Arkansas Healthcare
Compliance Guide

Arkansas presents a moderately regulated environment for healthcare companies, balancing patient access with traditional regulatory oversight. The state has made significant strides in telehealth adoption, particularly accelerated by the COVID-19 pandemic, leading to more permanent legislative frameworks. However, it maintains a robust Corporate Practice of Medicine (CPOM) doctrine and strict professional licensing requirements. Key regulatory bodies include the Arkansas State Medical Board (ASMB), the Arkansas State Board of Pharmacy, and the Arkansas State Board of Nursing. The overall business climate is generally favorable, but healthcare entities must navigate specific state-level nuances, especially concerning ownership structures and scope of practice. Recent legislative actions have focused on codifying telehealth flexibilities, refining prescribing rules, and addressing emerging healthcare delivery models. For instance, Act 310 of 2021 significantly updated telehealth definitions and reimbursement mandates, while Act 1083 of 2023 further clarified prescribing authority for advanced practice registered nurses (APRNs). Companies expanding into Arkansas must prioritize understanding the state's CPOM enforcement, the specific requirements for establishing a valid practitioner-patient relationship via telehealth, and the detailed prescribing rules, particularly for controlled substances. The state emphasizes in-state licensure for all practitioners providing care to Arkansas residents, regardless of the patient's physical location during the telehealth encounter. While not as restrictive as some other states, Arkansas requires careful attention to detail for compliant operations, especially for models involving non-physician ownership or complex management arrangements. The state's commitment to expanding access, particularly in rural areas, often drives legislative efforts, but always within the bounds of maintaining professional standards and patient safety.

Arkansas maintains a strong, statutorily based Corporate Practice of Medicine (CPOM) doctrine, which generally prohibits corporations, entities, or laypersons from practicing medicine or employing physicians to practice medicine. The legal basis for Arkansas's CPOM stems primarily from Ark. Code Ann. § 17-95-101 et seq., which defines the practice of medicine and limits it to licensed individuals. Specifically, Ark. Code Ann. § 17-95-204 states that 'No person shall practice medicine or surgery in this state without first having obtained a license.' This is interpreted to mean that only licensed individuals or professional entities owned by licensed individuals can deliver medical services. This prohibition extends to employment relationships where a lay entity would control the physician's clinical judgment or direct the professional aspects of care. Consequently, non-physicians cannot own or operate entities that directly provide medical services in Arkansas. This includes telehealth companies, medspas, dental practices (which have their own specific professional corporation statutes, e.g., Ark. Code Ann. § 17-82-101 et seq.), and wellness clinics if they involve the practice of medicine. The ASMB has consistently upheld this principle, issuing advisories and taking enforcement actions against arrangements deemed to violate CPOM. Permitted ownership structures are typically professional corporations (PCs) or professional limited liability companies (PLLCs) where all owners are licensed healthcare professionals of the same profession (e.g., all physicians for a medical PC). For multi-disciplinary practices or those involving non-physician investment, the traditional PC-MSO (Professional Corporation – Management Services Organization) model is the predominant compliant structure. Under this model, the clinical services are provided by a physician-owned PC, while a separate, non-physician-owned MSO provides administrative, non-clinical support services to the PC. The MSO cannot control clinical decision-making, direct physician employment, or engage in fee-splitting arrangements that violate professional ethics or state law. The ASMB scrutinizes these arrangements to ensure the MSO's role is purely administrative and does not infringe upon the physician's independent professional judgment. This strict enforcement means that telehealth companies, medspas, and wellness clinics must ensure their clinical operations are housed within a properly structured, physician-owned entity, with clear delineation of responsibilities if an MSO is involved.

