Massachusetts Healthcare
Compliance Guide

Massachusetts presents a complex yet generally favorable regulatory environment for healthcare companies, particularly those leveraging telehealth. The Commonwealth has historically been progressive in its adoption of telehealth, driven by legislative actions that codified parity requirements and expanded access. Key regulatory bodies include the Massachusetts Board of Registration in Medicine (BORIM), the Board of Registration in Pharmacy, and various professional boards. The state's healthcare landscape is characterized by a strong emphasis on patient protection, quality of care, and robust oversight. Recent legislative efforts, notably Chapter 260 of the Acts of 2020, have cemented telehealth's role in healthcare delivery, mandating coverage parity and establishing a framework for its continued use post-pandemic. While generally supportive of innovation, Massachusetts maintains strict adherence to its Corporate Practice of Medicine (CPOM) doctrine, which necessitates careful structuring for non-physician-owned entities. The state also has stringent prescribing rules, particularly for controlled substances, and a well-defined scope of practice for various professionals. Companies looking to operate in Massachusetts must navigate these regulations with precision, understanding that while the state encourages access, it does so within a highly regulated framework designed to safeguard public health. The business climate is competitive, with a high concentration of academic medical centers and innovative healthcare startups, making compliance a critical differentiator.

Massachusetts maintains a robust Corporate Practice of Medicine (CPOM) doctrine, which generally prohibits corporations or other business entities from employing physicians or otherwise engaging in the practice of medicine. The legal basis for this prohibition is primarily derived from common law and public policy, reinforced by statutory provisions that define the practice of medicine and restrict who may engage in it. Specifically, Massachusetts General Laws (M.G.L.) Chapter 112, Section 2, defines the practice of medicine and limits licensure to natural persons. While there isn't a single overarching CPOM statute, the Board of Registration in Medicine (BORIM) has consistently interpreted and enforced this doctrine, viewing the employment of physicians by lay entities as an impermissible interference with the physician-patient relationship and clinical judgment. This means that non-physicians generally cannot own or control entities that directly provide medical services. Professional corporations (PCs) or professional limited liability companies (PLLCs) are the primary permitted ownership structures for medical practices, and these must be owned by licensed professionals. For telehealth companies, medspas, dental practices, and wellness clinics, this has significant implications. Direct employment of physicians by a non-professional entity is prohibited. Instead, these entities often utilize a Management Services Organization (MSO) model. Under this structure, the MSO (a non-professional entity) provides administrative, non-clinical services (e.g., billing, marketing, IT, real estate) to a physician-owned professional entity, which directly employs or contracts with the licensed medical professionals. The professional entity retains sole control over all clinical decisions, physician employment, and patient care. The MSO cannot share in professional fees, nor can it dictate clinical protocols. For dental practices, similar principles apply, with the Board of Registration in Dentistry enforcing the professional practice requirements. Medspas and wellness clinics offering medical services (e.g., injectables, laser treatments, IV therapy) must ensure that the medical component is delivered through a compliant professional entity, with appropriate physician oversight and delegation, and that the lay entity only provides non-clinical services. Any structure that allows non-licensed individuals to control or influence medical judgment or share in professional fees is at high risk of violating MA CPOM.

