Kentucky Healthcare
Compliance Guide

Kentucky presents a moderately complex, yet increasingly accommodating, regulatory landscape for healthcare companies, particularly those leveraging telehealth. The state has made significant strides in codifying telehealth services, moving beyond pandemic-era emergency measures to establish a more permanent framework. Key regulatory bodies include the Kentucky Board of Medical Licensure (KBML), the Kentucky Board of Nursing (KBN), the Kentucky Board of Pharmacy (KBP), and the Kentucky Office of Inspector General. The overall business climate for healthcare operations is generally favorable, but strict adherence to professional licensing, corporate practice of medicine (CPOM), and prescribing regulations is paramount. Recent legislative actions, particularly Senate Bill 112 (2020) and subsequent amendments, have solidified telehealth parity and expanded access, making Kentucky an attractive market for virtual care providers. However, the state maintains a cautious approach to certain aspects, such as controlled substance prescribing via telehealth and the corporate ownership of medical practices. Companies expanding into Kentucky must navigate these nuances carefully, ensuring their operational models align with state statutes and board regulations to avoid compliance pitfalls. While the state has embraced technology in healthcare delivery, the foundational principles of patient safety, professional oversight, and the integrity of the physician-patient relationship remain central to its regulatory philosophy. Understanding the interplay between these elements is crucial for successful and compliant operation within the Commonwealth.

Kentucky maintains a robust Corporate Practice of Medicine (CPOM) doctrine, which generally prohibits corporations, lay entities, or non-licensed individuals from employing physicians or owning medical practices. The legal basis for Kentucky's CPOM doctrine is primarily derived from common law principles and reinforced by various statutes that define the practice of medicine and prohibit fee-splitting or the unlicensed practice of a profession. While there isn't a single overarching CPOM statute, the Kentucky Revised Statutes (KRS) Chapter 311, governing physicians, and KRS Chapter 313, governing dentists, implicitly uphold the doctrine by reserving the practice of these professions to licensed individuals. For instance, KRS 311.560 defines the practice of medicine, and KRS 311.590 prohibits the unlicensed practice. This framework implies that only licensed professionals or professional entities owned by licensed professionals can provide medical services. Consequently, non-physicians generally cannot own healthcare businesses that directly provide medical services. This significantly impacts business structuring for telehealth companies, medspas, dental practices, and wellness clinics. For telehealth companies, this means that the entity directly employing or contracting with physicians to provide medical services must typically be a professional service corporation (PSC) or professional limited liability company (PLLC) owned by licensed physicians. Non-physician owned management service organizations (MSOs) can provide administrative and non-clinical services to these professional entities, but they cannot control clinical decision-making, physician employment, or revenue generated from professional services. Medspas, dental practices, and IV therapy clinics face similar restrictions. The licensed professional (e.g., physician, dentist, APRN) must maintain ultimate clinical and financial control over the professional services rendered. This often necessitates a 'friendly physician' model or a robust MSO-PSC structure where the MSO provides legitimate administrative services for fair market value, distinct from the professional services. Any arrangement that could be construed as fee-splitting, where a non-licensed entity receives a percentage of professional fees, is highly scrutinized and generally prohibited under KRS 311.595 and various board regulations. The KBML has historically taken a strong stance against arrangements that appear to circumvent CPOM, emphasizing that the professional judgment of a licensee must remain uninfluenced by lay control. Therefore, careful structuring and strict adherence to the MSO model's boundaries are essential for compliance in Kentucky.

