Pennsylvania Healthcare
Compliance Guide

Pennsylvania presents a complex yet generally accommodating regulatory landscape for healthcare companies, balancing patient access with robust oversight. The state has made significant strides in codifying telehealth regulations, particularly following the COVID-19 pandemic, moving from temporary waivers to more permanent statutory frameworks. Key regulatory bodies include the Pennsylvania Department of Health (DOH), the State Board of Medicine (SBOM), the State Board of Osteopathic Medicine (SBOM), the State Board of Nursing, and the State Board of Pharmacy. These boards actively interpret and enforce regulations pertaining to licensure, scope of practice, and professional conduct. The general business climate for healthcare operations is cautious, largely due to the state’s well-established Corporate Practice of Medicine (CPOM) doctrine, which restricts non-physician ownership and control over medical practices. However, the state has shown willingness to adapt, as evidenced by Act 112 of 2022, which codified many telehealth flexibilities. Companies seeking to operate in Pennsylvania must navigate these complexities, ensuring strict adherence to licensure requirements, professional practice standards, and business structuring limitations. The state's approach prioritizes patient safety and physician autonomy, making a thorough understanding of its CPOM and professional licensing laws paramount for any healthcare entity, particularly those leveraging telehealth or expanding into new service lines like medspas or wellness clinics. Recent legislative efforts continue to refine these areas, with ongoing discussions around scope of practice for advanced practice providers and further clarification on telehealth reimbursement and interstate practice.

Pennsylvania maintains a robust and actively enforced Corporate Practice of Medicine (CPOM) doctrine, making it a restrictive state for non-physician ownership and control of medical practices. The legal basis for Pennsylvania's CPOM stems primarily from common law principles and judicial interpretations, reinforced by various professional practice acts and regulations that mandate medical services be rendered by licensed professionals and prohibit fee-splitting. While there isn't a single overarching CPOM statute, the State Board of Medicine and State Board of Osteopathic Medicine consistently interpret their respective practice acts (e.g., the Medical Practice Act of 1985, 63 P.S. § 422.1 et seq.) as prohibiting corporations or other unlicensed entities from employing physicians or controlling the delivery of medical care. This means that only licensed physicians or professional corporations/associations owned and controlled by licensed physicians can practice medicine. Non-physicians are generally prohibited from owning or exercising control over entities that provide medical services. This extends to dental practices (Dental Law, 63 P.S. § 120 et seq.), chiropractic practices (Chiropractic Practice Act, 63 P.S. § 625.101 et seq.), and other licensed healthcare professions. For telehealth companies, medspas, and wellness clinics, this has significant implications. An MSO (Management Services Organization) model is typically necessary, where a separate, physician-owned professional entity (PC or P.C.A.) employs the licensed medical providers and delivers clinical services, while the MSO provides administrative and non-clinical support. The MSO cannot dictate clinical decisions, set physician compensation based on referrals, or engage in prohibited fee-splitting. Management Services Agreements (MSAs) must be carefully drafted to ensure the MSO's role is purely administrative and does not infringe upon the professional entity's independent medical judgment. Any arrangement where a lay entity directly or indirectly controls the medical practice, employs physicians, or shares in professional fees is likely to be deemed a violation of CPOM. Enforcement can lead to license revocation, civil penalties, and even criminal charges for the unlicensed practice of medicine. Therefore, careful structuring with experienced legal counsel is essential to avoid CPOM violations in Pennsylvania.

Pennsylvania has largely codified its telehealth regulations, establishing a clear framework for virtual care. The provider-patient relationship can generally be established via telehealth, provided the standard of care is met and the practitioner is licensed in Pennsylvania. Act 112 of 2022, amending Title 35 (Health and Safety) of the Pennsylvania Consolidated Statutes, defines 'telehealth' as the use of electronic technologies or modalities to deliver health care services at a distance. Permitted modalities include real-time, interactive audio and video technology. Asynchronous store-and-forward technology is also permitted, provided it meets the standard of care and sufficient information is collected to make an informed diagnosis and treatment plan. Audio-only telephone calls are generally permitted for established patients or for certain follow-up care, but initial evaluations often require a video component to ensure adequate assessment. There are no specific telehealth registration requirements for providers beyond their standard professional licensure in Pennsylvania. However, out-of-state providers must be licensed in Pennsylvania to provide services to patients located in the state, unless an interstate compact (like IMLC) or a specific exception applies. Informed consent for telehealth is mandatory and must include, at a minimum, information about the services to be provided, the technology to be used, privacy and security measures, potential risks and benefits, and alternative care options. The consent must be documented in the patient's medical record. There are no specific geographic restrictions within Pennsylvania for telehealth services, meaning a provider licensed in PA can treat a patient located anywhere within the state. However, providers must ensure they comply with the laws of the patient's location, which in this case would be Pennsylvania law. Reimbursement for telehealth services is generally on par with in-person services for commercial insurers and Medicaid, following the passage of Act 112.