Massachusetts has established a comprehensive framework for telehealth, largely codified by Chapter 260 of the Acts of 2020 and further clarified by regulatory guidance. A provider-patient relationship can be established via telehealth without a prior in-person visit, provided the standard of care is met. This is explicitly stated in M.G.L. c. 175, § 47W, which mandates coverage for medically necessary telehealth services. All modalities are generally permitted, including live video (synchronous audio-visual), audio-only telephone (synchronous audio), and asynchronous store-and-forward technology, provided they are appropriate for the service and meet the standard of care. However, audio-only may have limitations for initial evaluations or certain complex conditions where visual cues are critical. There are no specific state-level telehealth registration requirements for providers beyond their standard professional licensure. Providers must be licensed in Massachusetts to provide telehealth services to patients located in the Commonwealth. Informed consent for telehealth is required. Providers must inform patients about the nature of telehealth services, potential risks and benefits, and confidentiality protections. While specific statutory language for telehealth consent is not overly prescriptive, BORIM guidance emphasizes the importance of ensuring patients understand the differences between in-person and telehealth care. There are no explicit geographic restrictions within Massachusetts for telehealth delivery; services can be provided to patients anywhere within the state. However, providers must ensure they are physically located in a jurisdiction where they are legally authorized to practice when delivering services to MA patients. The regulations emphasize that telehealth services must meet the same standard of care as in-person services. Payers are required to reimburse for telehealth services at the same rate as in-person services for the same service, a parity requirement that significantly supports telehealth adoption. (M.G.L. c. 175, § 47W; M.G.L. c. 176A, § 8Y; M.G.L. c. 176B, § 4Y).

Massachusetts has stringent rules for prescribing, particularly for controlled substances via telehealth. For non-controlled substances, a valid provider-patient relationship established via telehealth is sufficient for prescribing. However, for controlled substances, the landscape is more complex. While the federal Ryan Haight Act generally requires an in-person medical evaluation prior to prescribing controlled substances, the COVID-19 public health emergency (PHE) waivers allowed for exceptions. Post-PHE, the DEA has extended certain flexibilities. As of early 2025-2026, the DEA's proposed rules generally require an in-person visit or a referral from a practitioner who has conducted an in-person visit for initial prescriptions of Schedule II-V controlled substances, with some exceptions for buprenorphine for opioid use disorder. Massachusetts state law generally aligns with federal requirements. M.G.L. c. 94C, § 19, governs prescribing of controlled substances. The Massachusetts Board of Registration in Medicine (BORIM) has issued guidance emphasizing that all prescribing, whether in-person or via telehealth, must adhere to the standard of care and be medically necessary. For Schedule II-V controlled substances, the prescriber must hold a valid Massachusetts Controlled Substance Registration (MCSR) and a federal DEA registration. Prescription Drug Monitoring Program (PDMP) checking is mandatory for all Schedule II-V controlled substances prior to the first prescription, and periodically thereafter, as per 105 CMR 700.000. There are specific quantity and refill limitations for controlled substances; for instance, Schedule II substances often have a 30-day supply limit with no refills, and Schedule III-V may have up to five refills within six months. Special rules apply to specific drug classes: GLP-1 agonists (e.g., for weight loss) are not controlled substances but require careful medical evaluation and monitoring. Testosterone (a Schedule III controlled substance) and stimulants (Schedule II) require strict adherence to controlled substance prescribing rules, including thorough documentation of medical necessity, risk assessment, and PDMP checks. Prescribing of benzodiazepines and opioids also faces heightened scrutiny, with specific dosage and duration limits often recommended or mandated by BORIM guidance. Prescribers must be particularly diligent in documenting the medical necessity and appropriateness of all controlled substance prescriptions issued via telehealth.