Kentucky has established a comprehensive framework for telehealth services, moving beyond emergency measures to permanently integrate virtual care. The foundational legislation is Senate Bill 112 (2020), codified primarily in KRS 304.17A-138 and KRS 205.559, which mandates coverage parity for telehealth services and defines 'telehealth' broadly. A provider-patient relationship can be established via telehealth, provided it meets the standard of care that would apply to an in-person encounter. This means that a prior in-person examination is generally not required to initiate care, but the provider must use appropriate clinical judgment to determine if telehealth is suitable for the patient's condition. All modalities are generally permitted, including real-time audio-visual (video conferencing), real-time audio-only (telephone), and asynchronous (store-and-forward) technologies. However, the specific modality chosen must be clinically appropriate and sufficient to meet the standard of care for the service being rendered. For instance, diagnosing complex conditions or prescribing certain medications may require video interaction. There are no specific telehealth registration requirements for providers beyond their standard professional licensure in Kentucky. However, out-of-state providers must be licensed in Kentucky to provide services to Kentucky patients, unless they qualify under specific interstate compacts (e.g., Interstate Medical Licensure Compact, Nurse Licensure Compact). Informed consent is a critical component of telehealth in Kentucky. KRS 304.17A-138(1)(d) requires that a healthcare provider obtain informed consent from a patient prior to providing telehealth services. This consent must include information about the nature of telehealth, potential risks and benefits, and patient rights. The consent should be documented in the patient's medical record. There are generally no geographic restrictions within Kentucky for telehealth services, meaning a provider licensed in Kentucky can serve patients anywhere within the state. However, providers should be mindful of their own licensing board's specific regulations, as some may have additional guidance. For example, the Kentucky Board of Medical Licensure (KBML) provides detailed guidance in its position statements regarding the appropriate use of telehealth technologies and the establishment of a legitimate physician-patient relationship, emphasizing that the same standards of care apply regardless of the modality of service delivery.

Kentucky maintains stringent rules for prescribing controlled substances via telehealth, particularly for Schedule II drugs. While the federal Ryan Haight Act waiver during the COVID-19 Public Health Emergency allowed for prescribing controlled substances without an initial in-person visit, that waiver has expired, and the DEA is in the process of finalizing new rules. As of early 2025-2026, Kentucky generally aligns with the federal requirement that an initial in-person examination is required for the prescription of Schedule II controlled substances via telehealth, absent specific exceptions or a subsequent federal waiver. For Schedule III-V controlled substances, an initial in-person examination may not be strictly required if a legitimate physician-patient relationship has been established through appropriate telehealth modalities (e.g., real-time audio-visual interaction) and the provider has conducted an adequate medical evaluation. However, the Kentucky Board of Medical Licensure (KBML) emphasizes that the standard of care for prescribing controlled substances via telehealth is identical to in-person care. This includes comprehensive patient evaluation, medical record documentation, and appropriate follow-up. All prescribers of controlled substances in Kentucky are required to register with and utilize the Kentucky All Schedule Prescription Electronic Reporting (KASPER) system, which is the state's Prescription Drug Monitoring Program (PDMP). KRS 218A.202 mandates that prescribers check KASPER prior to prescribing any Schedule II, III, IV, or V controlled substance and periodically thereafter. Failure to do so can result in disciplinary action. There are no specific quantity or refill limitations unique to telehealth prescribing beyond what applies to in-person prescribing, which are often dictated by the specific drug class and medical necessity. However, providers should exercise extreme caution with high-risk medications. For specific drug classes like GLP-1s, testosterone, or stimulants, while not all are controlled substances, their prescription via telehealth still requires a thorough medical evaluation, appropriate diagnostic testing, and ongoing monitoring to meet the standard of care. For example, GLP-1s for weight loss require a comprehensive assessment of patient health, comorbidities, and monitoring for side effects. Testosterone therapy requires baseline and ongoing lab work. Stimulants, being Schedule II, are subject to the stricter in-person examination requirements for initial prescription. The KBML's position statements provide crucial guidance on responsible prescribing practices, including the use of telehealth.

