Friendly PC and MSO Structures for Telehealth: How a Non-Doctor Owns a Telehealth Brand
Why a lay-owned telehealth brand usually can't employ doctors, how the MSO and friendly PC model works, which states are strict, the 2025–2026 law changes, and the prescribing rules that come with it.
Updated October 18, 2026 · 8 min read
In this guide
Short answer: in most US states, a company owned by non-doctors can't employ physicians or control their medical decisions. That rule is the corporate practice of medicine (CPOM). Telehealth brands work around it in one of two ways. Either a clinician network's own medical group provides the care, or the brand sets up an MSO (its management company) that serves a physician-owned "friendly PC." Since 2025, Oregon, California and others have tightened the rules on how much control an MSO can have.
Status checked October 18, 2026. This guide explains the landscape; it isn't legal advice. Structures like these need a healthcare attorney licensed in the states you serve.
What the corporate practice of medicine is
CPOM is a state-law doctrine, built from statutes, court cases, attorney general opinions and medical board policy, that stops lay people and ordinary business corporations from practicing medicine, employing physicians to practice medicine, or controlling physicians' clinical judgment (Epstein Becker Green). It varies widely: some states enforce it strictly, some have exceptions, and some have no doctrine at all.
Telehealth doesn't get you around it. The rules that generally apply are those of the state where the patient is located, so a brand that serves all 50 states has to meet the strictest of them (Epstein Becker Green).
California is the classic strict state. Its law says corporations have no professional rights or privileges (Bus. & Prof. Code §2400), and its courts have long held that a corporation can't practice medicine by employing doctors. The Medical Board of California has warned that a physician who serves as medical director for a lay-owned business can be found to be aiding and abetting unlicensed practice (Medical Board of California).
The two ways telehealth brands handle it
Option 1: use a clinician network's medical group
Most new brands start here. The clinician network supplies licensed doctors and nurse practitioners through its own affiliated professional entity, and the brand contracts with it as a non-clinical business. Several networks say so in their own materials, checked October 2026:
| Network | What it says about the medical entity |
|---|---|
| Beluga Health | Care is delivered by "Beluga Health, P.A. or one of its affiliated professional corporations" (terms) |
| MD Integrations | "No charge for the Professional Corporation, aka the 'Medical Group'" (MD Integrations) |
| Wheel | Medical services are provided by the "Wheel Provider Group" of independent professional entities (terms) |
| OpenLoop | Provides clinicians in all 50 states; its site doesn't name the medical entity (OpenLoop) |
For a side-by-side of these and other partners, see OpenLoop alternatives: telehealth infrastructure partners compared.
This is the fastest route. The trade-off is that the clinical relationship sits with the network. If you switch networks later, patients have to move to a new medical group.
Option 2: your own MSO and friendly PC
Brands that want to own the clinical relationship, or keep the freedom to change vendors, build their own:
- The PC (professional corporation) is owned by a licensed physician. It employs or contracts with the clinicians and owns the clinical side: the patient relationship, prescribing, medical records and clinical policy.
- The MSO (management services organization) is usually the brand company. It provides everything non-clinical: technology, marketing, billing support, staff and administration.
- A management services agreement sets the MSO's fee. It should be fair market value for the services, shouldn't vary with the volume or value of referrals, and the method should be documented. A fee set as a percentage of professional revenue is the classic fee-splitting risk (MedCity News).
- A transfer restriction agreement (also called a succession or continuity agreement) limits the physician owner's ability to sell the PC's shares, and lets the MSO require a transfer to a qualified replacement doctor after events like death, disability or loss of license. It's the part that draws the most regulatory scrutiny.
