The Complete Guide to Corporate Practice of Medicine (CPOM)
What every healthcare operator, MSO, and investor needs to understand before structuring a medical business.
In This Guide
- 1.What Is CPOM and Where Did It Come From?
- 2.Which States Enforce CPOM Most Strictly?
- 3.How CPOM Applies to Different Business Types
- 4.The MSO-PC Solution
- 5.California SB 351: The 2026 Enforcement Shift
- 6.Common Mistakes Operators Make
- 7.What "Defensible Structure" Means
1. What Is CPOM and Where Did It Come From?
The Corporate Practice of Medicine (CPOM) doctrine holds that corporations — and by extension, non-physician investors and operators — cannot employ physicians or operate entities that practice medicine. The rationale is that clinical decision-making must be insulated from the profit motives of non-clinician business interests.
CPOM has roots in early 20th-century common law and has been codified into statute or regulatory guidance in most states. It is not a federal doctrine — it is state-level law, and the rules vary significantly from state to state.
At its core, CPOM does not prohibit healthcare businesses. It requires that the entity providing medical services be physician-owned. This distinction is the foundation of the MSO-PC structure that sophisticated healthcare operators use today.
2. Which States Enforce CPOM Most Strictly?
Not all states enforce CPOM equally. There is a spectrum from strict enforcement (California, New York, Texas) to limited or no enforcement (some states with no specific CPOM prohibition). However, even in "light" states, federal laws and payer rules often impose physician ownership requirements independently.
Medical Board actively audits. SB 351 (effective Jan 1, 2026) significantly tightened enforcement. Management agreements face enhanced scrutiny. Non-compliant structures face license suspension, voided contracts, and civil liability.
Education Law Article 131 prohibits corporate practice. Attorney General enforcement history. Courts have voided management agreements that gave excessive operational control to non-physicians.
Medical Practice Act enforcement. Texas Medical Board takes an active role. Specific rules for different entity types (PLLC vs. PC).
CPOM enforced with specialty-specific variations. Telehealth has additional requirements. Medspa regulation has tightened in recent years.
CPOM applicable. Specific attention to behavioral health and substance abuse treatment. PC required for professional services.
3. How CPOM Applies to Different Business Types
MedSpas & Aesthetics
Medical spas that offer services requiring a physician's license — injectables (Botox, fillers), laser treatments, PRP, hormone therapy — are subject to CPOM in most states. A physician PC must own the medical component of the business. The aesthetics/spa side can be owned separately or by the MSO. The structure must clearly delineate which services are "medical" and which are not.
Telehealth Platforms
Telehealth CPOM compliance is complex because it is tied to patient location, not company location. If your platform serves patients in California, you need a California-compliant structure, regardless of where your company is incorporated. Multi-state telehealth operators often need separate PCs per state. The good news: in many cases, a single physician can own PCs in multiple states.
GLP-1 & Weight Loss Clinics
The explosive growth of GLP-1 and weight loss medication prescribing has drawn significant regulatory attention. Prescribing-only platforms that work through telehealth are subject to every state's CPOM rules for the states where they prescribe. The pace of growth in this sector has outrun compliance infrastructure at many operators — a situation that regulators are actively addressing.
PE-Backed Healthcare
Private equity investment in healthcare practices runs directly into CPOM. A PE fund cannot own a physician PC — but it can own an MSO that holds a management contract with a PC. This is the standard PE healthcare investment structure. Deal counsel and diligence teams focus heavily on this structure, and non-compliant structures can kill deals or result in post-close regulatory liability.
Behavioral Health
Behavioral health (psychiatry, therapy, substance abuse) has CPOM implications that interact with additional scope-of-practice rules for non-physician providers (NPs, LCSWs, LPCs). Group behavioral health practices must structure correctly for both CPOM and provider supervision requirements.
4. The MSO-PC Solution
The Management Services Organization and Professional Corporation structure is the industry-standard CPOM compliance solution. It allows non-physician operators and investors to build and own healthcare businesses by separating the clinical entity (PC) from the management entity (MSO).
The PC employs or contracts with clinicians, holds the medical licenses, bills payers, and takes clinical responsibility. The MSO provides management services to the PC — staffing, technology, marketing, billing support, real estate — under a Management Services Agreement.
