Massachusetts has long occupied an unusual position in the CPOM landscape. Compared to California or Texas, the state's restrictions on corporate ownership and management of medical practices are considerably more relaxed. The Massachusetts Board of Registration in Medicine has not taken the same aggressive posture on MSO-PC governance that some peer state boards have, and the state's dominant health systems — Mass General Brigham, Beth Israel Lahey Health, Dana-Farber — operate with complex multi-entity corporate structures that would be legally impossible in stricter CPOM states.
But Massachusetts changed the calculus for venture-backed healthcare companies in January 2025, when a new private equity and corporate healthcare reporting law took effect. The law does not restrict corporate investment in Massachusetts healthcare — but it requires that investment to be disclosed, in detail, to the state. For digital health founders who thought Massachusetts was a hands-off regulatory environment, the 2025 law is a wake-up call. This guide covers both the traditional CPOM framework and what the new reporting requirements actually demand from VC-backed healthcare companies.
Massachusetts CPOM: The Traditional Framework
Massachusetts does not have a single statute expressly prohibiting corporations from employing physicians or owning medical practices in the way that California's Corporations Code does. Instead, Massachusetts CPOM doctrine derives from the Board of Registration in Medicine's regulations, common law principles around professional responsibility, and the general principle that medical licensure is personal — a corporation cannot hold a medical license and therefore cannot practice medicine directly.
The practical effect is that Massachusetts law tolerates a substantial degree of corporate involvement in healthcare delivery as long as two conditions are met: first, the licensed physician retains ultimate authority over clinical decisions; second, the business structure does not create financial incentives that functionally override physician professional judgment. Within those guardrails, Massachusetts permits:
- Hospital systems to directly employ physicians as salaried employees with professionally structured contracts
- Corporate entities to manage administrative, financial, and operational functions of physician practices through management agreements
- Non-physician investors to hold ownership interests in management entities that serve physician-owned clinical entities
- Multi-specialty group practices and integrated delivery networks that combine physician and non-physician professional services under unified organizational governance
The Massachusetts Board of Registration in Medicine enforces professional conduct standards for physicians and can take action against a physician whose corporate employment arrangement has demonstrably compromised professional judgment. But the Board has not systematically challenged the ownership or governance structures of digital health companies operating in Massachusetts, and formal CPOM enforcement actions against corporate structures specifically are uncommon in the public record.
The 2025 PE Reporting Law: What Changed and Why It Matters
In January 2025, Massachusetts enacted one of the most significant healthcare corporate transparency laws in the country. The law — part of a broader healthcare cost containment and transparency initiative — requires corporate investors in Massachusetts healthcare provider entities to make annual disclosures to the Center for Health Information and Analysis (CHIA), the state agency responsible for monitoring Massachusetts healthcare cost and quality data.
The law was explicitly motivated by legislative concern about the growth of private equity investment in healthcare delivery and the effects of PE-driven management strategies on care quality, access, and cost. But it sweeps broadly enough to apply to venture-backed digital health companies that meet the coverage thresholds, not just traditional PE roll-up platforms.
Who Must Report
The reporting obligation covers "corporate healthcare investors" — a defined category that includes private equity firms, venture capital funds, and other investment entities that hold ownership or contractual interests in Massachusetts healthcare provider entities above specified size thresholds. The law covers both direct equity ownership and contractual arrangements (like MSO management agreements) that give the investor material financial interest in the provider entity's revenues or operations.
For a VC-backed digital health company, the triggering analysis typically turns on: (1) whether the company provides healthcare services to Massachusetts patients through a licensed provider entity; (2) whether the investor's fund holds equity in the MSO or parent company; and (3) whether the total Massachusetts-attributable revenue of the provider entity exceeds the reporting threshold. Companies should not assume they are below threshold without a specific analysis — the law's drafting is broad.
What Must Be Disclosed to CHIA
The annual disclosure filing must cover:
- Full ownership structure of the Massachusetts provider entity, including all entities in the ownership chain up to the ultimate beneficial owners
- Identity and investment thesis of each corporate investor with a material interest in the provider entity
- Financial arrangements between the management entity (MSO) and the provider entity (PC), including management fees, revenue-sharing arrangements, and any profit distributions
- Contractual affiliations between the provider entity and other healthcare entities (referral arrangements, network agreements, payer contracts)
- Financial stability indicators for the provider entity, including information on debt load, operating margins, and capital structure
For transactions above certain size thresholds, quarterly reporting is required rather than annual — meaning large-scale operations must maintain ongoing disclosure processes rather than a single annual filing cycle.
The 2025 PE reporting law does not prohibit venture investment in Massachusetts healthcare. But it requires you to disclose your ownership structure in detail. If that structure isn't clean and well-documented, you'll find out the hard way during your first CHIA filing.
What the Reporting Law Means for MSO-PC Structures
The 2025 law has three direct implications for how venture-backed digital health companies should approach their Massachusetts structure:
Documentation Discipline Is Now Mandatory, Not Optional
If you have a loosely documented MSO-PC arrangement — no executed MSA, informal management fee practices, equity relationships that are unclear — the CHIA disclosure requirement will force you to formalize it. The disclosure asks specific questions about financial flows and ownership that cannot be answered without documented agreements. Companies that have been operating informally will need to conduct a structural cleanup before their first filing.
