Corporate Practice of Medicine Compliance
Drafts a regulatory compliance framework ensuring lawful separation of corporate ownership from medical practice under CPOM doctrine.
Prerequisites
Gather before drafting:
- Entity details — structure, state(s) of operation, healthcare sectors (medical, dental, optometry, telemedicine, PT)
- Existing agreements — MSA/MSO arrangements, physician employment contracts, governance documents
- Jurisdictional scope — all states where entity operates or plans to expand
- Business model — revenue structure, physician compensation methodology, admin service arrangements
Document Structure
1. Introduction & Scope
- Define CPOM doctrine and application to the entity
- State jurisdictions covered
- Identify violation consequences: license revocation, contract voidability, criminal prosecution, civil fines
2. State-Specific CPOM Analysis
Produce a jurisdictional matrix covering: state, prohibition level (strict/moderate/permissive), key statute, exemptions, enforcement pattern.
- Limit to entity's actual operational footprint — no generic 50-state surveys unless requested
- Note sector-specific variations (telemedicine, dental, optometry, PT face different scrutiny)
- Flag recent legislative changes
- Mark uncertain citations with [VERIFY]
3. Compliant Organizational Structures
Compare models:
| Structure |
Physician Control |
Risk |
Best For |
| PC/PA |
Full ownership + governance |
Low |
Single-state practices |
| MSO + PC |
PC controls all clinical decisions |
Low-Med |
Multi-state platforms |
| Friendly PC |
Nominal — high regulatory scrutiny |
High |
Avoid unless carefully structured |
| PPM |
Shared governance |
Medium |
Large physician groups |
For each: governance requirements, operational boundaries, de facto control scrutiny factors, selection criteria.
Friendly PC warning: Never present as low-risk. Always flag for heightened scrutiny.
4. Management Services Agreement (MSA) Architecture
MSO-permissible: billing, collections, revenue cycle, non-physician HR, facility management, IT, marketing, financial reporting.
Reserved to physician entity (non-delegable):
- Clinical decision-making and patient care protocols
- Physician hiring, credentialing, supervision, termination
- Fee-setting for medical services
- Patient acceptance, treatment, referral, discharge
- Quality standards and peer review
Required MSA provisions: FMV compensation (no clinical-outcome incentives), physician exit rights, physician final authority on clinical matters, mutual CPOM compliance obligations, FMV documentation defensible under AKS/Stark, independent audit rights.
5. Operational Compliance Checklist
Cover these control points with responsible party and frequency:
- Physician hiring/credentialing — PC makes all final decisions
- Clinical protocols — developed by physicians without MSO interference
- Fee setting — PC independently determines charges
- Patient care decisions — no MSO influence on acceptance, treatment, referral, discharge
- Marketing — accurately represents physician-owned nature of practice
- Board minutes — separate PC and MSO minutes documenting independent decision-making
- Approval workflows — clear audit trail showing physician authority
6. Training, Monitoring & Enforcement
- Training: physicians, admin staff, executives — governance responsibilities, authority boundaries, legal risks (onboarding + annual)
- Monitoring: quarterly MSA audits, annual decision-making review, annual FMV assessment, anonymous reporting channel (whistleblower-protected)
- Enforcement escalation: corrective action plan → structural modification → relationship termination
7. Risk Assessment & Mitigation
Address: regulatory penalties, contract voidability, qui tam/FCA exposure, reputational harm, discovery of violations.
Include self-disclosure decision framework: weigh severity, duration, patient harm, cooperation credit, jurisdiction-specific voluntary disclosure programs.
8. Conclusion & Authorization
- Reaffirm ongoing compliance obligation with annual review
- Review triggers: operational changes, new jurisdictions, legislative updates, enforcement actions
- Signature blocks: business entity rep, physician entity leadership, legal counsel, effective date + next review
Critical Checks
- All citations must be verified for current validity; mark uncertain with [VERIFY]
- Address federal overlay (AKS, Stark Law, OIG guidance) alongside state CPOM — never analyze CPOM in isolation
- Friendly PC arrangements always flagged for heightened scrutiny
- Structure document for dual audience: legal/regulatory reviewers and operational implementers
- Reference OIG compliance program guidance and MGMA best practices where applicable
1---2name: cpom-compliance3description: Drafts Corporate Practice of Medicine (CPOM) compliance structure documents for healthcare entities. Covers compliant organizational models (PC/PA, MSO, friendly PC), MSA architecture, operational compliance checklists, and state-specific regulatory analysis. Use when structuring healthcare operations, reviewing CPOM compliance, drafting MSO/MSA arrangements, or advising on physician practice ownership in CPOM-restricted jurisdictions.4---5
6# Corporate Practice of Medicine Compliance
7
8Drafts a regulatory compliance framework ensuring lawful separation of corporate ownership from medical practice under CPOM doctrine.
