North Carolina Healthcare
Compliance Guide

North Carolina presents a nuanced regulatory landscape for healthcare companies, balancing a generally pro-telehealth stance with robust professional licensure and corporate practice of medicine (CPOM) enforcement. The state has actively expanded telehealth access, particularly since the COVID-19 pandemic, making it an attractive market for virtual care providers. However, this expansion is tempered by strict adherence to established professional practice standards and a cautious approach to corporate involvement in clinical decision-making. Key regulatory bodies include the North Carolina Medical Board (NCMB), the North Carolina Board of Nursing (NCBON), the North Carolina Board of Pharmacy (NCBOP), and the North Carolina Department of Health and Human Services (NCDHHS). The business climate for healthcare operations is generally favorable, but companies must navigate a complex web of regulations, especially concerning ownership structures and scope of practice. Recent legislative actions have focused on solidifying telehealth parity, refining prescribing rules, and clarifying the roles of various healthcare professionals. For instance, the passage of S.L. 2021-110 (HB 277) made many pandemic-era telehealth flexibilities permanent, ensuring continued access to virtual care. While the state is receptive to innovative healthcare delivery models, it maintains a strong emphasis on patient safety, quality of care, and the integrity of the physician-patient relationship. Companies seeking to operate in North Carolina must prioritize meticulous compliance with licensure, CPOM, and prescribing regulations to mitigate legal and operational risks. The state's approach can be characterized as progressive in embracing technology but conservative in upholding traditional professional practice tenets.

North Carolina maintains a strong and actively enforced Corporate Practice of Medicine (CPOM) doctrine, prohibiting corporations and other non-professional entities from practicing medicine or employing physicians to provide medical services. The legal basis for North Carolina's CPOM doctrine is primarily derived from common law and reinforced by various statutes governing professional licensure. While there isn't a single overarching CPOM statute, the North Carolina Medical Practice Act, specifically N.C. Gen. Stat. § 90-18, states that 'no person shall practice medicine or surgery, or any of the branches thereof, or in any case attempt to prescribe, or prescribe and use, any drugs or remedies for the cure or relief of any bodily infirmity, illness, or disease of any kind, or in any way assume to be a physician or to practice medicine or surgery, or any of the branches thereof, without having first obtained a license or certificate of qualification from the North Carolina Medical Board.' This, combined with the prohibition against fee-splitting (N.C. Gen. Stat. § 90-15.1), forms the bedrock of the state's CPOM enforcement. Non-physicians are generally prohibited from owning entities that directly employ physicians or control clinical decision-making. Ownership structures are typically limited to professional corporations (PCs) or professional limited liability companies (PLLCs) where all owners and members, respectively, are licensed healthcare professionals in the same or closely related fields. For example, a medical PC must be owned solely by physicians. This significantly impacts telehealth companies, medspas, dental practices, and wellness clinics. Telehealth companies cannot directly employ North Carolina-licensed physicians unless the company itself is a properly formed North Carolina professional entity owned by licensed physicians. Similarly, medspas offering medical services (e.g., injectables, laser treatments) must be structured such that the medical practice component is owned and operated by a licensed physician, even if the aesthetic services are offered under a separate entity. Dental practices are subject to similar restrictions under the Dental Practice Act (N.C. Gen. Stat. § 90-29). Wellness clinics offering medical services (e.g., IV therapy, hormone therapy) must also adhere to these CPOM restrictions. The common compliant structure involves a 'friendly PC' model, where the professional entity (PC) is owned by a licensed physician, and a separate management services organization (MSO) provides administrative, non-clinical support services to the PC. The MSO can be non-physician owned. The MSO charges the PC a fair market value fee for these services, carefully avoiding any arrangement that could be construed as fee-splitting or control over clinical decisions. Any arrangement that allows a lay entity to control the practice of medicine, share in professional fees, or influence clinical judgment is strictly prohibited and subject to enforcement by the NCMB.