Massachusetts grants significant, though not full, practice authority to Nurse Practitioners (NPs) and Physician Assistants (PAs), while maintaining specific supervision and delegation requirements for other mid-level providers and medical assistants. Nurse Practitioners (NPs): Massachusetts NPs, specifically Certified Nurse Practitioners (CNPs), are authorized to practice independently to a substantial degree. M.G.L. c. 112, § 80B, allows CNPs to diagnose, treat, and prescribe medications, including controlled substances, without physician supervision, provided they have completed a minimum of two years or 2,000 hours of supervised practice as a CNP. After meeting this requirement, they can practice independently, though they are still encouraged to collaborate with physicians. This is often referred to as 'independent practice' or 'full practice authority' in practice, although the statute uses the term 'collaboration.' Physician Assistants (PAs): PAs in Massachusetts operate under a physician supervision model, but with considerable autonomy within that framework. M.G.L. c. 112, § 9E, outlines the scope of practice for PAs, which includes performing medical services delegated by a supervising physician. The supervising physician is responsible for the PA's activities, but direct, on-site supervision is not always required. The degree of supervision is determined by the supervising physician based on the PA's experience and the complexity of the patient's condition. PAs can prescribe medications, including controlled substances, under the supervision and delegation of their supervising physician. Other Mid-Level Providers: Certified Registered Nurse Anesthetists (CRNAs) also have a broad scope, often practicing with significant autonomy. Certified Nurse Midwives (CNMs) practice under a similar framework to CNPs. Medical Assistants (MAs) in Medspas: The delegation rules for MAs are crucial for medspas. M.G.L. c. 112, § 2 defines the practice of medicine. Unlicensed personnel, including MAs, cannot perform medical acts that constitute the practice of medicine. In medspas, this means MAs cannot perform procedures like injectables (Botox, fillers), advanced laser treatments, or IV therapy. These procedures must be performed by a licensed physician, NP, PA, or registered nurse (RN) acting under appropriate delegation and supervision. MAs can assist with administrative tasks, patient intake, and certain non-invasive procedures that do not require medical judgment or licensure. Any delegation of medical tasks to MAs must be explicitly permitted by their scope of practice and the supervising clinician's license, and typically requires direct supervision for any clinical tasks. The Board of Registration in Medicine and the Board of Registration in Nursing frequently issue guidance on appropriate delegation.

Navigating Massachusetts's Corporate Practice of Medicine (CPOM) doctrine is paramount for business structuring. The Professional Corporation (PC) or Professional Limited Liability Company (PLLC) is the required entity type for licensed professionals providing medical services. These entities must be owned solely by licensed professionals (e.g., physicians, dentists, optometrists) who are licensed in Massachusetts. This means non-physicians cannot hold ownership stakes in the professional entity that directly provides patient care. The most common compliant structure, especially for telehealth companies, medspas, and multi-state operations, is the PC-MSO (Professional Corporation - Management Services Organization) model. In this model: 1. Professional Entity (PC/PLLC): This entity, owned by licensed MA practitioners, holds the medical licenses, employs or contracts with clinical staff (physicians, NPs, PAs), and directly provides all clinical services. It maintains sole control over clinical decision-making, patient care, and professional employment. 2. Management Services Organization (MSO): This entity, which can be owned by non-physicians or investors, provides all non-clinical, administrative, and business support services to the professional entity. These services typically include billing, scheduling, marketing, IT, real estate, equipment, and human resources for non-clinical staff. The relationship between the MSO and the PC is governed by a comprehensive Management Services Agreement (MSA). Key requirements for the MSA include: - Fair Market Value (FMV): All fees paid by the PC to the MSO must be at fair market value for the services rendered. This is critical to avoid illegal fee-splitting and kickback concerns. - No Control over Clinical Care: The MSA must explicitly state that the MSO has no control or influence over the clinical practice of medicine, diagnosis, treatment, or professional judgment. - No Fee-Splitting: The MSO cannot receive a percentage of professional fees. Compensation must be based on a fixed fee, cost-plus, or other FMV-based arrangement that is not tied to the volume or value of referrals or professional services. M.G.L. c. 112, § 2, prohibits fee-splitting by physicians. For dental practices, similar rules apply, often requiring a Dental Professional Corporation. For medspas and wellness clinics, the medical services (e.g., injectables, IVs) must be provided by a PC/PLLC, while the MSO handles the spa-like, non-medical aspects. Careful attention to the MSA and strict separation of clinical and administrative functions are essential to mitigate CPOM risks in Massachusetts.

