This is general education for owners, not legal advice. CPOM rules and their enforcement vary substantially by state, and you should confirm your specific structure with healthcare counsel licensed where you operate.
What the doctrine actually says
CPOM is state law (there's no single federal version) built on a simple principle: the practice of medicine should be controlled by licensed physicians, not by lay corporations or investors whose duty runs to profit rather than to the patient. In CPOM states, that translates into rules that a non-physician (or a general business corporation) may not:
- own or control the entity that delivers medical care,
- employ physicians to provide those services, or
- interfere with a physician's independent clinical judgment.
Because injectables, many laser and energy treatments, and prescribing are treated as the practice of medicine in most states, med spas land squarely inside this doctrine — which is also why supervision, delegation, and good-faith-exam rules exist.
Where the MSO model comes in — and where it breaks
The standard answer in CPOM states is the MSO / professional-entity split. A physician (or physician-owned professional corporation) owns the clinical entity and retains control over clinical decisions, hiring of clinical staff, and the chart. A separate management services organization, which the non-physician can own, provides everything non-clinical — marketing, real estate, equipment, administration, non-clinical staffing — under a written management agreement for a fair-market-value fee.
Done properly, it's a legitimate and widely used structure. Done as a costume, it's a liability. Regulators and sophisticated buyers look straight through the paper to the substance:
- Is the management fee actually fair market value, or is it a device to sweep all the profit to the lay owner (which starts to look like prohibited fee-splitting)?
- Does the physician genuinely control clinical decisions, hiring of clinical staff, and the medical record — or is the "owner" a figurehead who's never on site?
- Who actually directs care, sets clinical protocols, and supervises the injectors?
When the answer is "the non-physician runs everything and the doctor is a signature," the structure is form over substance, and that's exactly what gets unwound.
Why this is a today problem, not a someday problem
Two forces make this urgent. First, several states have sharpened enforcement around med spa ownership and physician supervision specifically, because the category grew faster than its compliance did. Second — and this is the one that hits owners in the wallet — a defective structure surfaces in due diligence. When you go to raise capital, take on a partner, or sell to a consolidator, their counsel will find it, and a broken CPOM structure can re-trade your valuation or kill the deal outright.
What to do
- Find out, precisely, whether your state is a strict, moderate, or lenient CPOM jurisdiction — and treat that as a foundational fact about your business, not a detail.
- If you're a non-physician owner in a CPOM state, get the MSO structure reviewed by healthcare counsel — not your general business attorney, and not a template you found online.
- Make the clinical control real. The physician owner must actually own clinical decisions, the chart, and clinical hiring, and the management fee must withstand a fair-market-value test.
- Fix it before a transaction, not during one. Remediating a structure under deal pressure is the most expensive time to do it, and the worst negotiating position to do it from.
CPOM isn't a technicality you can paper over with optimism. It's the load-bearing wall of how a med spa is allowed to exist in much of the country — and the practices that treat it that way are the ones still standing when the regulator, or the buyer, finally looks closely.