North Carolina has made significant strides in codifying telehealth regulations, particularly with the passage of S.L. 2021-110 (HB 277), which made permanent many of the telehealth flexibilities initially adopted during the COVID-19 public health emergency. This legislation affirms that a provider-patient relationship can be established via telehealth, provided it meets the same standards of care as an in-person encounter. The NCMB's position statement on Telemedicine (N.C. Admin. Code 21 NCAC 32 .0101(11)) emphasizes that the standard of care is the same regardless of the modality of care delivery. All modalities are permitted for establishing a provider-patient relationship and delivering care, including real-time audio-visual (video conferencing), real-time audio-only (telephone), and asynchronous (store-and-forward) technologies. However, the choice of modality must be clinically appropriate for the patient's condition and the services being rendered. For initial evaluations and complex conditions, video conferencing is generally preferred or required to ensure a thorough assessment. There are no specific telehealth registration requirements for providers beyond existing professional licensure in North Carolina. Providers must hold a valid North Carolina license for their respective profession (e.g., physician, NP, PA) to provide telehealth services to patients located in the state. Informed consent is a critical component of telehealth delivery. Providers must obtain informed consent from the patient, or the patient's legal representative, prior to initiating telehealth services. This consent should include information about the nature of telehealth, potential risks and benefits, confidentiality protections, and the patient's right to withdraw consent. Documentation of informed consent is required. There are no explicit geographic restrictions within North Carolina for telehealth services, meaning a licensed North Carolina provider can treat a patient located anywhere within the state. However, providers must ensure they are licensed in the state where the patient is physically located at the time of the telehealth encounter. Out-of-state providers must be licensed in North Carolina to treat North Carolina patients via telehealth, unless an exception applies (e.g., interstate compacts for certain professions).

North Carolina maintains strict regulations regarding prescribing, especially for controlled substances, which apply equally to telehealth and in-person encounters. The North Carolina Medical Board's position statement on Telemedicine (N.C. Admin. Code 21 NCAC 32 .0101(11)) explicitly states that prescribing decisions made via telehealth must meet the same standards of care as in-person prescribing. For controlled substances, a valid provider-patient relationship must be established, often requiring a comprehensive evaluation. All schedules of controlled substances (Schedules II, III, IV, and V) can be prescribed via telehealth, provided the prescribing clinician adheres to all state and federal regulations, including the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. This federal law generally requires an in-person medical evaluation before prescribing controlled substances via the internet, with certain exceptions, such as a legitimate medical purpose in the usual course of professional practice. North Carolina does not have specific state-level prohibitions on prescribing specific schedules via telehealth, but the clinical appropriateness and established patient relationship are paramount. Federal DEA requirements apply universally. Prescribers must be registered with the DEA and hold a valid North Carolina medical license. For telehealth, the DEA's temporary flexibilities during the COVID-19 PHE allowed for prescribing controlled substances without an initial in-person exam, but the future of these flexibilities beyond the PHE's expiration (or a potential new rule) remains a dynamic area. As of early 2025, a new federal rule is anticipated. North Carolina law mandates that prescribers check the North Carolina Controlled Substances Reporting System (CSPE) for Schedule II, III, and IV controlled substances prior to prescribing. N.C. Gen. Stat. § 90-113.74 requires prescribers to review a patient's CSPE history for the preceding 12 months before writing a new prescription for a targeted controlled substance, with some exceptions (e.g., hospice, single 7-day supply). There are no specific quantity or refill limitations imposed solely due to telehealth prescribing, beyond what applies to in-person prescribing (e.g., 30-day limits for Schedule II, specific refill rules for other schedules). Special rules apply to certain drug classes: for GLP-1s, testosterone, and stimulants, prescribers must ensure a thorough diagnostic workup, ongoing monitoring, and adherence to specific clinical guidelines, regardless of the modality. For example, prescribing stimulants for ADHD via telehealth requires careful consideration of diagnostic criteria and risk of diversion. The NCMB emphasizes that prescribing controlled substances without a proper physical examination and ongoing monitoring, especially for chronic conditions, is highly scrutinized.

