CPOM, or the Corporate Practice of Medicine doctrine, is a legal rule that restricts who can own and control medical services. For med spa owners, misunderstanding this doctrine can lead to serious legal consequences.
If you are considering opening a medical spa or already operate one, this rule has likely come up in conversations with attorneys, online discussions, or questions about whether your business structure is compliant.
This doctrine is one of the most misunderstood yet important regulatory frameworks in the medical spa industry. When it is ignored or misapplied, the consequences can include fines, professional discipline, or forced closure.
This guide explains what it means in practice, why it applies specifically to medical spas, and how to stay compliant whether you are a physician, nurse practitioner, esthetician, or a non licensed business owner.
1. What Is CPOM in the Context of the Med Spa Industry?
2. How CPOM Regulates Control in a Medical Spa?
CPOM primarily regulates who controls medical decision making in a med spa, not just who owns the business.
Many med spa owners focus on ownership structure, but regulators are far more concerned with who has authority over clinical care. CPOM violations often occur when a non physician influences treatment protocols, supervises clinical staff, or overrides physician judgment, even if a physician is formally involved.
Medical Control Versus Business Control
CPOM separates medical authority from business operations:
Medical Control
-
Treatment protocols and standards of care
-
Supervision and delegation of clinical staff
-
Final decisions on patient treatment
Business Control
-
Marketing, billing, payroll, and HR
-
Facility management and equipment leasing
-
Scheduling and non clinical operations
Non physicians may manage the business side of a med spa, but medical decisions must remain under physician control. When this boundary is crossed, CPOM compliance risks arise.
3. Why Does CPOM Apply to Med Spas?
Many med spa owners are surprised to learn that CPOM applies to them. After all, med spas feel different from traditional medical practices. The atmosphere is relaxing, the branding is aesthetic-focused, and clients often think of it as a luxury service rather than healthcare.
But here's what matters legally: it's not about how your business looks or feels. It's about what services you provide.
Med Spa Services are Considered the Practice of Medicine:
In most states, the following treatments require physician oversight or are classified as medical procedures:
-
Botox and other neuromodulators
-
Dermal fillers
-
Laser hair removal, skin resurfacing, and tattoo removal
-
Chemical peels (medium to deep)
-
Microneedling with certain devices
-
IPL (intense pulsed light) treatments
-
Body contouring procedures
-
Certain IV therapies
Even if a nurse practitioner, physician assistant, or registered nurse is performing these treatments, the underlying service is still considered medicine, and CPOM rules apply.
Calling your business a “wellness center,” “aesthetic studio,” or “beauty lounge” does not change how regulators classify the services you offer. State boards focus on what is being done, not how it is labeled. If you are injecting Botox or using a Class IV laser, those activities are treated as the practice of medicine. Branding does not create a legal loophole.
4. What Are the Risks of Ignoring or Violating Corporate Practice of Medicine Rules?
Ignoring CPOM rules can expose a medical spa and its providers to regulatory enforcement, financial penalties, and professional discipline, even if violations were unintentional.
Med spas that violate CPOM can face serious consequences:
-
Cease and desist orders from state medical boards
-
Fines and penalties
-
Loss of professional licenses (for any physicians or nurses involved)
-
Revocation of business licenses
-
Lawsuits from patients or competitors
-
Criminal charges in extreme cases
Even long operating med spas are not immune. Enforcement actions are often triggered by patient complaints, insurance audits, competitor reports, or whistleblowers, and they can occur years after the business is established.
5. Is CPOM a Federal Law or State-Specific?
CPOM is not a federal law. It is governed at the state level, which means the rules vary dramatically depending on where your med spa is located.
Corporate Practice of Medicine rules are enforced by various state authorities, depending on each state's regulation of the practice of medicine. These may include:
-
State Medical Boards, which oversee physician licensure, medical decision-making, and delegation of clinical services
-
Boards of Nursing, when violations involve nurse practitioners, physician assistants, or registered nurses
-
State Attorneys General, who may bring enforcement actions based on consumer protection, fraud, or unlawful business practices
-
Health departments or regulatory agencies, particularly when CPOM is enforced through administrative rules or guidance rather than statutes
Some states have explicit Corporate Practice of Medicine statutes written into their medical practice acts. Others enforce these rules through case law, attorney general opinions, or regulatory agency guidance. A few states have no formal prohibition, but that does not mean medical spa ownership is unregulated.
