must not be tied to the volume or value of referrals or professional services. Percentage-based compensation tied to professional fees is a significant red flag for illegal fee-splitting and CPOM violations. Alabama's fee-splitting rules, primarily enforced by the ABME and other professional boards, generally prohibit licensed professionals from sharing professional fees with unlicensed individuals or entities. This means the MSO cannot take a percentage of the revenue generated from medical services. Instead, MSO fees should be based on a fixed fee, cost-plus, or a percentage of gross collections that is clearly for administrative services and not professional fees, and always at FMV. Professional corporation requirements in Alabama are outlined in Ala. Code § 10A-1-5.01 et seq. These statutes mandate that professional corporations be formed for the sole purpose of rendering professional services, and all shareholders must be licensed professionals in the specific field. This ensures that the ultimate control and responsibility for professional services remain with the licensed practitioners. For telehealth companies, this structure is critical. The telehealth platform itself can be owned by the MSO, but the entity employing the physicians who provide consultations and prescribing must be a physician-owned PC. Similarly, for medspas, the medical director and any other licensed providers must be employed by a physician-owned PC that is responsible for all medical procedures. Proper structuring requires careful legal counsel to ensure the MSA is robust, FMV is established, and the separation of clinical and administrative functions is maintained to avoid CPOM and fee-splitting allegations.

Alabama's regulatory landscape continues to evolve, with several key developments and ongoing legislative discussions impacting healthcare, particularly telehealth. In 2024, there was continued legislative focus on solidifying telehealth's role post-pandemic. House Bill 188 (HB188) and Senate Bill 140 (SB140), though not yet codified as of early 2025, aimed to expand and clarify telehealth definitions and reimbursement parity, ensuring that state-regulated health plans continue to cover telehealth services at rates comparable to in-person care. These bills sought to make permanent many of the temporary flexibilities granted during the COVID-19 public health emergency, particularly regarding the modalities allowed for establishing a patient-provider relationship. Another area of active discussion revolves around the interstate practice of medicine. While Alabama is a member of the Interstate Medical Licensure Compact (IMLC), allowing expedited licensure for physicians from participating states, there's ongoing debate about expanding compact participation for other professions, such as nursing. The Alabama Board of Medical Examiners (ABME) and the Alabama Board of Nursing (ABN) have been actively engaged in discussions regarding the Nurse Licensure Compact (NLC), which Alabama has not yet joined. Joining the NLC would significantly impact the ability of out-of-state NPs and RNs to practice telehealth in Alabama. Recent board actions have largely focused on enforcement related to opioid prescribing and adherence to telehealth guidelines. The ABME has issued disciplinary actions against physicians for inappropriate prescribing of controlled substances via telehealth, particularly when an adequate patient-provider relationship was not established or PDMP checks were neglected. These cases underscore the boards' commitment to maintaining the standard of care regardless of the delivery method. There has also been increased scrutiny on medspas and wellness clinics to ensure compliance with Corporate Practice of Medicine (CPOM) and proper supervision/delegation rules. The ABME has investigated instances where non-physician ownership or control over medical services was suspected, reinforcing the state's strict stance on CPOM. While no major overhauls to the CPOM doctrine are anticipated, the boards continue to interpret and enforce existing statutes vigorously. Companies should monitor legislative sessions for any new bills affecting professional licensure, telehealth reimbursement, or prescribing practices, as Alabama's regulatory environment is dynamic and responsive to emerging healthcare trends and public health concerns.

Entering the Alabama healthcare market requires a meticulous, multi-step compliance strategy. Here is actionable guidance for healthcare companies: 1. Establish a Compliant Business Structure: Immediately engage legal counsel experienced in Alabama healthcare law to set up a Professional Corporation (PC) for the clinical services entity, ensuring all shares are owned by licensed Alabama physicians. Simultaneously, establish a separate Management Services Organization (MSO) for administrative functions. Draft a robust Management Services Agreement (MSA) that clearly defines services, establishes fair market value (FMV) compensation, and explicitly prohibits MSO interference in clinical decision-making. 2. Secure Proper Licensure: All healthcare providers (physicians, NPs, PAs) must hold active, unrestricted licenses issued by their respective Alabama professional boards (e.g., ABME, ABN). Initiate the licensing process early, as it can take several months. For physicians, explore the Interstate Medical Licensure Compact (IMLC) if applicable for expedited licensure. 3. Implement Telehealth Protocols: Develop comprehensive telehealth policies and procedures. Ensure all initial patient encounters for prescribing, especially controlled substances, utilize real-time interactive audio-visual technology and meet the standard of care for an in-person exam. Document informed consent for telehealth services. Train providers on appropriate modality use and ensure they are physically located within the U.S. when treating Alabama patients. 4. Adhere to Prescribing Rules: Integrate mandatory Alabama Prescription Drug Monitoring Program (PDMP) checks into clinical workflows for all controlled substances. Educate providers on state-specific quantity limits and refill restrictions, particularly for Schedule II opioids and stimulants. Avoid prescribing controlled substances based solely on online questionnaires or audio-only encounters. 5. Define Scope of Practice and Supervision: For NPs and PAs, ensure valid collaborative practice agreements or supervisory agreements are in place, approved by the relevant boards, and regularly reviewed. Clearly delineate delegated tasks and supervision requirements. For medspas, strictly limit medical assistant (MA) duties to administrative tasks and non-medical support; all medical procedures must be performed by licensed professionals within their scope, under appropriate supervision. 6. Ensure Data Security and Privacy: Implement HIPAA-compliant systems and practices for all patient data, including telehealth platforms. Conduct regular security audits and staff training. Common pitfalls include underestimating the strictness of CPOM, failing to establish a valid patient-provider relationship for telehealth prescribing, neglecting PDMP requirements, and inadequate supervision of mid-level providers. Expect licensing and setup to take 3-6 months, depending on the complexity of the structure and individual provider licensing timelines. Proactive legal and compliance review is non-negotiable for successful entry into Alabama.