Medspa Ownership & MSO Structure Rules by State

The CPOM doctrine exists in roughly 20–25 states with meaningful enforcement. California, Texas, Florida, New York, Pennsylvania, Illinois, and Massachusetts are among the strictest; Arizona, Colorado, Georgia, and North Carolina also enforce it. The rule typically states that a non-physician (or non-licensed provider) cannot own, operate, or control a medical practice. In CPOM states, a licensed physician, PA, or NP must hold majority ownership and ultimate decision-making authority over clinical matters. Non-CPOM states—including Nevada, Delaware, Wyoming, and others—permit lay ownership and investor control. The distinction matters enormously: a PE firm can own a medspa outright in Nevada but cannot in California without a physician partner. State medical boards, not federal law, enforce CPOM. Penalties range from license suspension to corporate fines. Before choosing your entity structure or accepting capital, verify your state's specific rule by consulting your state medical board's website and a healthcare attorney licensed in your state.

An MSO (Management Services Organization) is a non-medical entity that contracts with a separately owned medical practice to provide administrative, operational, and business services—billing, scheduling, marketing, HR, compliance, facility management—but does not employ the clinicians or make clinical decisions. The medical practice (owned by a licensed provider) remains the legal entity that holds the medical license, employs or contracts with clinicians, and bears clinical liability. The MSO is owned by investors, PE firms, or lay operators. The MSO and medical practice sign a Management Services Agreement that specifies which services the MSO provides, the fee (often a percentage of revenue or fixed monthly amount), and that the medical practice retains full clinical autonomy. This structure allows PE capital and lay operators to scale across CPOM states: the PE firm owns the MSO; a physician partner (often recruited or incentivized) owns the medical practice; the MSO handles growth, systems, and profit extraction. The model works only if the separation is genuine—if the MSO genuinely does not control clinical decisions, staffing, or protocols. Courts and regulators scrutinize MSO agreements for hidden control.

In an MSO model, the physician partner typically owns the medical practice but may have limited day-to-day operational role. Compensation structures vary. The physician may receive a salary (W-2 or 1099), a percentage of practice revenue, a per-procedure fee, or a profit distribution from the medical practice after the MSO fee is paid. Some arrangements include equity in the MSO itself, aligning the physician's long-term upside with the investors'. Others keep the physician as a pure service provider. The risk: if the MSO fee is so high that the medical practice is left with minimal margin, or if the MSO dictates staffing, protocols, or patient volume targets, regulators may view the physician as a puppet and the MSO as the true controller—violating CPOM. Conversely, if the physician is genuinely autonomous and the MSO fee is reasonable, the structure is defensible. Physicians in MSO deals should have independent legal counsel and understand their actual control and liability. They are the license holder and the clinical decision-maker; they cannot outsource that responsibility.

CPOM rules are not monolithic. California prohibits non-physician ownership but permits professional corporations (PCs) where a physician holds at least 51% of shares; MSOs are common. Texas also enforces CPOM strictly but has carved out exceptions for certain entities. Florida permits lay ownership of aesthetic practices that do not perform invasive procedures (e.g., laser, injectables) under certain conditions, but medical practices must be physician-owned. New York enforces CPOM but allows professional service corporations with physician control. Nevada has no CPOM doctrine and permits full lay ownership. Arizona enforces CPOM but permits MSO structures. The American Medical Association (AMA) and state medical societies publish guidance, but enforcement and interpretation vary by board and prosecutor. Some states have issued advisory opinions on MSOs; others have not. Before structuring a deal, obtain a healthcare attorney's opinion letter specific to your state. Do not assume that an MSO structure that works in one state will work in another.

MSO structures are legal and common, but they attract regulatory attention. State medical boards and the Department of Justice (DOJ) have challenged MSOs that they view as disguised lay control. Red flags include: MSO control over hiring/firing of clinicians, MSO dictation of clinical protocols or treatment plans, MSO setting patient volume or revenue targets that drive clinical decisions, MSO taking an unsustainably high percentage of revenue, or lack of genuine separation between MSO and medical practice operations. Anti-kickback concerns can also arise if the MSO arrangement is structured as a disguised payment to the physician for referrals. Compliance requires clear documentation: a written MSO agreement that specifies the MSO's non-clinical role, regular board minutes showing the medical practice's independent decision-making, separate accounting and bank accounts, and genuine operational separation. If you are a PE-backed roll-up or multi-state operator, work with a healthcare compliance firm to audit your MSO agreements and ensure they withstand scrutiny. Regulators are increasingly focused on private-equity-backed healthcare; do not assume your structure is safe just because competitors use it.

Step 1: Determine your state's CPOM status. Consult your state medical board or a healthcare attorney. Step 2: If CPOM applies, identify whether you need a physician partner. If you are a lay operator seeking capital, you will likely need one. Step 3: If using an MSO, draft a clear, defensible MSO agreement with a healthcare attorney. Specify that the medical practice retains clinical autonomy, that the MSO provides only administrative services, and that the fee is reasonable. Step 4: Ensure separate governance: the medical practice has its own board, bylaws, and decision-making process; the MSO has its own. Step 5: Document everything. Keep board minutes, maintain separate bank accounts, and ensure the medical practice's license and liability insurance are in its name. Step 6: If accepting PE capital, ensure the investor understands the CPOM constraint and that the structure complies with it. Investor pressure to maximize revenue or cut costs can create compliance risk if it translates into MSO control over clinical decisions. Step 7: Revisit your structure if you expand to new states; rules differ.