Colorado has quietly become one of the most important states for digital health compliance. The Denver-Boulder corridor has produced a wave of health technology startups, direct-to-consumer telehealth platforms, and behavioral health companies — and every one of them must navigate Colorado's corporate practice of medicine requirements before treating a single Colorado patient. This guide explains what Colorado's CPOM rules actually say, how the Colorado Medical Board enforces them, and what a compliant structure looks like for founders building here or treating patients here.

The Legal Basis for Colorado's CPOM Doctrine

Colorado's prohibition on the corporate practice of medicine draws from two sources: the state's Professional Service Corporation Act and the Colorado Medical Board's regulatory framework. Unlike California, where CPOM is codified in a single, sweeping statute, Colorado's doctrine is assembled from several overlapping provisions that must be read together.

The Colorado Professional Service Corporation Act (C.R.S. § 12-245-101 et seq. and the analogous provision under the Corporations and Associations Act) requires that any corporation organized to provide professional services — including medicine — be owned by licensed professionals authorized to render those services. For medical professional service corporations, this means majority physician ownership is a statutory requirement, not merely a best practice.

The Colorado Medical Practice Act (C.R.S. § 12-240-101 et seq.) grants the Colorado Medical Board authority to license physicians and regulate the practice of medicine in the state. The Board has interpreted the Medical Practice Act to prohibit unlicensed persons and entities from directing, controlling, or profiting from the practice of medicine in ways that compromise physician independence. The Board issues guidance and takes administrative action based on this authority even when no criminal statute is directly invoked.

Colorado has not produced the landmark appellate CPOM decisions seen in states like California or Texas — the doctrine in Colorado is more administrative and regulatory than court-driven. This makes Board guidance and informal practice the primary sources for understanding what structures are permissible, which also means founders need to pay careful attention to the Board's stated positions rather than relying solely on case law research.

Who Can Own a Colorado Medical Professional Corporation?

Colorado's professional service corporation rules for medicine require that shareholders of a medical PC be licensed to practice medicine in Colorado, or be physician assistants licensed in Colorado who are supervised by a physician shareholder. In practical terms:

This framework places Colorado in a middle tier between strict CPOM states like California (where any non-physician equity is plainly prohibited) and more permissive states. The explicit inclusion of PAs as permissible minority owners reflects Colorado's historically PA-friendly regulatory environment and is a meaningful difference from states that limit ownership strictly to MDs and DOs.

Colorado's allowance of PA minority ownership is a genuine structural flexibility that some other CPOM states do not offer — but physicians must always hold the majority, and investors can never hold any equity in the PC itself.

Enforcement: The Colorado Medical Board in Practice

The Colorado Medical Board is an active regulatory body. It receives and investigates complaints about the unlicensed practice of medicine, unprofessional conduct, and impermissible corporate arrangements. While Colorado does not have the same volume of published CPOM enforcement actions as California, the Board has demonstrated willingness to act on complaints involving non-compliant corporate structures, particularly when adverse patient events are involved.

Enforcement risk in Colorado materializes most commonly in three scenarios. First, when a competitor, disgruntled employee, or former partner files a complaint alleging that a physician is participating in a sham ownership arrangement. Second, when an adverse patient outcome triggers an investigation that reveals the underlying corporate structure. Third, when a healthcare transaction — an acquisition, investment, or merger — surfaces structural problems in due diligence that then attract regulatory attention.

The Board's enforcement tools include license suspension or revocation for participating physicians, cease-and-desist orders, and referrals to the Attorney General for civil enforcement. Colorado also permits civil actions for unlicensed practice. For a startup, the existential risk is not necessarily a fine — it is the potential voiding of contracts between your MSO and PC, which could unravel your entire business model mid-operation.

The MSO-PC Structure in Colorado

The Management Services Organization and Professional Corporation structure is the standard compliant model for investor-backed healthcare companies operating in Colorado. Understanding how each entity functions — and where the legal lines are drawn — is essential for founders.

The Professional Corporation (PC)

The Colorado PC is the entity that holds the medical practice. It must be majority-owned by Colorado-licensed physicians, it employs or contracts with the clinicians who deliver care, and it is the entity that bills insurance and patients for medical services. The PC has its own governance structure — typically a board of directors composed of physicians — that is responsible for all clinical policy decisions.

Critical governance requirements for the Colorado PC include: physician control over clinical protocols and treatment standards; physician authority to hire, supervise, and terminate clinical staff; independent authority to accept or reject patients; and the right to make any treatment decision without interference from the MSO. These are not just legal formalities. The Management Services Agreement must reflect these limits, and the day-to-day operation of the company must actually honor them.

The Management Services Organization (MSO)

The MSO is the entity in which investors hold equity. It can be a Delaware C-corporation, an LLC, or any other structure appropriate for investment. The MSO provides the PC with non-clinical services: technology platforms, billing and revenue cycle management, marketing, HR support, real estate, equipment, and general administration. The MSO charges the PC for these services through a Management Services Agreement (MSA).