Kentucky has a well-defined, though evolving, framework for the scope of practice for Advanced Practice Registered Nurses (APRNs), Physician Assistants (PAs), and other mid-level providers. Advanced Practice Registered Nurses (APRNs) in Kentucky do not have full practice authority. While they have significant autonomy, they operate under a 'collaborative agreement' or 'collaborative practice agreement' with a physician, as outlined in KRS 314.042. This agreement defines the scope of practice for the APRN, the types of services they can provide, and the protocols for consultation and referral. It must be filed with the Kentucky Board of Nursing (KBN). The agreement specifies the physician's responsibility for consultation and referral, but it does not require direct supervision for every patient encounter. APRNs can prescribe legend drugs and controlled substances (Schedules II-V) under their collaborative agreement, provided they have prescriptive authority granted by the KBN. Physician Assistants (PAs) in Kentucky practice under the supervision of a licensed physician, as governed by KRS 311.840 to 311.862 and regulations from the Kentucky Board of Medical Licensure (KBML). A PA's scope of practice is determined by the supervising physician and the specific practice setting, and it must be within the supervising physician's scope of practice. PAs can perform medical services delegated by their supervising physician, which may include diagnosing, treating, and prescribing medications (including controlled substances, Schedules II-V) under the physician's supervision and within the parameters of a supervision agreement filed with the KBML. Direct, on-site supervision is not always required, but the physician must be readily available for consultation. Medical Assistants (MAs) in medspas and other clinical settings operate under the direct supervision and delegation of a licensed physician or other qualified practitioner (e.g., APRN, PA). Their scope of practice is limited to administrative and delegated clinical tasks that do not require independent medical judgment. They cannot perform procedures that constitute the practice of medicine or nursing, such as injections (unless specifically trained and delegated under direct supervision for routine tasks like vaccine administration, which is generally not applicable to aesthetic injectables), or independent patient assessment. Delegation rules are strict; the delegating practitioner retains full responsibility for the MA's actions. Any aesthetic procedure involving penetration of the skin or requiring medical judgment must be performed by a licensed professional within their scope of practice. For all mid-level providers, the overarching principle is that their practice must be consistent with their education, training, and competence, and always under the appropriate level of physician collaboration or supervision as mandated by Kentucky law and their respective licensing boards.

Navigating business structure in Kentucky requires careful attention to the Corporate Practice of Medicine (CPOM) doctrine and fee-splitting rules. The most common compliant structure for healthcare businesses involving non-physician ownership or management is the Professional Corporation (PC) or Professional Limited Liability Company (PLLC) / Management Service Organization (MSO) model. In this model, the clinical services are provided by a PC or PLLC owned solely by licensed Kentucky physicians (or other licensed professionals, depending on the service, e.g., dentists for dental practices). This entity directly employs or contracts with other licensed providers (e.g., APRNs, PAs) to deliver patient care. The PC/PLLC is responsible for all clinical decisions, physician employment, and revenue generated from professional services. The Management Service Organization (MSO) is a separate, non-clinical entity that can be owned by non-physicians. The MSO provides administrative, non-clinical services to the PC/PLLC, such as billing, marketing, IT, human resources, facilities management, and equipment leasing. The MSO charges the PC/PLLC a fair market value (FMV) fee for these services, typically a fixed fee or a cost-plus arrangement, but crucially, not a percentage of professional fees. Fee-splitting is strictly prohibited in Kentucky, as per KRS 311.595, which states that no physician shall divide any fee or compensation received for professional services with any person, firm, association, or corporation. This prohibition is a cornerstone of the CPOM doctrine and directly impacts MSO arrangements. The MSO's compensation must be for legitimate, non-clinical services at FMV and cannot be tied to the volume or value of referrals or professional services rendered by the PC/PLLC. Professional Corporation requirements in Kentucky dictate that only licensed professionals can own shares in a PC or PLLC providing professional services. For medical practices, this means only physicians can be shareholders of a medical PC. The name of the PC must also comply with state regulations, typically including words like 'P.S.C.' or 'PLLC'. To structure ownership for compliance, non-physician investors or entrepreneurs must limit their involvement to the MSO side, providing non-clinical support. They cannot have direct or indirect control over clinical decision-making, physician employment, or the professional revenue stream of the PC/PLLC. All agreements, particularly the Management Services Agreement (MSA) between the MSO and the PC/PLLC, must be meticulously drafted to ensure clear separation of clinical and non-clinical roles, FMV compensation, and compliance with anti-kickback statutes and Stark Law principles, where applicable. Regular legal review of these structures is essential to adapt to evolving regulatory interpretations and enforcement trends.

