What CPOM issues most commonly kill healthcare M&A deals?

The most deal-fatal CPOM issues are: clinical employees classified under the MSO rather than the PC; revenue-percentage management fees tied to prescription or visit volume; physician PC owners whose licenses have lapsed or been restricted; no documented evidence of physician clinical oversight; and operating in states without state-specific CPOM analysis. These are all common in companies that built their structures quickly to get to market.

How long before a healthcare M&A deal should a company audit its CPOM structure?

At least 12-18 months before anticipated deal close, and ideally at each major funding round. Significant structural remediation — like transitioning clinical employees from MSO to PC employment, renegotiating management fees, or updating multi-state documentation — can take 6-12 months to complete properly. Trying to fix structural CPOM issues during a live deal process is extremely difficult and often forces price concessions.

Can CPOM violations be disclosed in M&A reps and warranties?

Disclosure schedules can disclose known CPOM issues, but that disclosure does not eliminate the underlying risk — it shifts it into negotiation. Disclosed CPOM issues typically result in indemnification carve-outs, escrow holdbacks, or price reductions. The seller is better positioned having fixed the issue pre-disclosure than having to disclose it and negotiate around it.

CPOM Red Flags That Kill Healthcare M&A Deals

Healthcare acquisitions move at significant speed and significant cost. Legal fees, banker fees, management time — a deal process that runs six months and dies on a CPOM issue in diligence is an expensive outcome for everyone involved. For founders who have worked years to get to a liquidity event, having a deal die on a structural compliance issue that could have been fixed 18 months earlier is particularly painful.

The CPOM issues that kill or seriously damage healthcare deals are largely predictable. They show up repeatedly across acquisitions of digital health platforms, physician practice management companies, and telehealth companies. This guide describes the most common deal-damaging CPOM problems — what they look like, why they matter to buyers, and what remediation typically requires.

Red Flag #1: Clinical Employees Under the MSO, Not the PC

This is the most common structural CPOM violation in healthcare companies that built quickly. The employment model looks like this: the MSO employs everyone — including physicians, nurse practitioners, and PAs — because the MSO's payroll system was set up first and it was operationally simpler to add clinical staff there. The PC exists on paper but has no employees of its own.

This structure fails CPOM analysis in most states. The PC is supposed to be the entity that employs or contracts with clinical professionals and takes responsibility for clinical services. If clinicians are employed by the MSO, the MSO is functionally practicing medicine through those employees. That is exactly what CPOM prohibits.

Remediation requires transitioning all clinical employees from MSO to PC employment — new employment agreements, payroll transfers, benefits reconsolidation, and potentially renegotiated employment terms. Depending on the size of the clinical staff, this takes 3-6 months to complete properly. Buyers typically impose a closing condition requiring this remediation, not a covenant to complete it post-close.

Red Flag #2: Revenue-Linked Management Fees That Scaled With the Business

Many founders set management fees early in the company's life — often before they had a clear sense of what the business would look like at scale. A 40% revenue-share that seemed reasonable when the PC had $200k in annual revenue becomes a $2M annual transfer when the PC generates $5M. At that scale, the management fee starts looking less like payment for administrative services and more like an economic ownership arrangement — which is the functional equivalent of fee-splitting in most CPOM states.

Buyers look hard at the ratio between the PC's gross clinical revenue and the management fees the PC pays to the MSO. Anything consistently above 20-25% triggers scrutiny. If that fee is also tied to prescription volume or patient count rather than to defined services, the scrutiny intensifies significantly.

Remediation requires renegotiating the MSA to replace revenue-linked fees with flat or services-based fees supported by a detailed services schedule. This is a negotiated document change — the physician PC owner needs to agree — and it may also involve legal opinions on the revised structure before a buyer is satisfied.

Red Flag #3: PC Physician Owner With a License Problem

A physician PC owner whose license is restricted, on probation, or under investigation by their state medical board is an immediate problem. The PC's ability to operate as a professional corporation may depend on the physician owner's active and unrestricted licensure. A buyer acquiring the MSO is acquiring an entity whose entire clinical operation rests on a physician whose professional standing is in question.