Pennsylvania's prescribing rules for telehealth largely align with in-person prescribing, with specific considerations for controlled substances. For non-controlled substances, prescriptions can be issued via telehealth if a valid patient-provider relationship has been established and the standard of care is met. For controlled substances, Pennsylvania generally permits prescribing via telehealth, including Schedules II-V, provided the practitioner has conducted an appropriate medical evaluation, which typically requires an in-person examination or a real-time interactive audio-visual encounter. The federal Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires an in-person medical evaluation before prescribing controlled substances via the internet, but the public health emergency (PHE) waivers allowed for exceptions. Post-PHE, the DEA has issued proposed rules that would largely reinstate the in-person exam requirement for initial controlled substance prescriptions via telehealth, with some exceptions. Pennsylvania's State Board of Medicine and State Board of Osteopathic Medicine regulations emphasize that prescribing controlled substances via telehealth must adhere to the same standards as in-person care, including a thorough patient evaluation and medical record documentation. Practitioners prescribing controlled substances must be registered with the Pennsylvania Department of Health and the DEA. Pennsylvania mandates the use of the Prescription Drug Monitoring Program (PDMP) for all Schedule II-V controlled substances. Before prescribing, dispensing, or administering a controlled substance, a prescriber or dispenser must query the PDMP database for information regarding the patient. This is codified under 35 P.S. § 872.4. There are no specific quantity or refill limitations unique to telehealth prescribing beyond those that apply to in-person prescribing, which are generally dictated by the drug schedule and medical necessity. Special rules apply to specific drug classes: for example, GLP-1 agonists (like Ozempic, Wegovy) and testosterone are not controlled substances but require careful medical evaluation and monitoring. Stimulants (e.g., Adderall, Ritalin) are Schedule II controlled substances and are subject to the strictest prescribing requirements, often necessitating a comprehensive diagnostic evaluation and ongoing monitoring, which may be more challenging to conduct solely via telehealth for initial prescriptions, especially post-PHE. The DEA's final rules on telehealth prescribing of controlled substances will be critical for future practice.

Pennsylvania's scope of practice for Advanced Practice Providers (APPs) such as Nurse Practitioners (NPs) and Physician Assistants (PAs) is evolving but generally requires some level of physician collaboration or supervision. Nurse Practitioners (NPs) in Pennsylvania do not have full practice authority. They are authorized to diagnose, treat, and prescribe medications (including controlled substances, with specific registration) under a collaborative agreement with a physician. The Professional Nursing Law (63 P.S. § 211 et seq.) and regulations (49 Pa. Code § 21.311 et seq.) define the scope of NP practice, requiring a written collaborative agreement outlining the scope of practice, referral mechanisms, and physician oversight. This agreement must be reviewed and updated regularly. While NPs have significant autonomy in their practice within this framework, the collaborative agreement is a mandatory component. Physician Assistants (PAs) operate under the supervision of a physician. The Medical Practice Act of 1985 (63 P.S. § 422.1 et seq.) and regulations (49 Pa. Code § 18.141 et seq.) govern PA practice. PAs can perform medical services delegated by their supervising physician, which are within the PA's education, training, and experience, and within the physician's scope of practice. While the level of direct supervision can vary based on the clinical setting and experience of the PA, a supervising physician must be readily available for consultation. PAs can prescribe medications, including controlled substances, under the authority of their supervising physician. Medical Assistants (MAs), particularly in medspas, have a very limited scope of practice. They are generally restricted to performing delegated administrative and clinical tasks that do not require independent medical judgment or licensure. This typically includes tasks like taking vital signs, preparing patients for procedures, and assisting licensed practitioners. MAs cannot inject Botox or fillers, perform laser treatments, or conduct any procedure that constitutes the practice of medicine or nursing. Delegation of such tasks to MAs is strictly prohibited and would constitute the unlicensed practice of medicine or nursing. Supervision requirements for MAs are direct, meaning the delegating licensed practitioner must be on-site and immediately available. Any expansion of MA duties without legislative or regulatory changes carries significant risk.

