Medspa Ownership & MSO Structure Rules by State

CPOM prohibits non-physicians from owning, controlling, or directing a medical practice. The doctrine rests on the theory that lay ownership creates conflicts of interest—financial incentives that could override clinical judgment. A non-physician owner cannot dictate clinical decisions, set compensation in ways that incentivize unnecessary treatment, or control hiring and firing of clinical staff. However, CPOM does not prohibit non-physicians from owning the building, the equipment, or the business entity that employs administrative staff. This distinction is the foundation of the MSO model. The strength and scope of CPOM enforcement varies dramatically. Some states (California, Texas, Florida, New York) have explicit, well-litigated statutes. Others rely on common law or board interpretation. A handful have no CPOM prohibition at all. The penalty for violation ranges from license revocation to criminal charges, depending on state.

Thirteen states enforce strict CPOM prohibitions: California, Texas, Florida, New York, Ohio, Pennsylvania, Illinois, North Carolina, Georgia, Virginia, Tennessee, Michigan, and Arizona. In these jurisdictions, a medical practice—including a medspa offering injectables, laser, or other medical services—must be owned and controlled by a licensed physician. Non-physicians may hold equity or management roles only if a physician retains ultimate authority and financial control. Florida and Texas, major aesthetic markets, are particularly rigid: they require physician ownership and prohibit lay investors from holding equity in the medical entity itself. California permits non-physician investment in the business but requires physician control of clinical decisions and staff. New York similarly allows non-physician involvement but mandates physician governance. Violating these rules can result in license suspension or revocation for the physician and civil or criminal liability for the non-physician owner. A practice in these states cannot be structured as a lay-owned MSO with a physician as a mere contractor or employee without triggering enforcement risk.

An MSO is a separate, non-physician-owned entity that provides administrative, operational, and business services to a physician-owned medical practice. The MSO owns the building, equipment, supplies, and employs administrative and clinical support staff. The physician-owned medical practice (the "professional corporation" or PC) owns the clinical license and employs the physicians. The two entities are bound by a service agreement. The MSO profits from management fees, equipment leasing, and supply markup; the PC retains clinical control and medical-license revenue. This structure is legal in most states if properly documented—the service agreement must clearly preserve physician control, clinical independence, and prohibition of lay direction of medical decisions. However, state boards increasingly scrutinize MSOs for de facto lay control. Red flags include: MSO ownership of the physician's personal income, MSO control over hiring/firing of physicians, MSO-directed treatment protocols, or MSO compensation tied to patient volume or procedure type. The IRS and state attorneys general have also challenged MSO structures that appear designed primarily to evade CPOM. A compliant MSO requires clear separation of roles, arm's-length pricing, and genuine physician autonomy.

Approximately fifteen states have no explicit CPOM statute or have interpreted their law to permit non-physician ownership of medical practices under certain conditions. These include Colorado, Nevada, Utah, Arizona (in some contexts), and several others. In these jurisdictions, a non-physician can own a medspa outright, provided a licensed physician is on staff and supervises clinical work. The physician need not own equity; they function as a medical director or supervising provider. Nevada and Colorado are popular for this reason—they allow lay ownership with physician supervision, making single-unit and multi-unit expansion simpler. However, even in permissive states, the supervising physician must have genuine authority and cannot be a figurehead. State boards in these states have also begun enforcing standards around physician supervision, so a non-physician owner cannot simply hire a part-time physician and operate autonomously. The absence of a CPOM statute does not mean absence of regulation; it means the state relies on scope-of-practice and supervision rules rather than ownership prohibition.

State medical boards and attorneys general have intensified scrutiny of MSO structures over the past five years, particularly in high-volume aesthetic markets. Investigations typically focus on: whether the physician retains genuine control over clinical decisions, whether the MSO is directing treatment or patient volume, whether compensation arrangements incentivize unnecessary procedures, and whether the structure is a transparent business arrangement or a disguised lay-ownership scheme. California, Texas, and Florida have brought enforcement actions against MSOs and their physician partners for CPOM violations. The FTC has also examined whether MSO consolidation in aesthetics raises antitrust concerns. A practice owner should assume that any MSO structure will be subject to board audit or inquiry, particularly if the practice expands rapidly or attracts competitor complaints. Documentation is critical: service agreements, physician employment contracts, board minutes, and fee schedules should clearly demonstrate physician control and arm's-length pricing. Failure to maintain this documentation is often the basis for enforcement action, even if the structure is theoretically compliant.

If you operate or plan to operate in multiple states, conduct a state-by-state legal audit before expansion. Retain local counsel in each state to review your ownership and MSO structure against that state's CPOM statute, board rules, and case law. Do not assume that a structure compliant in one state will work in another. For example, a Nevada-based lay owner cannot simply replicate that structure in California or Texas without restructuring. If you use an MSO, ensure the service agreement is reviewed by counsel in each state where the MSO operates. Maintain clear separation between the MSO and the physician-owned practice: separate bank accounts, separate board meetings, separate decision-making authority. Document physician involvement in all clinical and business decisions. If you employ physicians as W-2 employees, ensure compensation is not tied to patient volume or procedure type in ways that could be viewed as lay direction of clinical judgment. Finally, maintain compliance with state-specific physician supervision requirements, which vary: some states require on-site supervision; others permit remote supervision; some require specific ratios of physicians to mid-level providers. Consult your state board's guidance or a compliance attorney before scaling.

Enforcement of CPOM and MSO compliance is fragmented across state medical boards and attorneys general offices. Some boards (California Medical Board, Texas Medical Board, Florida Board of Medicine) have dedicated staff and clear enforcement records. Others have limited resources and focus on complaints rather than proactive audits. However, do not assume a quiet board means permissiveness. Boards often act in response to competitor complaints, patient complaints, or media attention. A rapid expansion or high-profile marketing campaign can trigger scrutiny. Additionally, if a physician partner is disciplined for CPOM violation, the non-physician owner may face civil liability or be barred from operating in that state. Conversely, some state boards have issued guidance clarifying permissible MSO structures—for example, the Colorado Medical Board has published guidance on physician supervision and lay management. Proactively engaging with your state board to confirm compliance posture can reduce risk. Finally, understand that CPOM enforcement is sometimes weaponized in competitive disputes: a rival practice may file a complaint alleging CPOM violation. Even a meritless complaint triggers investigation and legal expense. Robust documentation and a clear, defensible structure are your best protection.

CPOM rules are state-specific and strictly enforced in major markets. Thirteen states prohibit lay ownership outright; others permit it with physician supervision. MSO structures are legal in most states if physician control is genuine and documented, but boards are scrutinizing them closely. Multi-state operators must audit each state's rules separately and maintain clear separation between lay-owned business services and physician-controlled clinical practice. Consult local counsel before expanding; do not assume portability of structure across state lines.