Arkansas has established a comprehensive framework for telehealth, largely codified in Ark. Code Ann. § 17-80-117 and further defined by various board regulations. A valid practitioner-patient relationship can be established via telehealth, provided certain conditions are met. The law defines 'telehealth' as the use of electronic information and communication technologies to provide health care services to a patient located at a distant site. This includes, but is not limited to, synchronous (live interactive audio-visual) and asynchronous (store-and-forward) technologies. While synchronous audio-visual is generally preferred for establishing a new relationship, the ASMB allows for the establishment of a practitioner-patient relationship through a 'face-to-face' encounter, which can include real-time interactive audio-visual communication. Audio-only telehealth is permitted for established patients or in specific circumstances where audio-visual is not available or appropriate, but generally not for initial patient evaluations where a physical exam is deemed necessary. Asynchronous (store-and-forward) is also permitted, particularly for specialties like dermatology or radiology, but requires sufficient information to render a diagnosis and treatment plan. There are no specific telehealth registration requirements for providers beyond their standard professional licensure in Arkansas. However, out-of-state providers must be licensed in Arkansas to treat Arkansas patients, unless they qualify for a specific interstate compact (e.g., IMLC). Informed consent is a critical component of telehealth in Arkansas. Providers must obtain informed consent from the patient, or the patient's legal representative, prior to the delivery of telehealth services. This consent should include an explanation of the services, the technologies used, potential risks, and patient rights. There are no explicit geographic restrictions within Arkansas for telehealth services, meaning a licensed Arkansas provider can treat a patient anywhere within the state. However, the provider must be licensed in Arkansas to treat patients located in Arkansas, regardless of the provider's physical location. The ASMB's rules, particularly Board Rule 2.13, provide detailed guidance on the appropriate use of telehealth, emphasizing that the standard of care remains the same as for in-person services.

Arkansas has specific and often stringent rules governing prescribing via telehealth, particularly for controlled substances. For non-controlled substances, a licensed practitioner with prescriptive authority (e.g., physician, APRN, PA) can generally prescribe via telehealth once a valid practitioner-patient relationship has been established and the standard of care is met. For controlled substances, Arkansas law, specifically Ark. Code Ann. § 17-80-117(c), prohibits the prescribing of Schedule II and Schedule III controlled substances via telehealth unless the prescribing practitioner has conducted an in-person examination of the patient or has established a practitioner-patient relationship through an initial in-person encounter. This 'in-person' requirement is a significant hurdle for many telehealth models. However, there are exceptions for established patients, emergency situations, or if the telehealth encounter is conducted in a licensed healthcare facility. The federal Ryan Haight Online Pharmacy Consumer Protection Act of 2008 also applies, generally requiring an in-person medical evaluation before prescribing controlled substances via the internet, with the 'public health emergency' exception having expired. Therefore, the Arkansas 'in-person' requirement largely aligns with federal law for initial prescriptions of controlled substances. All prescribers are required to check the Arkansas Prescription Drug Monitoring Program (PDMP), known as the Arkansas Prescription Monitoring Program (AR PMP), prior to prescribing Schedule II, III, or IV controlled substances, and periodically thereafter. Ark. Code Ann. § 17-92-1305 mandates this check. There are no explicit quantity or refill limitations specific to telehealth prescribing beyond those generally applicable to all prescribing in Arkansas, which are often dictated by the specific drug and medical necessity. For specific drug classes like GLP-1s, testosterone, or stimulants, while not controlled substances themselves (except for stimulants), the underlying conditions often require thorough evaluation and monitoring. Prescribing these via telehealth must adhere strictly to the 'standard of care,' ensuring comprehensive patient assessment, appropriate diagnostics, and ongoing monitoring, which may necessitate in-person components depending on the clinical scenario. The Arkansas State Board of Pharmacy also plays a role in regulating the dispensing of prescriptions, ensuring compliance with state and federal laws.