North Carolina's scope of practice regulations for mid-level providers are well-defined but generally require various levels of supervision or collaboration. Nurse Practitioners (NPs) in North Carolina do not have full practice authority. They are required to practice under a 'supervising physician's approval and medical direction' as outlined in N.C. Gen. Stat. § 90-18.2. This involves a written supervisory arrangement, often referred to as a 'collaborative practice agreement' or 'supervisory agreement,' which must be filed with the North Carolina Medical Board and the North Carolina Board of Nursing. The agreement details the scope of practice for the NP, the methods of supervision, and the types of medical acts the NP is authorized to perform. The supervising physician must be readily available for consultation and must periodically review the NP's practice. Physician Assistants (PAs) also practice under the supervision of a licensed physician, as per N.C. Gen. Stat. § 90-18(c). A 'supervisory arrangement' must be established, outlining the PA's duties and the methods of supervision. The supervising physician must maintain direct and continuous supervision, though this does not necessarily mean constant physical presence. PAs can perform a broad range of medical services, including diagnosing, treating, and prescribing, as delegated by their supervising physician and within the PA's education, training, and experience. The NCMB provides specific rules for PA supervision (21 NCAC 32S .0201-.0208). Delegation rules for Medical Assistants (MAs), particularly in settings like medspas, are critical. MAs generally cannot perform tasks that require independent medical judgment or a license. Their role is typically limited to administrative and clinical support tasks that are delegated by a physician, NP, or PA and can be performed under direct supervision. In medspas, tasks such as injections (e.g., Botox, fillers), laser treatments, or IV insertions cannot be delegated to an MA. These procedures must be performed by a licensed physician, NP, or PA. The NCMB has issued guidance clarifying that certain procedures are inherently medical and cannot be delegated to unlicensed personnel. Any delegation must be within the delegating practitioner's scope of practice and the MA's training. Supervision requirements vary by profession and task. For NPs and PAs, the supervising physician must be available for consultation, review patient charts, and ensure appropriate care. For MAs, direct supervision by a licensed practitioner is often required for clinical tasks. North Carolina's regulatory bodies are vigilant in enforcing these scope of practice limitations to ensure patient safety and prevent the unlicensed practice of medicine.

Navigating business structures in North Carolina requires careful attention to the Corporate Practice of Medicine (CPOM) doctrine and anti-fee-splitting rules. The PC-MSO structure is the most common compliant model for healthcare businesses involving non-physician ownership or investment. In this model, the clinical services are provided by a Professional Corporation (PC) or Professional Limited Liability Company (PLLC) that is owned solely by licensed North Carolina physicians (or other licensed professionals for their respective practices, e.g., dentists for a dental PC). This 'friendly PC' employs the physicians and other licensed clinical staff. A separate entity, the Management Services Organization (MSO), provides all non-clinical, administrative, and management services to the PC. The MSO can be owned by non-physicians or investors. The MSO charges the PC a fair market value (FMV) fee for its services (e.g., billing, scheduling, IT, marketing, real estate, equipment). This structure is essential to avoid violating CPOM by ensuring that clinical decision-making and the practice of medicine remain solely within the professional entity. Fee-splitting rules are strictly enforced in North Carolina under N.C. Gen. Stat. § 90-15.1, which prohibits physicians from dividing fees with any person who has not rendered services in connection with the case. This means MSO fees must be fixed or based on a legitimate cost-plus or per-service basis, not a percentage of professional fees or revenue, as this could be construed as illegal fee-splitting. The MSO must not exert control over clinical judgment or patient care. Management Services Agreement (MSA) requirements are critical. The MSA between the PC and MSO must be a robust, arms-length agreement that clearly delineates the services provided by the MSO, the FMV compensation structure, and explicitly states that the PC retains sole control over all clinical decisions, hiring/firing of clinical staff, and patient care. The MSA should avoid any provisions that could imply the MSO is practicing medicine or dictating clinical policy. Professional corporation requirements (N.C. Gen. Stat. Chapter 55B) mandate that all shareholders of a professional corporation offering medical services must be licensed physicians. Similarly, for a PLLC, all members must be licensed physicians. This ensures that the ultimate control of the medical practice rests with licensed professionals. To structure ownership for compliance, companies must establish the PC as the clinical entity and the MSO as the administrative entity. Non-physician investors or owners would hold equity in the MSO, not the PC. Careful legal counsel is essential to draft the MSA, PC bylaws, and MSO operating agreements to ensure strict compliance with North Carolina's CPOM and anti-fee-splitting laws, mitigating risks of regulatory enforcement actions, fines, and license revocation.