9
10## Prerequisites
11
12Gather before drafting:
13
141. **Entity details** — structure, state(s) of operation, healthcare sectors (medical, dental, optometry, telemedicine, PT)
152. **Existing agreements** — MSA/MSO arrangements, physician employment contracts, governance documents
163. **Jurisdictional scope** — all states where entity operates or plans to expand
174. **Business model** — revenue structure, physician compensation methodology, admin service arrangements
18
19## Document Structure
20
21### 1. Introduction & Scope
22
23- Define CPOM doctrine and application to the entity
24- State jurisdictions covered
25- Identify violation consequences: license revocation, contract voidability, criminal prosecution, civil fines
26
27### 2. State-Specific CPOM Analysis
28
29Produce a jurisdictional matrix covering: state, prohibition level (strict/moderate/permissive), key statute, exemptions, enforcement pattern.
30
31- Limit to entity's actual operational footprint — no generic 50-state surveys unless requested
32- Note sector-specific variations (telemedicine, dental, optometry, PT face different scrutiny)
33- Flag recent legislative changes
34- Mark uncertain citations with [VERIFY]
35
36### 3. Compliant Organizational Structures
37
38Compare models:
39
40| Structure | Physician Control | Risk | Best For |
41|-----------|------------------|------|----------|
42| **PC/PA** | Full ownership + governance | Low | Single-state practices |
43| **MSO + PC** | PC controls all clinical decisions | Low-Med | Multi-state platforms |
44| **Friendly PC** | Nominal — high regulatory scrutiny | High | Avoid unless carefully structured |
45| **PPM** | Shared governance | Medium | Large physician groups |
46
47For each: governance requirements, operational boundaries, de facto control scrutiny factors, selection criteria.
48
49**Friendly PC warning**: Never present as low-risk. Always flag for heightened scrutiny.
50
51### 4. Management Services Agreement (MSA) Architecture
52
53**MSO-permissible**: billing, collections, revenue cycle, non-physician HR, facility management, IT, marketing, financial reporting.
54
55**Reserved to physician entity (non-delegable)**:
56
57- Clinical decision-making and patient care protocols
58- Physician hiring, credentialing, supervision, termination
59- Fee-setting for medical services
60- Patient acceptance, treatment, referral, discharge
61- Quality standards and peer review
62
63**Required MSA provisions**: FMV compensation (no clinical-outcome incentives), physician exit rights, physician final authority on clinical matters, mutual CPOM compliance obligations, FMV documentation defensible under AKS/Stark, independent audit rights.
64
65### 5. Operational Compliance Checklist
66
67Cover these control points with responsible party and frequency:
68
69- Physician hiring/credentialing — PC makes all final decisions
70- Clinical protocols — developed by physicians without MSO interference
71- Fee setting — PC independently determines charges
72- Patient care decisions — no MSO influence on acceptance, treatment, referral, discharge
73- Marketing — accurately represents physician-owned nature of practice
74- Board minutes — separate PC and MSO minutes documenting independent decision-making
75- Approval workflows — clear audit trail showing physician authority
76
77### 6. Training, Monitoring & Enforcement
78
79- **Training**: physicians, admin staff, executives — governance responsibilities, authority boundaries, legal risks (onboarding + annual)
80- **Monitoring**: quarterly MSA audits, annual decision-making review, annual FMV assessment, anonymous reporting channel (whistleblower-protected)
81- **Enforcement escalation**: corrective action plan → structural modification → relationship termination
82
83### 7. Risk Assessment & Mitigation
84
85Address: regulatory penalties, contract voidability, qui tam/FCA exposure, reputational harm, discovery of violations.
86
87Include self-disclosure decision framework: weigh severity, duration, patient harm, cooperation credit, jurisdiction-specific voluntary disclosure programs.
88
89### 8. Conclusion & Authorization
90
91- Reaffirm ongoing compliance obligation with annual review
92- Review triggers: operational changes, new jurisdictions, legislative updates, enforcement actions
93- Signature blocks: business entity rep, physician entity leadership, legal counsel, effective date + next review
94
95## Critical Checks
96
97- All citations must be verified for current validity; mark uncertain with [VERIFY]
98- Address federal overlay (AKS, Stark Law, OIG guidance) alongside state CPOM — never analyze CPOM in isolation
99- Friendly PC arrangements always flagged for heightened scrutiny
100- Structure document for dual audience: legal/regulatory reviewers and operational implementers
101- Reference OIG compliance program guidance and MGMA best practices where applicable
CaseMark