This is a difficult remediation even with adequate lead time, because license issues are not resolved quickly. If the issue is a formal disciplinary action that will result in restrictions, the company may need to transition PC ownership to a different physician before the deal can proceed.

The preventive approach is license monitoring — a quarterly or annual verification process that confirms the PC owner's license status in all relevant states. If a problem is identified early, the company has time to plan a transition before deal pressure forces it.

Red Flag #4: No Documentation of Physician Clinical Governance

The physician PC owner is supposed to provide genuine clinical oversight of the PC's operations. In practice, some friendly PC structures are built with documents that look right but operations that give the physician no real role beyond signing agreements.

Buyers increasingly look for evidence of actual governance: Are there PC board meeting minutes? Does the physician attend them? Has the physician reviewed and approved clinical protocols? Is there any record of the physician exercising clinical judgment independent of the MSO? If the answer to all of these is no — if the physician is a signature-provider with no substantive engagement — that is a functional control problem that survives document-level review.

Remediation requires building a documented governance record going forward, which means it cannot be backdated. At best, a company can implement genuine physician governance in the 12-18 months before a deal and document that period clearly. That is enough for some buyers; others will treat the historical absence of governance as an unacceptable risk.

Red Flag #5: Multi-State Operations Without State-Specific CPOM Analysis

A company operating telehealth services across 15 states with a single MSO-PC structure documented under California law has not done CPOM compliance — it has done California compliance and assumed it works everywhere. Each state has different requirements for professional corporation ownership, physician qualifications, service scope, and fee arrangement limitations.

Buyers conducting M&A diligence will typically request a state-by-state CPOM matrix covering every state the company operates in. If that matrix does not exist, the diligence team will build one — and if they find material gaps, each gap becomes a diligence issue requiring resolution or price adjustment.

Building a proper multi-state CPOM matrix takes 4-8 weeks with experienced healthcare counsel and requires reviewing the company's actual operations against each state's requirements. For a company operating in 20+ states, this is a material time and cost investment. Starting it early — before a deal process — is far better than scrambling to produce it under deal timeline pressure.

Red Flag #6: Prohibited STRAs Under Oregon SB 951

This is a 2025-2026-specific issue but one that is already surfacing in deal diligence. If a company has Oregon operations and its PC documentation includes Stock Transfer Restriction Agreements with triggers that go beyond the narrow list Oregon SB 951 permits, those STRAs are void under Oregon law — and any transaction structure that relies on them is legally unenforceable.

Buyers evaluating Oregon-operating companies are now asking to see all STRA provisions and reviewing them against SB 951's permitted triggers. Companies that have not yet audited their Oregon STRA provisions are at risk of discovering this issue late in diligence — which is the worst possible time.

Red Flag #7: MSA Clinical Control Provisions

Management Services Agreements sometimes contain provisions that drift from administrative management into clinical management — physician scheduling requirements, productivity quotas, visit volume minimums, or quality metrics that are defined in terms of clinical output rather than administrative quality. In the 2026 enforcement environment, where regulators are applying substance-over-form analysis, these provisions are CPOM concerns even when they are embedded in an "administrative services" document.

Buyers' CPOM diligence has become more sophisticated. The question is no longer just "does this company have an MSO-PC structure?" It is "does this MSO-PC structure actually separate clinical governance from corporate control — or is it a formalistic structure that gives investors functional clinical authority?" The second question requires operational diligence, not just document review.

The Remediation Timeline: Why You Cannot Wait

Each of the issues above requires time to fix. Most structural CPOM remediation — employment transitions, fee restructuring, governance documentation — cannot be completed in less than 6 months. Some items, like building a genuine physician governance record, require 12-18 months of documented activity before a buyer will accept the resulting record as credible.

If you are planning a sale or Series B in 18-24 months, the time to conduct your CPOM audit and begin remediation is now — not when you are in a deal process. A company that walks into a diligence process with a clean CPOM audit and documented remediation history commands meaningfully better terms than one that is discovering its structural issues for the first time under deal pressure.

The audit itself is not expensive relative to the deal value at risk. A thorough CPOM compliance review with experienced healthcare counsel runs $10,000-$30,000 depending on the company's complexity and operating footprint. The cost of a failed deal or a $5M valuation haircut driven by CPOM issues is multiples of that.