The MSA is the legal instrument that defines the relationship between your MSO and PC, and it is where CPOM compliance most often breaks down. An MSA that gives the MSO effective control over clinical decisions — even indirectly, through budget authority, staffing decisions, or performance metrics — crosses the line into the corporate practice of medicine. Colorado courts and the Board would look at the actual operation of the relationship, not just the contractual text.

Management Fee Structuring

One of the most important and frequently misunderstood aspects of Colorado CPOM compliance is the management fee. The MSO is compensated for its services through a fee, and that fee must be structured as arm's-length compensation for services rendered — not as a disguised share of the PC's clinical profits.

A percentage-of-revenue fee structure is inherently risky in Colorado. If the MSO receives a fixed percentage of the PC's gross or net revenue, a regulator could characterize this as the MSO taking a share of the proceeds of the practice of medicine. The safer approach — and the one most Colorado healthcare attorneys recommend — is a fixed fee or a cost-plus arrangement that is documented as reflecting the fair market value of the services the MSO actually provides.

This requirement has real consequences for how digital health companies model their economics. If your business plan shows an MSO collecting 30% of PC revenue as a management fee, you should consult with a Colorado healthcare attorney about whether that structure would survive scrutiny.

Telehealth and Digital Health Considerations

Colorado has been a progressive state on telehealth policy, passing parity legislation that requires insurers to reimburse telehealth services at rates comparable to in-person services. This makes Colorado an attractive market for telehealth companies. But favorable reimbursement policy does not change CPOM requirements — it just raises the stakes for getting the structure right.

For a telehealth company treating Colorado patients from outside the state, the practical questions are: Does the physician delivering care need a Colorado license? And does the PC employing that physician need to be organized or registered in Colorado?

The answer to the first question is generally yes — a physician treating a patient located in Colorado is typically practicing medicine in Colorado and needs a Colorado medical license (or an applicable interstate compact membership, such as the Interstate Medical Licensure Compact). The answer to the second question is more nuanced but the conservative and correct answer is also generally yes. If your PC is regularly delivering services to Colorado patients, it should be registered to do business in Colorado and should satisfy Colorado's physician ownership requirements.

Colorado participates in the Interstate Medical Licensure Compact (IMLC), which streamlines multi-state licensing for physicians. This is practically important for digital health companies that need clinicians licensed in multiple states — it reduces the administrative burden of building a compliant Colorado clinical operation.

Direct Primary Care and Subscription Models

Colorado has specific statutory authorization for direct primary care (DPC) arrangements under C.R.S. § 10-16-107, which clarifies that DPC agreements are not insurance products and do not require insurance licenses. This is significant for founders building subscription-based primary care or direct care models. However, DPC authorization does not override CPOM requirements. The DPC practice still needs a physician-owned entity structure, and the subscription fee still flows to the PC, not to an investor-owned entity.

Practical Compliance Steps for Colorado Founders

If you are building a health startup that will deliver clinical services to Colorado patients, here is the practical compliance path:

  1. Form a Colorado professional service corporation with majority physician ownership before any clinical operations begin. Do not use a general LLC or standard corporation for the clinical entity.
  2. Ensure physician-majority governance in the PC's founding documents. The articles of incorporation and bylaws should clearly establish physician control over clinical policy and personnel decisions.
  3. Draft a robust MSA that clearly delineates the MSO's administrative functions from the PC's clinical functions. The agreement should expressly prohibit the MSO from directing clinical care.
  4. Structure management fees as fair market value compensation for enumerated services, not as a percentage of clinical revenue. Document the FMV basis with a third-party valuation if the fees are significant.
  5. Ensure all treating physicians are Colorado-licensed or covered by the IMLC before treating Colorado patients.
  6. Maintain genuinely independent PC governance. Hold regular PC board meetings, document clinical policy decisions separately from MSO operations, and ensure the physician owners understand their actual legal authority.
  7. Review the structure with a Colorado healthcare attorney before launch and before any significant investment or acquisition transaction.

How Colorado Compares to California and Texas

Founders who have already structured for California or Texas operations sometimes assume that Colorado's relatively lower enforcement profile means less rigor is required. That assumption is dangerous. The substantive requirements — physician-owned PC, arm's-length MSA, no investor equity in the clinical entity — are the same.

Where Colorado is meaningfully more flexible than California: Colorado does not have California's Knox-Keene overlay, which imposes insurance-company-style licensing requirements on prepaid health arrangements. Colorado also does not have the same density of public CPOM enforcement actions, which creates somewhat less aggressive enforcement risk. And Colorado's explicit inclusion of PAs as permissible minority owners gives certain practice models structural flexibility that California does not allow.

Where Colorado is stricter than Washington State: Colorado has clearer statutory requirements for physician majority ownership than Washington's more permissive professional corporation framework. A structure that might work in Washington with greater shared governance might not satisfy Colorado's majority-ownership rule.

Colorado CPOM Compliance: Quick-Reference Summary