DFY Telehealth

Friendly PC and MSO Structures for Telehealth: How a Non-Doctor Owns a Telehealth Brand

Why a lay-owned telehealth brand usually can't employ doctors, how the MSO and friendly PC model works, which states are strict, the 2025–2026 law changes, and the prescribing rules that come with it.

Updated October 18, 2026 · 8 min read

Short answer: in most US states, a company owned by non-doctors can't employ physicians or control their medical decisions. That rule is the corporate practice of medicine (CPOM). Telehealth brands work around it in one of two ways. Either a clinician network's own medical group provides the care, or the brand sets up an MSO (its management company) that serves a physician-owned "friendly PC." Since 2025, Oregon, California and others have tightened the rules on how much control an MSO can have.

Status checked October 18, 2026. This guide explains the landscape; it isn't legal advice. Structures like these need a healthcare attorney licensed in the states you serve.

What the corporate practice of medicine is

CPOM is a state-law doctrine, built from statutes, court cases, attorney general opinions and medical board policy, that stops lay people and ordinary business corporations from practicing medicine, employing physicians to practice medicine, or controlling physicians' clinical judgment (Epstein Becker Green). It varies widely: some states enforce it strictly, some have exceptions, and some have no doctrine at all.

Telehealth doesn't get you around it. The rules that generally apply are those of the state where the patient is located, so a brand that serves all 50 states has to meet the strictest of them (Epstein Becker Green).

California is the classic strict state. Its law says corporations have no professional rights or privileges (Bus. & Prof. Code §2400), and its courts have long held that a corporation can't practice medicine by employing doctors. The Medical Board of California has warned that a physician who serves as medical director for a lay-owned business can be found to be aiding and abetting unlicensed practice (Medical Board of California).

The two ways telehealth brands handle it

Option 1: use a clinician network's medical group

Most new brands start here. The clinician network supplies licensed doctors and nurse practitioners through its own affiliated professional entity, and the brand contracts with it as a non-clinical business. Several networks say so in their own materials, checked October 2026:

Network What it says about the medical entity
Beluga Health Care is delivered by "Beluga Health, P.A. or one of its affiliated professional corporations" (terms)
MD Integrations "No charge for the Professional Corporation, aka the 'Medical Group'" (MD Integrations)
Wheel Medical services are provided by the "Wheel Provider Group" of independent professional entities (terms)
OpenLoop Provides clinicians in all 50 states; its site doesn't name the medical entity (OpenLoop)

For a side-by-side of these and other partners, see OpenLoop alternatives: telehealth infrastructure partners compared.

This is the fastest route. The trade-off is that the clinical relationship sits with the network. If you switch networks later, patients have to move to a new medical group.

Option 2: your own MSO and friendly PC

Brands that want to own the clinical relationship, or keep the freedom to change vendors, build their own:

  • The PC (professional corporation) is owned by a licensed physician. It employs or contracts with the clinicians and owns the clinical side: the patient relationship, prescribing, medical records and clinical policy.
  • The MSO (management services organization) is usually the brand company. It provides everything non-clinical: technology, marketing, billing support, staff and administration.
  • A management services agreement sets the MSO's fee. It should be fair market value for the services, shouldn't vary with the volume or value of referrals, and the method should be documented. A fee set as a percentage of professional revenue is the classic fee-splitting risk (MedCity News).
  • A transfer restriction agreement (also called a succession or continuity agreement) limits the physician owner's ability to sell the PC's shares, and lets the MSO require a transfer to a qualified replacement doctor after events like death, disability or loss of license. It's the part that draws the most regulatory scrutiny.

The risks to design around

Risk What it means
De facto control The MSO controls clinical decisions, or the business decisions that drive them (hiring and firing clinicians, coding, protocols, payer contracts), so the PC is a shell. Courts and attorneys general can void the contracts (Foley).
Succession rights In March 2026 California's attorney general filed a brief arguing that an MSO's right to force the physician owner to sell to an MSO-chosen successor violates CPOM. The case is still pending (California AG).
Fee-splitting Many states bar physicians from sharing professional fees with unlicensed parties. Flat or cost-plus fair-market-value fees are the usual answer.
Kickbacks The federal Anti-Kickback Statute covers anything paid to induce referrals of services paid by Medicare or Medicaid, and many states have laws that apply to every payer (HHS OIG).
Telemedicine fraud red flags HHS OIG's 2022 fraud alert flags clinician pay tied to the number of orders, too little patient contact to judge medical need, and a narrow set of products always being prescribed (HHS OIG).

The last row matters for DTC brands whichever structure you use. Pay clinicians for their time and work, never per prescription, and make sure they can and do say no.