Management Fees Must Be Defensible
The disclosure requires you to report the financial terms of your MSO's management arrangement with the PC. Fee arrangements that are not at fair market value — or that are structured as revenue percentages in ways that could resemble fee-splitting — will be visible to CHIA and potentially subject to review. This is a new layer of scrutiny that did not exist before January 2025.
The Investor Identity Must Be Disclosable
Your venture investors will be identified in the CHIA disclosure by name and their ownership percentage. This is public information. If your investors have any reason to prefer their Massachusetts healthcare investment not appear in public disclosure filings, you need to have that conversation now, before you are required to report. Most institutional investors are prepared for this type of disclosure, but some fund structures may create complications that require legal analysis.
MSO-PC Structure in Massachusetts: Building It for Dual Compliance
A properly structured Massachusetts MSO-PC needs to satisfy two requirements simultaneously: the traditional CPOM principle that clinical authority stays with the physician, and the new PE reporting law's expectation of transparent, documented financial relationships. Here is what a well-built Massachusetts structure includes:
The Professional Entity
The PC is organized under Massachusetts law, owned by a licensed Massachusetts physician (MD or DO), and governs all clinical operations. Massachusetts permits professional corporations and PLLCs for medical practices, and the choice of entity form affects taxation, liability protection, and transfer mechanics. The physician-owner must exercise genuine clinical authority — not just nominal title — for the structure to satisfy Massachusetts CPOM principles and to correctly characterize the provider entity in CHIA disclosures.
The Management Services Agreement
The MSA between the MSO and the PC must be written with CHIA disclosure in mind. Every financial term — management fees, expense reimbursements, performance bonuses, service-specific charges — should be explicitly stated in the agreement and supportable by a fair market value analysis. Percentage-of-revenue fee structures are a red flag both under Massachusetts fee-splitting principles and under CHIA scrutiny. Fixed fees or fee-for-service structures are more defensible.
Governance Documentation
Clinical governance documentation — including the physician's clinical committee authority, quality assurance records, clinical protocol approval processes, and employment or credentialing decisions for clinical staff — should be maintained as a matter of regular practice, not reconstructed for disclosure purposes. These records demonstrate that the physician actually exercises the clinical authority that the corporate structure nominally grants.
The Boston Health Tech Ecosystem
Whatever the regulatory overhead, Massachusetts remains one of the most important markets for digital health. The Boston-Cambridge ecosystem is anchored by Harvard Medical School, MIT, and a cluster of world-class academic medical centers — Mass General Hospital, Brigham and Women's, Boston Children's, Dana-Farber — that are among the most active clinical research and innovation partners in the country. For digital health companies that need clinical validation studies, academic partnerships, or access to sophisticated physician thought leaders, Boston's depth is unmatched.
The investor community is equally concentrated. Rock Health, GV, General Catalyst, and numerous other healthcare-focused funds have deep Boston roots. Partners Innovation Fund, the MGH/BWH innovation arm, is an active early-stage investor in digital health companies that build within the Partners ecosystem. Operating in Massachusetts — despite the new reporting overhead — gives you access to this network in ways that operating purely from the West Coast does not.
Massachusetts-Specific Compliance Considerations
Board of Registration in Medicine
The Massachusetts Board of Registration in Medicine (BORIM) has jurisdiction over physician conduct. While BORIM has not run systematic audits of digital health corporate structures, it will act on complaints that allege a physician's employment arrangement has compromised independent clinical judgment. Physician-owners at Massachusetts digital health companies should have genuine engagement in clinical governance, not just titular roles.
Attorney General Healthcare Division
Massachusetts AGO Healthcare Division has broad authority to investigate healthcare transactions and business practices that affect the public interest. The AG's office has historically focused on major hospital mergers and health system consolidation, but the 2025 reporting law gives the AG additional visibility into corporate healthcare investor activity that could prompt scrutiny of smaller entities if patterns of concern emerge from CHIA data.
Certificate of Need
Massachusetts has a Certificate of Need (CON) program administered by CHIA. Depending on the scope of services your platform offers and the capital expenditures involved, certain Massachusetts healthcare expansion activities may require CON review. Digital health companies providing remote monitoring, telehealth, or virtual care that does not involve facility-based services generally fall outside traditional CON scope, but confirm this analysis before scaling Massachusetts operations.
Massachusetts CPOM Compliance Checklist
- PC is properly formed under Massachusetts professional corporation or PLLC statutes and owned by a licensed Massachusetts physician
- MSO-PC Management Services Agreement is fully executed with explicit, itemized service descriptions and fair market value fees — no percentage-of-revenue arrangements
- MSA clearly reserves all clinical decision-making authority to the physician-owner; MSO has no authority to override clinical protocols or clinical personnel decisions
- Determine whether company meets CHIA PE reporting thresholds based on Massachusetts patient volume and revenue; seek legal analysis if threshold is unclear
- If CHIA reporting is required, establish annual (or quarterly) disclosure calendar and designate a compliance officer for CHIA filings
- Document financial flows between MSO and PC sufficiently to answer all CHIA disclosure questions without reconstructing records
- Ensure investor identity and ownership percentages are accurately documented and that investors are aware of CHIA disclosure obligations
- Physician-owner maintains records of actual clinical governance activity: meeting minutes, protocol approvals, quality reviews, credentialing decisions
- Telehealth workflows comply with Massachusetts telehealth standards and informed consent requirements
- AKS safe harbor and Stark Law analysis completed for any arrangement involving Medicare or Medicaid billing in Massachusetts
- Confirm whether CON review is required for the scope of Massachusetts healthcare services planned