Massachusetts continues to evolve its healthcare regulatory landscape, with several key developments and potential changes on the horizon for 2025-2026. Telehealth Parity Permanence: While Chapter 260 of the Acts of 2020 largely cemented telehealth parity, there are ongoing discussions and potential legislative fine-tuning regarding specific service types, modalities, and reimbursement rates, particularly for audio-only services post-PHE. The state legislature may consider further clarifying statutes to ensure long-term stability and expand access. Behavioral Health Integration: There's a strong legislative and regulatory push towards integrating behavioral health services, including through telehealth. Expect continued efforts to streamline licensing, enhance reimbursement for telemental health, and address workforce shortages. Controlled Substance Prescribing: The federal DEA's final rules on telehealth prescribing of controlled substances post-PHE will significantly impact Massachusetts prescribers. While the DEA has extended flexibilities, the eventual permanent rule will dictate the necessity of in-person evaluations. Massachusetts boards will likely issue updated guidance to align with federal mandates. Interstate Licensure Compacts: Massachusetts is not currently a member of the Interstate Medical Licensure Compact (IMLC) or the APRN Compact. There has been legislative interest in joining these compacts to facilitate multi-state practice, particularly for telehealth. Bills related to compact participation may be introduced or revisited in upcoming legislative sessions, which would significantly ease licensing burdens for providers. Enforcement Trends: The Board of Registration in Medicine (BORIM) and other professional boards continue to focus on patient safety, standard of care violations, and opioid prescribing practices. Expect continued enforcement actions related to inappropriate prescribing, particularly for stimulants and opioids, and any perceived circumvention of CPOM rules. Data Privacy and Security: With increasing telehealth adoption, there's growing attention on data privacy and security. While HIPAA remains the primary federal standard, Massachusetts has its own robust data privacy laws (e.g., M.G.L. c. 93H), and future legislation may further strengthen protections for patient health information in a digital environment.

For healthcare companies entering or expanding in Massachusetts, a meticulous, multi-faceted approach to compliance is essential. 1. Establish Compliant Business Structure: Immediately engage legal counsel to set up a compliant PC-MSO structure. Ensure the Professional Entity (PC/PLLC) is owned by MA-licensed professionals and the Management Services Agreement (MSA) is at Fair Market Value, avoids fee-splitting, and clearly delineates clinical and administrative responsibilities. 2. Provider Licensing: All providers must be licensed in Massachusetts. Initiate licensing applications well in advance, as processing times can vary (typically 3-6 months for physicians, NPs, PAs). Verify existing licenses and ensure they are active and in good standing. 3. Telehealth Protocol Development: Develop comprehensive telehealth protocols that meet MA standards of care. This includes establishing a valid provider-patient relationship, obtaining informed consent, selecting appropriate modalities, and ensuring patient data privacy and security (HIPAA and MA-specific requirements). 4. Controlled Substance Compliance: For any controlled substance prescribing, ensure all providers have valid MA Controlled Substance Registrations (MCSR) and DEA registrations. Implement mandatory PDMP checks and adhere strictly to quantity, refill, and documentation requirements, especially for Schedule II-V substances. Stay updated on federal DEA telehealth prescribing rules. 5. Scope of Practice Adherence: Clearly define and enforce the scope of practice for all clinical staff (physicians, NPs, PAs, RNs, MAs). Ensure proper supervision and delegation protocols are in place, particularly for NPs practicing independently and PAs under physician supervision. For medspas, ensure only licensed professionals perform medical procedures. 6. Payer Enrollment & Reimbursement: Understand MA's telehealth parity laws and ensure proper credentialing with all relevant payers to secure reimbursement. 7. Ongoing Monitoring: Implement a robust compliance program with regular audits, staff training, and a mechanism to stay abreast of evolving state and federal regulations. Common Pitfalls to Avoid: - Ignoring CPOM: Attempting to directly employ physicians or allowing non-physicians to control clinical decisions. - Improper Fee-Splitting: Structuring MSO fees as a percentage of professional revenue. - Inadequate Informed Consent: Failing to properly inform patients about telehealth risks and benefits. - Non-compliant Prescribing: Prescribing controlled substances without proper evaluation, PDMP checks, or adherence to state/federal limits. - Unlicensed Practice: Allowing providers to practice without MA licensure or outside their defined scope. Timeline Expectations: Licensing can take several months. Business entity formation and MSA drafting typically take 4-8 weeks. Payer enrollment can take 3-6 months. Plan for a minimum of 6-9 months for full operational readiness.