If you are building a healthcare company in the United States, you have almost certainly encountered the term CPOM. The Corporate Practice of Medicine doctrine is one of the most important legal frameworks governing who can own and operate a medical practice, and misunderstanding it is one of the fastest ways to put your startup at risk.
Whether you are a non-physician founder launching a telehealth platform, a nurse practitioner opening a clinic, or a digital health company offering clinical services, CPOM compliance should be at the top of your legal checklist. This guide breaks down what the doctrine is, where it applies, and how to structure your business accordingly.
What the Corporate Practice of Medicine Doctrine Actually Says
At its core, CPOM is a legal principle that prohibits corporations and non-physician business entities from practicing medicine, employing physicians, or exercising control over medical decision-making. The rationale dates back over a century: lawmakers believed that if corporations could control physicians, profit motives might override patient care.
In practical terms, this means a lay-owned LLC or corporation generally cannot hire doctors as W-2 employees, direct their clinical judgment, or bill for their medical services. The specifics vary dramatically from state to state, but the core idea is consistent: only licensed physicians (or in some states, licensed healthcare professionals) can own a medical practice.
A Brief History of CPOM
The doctrine emerged in the early 1900s when states began passing medical practice acts. Courts upheld these laws based on the theory that a corporation cannot hold a medical license and therefore cannot practice medicine. Over the decades, the doctrine evolved through case law, regulatory guidance, and statutory amendments. California, Texas, and New York have been among the most active in enforcing and clarifying their CPOM rules.
In recent years, the rise of telehealth and digital health has reignited debates about CPOM. Some argue the doctrine is outdated; others point to its ongoing relevance in preventing corporate interference in clinical care.
Which States Enforce CPOM Strictly?
Not all states apply the doctrine with the same intensity. Here is a general breakdown:
Strict Enforcement States
- California — One of the strictest CPOM states with aggressive enforcement by the Medical Board and Attorney General.
- Texas — Enforces CPOM vigorously and has specific statutes addressing the doctrine.
- New York — Strong CPOM framework with detailed regulations on professional corporations.
- Illinois — Actively enforces CPOM, particularly in the telehealth space.
- New Jersey — Strict requirements for professional entity ownership.
Moderate Enforcement States
- Florida — Has CPOM rules but permits certain corporate structures.
- Ohio — Enforces the doctrine but with more flexibility than California or Texas.
- Pennsylvania — Applies CPOM principles through professional corporation statutes.
Lenient or No CPOM States
Some states, including Arizona, Utah, and Colorado, have relaxed or do not meaningfully enforce CPOM, allowing more flexibility in corporate ownership of medical practices.
Key Takeaway: CPOM is not a single federal law. It is a patchwork of state-level statutes, regulations, and case law. If you operate across multiple states, you need a compliance strategy for each one.
Common CPOM Exemptions
Many states carve out specific exemptions to the doctrine. The most common include:
- Hospital and health system exemptions — Licensed hospitals can typically employ physicians directly.
- University and teaching exemptions — Academic medical centers often receive carve-outs.
- Federally Qualified Health Centers (FQHCs) — Community health centers are generally exempt.
- Government-owned facilities — VA hospitals and public clinics are not subject to CPOM.
- Professional corporation exemptions — Some states allow physician-owned PCs to employ other physicians.
For startups and digital health companies, these exemptions rarely apply. Instead, most non-physician founders need to use a management services organization (MSO) paired with a professional corporation (PC) to stay compliant.
How to Comply with CPOM as a Healthcare Startup
The most widely accepted approach for CPOM compliance involves creating a dual-entity structure:
- Management Services Organization (MSO) — Owned by the founder or investors, this entity handles all non-clinical operations: technology, marketing, billing, staffing of non-clinical personnel, and administrative functions.
- Professional Corporation (PC) — Owned by a licensed physician (or other qualified healthcare professional), this entity employs or contracts with clinicians and is responsible for all clinical decisions and medical services.
The two entities are linked by a Management Services Agreement (MSA), which defines the administrative services the MSO provides to the PC and the fees the PC pays in return. When structured properly, this arrangement allows non-physician entrepreneurs to build and scale healthcare businesses while keeping clinical governance in the hands of licensed professionals.
Why CPOM Matters More Than Ever
Enforcement actions against companies that violate CPOM laws have increased in recent years, particularly in California and Texas. Penalties can include loss of medical licenses, voided contracts, corporate dissolution, and even criminal charges. For venture-backed companies, a CPOM violation discovered during due diligence can kill a funding round entirely.
Getting your corporate structure right from the beginning is not just a legal formality. It is a foundational requirement for building a sustainable, scalable healthcare business.