Kentucky's regulatory landscape continues to evolve, with several key developments impacting telehealth, CPOM, and prescribing. While specific bill numbers for 2025-2026 legislative sessions are speculative, trends from 2024 indicate continued refinement rather than radical overhaul. Expect ongoing legislative efforts to clarify and expand telehealth access, particularly regarding reimbursement parity and the types of services eligible for virtual delivery. There's a strong likelihood of legislative action addressing the post-PHE federal controlled substance prescribing rules, potentially seeking state-specific solutions or advocating for federal clarity. The Kentucky Board of Medical Licensure (KBML) and Kentucky Board of Nursing (KBN) are expected to issue updated guidance or regulations concerning the use of AI in healthcare, remote patient monitoring, and the delegation of tasks in aesthetic medicine, especially concerning medspas. Enforcement actions by the KBML and KBN have consistently focused on unlicensed practice, improper delegation, and violations of the Corporate Practice of Medicine, particularly in the medspa and wellness clinic sectors. Cases often involve non-physician ownership or control over medical practices, or instances where medical assistants perform procedures outside their scope. Regarding interstate compacts, Kentucky is a member of the Interstate Medical Licensure Compact (IMLC), allowing eligible physicians to obtain expedited licensure. It is also a member of the Nurse Licensure Compact (NLC), facilitating multi-state practice for eligible registered nurses and licensed practical nurses. Participation in these compacts significantly streamlines multi-state licensure for providers. There's potential for Kentucky to explore participation in other compacts, such as the Psychology Interjurisdictional Compact (PSYPACT) or the Physical Therapy Compact, to further expand access to specialized telehealth services. Companies should monitor the Kentucky General Assembly's legislative tracker and the official websites of the KBML, KBN, and Kentucky Board of Pharmacy for the most current regulatory changes and enforcement trends.

For healthcare companies entering or expanding in Kentucky, a meticulous, multi-faceted compliance approach is essential. Here's actionable guidance:1. Legal Structure First: Before any operations, establish a compliant PC/PLLC-MSO structure. Ensure the PC/PLLC is owned by Kentucky-licensed professionals and the MSO's services are clearly defined and compensated at fair market value. Avoid any direct or indirect non-physician control over clinical decisions or professional fee splitting.2. Licensure is Non-Negotiable: All providers rendering services to Kentucky patients must be licensed in Kentucky. For physicians and nurses, leverage interstate compacts (IMLC, NLC) where applicable for expedited licensure. Initiate licensure applications well in advance, as processing times can vary (typically 2-4 months).3. Telehealth Protocol Development: Implement comprehensive telehealth protocols covering patient intake, informed consent (documented), modality selection, emergency protocols, and patient data privacy (HIPAA compliance). Ensure your EMR/EHR system is compliant with Kentucky's medical record requirements.4. Prescribing Best Practices: For controlled substances, assume an initial in-person exam is required for Schedule II drugs, absent specific federal or state waivers. Always check KASPER before prescribing any controlled substance. Train providers on Kentucky-specific prescribing guidelines and the appropriate use of telehealth for medication management.5. Scope of Practice Adherence: Clearly define and enforce the scope of practice for all providers (APRNs, PAs, MAs) based on Kentucky statutes and board regulations. Ensure collaborative agreements for APRNs and supervision agreements for PAs are in place, filed with the respective boards, and regularly reviewed. For medspas, ensure all invasive procedures are performed by appropriately licensed and delegated professionals.6. Compliance Officer/Program: Designate a compliance officer and establish a robust compliance program that includes regular training, auditing, and a mechanism for reporting and addressing compliance concerns.7. Local Counsel Engagement: Engage experienced Kentucky healthcare counsel early in the process. They can provide invaluable guidance on state-specific nuances, draft compliant agreements, and assist with board inquiries.Common pitfalls include underestimating CPOM enforcement, inadequate provider licensure, non-compliant MSO agreements (especially concerning fee-splitting), and insufficient documentation for telehealth encounters. Timeline expectations for full operational setup, including licensure and legal structuring, can range from 6 to 12 months, depending on the complexity of the services and the number of providers.