The Complete Guide to Corporate Practice of Medicine (CPOM)
What every healthcare operator, MSO, and investor needs to understand before structuring a medical business.
In This Guide
- 1.What Is CPOM and Where Did It Come From?
- 2.State Ownership, Licensing, and Enforcement Rules
- 3.How CPOM Applies to Different Business Types
- 4.The MSO-PC Solution
- 5.California SB 351: Covered Investors and Clinical Control
- 6.Common Mistakes Operators Make
- 7.What "Defensible Structure" Means
1. What Is CPOM and Where Did It Come From?
The Corporate Practice of Medicine (CPOM) doctrine holds that corporations — and by extension, non-physician investors and operators — cannot employ physicians or operate entities that practice medicine. The rationale is that clinical decision-making must be insulated from the profit motives of non-clinician business interests.
CPOM has roots in early 20th-century common law and has been codified into statute or regulatory guidance in most states. It is not a federal doctrine — it is state-level law, and the rules vary significantly from state to state.
At its core, CPOM does not prohibit healthcare businesses. It requires that the entity providing medical services be physician-owned. This distinction is the foundation of the MSO-PC structure that sophisticated healthcare operators use today.
2. State Ownership, Licensing, and Enforcement Rules
Not all states enforce CPOM equally. There is a spectrum from strict enforcement (California, New York, Texas) to limited or no enforcement (some states with no specific CPOM prohibition). However, even in "light" states, federal laws and payer rules often impose physician ownership requirements independently.
California requires lawful physician ownership and retained clinical authority. SB 351, effective January 1, 2026, adds specific restrictions for covered private equity and hedge fund involvement. Review the California guide for source-linked current rules and developments.
Education Law Article 131 prohibits corporate practice. Attorney General enforcement history. Courts have voided management agreements that gave excessive operational control to non-physicians.
Medical Practice Act enforcement. Texas Medical Board takes an active role. Specific rules for different entity types (PLLC vs. PC).
Assess clinic licensure and exemptions, practitioner licensing, services, and required medical direction. Florida does not require a physician-owned PC for every practice or medspa. Additional out-of-state telehealth registration applies to qualifying practitioners not licensed in Florida.
CPOM applicable. Specific attention to behavioral health and substance abuse treatment. PC required for professional services.
3. How CPOM Applies to Different Business Types
MedSpas & Aesthetics
Medical spas that offer services requiring a physician's license — injectables (Botox, fillers), laser treatments, PRP, hormone therapy — are subject to CPOM in most states. A physician PC must own the medical component of the business. The aesthetics/spa side can be owned separately or by the MSO. The structure must clearly delineate which services are "medical" and which are not.
Telehealth Platforms
Telehealth CPOM compliance is complex because it is tied to patient location, not company location. If your platform serves patients in California, you need a California-compliant structure, regardless of where your company is incorporated. Multi-state telehealth operators often need separate PCs per state. The good news: in many cases, a single physician can own PCs in multiple states.
GLP-1 & Weight Loss Clinics
The explosive growth of GLP-1 and weight loss medication prescribing has drawn significant regulatory attention. Prescribing-only platforms that work through telehealth are subject to every state's CPOM rules for the states where they prescribe. The pace of growth in this sector has outrun compliance infrastructure at many operators — a situation that regulators are actively addressing.
PE-Backed Healthcare
Private equity investment in healthcare practices runs directly into CPOM. A PE fund cannot own a physician PC — but it can own an MSO that holds a management contract with a PC. This is the standard PE healthcare investment structure. Deal counsel and diligence teams focus heavily on this structure, and non-compliant structures can kill deals or result in post-close regulatory liability.
Behavioral Health
Behavioral health (psychiatry, therapy, substance abuse) has CPOM implications that interact with additional scope-of-practice rules for non-physician providers (NPs, LCSWs, LPCs). Group behavioral health practices must structure correctly for both CPOM and provider supervision requirements.
4. The MSO-PC Solution
The Management Services Organization and Professional Corporation structure is the industry-standard CPOM compliance solution. It allows non-physician operators and investors to build and own healthcare businesses by separating the clinical entity (PC) from the management entity (MSO).
The PC employs or contracts with clinicians, holds the medical licenses, bills payers, and takes clinical responsibility. The MSO provides management services to the PC — staffing, technology, marketing, billing support, real estate — under a Management Services Agreement.
The PC must be physician-owned. The MSO can be owned by anyone. The economic alignment between the PC owner and the MSO is structured through contractual instruments (Stock Restriction Agreement, operating agreements) rather than direct equity in the PC.