The PC must be physician-owned. The MSO can be owned by anyone. The economic alignment between the PC owner and the MSO is structured through contractual instruments (Stock Restriction Agreement, operating agreements) rather than direct equity in the PC.
Read the full explanation of the MSO-PC structure →5. California SB 351: The 2026 Enforcement Shift
California Senate Bill 351, effective January 1, 2026, represents the most significant tightening of California's CPOM enforcement framework in decades. The bill directly targets the use of management agreements that circumvent the physician ownership requirement.
Under SB 351, management agreements that effectively transfer operational control of a medical practice to a non-physician entity are prohibited. The California Medical Board has enhanced audit and enforcement authority. Penalties include license suspension or revocation, civil monetary penalties, and voiding of non-compliant contracts.
Key provisions of SB 351 that California operators must address:
- Prohibition on management agreements that give the MSO hiring and firing authority over physicians
- Prohibition on MSO control over clinical protocol development and approval
- Requirement that PC operating agreements affirmatively preserve physician governance over clinical operations
- Enhanced Medical Board review authority over MSO-PC arrangements
- Mandatory disclosure requirements for certain MSO-PC relationships
If you operate in California under an MSO-PC structure that was set up before January 2026, your documents may need review for SB 351 compliance.
6. Common Mistakes Operators Make
MSA Gives MSO Too Much Clinical Control
The most common structural defect. If the MSA allows the MSO to hire and fire physicians, control clinical protocols, or direct patient care decisions, the structure may constitute the unauthorized corporate practice of medicine — potentially voiding the entire arrangement.
No Physician Independence Provisions
The PC Operating Agreement must affirmatively preserve the physician's clinical independence. An agreement that reads like a standard business operating agreement without CPOM-specific provisions leaves the structure without its most important defense.
Conflating the Medical Director and PC Owner Roles
Many operators employ a Medical Director and assume that satisfies CPOM. It does not. A Medical Director is a clinical oversight role. The PC Owner is a legal ownership role. Many arrangements need both, but they are not interchangeable.
Not Accounting for State-Specific Rules
Operators often use a template MSA or Operating Agreement drafted for one state across multiple states. California, New York, and Texas have materially different CPOM rules. A single template is not sufficient for multi-state operations.
Ignoring the Stock Restriction Agreement
Without a Stock Restriction Agreement, the PC owner can simply leave — or transfer shares to someone ineligible. The Stock Restriction Agreement is the legal glue that keeps the structure intact. Omitting it is a serious structural failure.
Relying on "Non-Enforcement" as a Strategy
Some operators knowingly operate non-compliant structures in enforcement-light states, betting that regulators won't notice. SB 351, increased telehealth scrutiny, and the growth of PE involvement in healthcare have dramatically increased regulatory attention across the board.
7. What "Defensible Structure" Means
A "defensible structure" is one that can withstand scrutiny from a state medical board, a court, or a due diligence team reviewing the arrangement for a transaction or investment. It is not simply a structure that is technically compliant — it is one where the compliance is demonstrable and documented.
The elements of a defensible structure include:
- A physician owner who is genuinely licensed and in good standing in the relevant state(s)
- An MSA that clearly delineates non-clinical management services and preserves physician clinical independence
- A PC Operating Agreement that affirmatively protects physician governance over clinical decisions
- A Stock Restriction Agreement that properly controls share transfer
- Documentation that the physician is actually available and exercising physician-of-record functions
- State-specific provisions where required (California SB 351, New York Education Law, etc.)
- Ongoing maintenance: current licenses, updated agreements, regulatory monitoring
A defensible structure is not a guarantee against regulatory action — it is the documented basis for defending the arrangement if action is taken. The goal is to make the cost and risk of non-compliance so clearly negative that compliant structure is the obvious choice.
Disclaimer: This guide provides general educational information about Corporate Practice of Medicine law. CPOM rules are state-specific, evolving, and fact-intensive. This guide does not constitute legal advice. Consult a qualified healthcare attorney for advice specific to your business and operating states.
Get Your Structure Right From the Start
Whether you are forming a new PC or reviewing an existing structure, start with a free consultation.
Submit Interest Form