The scope of practice for mid-level providers in Arkansas is defined by their respective licensing boards and state statutes, generally requiring some level of physician supervision or collaboration. Arkansas does not grant full practice authority to Advanced Practice Registered Nurses (APRNs). APRNs, including Nurse Practitioners (NPs), Clinical Nurse Specialists (CNSs), Certified Nurse Midwives (CNMs), and Certified Registered Nurse Anesthetists (CRNAs), must practice under a collaborative practice agreement with a physician. Ark. Code Ann. § 17-87-301 et seq. and the Arkansas State Board of Nursing (ASBN) rules govern APRN practice. A collaborative practice agreement outlines the scope of practice, referral mechanisms, and physician oversight, ensuring that the APRN's practice is within their education and training and consistent with the medical model. Physician Assistants (PAs) in Arkansas also operate under a supervisory agreement with a physician. Ark. Code Ann. § 17-105-101 et seq. and the ASMB rules dictate PA practice. PAs can perform medical services delegated by their supervising physician, which includes diagnosis, treatment, and prescribing, but always under the physician's ultimate responsibility and oversight. The level of supervision can vary but generally requires the physician to be readily available for consultation and to periodically review the PA's charts. For medical assistants (MAs) in settings like medspas, their scope of practice is highly restricted. MAs can only perform delegated tasks that do not require independent medical judgment and are within their training, typically administrative or basic clinical tasks (e.g., taking vital signs, preparing patients). They cannot perform invasive procedures, administer injections (beyond certain vaccinations under direct supervision), or engage in any activity that constitutes the practice of medicine or nursing. Delegation rules are strict; a licensed physician or APRN/PA under physician supervision must perform or directly supervise all medical procedures. For medspas, this means that procedures like Botox injections, dermal fillers, laser treatments, and IV therapy must be performed by or under the direct supervision of a licensed physician, APRN, or PA. The ASMB has issued guidance on medspa operations, emphasizing the need for appropriate supervision and adherence to professional scope of practice, often requiring the supervising physician to be physically present on-site during certain procedures.

Navigating business structuring in Arkansas requires careful adherence to the Corporate Practice of Medicine (CPOM) doctrine and fee-splitting prohibitions. For entities providing medical services, the Professional Corporation (PC) or Professional Limited Liability Company (PLLC) structure is essential. These entities must be owned exclusively by licensed professionals of the same profession (e.g., physicians owning a medical PC). Non-physician ownership or control of medical practices is generally prohibited. The PC-MSO (Professional Corporation – Management Services Organization) model is the most common compliant structure for attracting non-physician investment or for entities providing administrative support to multiple practices. In this model, the PC employs the physicians and delivers clinical services, while the MSO, which can be owned by non-physicians, provides non-clinical administrative and management services (e.g., billing, scheduling, IT, marketing, facilities management) to the PC under a Management Services Agreement (MSA). Key to compliance is ensuring the MSA clearly delineates responsibilities, preventing the MSO from exercising any control over clinical decision-making, physician employment, or the professional aspects of the practice. The MSO's compensation must be fair market value for the services rendered and not tied to patient referrals or a percentage of professional fees, to avoid violating fee-splitting prohibitions. Ark. Code Ann. § 17-95-401 prohibits fee-splitting, stating that no physician shall 'directly or indirectly share any part of his or her professional fees' with an unlicensed person. This extends to indirect arrangements, such as excessive management fees that effectively skim off professional revenue. Professional corporations are governed by Ark. Code Ann. § 4-29-301 et seq. for general professional corporations, and specific statutes for medical (Ark. Code Ann. § 17-95-101 et seq.) and dental (Ark. Code Ann. § 17-82-101 et seq.) professional entities. These statutes require that all shareholders be licensed professionals. When structuring ownership, it's crucial to identify the exact nature of services provided. If services are purely administrative or educational and do not involve direct patient care or medical judgment, a standard business entity (e.g., LLC, C-Corp) may be appropriate. However, any entity providing medical, dental, or nursing services, or employing individuals to do so, must comply with professional corporation statutes and the CPOM doctrine. For telehealth companies, this means the clinical arm must be physician-owned and operated, with a clear separation from any non-physician-owned technology or administrative platform.

