What Constitutes a CPOM Violation
CPOM violations occur when:
- Non-physicians own or control the medical practice entity
- Business interests interfere with physician medical judgment
- Physicians lack genuine independence in clinical decisions
- Fee-splitting arrangements undermine physician control
- Management companies control medical operations
Common CPOM Violations in Med Spas
Improper Business Ownership
Violations include:
- Non-physician directly owning the medical practice
- Non-physician controlling the professional corporation
- Business entity employing physicians to perform medical services
- Sham physician ownership (physician as figurehead only)
Inadequate Physician Independence
Red flags for medical boards:
- Business owner making medical decisions
- Physician unable to refuse inappropriate procedures
- Protocols driven by profit rather than medical judgment
- Business pressure overriding clinical standards
Fee-Splitting Violations
Improper financial arrangements:
- Excessive management fees that undermine physician PC viability
- Payment structures that incentivize inappropriate treatment
- Revenue sharing that gives non-physicians control over medical practice
- Compensation tied to specific procedure volumes
Lack of Proper Supervision
Common supervision violations:
- Physician rarely or never present at facility
- Unlicensed staff performing medical procedures
- Missing or inadequate protocols
- No physician oversight of patient care
How Medical Boards Identify CPOM Violations
Boards investigate through:
Document Review
Examining:
- Business formation documents
- Management services agreements
- Medical director contracts
- Financial arrangements and fee structures
- Corporate ownership records
Interviews
Speaking with:
- Patients who received services
- Staff members and providers
- Business owners and physicians
- Former employees or contractors
Facility Inspections
Observing:
- Actual physician presence and involvement
- Who makes day-to-day medical decisions
- Staff qualifications and supervision
- Protocol compliance and documentation
Financial Analysis
Reviewing:
- Money flow between entities
- Reasonableness of management fees
- Physician compensation levels
- Financial viability of physician PC
Red Flags That Trigger Investigations
Medical boards look for these warning signs:
Structural Red Flags
- Single entity owned by non-physician performing medical services
- Physician receives only salary with no true ownership
- Business owner controls hiring/firing of medical staff
- Generic online contract templates used
- Missing or inadequate documentation
Operational Red Flags
- Physician rarely present at facility
- Business owner directing patient care decisions
- Staff reporting to business owner for medical matters
- Pressure to perform specific procedures for revenue
- No process for physician to refuse treatments
Financial Red Flags
- Management fees exceeding 50-60% of revenue
- Physician PC operating at a loss
- No actual separation of MSO and PC finances
- Business owner controlling all bank accounts
- Fee structures that eliminate physician discretion
Examples of CPOM Violations
Example 1: Sham MSO Structure
A non-physician owner creates an MSO and physician PC but:
- MSO takes 75% of all revenue
- Physician has no real authority to refuse procedures
- Business owner makes hiring decisions for medical staff
- Single bank account controlled by owner
__Result:__ CPOM violation despite having separate entities on paper.
Example 2: Unlicensed Practice
A non-physician owner operates a med spa:
- Hires a physician as an "employee"
- Makes all business and medical decisions
- Physician reviews charts occasionally but has no real oversight
- Owner directs what procedures are offered and pricing
__Result:__ Direct corporate practice of medicine violation.
Example 3: Inadequate Medical Director
A med spa has a medical director agreement but:
- Physician visits once per quarter
- Has never met most patients
- Does not review protocols or outcomes
- Cannot describe supervision activities
__Result:__ Insufficient physician oversight constitutes CPOM violation.
Differences From Other Violations
CPOM violations are distinct from:
Scope of Practice Violations
- CPOM: About who owns/controls practice
- Scope: About what procedures specific licensees can perform
Licensing Violations
- CPOM: About business structure and control
- Licensing: About individuals practicing without proper credentials
Malpractice
- CPOM: About business structure compliance
- Malpractice: About improper medical treatment causing harm
A single situation can involve multiple types of violations simultaneously.
Why CPOM Laws Exist
These laws aim to:
- Protect patient care from business interests
- Ensure medical decisions are made by physicians
- Prevent profit motives from overriding clinical judgment
- Maintain professional standards of care
State Variations in CPOM Enforcement
States differ in strictness:
Strict CPOM States
California, Texas, and New York aggressively enforce CPOM:
- Detailed requirements for physician independence
- Active investigation and enforcement
- Significant penalties for violations
Moderate Enforcement
Many states enforce CPOM but with less specificity:
- General prohibition on lay ownership
- Some flexibility in structures
- Focus on egregious violations
Minimal CPOM Restrictions
A few states have relaxed or no CPOM laws:
- May allow non-physician ownership with proper oversight
- Focus more on licensing and supervision
- Less scrutiny of business structures
Even in states with relaxed CPOM laws, proper physician oversight remains critical.
Learn more in our complete [Med Spa Compliance Guide](/med-spa-compliance/), including how to avoid violations and proper business structures.
Generate compliant business documents in 5 minutes - AI-drafted for $49, or get full attorney review for $349. [Get Started →](https://platform.inhouse.ai/signin?plan=all&next=pricing)