What Constitutes a CPOM Violation
CPOM violations occur when:
- Non-physicians own or control the medical practice entity
- Business interests interfere with physician medical judgment
- Physicians lack genuine independence in clinical decisions
- Fee-splitting arrangements undermine physician control
- Management companies control medical operations
Common CPOM Violations in Med Spas
Improper Business Ownership
Violations include:
- Non-physician directly owning the medical practice
- Non-physician controlling the professional corporation
- Business entity employing physicians to perform medical services
- Sham physician ownership (physician as figurehead only)
Inadequate Physician Independence
Red flags for medical boards:
- Business owner making medical decisions
- Physician unable to refuse inappropriate procedures
- Protocols driven by profit rather than medical judgment
- Business pressure overriding clinical standards
Fee-Splitting Violations
Improper financial arrangements:
- Excessive management fees that undermine physician PC viability
- Payment structures that incentivize inappropriate treatment
- Revenue sharing that gives non-physicians control over medical practice
- Compensation tied to specific procedure volumes
Lack of Proper Supervision
Common supervision violations:
- Physician rarely or never present at facility
- Unlicensed staff performing medical procedures
- Missing or inadequate protocols
- No physician oversight of patient care
How Medical Boards Identify CPOM Violations
Boards investigate through:
Document Review
Examining:
- Business formation documents
- Management services agreements
- Medical director contracts
- Financial arrangements and fee structures
- Corporate ownership records
Interviews
Speaking with:
- Patients who received services
- Staff members and providers
- Business owners and physicians
- Former employees or contractors
Facility Inspections
Observing:
- Actual physician presence and involvement
- Who makes day-to-day medical decisions
- Staff qualifications and supervision
- Protocol compliance and documentation
Financial Analysis
Reviewing:
- Money flow between entities
- Reasonableness of management fees
- Physician compensation levels
- Financial viability of physician PC
Red Flags That Trigger Investigations
Medical boards look for these warning signs:
Structural Red Flags
- Single entity owned by non-physician performing medical services
- Physician receives only salary with no true ownership
- Business owner controls hiring/firing of medical staff
- Generic online contract templates used
- Missing or inadequate documentation
Operational Red Flags
- Physician rarely present at facility
- Business owner directing patient care decisions
- Staff reporting to business owner for medical matters
- Pressure to perform specific procedures for revenue
- No process for physician to refuse treatments
Financial Red Flags
- Management fees exceeding 50-60% of revenue
- Physician PC operating at a loss
- No actual separation of MSO and PC finances
- Business owner controlling all bank accounts
- Fee structures that eliminate physician discretion
Examples of CPOM Violations
Example 1: Sham MSO Structure
A non-physician owner creates an MSO and physician PC but:
- MSO takes 75% of all revenue
- Physician has no real authority to refuse procedures
- Business owner makes hiring decisions for medical staff
- Single bank account controlled by owner
Result: CPOM violation despite having separate entities on paper.
Example 2: Unlicensed Practice
A non-physician owner operates a med spa:
- Hires a physician as an "employee"
- Makes all business and medical decisions
- Physician reviews charts occasionally but has no real oversight
- Owner directs what procedures are offered and pricing
Result: Direct corporate practice of medicine violation.
Example 3: Inadequate Medical Director
A med spa has a medical director agreement but:
- Physician visits once per quarter
- Has never met most patients
- Does not review protocols or outcomes
- Cannot describe supervision activities
Result: Insufficient physician oversight constitutes CPOM violation.
Differences From Other Violations
CPOM violations are distinct from:
Scope of Practice Violations
- CPOM: About who owns/controls practice
- Scope: About what procedures specific licensees can perform
Licensing Violations
- CPOM: About business structure and control
- Licensing: About individuals practicing without proper credentials
Malpractice
- CPOM: About business structure compliance
- Malpractice: About improper medical treatment causing harm
A single situation can involve multiple types of violations simultaneously.
Why CPOM Laws Exist
These laws aim to:
- Protect patient care from business interests
- Ensure medical decisions are made by physicians
- Prevent profit motives from overriding clinical judgment
- Maintain professional standards of care
State Variations in CPOM Enforcement
States differ in strictness:
Strict CPOM States
California, Texas, and New York aggressively enforce CPOM:
- Detailed requirements for physician independence
- Active investigation and enforcement
- Significant penalties for violations
Moderate Enforcement
Many states enforce CPOM but with less specificity:
- General prohibition on lay ownership
- Some flexibility in structures
- Focus on egregious violations
Minimal CPOM Restrictions
A few states have relaxed or no CPOM laws:
- May allow non-physician ownership with proper oversight
- Focus more on licensing and supervision
- Less scrutiny of business structures
Even in states with relaxed CPOM laws, proper physician oversight remains critical.
Learn more in our complete Med Spa Compliance Guide, including how to avoid violations and proper business structures.
Generate your state-compliant Medical Director Agreement in 5 minutes - AI-drafted for $49, or get full attorney review starting at $149. Get Started →