North Carolina's regulatory landscape continues to evolve, with several key developments and pending legislative actions shaping the future of healthcare delivery. A significant recent development was the permanent adoption of many COVID-19 pandemic-era telehealth flexibilities through S.L. 2021-110 (HB 277), effective October 1, 2021. This law solidified payment parity for telehealth services and clarified that a provider-patient relationship can be established via telehealth, reinforcing the state's commitment to virtual care. In the 2023-2024 legislative session, there was continued discussion around scope of practice expansion for advanced practice registered nurses (APRNs). While full practice authority for NPs has been a perennial topic, no legislation granting it has passed as of early 2025. Bills often seek to remove the mandatory physician supervision requirement, but these have historically faced strong opposition from the medical community. This remains a key area to monitor. Another area of focus is interstate licensure compacts. North Carolina is a member of the Interstate Medical Licensure Compact (IMLC), facilitating expedited licensure for physicians in participating states. The state is also a member of the Nurse Licensure Compact (NLC) and the Physical Therapy Compact. There is ongoing legislative interest in joining other compacts, such as the Psychology Interjurisdictional Compact (PSYPACT), which would further streamline cross-state practice for certain professions. Regarding controlled substance prescribing via telehealth, North Carolina closely monitors federal developments. While DEA flexibilities allowed for prescribing controlled substances without an initial in-person exam during the COVID-19 PHE, the future of these rules is subject to new DEA regulations expected in 2025. North Carolina will likely align its state-level enforcement with federal guidance, but prescribers should remain vigilant for any state-specific interpretations or restrictions. The North Carolina Medical Board (NCMB) continues to issue guidance and enforcement actions related to CPOM, telehealth standards of care, and appropriate delegation of medical tasks, particularly in the medspa and wellness clinic sectors. Companies should regularly review NCMB advisories and disciplinary actions to understand current enforcement priorities. No major bills drastically altering CPOM or fee-splitting laws have been introduced or passed recently, indicating a stable, albeit strict, regulatory environment in these areas.

For healthcare companies entering North Carolina, a meticulous, phased approach to compliance is essential. Here's actionable guidance:1. Licensure First: Ensure all individual healthcare providers (physicians, NPs, PAs, etc.) are fully licensed by their respective North Carolina professional boards before providing any services to North Carolina patients. This includes obtaining DEA registration for controlled substance prescribers. For entities, register with the NC Secretary of State.2. CPOM Compliance: Immediately engage legal counsel specializing in North Carolina healthcare law to establish a compliant business structure. This almost invariably means a PC-MSO model. The PC must be owned by a NC-licensed physician, and the MSO (which can be investor-owned) provides only non-clinical services at fair market value. Avoid any arrangements that could be construed as fee-splitting or control over clinical decisions.3. Management Services Agreement (MSA): Draft a robust MSA between the PC and MSO that clearly defines roles, responsibilities, and compensation, ensuring the PC retains full clinical autonomy. This document is critical for demonstrating CPOM compliance.4. Telehealth Protocol Development: Implement comprehensive telehealth policies and procedures that align with NCMB guidelines, including informed consent, patient identification, privacy, and emergency protocols. Ensure appropriate technology is used for each modality.5. Prescribing Policies: Develop strict prescribing policies, especially for controlled substances, adhering to NC's CSPE requirements (N.C. Gen. Stat. § 90-113.74) and federal DEA rules. Emphasize the need for a legitimate provider-patient relationship and clinical appropriateness for all prescriptions.6. Scope of Practice Adherence: For NPs and PAs, ensure valid and filed supervisory agreements are in place. Strictly adhere to delegation rules for MAs, especially in medspa or wellness settings, ensuring no unlicensed personnel perform medical procedures.7. Documentation: Maintain thorough and accurate medical records for all patient encounters, whether in-person or via telehealth, meeting NC's record-keeping standards.8. Ongoing Monitoring: Regularly review NCMB, NCBON, and NCBOP advisories and enforcement actions. Appoint a dedicated compliance officer or engage external counsel for continuous monitoring of regulatory changes. Common pitfalls to avoid include: direct employment of physicians by a non-professional entity, fee-splitting arrangements (e.g., percentage-based MSO fees), inadequate supervision of mid-level providers, and prescribing controlled substances without proper patient evaluation or CSPE checks. Timeline expectations: Licensing individual providers can take 2-6 months depending on the board and applicant completeness. Business entity formation and MSA drafting typically take 1-3 months. Plan for at least 6-9 months from initial concept to full operational readiness to ensure comprehensive compliance.