What changed in 2025 and 2026

State Law What it does
Oregon SB 951, signed June 9, 2025 Bars an MSO's owners, directors and staff from also owning or running the PC it manages, with narrow exceptions, and limits MSO control over hiring, staffing, coding, pricing and payer contracts. Applies from Jan. 1, 2026 to new entities and Jan. 1, 2029 to existing ones. Law firms report a carve-out for telemedicine entities with no physical patient site in Oregon (Oregon Legislature, Foley).
California SB 351, signed Oct. 6, 2025 Private equity groups and hedge funds can't interfere with physicians' clinical judgment or control hiring, coding or payer contracting; enforceable by the attorney general. In effect Jan. 1, 2026 (Kirkland & Ellis).
California AB 1415, signed Oct. 2025 MSOs must give the state's Office of Health Care Affordability 90 days' notice of covered transactions. In effect Jan. 1, 2026 (Goodwin).
Massachusetts H.5159, signed Jan. 8, 2025 Extends deal notice and review to private equity investors and MSOs (Sidley).
Vermont Act 133, signed June 15, 2026 Bars unlicensed parties, private equity and hedge funds from controlling clinical decisions, and requires MSO reporting.
Washington SB 5387 A CPOM codification bill failed in 2026 (Washington Legislature).

Indiana, Maine, Illinois, Connecticut and Rhode Island also added deal-notice or ownership-reporting rules, and a federal "Stop Corporate Takeovers of Physicians Act" was introduced in September 2026 (Foley). Most of these laws aim at private equity and large deals rather than small DTC brands, but the direction is clear: regulators are looking at who really controls the practice.

Which states are strict

There's no free, authoritative 50-state table. The reference survey, from the American Health Lawyers Association, is paywalled. Three recent compliance guides (Cuvo, Sept. 2026, MedPath, June 2026, Permit Health, Dec. 2025) broadly agree on these groups:

Group States
Strict (named by at least two of the guides) California, Illinois, Massachusetts, Nevada, New Jersey, New York, Oregon, Texas
Strong Arkansas, Colorado, Kansas, Michigan, Minnesota, North Carolina, North Dakota, Tennessee, Washington, West Virginia, Wisconsin
Limited Arizona, Connecticut, Indiana, Montana, Pennsylvania, South Carolina, South Dakota
No doctrine, or weak Alabama, Alaska, Delaware, Florida (clinic licensing may apply), Hawaii, Maine, Missouri, Nebraska, New Hampshire, New Mexico, Oklahoma, Utah, Virginia, Wyoming
Unsettled or disputed D.C., Georgia, Idaho, Iowa, Kentucky, Louisiana, Maryland, Mississippi, Ohio, Rhode Island

Use it as a map, not a legal opinion. A "no doctrine" state can still have fee-splitting, clinic licensing or advertising rules, and states with a doctrine often have exceptions.

The prescribing rules that come with the structure

Licensure follows the patient. Clinicians generally need a license, or a recognized exception, in the state where the patient is at the time of the visit (CCHP). The Interstate Medical Licensure Compact speeds this up for physicians in 44 states plus D.C. and Guam, but it doesn't create a multistate license: each state's license is still issued and paid for separately (IMLCC).

A questionnaire alone often isn't enough. Many states explicitly say a static online questionnaire can't establish the relationship needed to prescribe, including Colorado, Delaware, Idaho, Iowa, Maryland, New Jersey, Virginia and Wisconsin. Maryland requires a live audio-video evaluation before treating, with exceptions, and Rhode Island doesn't accept async-only evaluations (CCHP). Iowa distinguishes an adaptive, interactive online interview, which can be acceptable, from a static form. That's why serious DTC intakes use branching questionnaires plus real clinician messaging or video where required.

Controlled substances: the deadline at the end of 2026

The Ryan Haight Act (21 U.S.C. 829(e)) requires at least one in-person evaluation before a controlled substance is prescribed over the internet. Since 2020 the DEA has waived that through temporary extensions. The current one, the fourth, runs through December 31, 2026 (Federal Register). A permanent "special registration" rule was proposed in January 2025, and trade press reported a final version under White House review in fall 2026 (telehealth.org). As of October 18, 2026, no further extension had been announced.

This matters if your brand offers testosterone (Schedule III), phentermine (Schedule IV), ADHD stimulants (Schedule II) or ketamine (Schedule III). If neither a final rule nor another extension arrives, the in-person requirement returns on January 1, 2027 for most new patients. GLP-1s such as semaglutide and tirzepatide are not controlled substances. Some states are stricter than the DEA anyway; Alabama and Louisiana, for example, generally require an in-person visit within the past year for controlled substances by telehealth (CCHP).

Choosing a structure for your brand

  • Launching your first brand? A clinician network's medical group is usually the right start: faster, cheaper, and the network carries the licensing work. Put in writing who the medical entity is, who owns patient records, and how patients transfer if you leave.
  • Scaling, raising money or planning to switch vendors? Your own MSO and friendly PC gives you control of the clinical relationship, at the cost of legal setup in every strict state you serve and the 2025–2026 control rules above.
  • Either way: the brand's marketing, clinician pay and protocols have to stay clear of the de facto control, fee-splitting and OIG red flags. LegitScript also checks your partners and clinical process when you apply (our LegitScript guide).

Want this built for you?

We build fully operational telehealth brands: compliance, providers, pharmacy and platform. The qualification assessment takes about 2 minutes.

See If You Qualify

This guide is general information for people building telehealth businesses. It is not legal, medical or regulatory advice, and rules change; check the sources and talk to a qualified attorney before acting on it.