The risks to design around
| Risk | What it means |
|---|---|
| De facto control | The MSO controls clinical decisions, or the business decisions that drive them (hiring and firing clinicians, coding, protocols, payer contracts), so the PC is a shell. Courts and attorneys general can void the contracts (Foley). |
| Succession rights | In March 2026 California's attorney general filed a brief arguing that an MSO's right to force the physician owner to sell to an MSO-chosen successor violates CPOM. The case is still pending (California AG). |
| Fee-splitting | Many states bar physicians from sharing professional fees with unlicensed parties. Flat or cost-plus fair-market-value fees are the usual answer. |
| Kickbacks | The federal Anti-Kickback Statute covers anything paid to induce referrals of services paid by Medicare or Medicaid, and many states have laws that apply to every payer (HHS OIG). |
| Telemedicine fraud red flags | HHS OIG's 2022 fraud alert flags clinician pay tied to the number of orders, too little patient contact to judge medical need, and a narrow set of products always being prescribed (HHS OIG). |
The last row matters for DTC brands whichever structure you use. Pay clinicians for their time and work, never per prescription, and make sure they can and do say no.
What changed in 2025 and 2026
| State | Law | What it does |
|---|---|---|
| Oregon | SB 951, signed June 9, 2025 | Bars an MSO's owners, directors and staff from also owning or running the PC it manages, with narrow exceptions, and limits MSO control over hiring, staffing, coding, pricing and payer contracts. Applies from Jan. 1, 2026 to new entities and Jan. 1, 2029 to existing ones. Law firms report a carve-out for telemedicine entities with no physical patient site in Oregon (Oregon Legislature, Foley). |
| California | SB 351, signed Oct. 6, 2025 | Private equity groups and hedge funds can't interfere with physicians' clinical judgment or control hiring, coding or payer contracting; enforceable by the attorney general. In effect Jan. 1, 2026 (Kirkland & Ellis). |
| California | AB 1415, signed Oct. 2025 | MSOs must give the state's Office of Health Care Affordability 90 days' notice of covered transactions. In effect Jan. 1, 2026 (Goodwin). |
| Massachusetts | H.5159, signed Jan. 8, 2025 | Extends deal notice and review to private equity investors and MSOs (Sidley). |
| Vermont | Act 133, signed June 15, 2026 | Bars unlicensed parties, private equity and hedge funds from controlling clinical decisions, and requires MSO reporting. |
| Washington | SB 5387 | A CPOM codification bill failed in 2026 (Washington Legislature). |
Indiana, Maine, Illinois, Connecticut and Rhode Island also added deal-notice or ownership-reporting rules, and a federal "Stop Corporate Takeovers of Physicians Act" was introduced in September 2026 (Foley). Most of these laws aim at private equity and large deals rather than small DTC brands, but the direction is clear: regulators are looking at who really controls the practice.
Which states are strict
There's no free, authoritative 50-state table. The reference survey, from the American Health Lawyers Association, is paywalled. Three recent compliance guides (Cuvo, Sept. 2026, MedPath, June 2026, Permit Health, Dec. 2025) broadly agree on these groups:
| Group | States |
|---|---|
| Strict (named by at least two of the guides) | California, Illinois, Massachusetts, Nevada, New Jersey, New York, Oregon, Texas |
| Strong | Arkansas, Colorado, Kansas, Michigan, Minnesota, North Carolina, North Dakota, Tennessee, Washington, West Virginia, Wisconsin |
| Limited | Arizona, Connecticut, Indiana, Montana, Pennsylvania, South Carolina, South Dakota |
| No doctrine, or weak | Alabama, Alaska, Delaware, Florida (clinic licensing may apply), Hawaii, Maine, Missouri, Nebraska, New Hampshire, New Mexico, Oklahoma, Utah, Virginia, Wyoming |
| Unsettled or disputed | D.C., Georgia, Idaho, Iowa, Kentucky, Louisiana, Maryland, Mississippi, Ohio, Rhode Island |
Use it as a map, not a legal opinion. A "no doctrine" state can still have fee-splitting, clinic licensing or advertising rules, and states with a doctrine often have exceptions.
The prescribing rules that come with the structure
Licensure follows the patient. Clinicians generally need a license, or a recognized exception, in the state where the patient is at the time of the visit (CCHP). The Interstate Medical Licensure Compact speeds this up for physicians in 44 states plus D.C. and Guam, but it doesn't create a multistate license: each state's license is still issued and paid for separately (IMLCC).