Arkansas has seen several key regulatory developments and legislative actions impacting healthcare delivery, particularly in telehealth and scope of practice. Act 310 of 2021 was a landmark piece of legislation that permanently codified many of the telehealth flexibilities introduced during the COVID-19 public health emergency. It expanded the definition of telehealth and mandated reimbursement parity for telehealth services under Medicaid and commercial health plans, significantly boosting the viability of telehealth in the state. This act also clarified the modalities permitted for telehealth, reinforcing the use of synchronous audio-visual. Act 1083 of 2023 further addressed the scope of practice for Advanced Practice Registered Nurses (APRNs), making some adjustments to their prescriptive authority and collaborative practice agreement requirements, though it did not grant full practice authority. It aimed to streamline the process for APRNs to provide care while maintaining physician oversight. On the enforcement front, the Arkansas State Medical Board (ASMB) continues to actively monitor and enforce the Corporate Practice of Medicine (CPOM) doctrine, issuing advisories regarding compliant business structures, particularly for emerging models like medspas and direct-to-consumer telehealth platforms. There have been ongoing discussions and proposed legislation regarding the regulation of specific aesthetic procedures and IV therapy services, aiming to clarify supervision requirements and practitioner qualifications. Arkansas has also joined several interstate compacts to facilitate multi-state practice. It is a member of the Interstate Medical Licensure Compact (IMLC), allowing physicians licensed in a compact state to obtain expedited licensure in Arkansas. It is also part of the Nurse Licensure Compact (NLC), enabling registered nurses and licensed practical nurses to practice in Arkansas with a multi-state license from their home state. These compacts are crucial for telehealth providers seeking to expand their reach across state lines. Future legislative sessions are expected to continue addressing issues related to behavioral health access via telehealth, data privacy for health information, and potentially further refinements to the CPOM doctrine as new healthcare delivery models emerge.

For healthcare companies entering or expanding in Arkansas, a meticulous approach to compliance is paramount. Here's actionable guidance: 1. CPOM Compliance First: Immediately assess your ownership structure. If non-physicians own or control any entity providing medical services, you must implement a PC-MSO model. Ensure the Professional Corporation (PC) is physician-owned and operated, and the Management Services Organization (MSO) agreement strictly limits the MSO's role to non-clinical administrative services at fair market value. 2. Licensure is Non-Negotiable: All practitioners providing care to Arkansas residents must hold an active Arkansas license. For physicians, leverage the Interstate Medical Licensure Compact (IMLC) if eligible for expedited licensure. For nurses, ensure multi-state licensure under the Nurse Licensure Compact (NLC) or obtain a single-state Arkansas license. 3. Telehealth Protocol Development: Develop clear internal protocols for establishing practitioner-patient relationships via telehealth. Emphasize synchronous audio-visual for initial encounters. Ensure robust informed consent processes are in place, explicitly detailing telehealth risks and benefits. 4. Prescribing Policies: Implement strict prescribing policies, especially for controlled substances. For Schedule II and III controlled substances, an initial in-person exam or established in-person relationship is generally required. Mandate AR PMP checks for all Schedule II-IV prescriptions. 5. Scope of Practice Adherence: For mid-level providers (APRNs, PAs), ensure current, state-compliant collaborative or supervisory agreements are in place. Regularly review these agreements and ensure they reflect current practice and board regulations. For medspas, ensure a licensed physician, APRN, or PA is on-site or directly supervising all medical procedures as required by law. 6. Fee-Splitting Avoidance: Review all financial arrangements, particularly those involving referrals or revenue sharing, to ensure strict compliance with anti-fee-splitting laws. MSO fees must be fixed or based on fair market value for services, not a percentage of professional fees. 7. Documentation Excellence: Maintain thorough and accurate medical records for all telehealth encounters, meeting the same standards as in-person visits. This includes documentation of informed consent, assessment, diagnosis, treatment plan, and follow-up. Common pitfalls include assuming federal telehealth rules supersede state rules (they don't), underestimating CPOM enforcement, and failing to secure proper state licensure for all providers. Expect licensing to take several weeks to months, depending on the board and applicant completeness. Engage experienced legal counsel specializing in Arkansas healthcare law early in your expansion process.