Medspa Ownership & MSO Structure Rules by State

CPOM doctrine prohibits non-licensed individuals or business entities from:

• Owning or controlling a medical practice (including a medspa offering injectable or energy-device treatments)
• Directing clinical decisions—who gets treated, what dose, what device settings
• Splitting professional fees with non-licensed owners
• Employing physicians in a way that compromises their independent judgment

The doctrine originated to prevent lay investors from profiting off medicine and to preserve physician autonomy. In practice, state medical boards enforce it through license discipline, and state attorneys general pursue it as consumer fraud. However, CPOM is not uniformly enforced: California, Texas, and Florida have weak or no CPOM statutes, while states like New York, Massachusetts, and Illinois enforce strict versions. A medspa offering Botox, fillers, or RF microneedling under a nurse practitioner or PA is considered a medical practice in most states, triggering CPOM scrutiny.

States fall into rough categories:

Permissive states (weak/no CPOM): California, Texas, Florida, Nevada, Arizona. Non-licensed owners can operate a medspa if a licensed provider is on staff and supervises treatments. The licensed provider need not be an owner; they may be an employee. This model is common in roll-ups and PE-backed chains like LaserAway (Ares-backed, exploring sale as of 2026).

Moderate states: New Jersey, Pennsylvania, Colorado, Georgia. CPOM exists but allows MSO structures where a licensed provider holds majority ownership or clinical control, while a business entity handles operations, billing, and marketing. The licensed provider typically sits on the board and signs off on clinical protocols.

Strict CPOM states: New York, Massachusetts, Illinois, Connecticut. Physician or advanced practice provider must own and control the practice. Non-licensed investors may hold minority passive stakes but cannot direct operations or receive a share of medical fees. Some allow a separate business entity to lease space and provide non-clinical services (billing, HR, marketing) under a service agreement.

Before structuring, verify your state's current statute and board guidance. State medical boards publish advisory opinions; many now address medspa ownership explicitly.

An MSO (Management Services Organization) is a business entity that contracts with a licensed medical practice to provide non-clinical services. Common models:

Clinic owns clinical assets; MSO owns business assets. The licensed provider (MD, DO, NP, PA) owns the medspa clinic entity. The MSO owns the building lease, equipment, staff (non-clinical), billing systems, and marketing. The clinic pays the MSO a management fee (typically 30–50% of gross revenue) for these services. The provider retains clinical control and profit above the fee. This structure is CPOM-compliant in most states because the licensed provider owns the medical entity.

MSO as service provider to multiple clinics. A single MSO contracts with multiple independent medspa clinics, providing centralized billing, supply chain, HR, and marketing. Each clinic retains its own licensed owner. This model scales but requires careful drafting to ensure the MSO does not direct clinical decisions.

Physician-owned MSO with equity. A licensed provider owns both the clinic and the MSO, and brings in non-licensed investors as equity partners in the MSO only (not the clinic). Investors receive a return on MSO profits (operations, not medical fees). The clinic remains physician-owned and controlled. This allows capital raise while maintaining CPOM compliance.

All MSO structures require written service agreements that explicitly prohibit the MSO from directing clinical decisions, setting treatment protocols, or controlling billing for medical services. Vague language invites board scrutiny and fraud allegations.

New York: Strict CPOM. A licensed physician or NP/PA must own the medspa. Non-licensed investors cannot own the practice entity or receive a share of medical revenue. The Department of Health and state medical board actively investigate medspa ownership. Unlicensed injection operations (e.g., the Peoria, Arizona case involving a woman accused of unlicensed injections) trigger criminal charges and civil penalties.

California: Permissive CPOM. Non-licensed owners can operate a medspa if a licensed provider supervises. No ownership requirement for the provider. This has enabled large chains and PE roll-ups. However, the state still enforces scope-of-practice rules: a PA or NP must work under a physician's supervision, and the supervising physician must be available and engaged.

Florida: Weak CPOM. Medspa ownership is largely unregulated if a licensed provider is on staff. However, the state has prosecuted egregious cases (e.g., the Port St. Lucie medspa owner sentenced to 45 years for botched cosmetic surgery and unlicensed practice). Compliance is still essential.

Texas: Permissive. Non-licensed owners can operate a medspa with a licensed provider on staff. However, the Texas Medical Board has begun issuing guidance on supervision standards for NPs and PAs, tightening the rules.

Massachusetts, Illinois, Connecticut: Strict CPOM. Physician or NP/PA ownership required. Non-licensed investors face board discipline and potential fraud liability. These states are less hospitable to PE-backed medspa chains.

Check your state medical board's website for advisory opinions on medspa ownership and recent enforcement actions. Boards increasingly publish guidance on telemedicine, delegation, and corporate structures.

1. Consult a healthcare attorney licensed in your state. CPOM rules are state-specific and evolving. A $2,000–$5,000 legal review upfront prevents six-figure liability later.

2. Identify your licensed provider. Decide whether you (if licensed) will own the clinic, or whether you'll partner with or employ a licensed provider. If employing, ensure the employment agreement protects the provider's autonomy and complies with anti-kickback rules (no bonus tied to volume or profit-sharing).

3. Draft a clear service agreement if using an MSO structure. Specify that the MSO provides only non-clinical services (billing, marketing, HR, supply chain). Explicitly state that the licensed provider retains all clinical authority. Have the agreement reviewed by your state medical board or a healthcare attorney before execution.

4. Document supervision and protocols. If a PA or NP is your clinical lead, ensure a supervising physician is named, available, and engaged. Document standing orders, protocols, and physician oversight in writing. State boards increasingly audit these records.

5. Verify insurance and liability. Confirm that your malpractice carrier covers the ownership structure you've chosen. Some carriers exclude certain MSO arrangements or non-physician ownership.

6. Monitor regulatory changes. State medical boards update CPOM guidance regularly. Subscribe to your board's newsletter or check quarterly for new advisory opinions.

• Vague MSO agreements. If your service agreement doesn't explicitly protect clinical autonomy, a board investigator may conclude the MSO is controlling the practice, triggering CPOM violations.
• Non-licensed owner directing clinical decisions. Texting the provider about treatment protocols, patient selection, or dosing is evidence of control. Keep clinical decisions entirely with the licensed provider.
• Inadequate supervision of NP/PA. If the supervising physician is unavailable, not engaged, or not reviewing charts, the state board will cite scope-of-practice violations. Supervision must be real, not nominal.
• Commingling medical and business revenue. If the MSO receives a cut of medical fees (not just management fees), it may be deemed to control the practice. Keep medical revenue separate.
• No written protocols. State boards expect medspa clinics to have written protocols for patient screening, informed consent, adverse-event reporting, and escalation to the supervising physician. Lack of documentation is a red flag.
• Unlicensed staff performing licensed tasks. Estheticians cannot inject or operate RF microneedling devices in most states. Verify scope-of-practice rules for each modality and staff role in your state.