Read the full explanation of the MSO-PC structure →5. California SB 351: Covered Investors and Clinical Control
SB 351 took effect January 1, 2026. It specifically regulates private equity groups and hedge funds involved with physician or dental practices in California, including covered arrangements with controlled entities. The statute defines its covered parties and exclusions. Read the chaptered SB 351 law.
Covered parties must not interfere with professional judgment or exercise specified powers over records, clinically based hiring, payer contracting, coding and billing, or equipment decisions. Assistance is permitted where the physician or dentist retains the ultimate responsibility or approval required by the law.
SB 351 addresses prohibited contract terms and permits Attorney General enforcement. It does not establish a general automatic fine or a new Medical Board audit program. California’s existing ownership and clinical control rules continue to apply to MSOs outside its investor scope.
Separately, AB 1415 expands OHCA transaction notices to MSOs and other covered noticing entities. Have healthcare counsel assess the actual parties, management rights, and transaction facts.
Read the California guide with primary sources and 2026 developments →6. Common Mistakes Operators Make
MSA Gives MSO Too Much Clinical Control
The most common structural defect. If the MSA allows the MSO to hire and fire physicians, control clinical protocols, or direct patient care decisions, the structure may constitute the unauthorized corporate practice of medicine — potentially voiding the entire arrangement.
No Physician Independence Provisions
The PC Operating Agreement must affirmatively preserve the physician's clinical independence. An agreement that reads like a standard business operating agreement without CPOM-specific provisions leaves the structure without its most important defense.
Conflating the Medical Director and PC Owner Roles
Many operators employ a Medical Director and assume that satisfies CPOM. It does not. A Medical Director is a clinical oversight role. The PC Owner is a legal ownership role. Many arrangements need both, but they are not interchangeable.
Not Accounting for State-Specific Rules
Operators often use a template MSA or Operating Agreement drafted for one state across multiple states. California, New York, and Texas have materially different CPOM rules. A single template is not sufficient for multi-state operations.
Ignoring the Stock Restriction Agreement
Without a Stock Restriction Agreement, the PC owner can simply leave — or transfer shares to someone ineligible. The Stock Restriction Agreement is the legal glue that keeps the structure intact. Omitting it is a serious structural failure.
Relying on "Non-Enforcement" as a Strategy
Some operators knowingly operate non-compliant structures in enforcement-light states, betting that regulators won't notice. SB 351, increased telehealth scrutiny, and the growth of PE involvement in healthcare have dramatically increased regulatory attention across the board.
7. What "Defensible Structure" Means
A "defensible structure" is one that can withstand scrutiny from a state medical board, a court, or a due diligence team reviewing the arrangement for a transaction or investment. It is not simply a structure that is technically compliant — it is one where the compliance is demonstrable and documented.
The elements of a defensible structure include:
- A physician owner who is genuinely licensed and in good standing in the relevant state(s)
- An MSA that clearly delineates non-clinical management services and preserves physician clinical independence
- A PC Operating Agreement that affirmatively protects physician governance over clinical decisions
- A Stock Restriction Agreement that properly controls share transfer
- Documentation that the physician is actually available and exercising physician-of-record functions
- State-specific provisions where required (California SB 351, New York Education Law, etc.)
- Ongoing maintenance: current licenses, updated agreements, regulatory monitoring
A defensible structure is not a guarantee against regulatory action — it is the documented basis for defending the arrangement if action is taken. The goal is to make the cost and risk of non-compliance so clearly negative that compliant structure is the obvious choice.
Operator readiness checklist
Bring these facts to counsel and your PC-owner discussion so the review can focus on the actual operating model rather than generic CPOM summaries:
- Patient and clinician states, entity domicile, and planned expansion states
- Business type: medspa, telehealth, GLP-1, behavioral health, PE-backed platform, or roll-up
- Existing PC/MSO entities, ownership records, MSA, operating agreement, and stock restrictions
- Who controls clinical hiring, firing, protocols, medical records, billing, and patient-care decisions
- Upcoming launch, acquisition, financing, payer enrollment, or regulatory deadline
- Date and attorney responsible for the most recent state-specific review
Disclaimer: This guide provides general educational information about Corporate Practice of Medicine law. CPOM rules are state-specific, evolving, and fact-intensive. This guide does not constitute legal advice. Consult a qualified healthcare attorney for advice specific to your business and operating states.
Find a Physician PC Owner Through ClinX Connect
Define your requirements with healthcare counsel, then find physician PC-owner candidates through ClinX Connect.
Find a PC Owner — Post a Role FreePhysician compensation, legal advice, entity formation, and ongoing compliance are arranged separately with the professionals you engage.