Navigating business structuring in Pennsylvania requires meticulous attention to the Corporate Practice of Medicine (CPOM) doctrine and fee-splitting prohibitions. For healthcare companies, particularly those involving physicians, the PC-MSO (Professional Corporation - Management Services Organization) model is the predominant compliant structure. A Professional Corporation (PC) or Professional Corporation Association (P.C.A.) must be formed, owned, and controlled solely by licensed physicians (or other licensed professionals for their respective practices, e.g., dentists for dental PCs) to deliver clinical services. This professional entity employs the licensed medical providers. The Management Services Organization (MSO) is a separate entity, which can be owned by non-physicians, and provides all non-clinical, administrative, and business support services to the PC. These services typically include billing, scheduling, marketing, IT, human resources for administrative staff, and facility management. The MSO charges the PC a fair market value fee for these services, typically outlined in a Management Services Agreement (MSA). The MSA is critical: it must clearly delineate the MSO's administrative role, ensure the PC retains full clinical autonomy, and establish compensation that is not tied to patient referrals or a percentage of professional fees, which could be construed as illegal fee-splitting. Pennsylvania's fee-splitting prohibition is broad, generally preventing licensed practitioners from sharing professional fees with unlicensed individuals or entities (63 P.S. § 422.41(14) for physicians). Therefore, MSO fees must be fixed or based on legitimate service costs, not a percentage of the PC's revenue or profits. Professional Corporation requirements under the Professional Corporation Law (15 Pa. C.S. § 2901 et seq.) dictate that all shareholders must be licensed professionals of the same profession, and the corporation's activities must be limited to the professional services for which its shareholders are licensed. This reinforces the CPOM. For non-physician-led healthcare businesses like certain wellness clinics or IV therapy centers that do not involve the practice of medicine, careful legal analysis is needed to determine if licensed medical oversight is required, and if so, how to integrate it compliantly. Structuring ownership for compliance means ensuring that clinical decision-making and the employment of licensed providers reside solely within the professional entity, insulated from non-clinical influence. Any attempt by an MSO or lay entity to control clinical operations, set physician compensation based on volume, or share in professional fees will likely trigger CPOM and fee-splitting violations, leading to severe penalties.

Pennsylvania's regulatory landscape continues to evolve, with several key developments impacting healthcare operations. Act 112 of 2022 was a landmark piece of legislation, codifying many of the telehealth flexibilities that emerged during the COVID-19 Public Health Emergency. This act solidified definitions of telehealth, established reimbursement parity for commercial insurers, and clarified informed consent requirements, moving Pennsylvania's telehealth framework from temporary waivers to permanent statute. This has provided much-needed stability for telehealth providers. Regarding interstate compacts, Pennsylvania is a member of the Interstate Medical Licensure Compact (IMLC), allowing eligible physicians to obtain licenses in multiple compact states more efficiently. This facilitates multi-state telehealth practice for physicians. The state is also a member of the Nurse Licensure Compact (NLC), enabling registered nurses and licensed practical nurses to practice in other compact states without obtaining additional licenses. These compacts significantly ease the administrative burden for providers seeking to expand their reach. While no major legislative changes to the Corporate Practice of Medicine (CPOM) doctrine or scope of practice for NPs/PAs have been enacted in 2024-2025, discussions around full practice authority for NPs continue to be active in the legislature. Bills proposing to remove the collaborative agreement requirement for NPs have been introduced in previous sessions and are likely to resurface, reflecting a national trend. Healthcare companies should monitor these legislative efforts closely, as a change could significantly alter staffing models. The State Board of Medicine and State Board of Osteopathic Medicine continue to issue guidance and take enforcement actions related to appropriate telehealth practice, controlled substance prescribing, and CPOM violations, emphasizing adherence to established standards of care and professional ethics. There is also ongoing scrutiny of medspa operations, ensuring that all procedures are performed by appropriately licensed professionals under proper supervision, and that business structures comply with CPOM.

For healthcare companies entering or expanding in Pennsylvania, a proactive and meticulous approach to compliance is essential. Here's actionable guidance: 1. Legal Entity Formation: Immediately engage legal counsel specializing in PA healthcare law to establish the correct business structure. This almost always involves a PC-MSO model for physician-led services. Ensure the Professional Corporation (PC) is physician-owned and controlled, and the Management Services Organization (MSO) agreement is compliant with CPOM and anti-fee-splitting laws. 2. Licensure & Credentialing: Verify all providers (physicians, NPs, PAs, etc.) hold active, unrestricted Pennsylvania licenses. For telehealth, ensure providers are licensed in PA to treat patients located in PA. If leveraging interstate compacts (IMLC, NLC), confirm eligibility and proper registration. 3. Telehealth Protocol Development: Implement comprehensive telehealth policies and procedures covering patient intake, informed consent (documented in the EHR), privacy (HIPAA compliance), technology requirements, and emergency protocols. Ensure all telehealth encounters meet the standard of care. 4. Prescribing Compliance: Develop strict protocols for prescribing, especially for controlled substances. Mandate PDMP checks for all Schedule II-V prescriptions. Stay updated on DEA's final rules regarding telehealth prescribing of controlled substances post-PHE. 5. Scope of Practice Adherence: Clearly define roles and responsibilities for all clinical staff based on their PA scope of practice. For NPs, ensure valid collaborative agreements are in place. For PAs, confirm supervising physician arrangements. For MAs, strictly limit tasks to administrative and delegated non-clinical duties. 6. Documentation & Auditing: Maintain thorough and accurate medical records for all patient encounters, whether in-person or via telehealth. Implement regular internal audits to ensure compliance with all state and federal regulations. 7. Common Pitfalls to Avoid: Do not allow non-physicians to exert clinical control over medical decisions. Avoid any fee-splitting arrangements where MSO compensation is based on a percentage of professional fees. Do not allow unlicensed personnel (e.g., MAs) to perform medical procedures. 8. Timeline Expectations: Licensing for individual providers can take several weeks to months. Business entity formation and MSO agreement drafting can also be a multi-week process. Budget ample time for legal review, state filings, and credentialing before launch.