A questionnaire alone often isn't enough. Many states explicitly say a static online questionnaire can't establish the relationship needed to prescribe, including Colorado, Delaware, Idaho, Iowa, Maryland, New Jersey, Virginia and Wisconsin. Maryland requires a live audio-video evaluation before treating, with exceptions, and Rhode Island doesn't accept async-only evaluations (CCHP). Iowa distinguishes an adaptive, interactive online interview, which can be acceptable, from a static form. That's why serious DTC intakes use branching questionnaires plus real clinician messaging or video where required.
Controlled substances: the deadline at the end of 2026
The Ryan Haight Act (21 U.S.C. 829(e)) requires at least one in-person evaluation before a controlled substance is prescribed over the internet. Since 2020 the DEA has waived that through temporary extensions. The current one, the fourth, runs through December 31, 2026 (Federal Register). A permanent "special registration" rule was proposed in January 2025, and trade press reported a final version under White House review in fall 2026 (telehealth.org). As of October 18, 2026, no further extension had been announced.
This matters if your brand offers testosterone (Schedule III), phentermine (Schedule IV), ADHD stimulants (Schedule II) or ketamine (Schedule III). If neither a final rule nor another extension arrives, the in-person requirement returns on January 1, 2027 for most new patients. GLP-1s such as semaglutide and tirzepatide are not controlled substances. Some states are stricter than the DEA anyway; Alabama and Louisiana, for example, generally require an in-person visit within the past year for controlled substances by telehealth (CCHP).
Choosing a structure for your brand
- Launching your first brand? A clinician network's medical group is usually the right start: faster, cheaper, and the network carries the licensing work. Put in writing who the medical entity is, who owns patient records, and how patients transfer if you leave.
- Scaling, raising money or planning to switch vendors? Your own MSO and friendly PC gives you control of the clinical relationship, at the cost of legal setup in every strict state you serve and the 2025–2026 control rules above.
- Either way: the brand's marketing, clinician pay and protocols have to stay clear of the de facto control, fee-splitting and OIG red flags. LegitScript also checks your partners and clinical process when you apply (our LegitScript guide).
Sources (checked October 18, 2026): Epstein Becker Green: CPOM 50-state survey · Epstein Becker Green: CPOM in telehealth · MedCity News: friendly PC contracts · HHS OIG: fraud and abuse laws · HHS OIG: telemedicine fraud alert (2022) · Oregon SB 951 · Foley on SB 951 · Kirkland & Ellis on SB 351 and AB 1415 · California AG amicus brief · CCHP: online prescribing · IMLCC · 21 U.S.C. 829 · DEA fourth temporary extension · Beluga terms · Wheel terms · MD Integrations
Want this built for you?
We build fully operational telehealth brands: compliance, providers, pharmacy and platform. The qualification assessment takes about 2 minutes.
See If You QualifyKeep reading
OpenLoop Alternatives: Telehealth Infrastructure Partners Compared (2026)
OpenLoop, Beluga Health, MD Integrations, Wheel, SteadyMD, Qualiphy, Telegra, CareValidate, Bask, Healthie and LifeFile: what each one actually provides, who supplies the medical group, published pricing, and how to choose.
LegitScript Certification for Telehealth: Cost, Timeline and What Gets Rejected
What LegitScript certification is, when a telehealth brand needs it (Google, Meta, card processing), what it costs in 2026, the nine standards, and the issues that hold applications up.
503A vs 503B Compounding Pharmacies, and What's Legal for Compounded GLP-1s in 2026
How 503A pharmacies and 503B outsourcing facilities differ, which one a telehealth brand uses, where compounded semaglutide and tirzepatide stand in October 2026, and the marketing claims FDA keeps citing.
This guide is general information for people building telehealth businesses. It is not legal, medical or regulatory advice, and rules change; check the sources and talk to a qualified attorney before acting on it.