California has the most aggressively enforced corporate practice of medicine doctrine in the United States. For healthcare founders, digital health companies, and investors, California is both the largest opportunity and the highest compliance stakes in the country. Getting your California structure wrong can result in enforcement actions, voided contracts, and even criminal penalties. This guide provides a thorough overview of California's CPOM framework and how to navigate it.

California's Strict CPOM Enforcement

California's CPOM doctrine is codified primarily in Section 2400 of the California Business and Professions Code, which states that corporations and other artificial legal entities cannot practice medicine. The statute is complemented by decades of case law that has expanded and reinforced the prohibition.

The California Medical Board, the Attorney General, and even private litigants can enforce CPOM violations. Unlike some states where CPOM is primarily a theoretical risk, California has a track record of active enforcement. The consequences of a CPOM violation in California include:

California does not just penalize the corporation that practices medicine illegally. The physicians who participate in sham arrangements also face discipline. Both sides of a non-compliant MSO-PC structure are at risk.

The Knox-Keene Health Care Service Plan Act

The Knox-Keene Act (California Health and Safety Code, Division 2.5) adds another layer of regulatory complexity for healthcare companies operating in California. This act requires any entity that provides or arranges for healthcare services on a prepaid or capitated basis to be licensed as a health care service plan by the California Department of Managed Health Care (DMHC).

The Knox-Keene Act is relevant to CPOM because many digital health business models involve some form of prepaid or subscription-based healthcare services. If your company charges patients a monthly fee for access to medical services, you may be operating as an unlicensed health care service plan, even if your CPOM structure is otherwise compliant.

When Knox-Keene Applies

The DMHC has interpreted the Knox-Keene Act broadly. Arrangements that may trigger Knox-Keene licensure include:

Obtaining a Knox-Keene license is a lengthy and expensive process, often taking 12 to 18 months and requiring significant capital reserves. Many startups structure their pricing models specifically to avoid triggering Knox-Keene, such as charging per-visit fees rather than monthly subscriptions that include clinical services.

The Moscone-Knox Professional Corporations Act

The Moscone-Knox Professional Corporations Act (California Corporations Code, Title 1, Division 3, Part 4) governs the formation and operation of professional corporations in California. This is the statutory framework that enables physicians to form PCs, which is the required entity type for practicing medicine in California.

Key Provisions of Moscone-Knox

  1. Ownership restrictions -- Only licensed physicians (or certain other licensed professionals, depending on the PC type) can be shareholders of a medical professional corporation in California.
  2. Director and officer requirements -- The majority of directors and all officers who exercise professional judgment must be licensed physicians.
  3. Name requirements -- The PC's name must comply with the Medical Board's naming guidelines and include a professional corporation designation.
  4. Filing requirements -- The PC must file a certificate of registration with the Medical Board and maintain it annually.

The MSO-PC Model in California

Given California's strict CPOM framework, the MSO-PC model is the standard structure for non-physician-owned healthcare companies. However, California's enforcement posture means that the MSO-PC structure must be implemented with particular care.

California-Specific MSO-PC Considerations

The California Medical Board and Attorney General have scrutinized MSO-PC arrangements and have identified several factors that suggest an MSO is improperly controlling a PC:

In California, the substance of the MSO-PC relationship matters far more than the form of the documents. You can have a perfectly drafted MSA, but if the MSO is running the clinical operation in practice, the structure will not survive regulatory scrutiny.

Best Practices for California MSO-PC Structures

To build a defensible MSO-PC structure in California, follow these guidelines:

Recent Enforcement and Regulatory Trends

California's CPOM enforcement continues to evolve, particularly as it applies to digital health companies. Recent trends include increased scrutiny of telehealth platforms that operate in California with out-of-state structures, attention to AI and algorithm-driven clinical decision support tools that may cross the line into practicing medicine, and investigation of medical spa and aesthetic medicine businesses that use MSO-PC structures to mask lay ownership of clinical operations.

The California Attorney General has also shown interest in the intersection of CPOM and consumer protection, particularly when patients are harmed by companies that practice medicine without proper licensure. This consumer protection angle adds another dimension of enforcement risk beyond the Medical Board's authority.

Operating in California requires a commitment to compliance that goes beyond paperwork. It requires building a genuine relationship between the MSO and PC where clinical autonomy is real, not theoretical. For companies that get it right, California offers access to the largest healthcare market in the country. For those that cut corners, it offers some of the most severe consequences.