Why Answers Differ by State
Because CPOM is state-specific, what's legal in Texas might be illegal in California. What works in Florida might not work in New York. This creates confusion, especially for med spa owners who:
-
Operate in multiple states
-
Rely on online advice written for other jurisdictions
-
Try to replicate business structures from other states without local legal review
Online guidance is often inconsistent because many articles and consultants fail to specify which state they are referencing. A business structure that is legal in one jurisdiction may be prohibited in another with stricter enforcement, making state-specific legal review essential before structuring a med spa.
6. Which States Enforce CPOM Rules for Med Spas?
CPOM enforcement varies widely across the United States. Some states strictly prohibit non-physician ownership of medical practices, while others allow it under certain conditions or don't have formal CPOM laws at all.
States with Strict CPOM Enforcement
These states generally prohibit corporations or non-physicians from owning medical practices, including med spas:
State
Enforcement Level
CPOM Rule Summary
California
Strict
One of the strictest CPOM states; requires physicians to own the medical practice
New York
Strict
Strong CPOM enforcement through case law and regulatory guidance
Texas
Strict
Enforces CPOM through the Medical Practice Act; MSO structures are common
New Jersey
Strict
Prohibits non-physician ownership of medical practices
Illinois
Strict
Strict CPOM rules require physician ownership or compliant MSO models
Ohio
Strict
Strong CPOM enforcement; non-physicians cannot employ physicians
Colorado
Strict
CPOM applies; physician ownership or MSO structures required
Florida
Moderate / Hybrid
Allows non-physician ownership under specific conditions; strict scope-of-practice rules
Georgia
Moderate / Hybrid
CPOM applies but allows some flexibility through professional corporations
North Carolina
Moderate / Hybrid
Has CPOM principles but allows some non-physician ownership structures
Virginia
Moderate / Hybrid
Moderate enforcement; professional corporations must be physician-owned
Nevada
Limited /
No Formal CPOM
No formal CPOM; non-physician ownership allowed with medical oversight
Arizona
Limited /
No Formal CPOM
No CPOM statute; ownership allowed within scope-of-practice limits
Tennessee
Limited /
No Formal CPOM
Limited CPOM enforcement; supervision and fee-splitting rules apply
Alabama
Limited /
No Formal CPOM
No explicit CPOM law; other medical and licensing rules still govern
South Carolina
Limited /
No Formal CPOM
No formal CPOM; strict supervision and scope-of-practice requirements
Why "No CPOM" states still carry risk:
Even in states without formal CPOM laws, med spa ownership is still heavily regulated. Non-physician owners must comply with other legal frameworks that effectively limit control over medical services, including:
• Scope-of-practice laws: Providers may only perform procedures within their licensed authority; pushing staff beyond their scope is illegal regardless of CPOM
• Fee-splitting prohibitions: Taking a percentage of revenue from physician-performed services can trigger enforcement, even in non-CPOM states
• Supervision requirements: Many treatments require on-site or immediate physician oversight
• Unlicensed practice rules: Business owners who influence clinical decisions risk being charged with practicing medicine without a license
• Insurance and billing regulations: Improper billing may result in fraud investigations despite permissive ownership laws
FAQ: Med Spa Ownership Under CPOM
What Are the 6 Key Questions Med Spa Owners Should Ask About CPOM?
Your compliance strategy is only as strong as your financial records. In the high-stakes world of CPOM, the way you structure your Management Services Organization (MSO) fees and separate your medical and administrative funds is the difference between a thriving practice and a regulatory investigation. Use these six critical questions to ensure your bookkeeping reflects a legally sound and audit-ready operation.
Legal Disclaimer
This content is for general informational purposes only and does not constitute legal, medical, or financial advice. Laws and regulations vary by state, and readers should consult qualified legal and healthcare professionals before making business or clinical decisions.
In the medical spa industry, the Corporate Practice of Medicine doctrine directly affects who may own, control, and profit from medical services. Because many aesthetic treatments are legally classified as the practice of medicine, CPOM rules often apply even when a med spa operates in a retail or wellness oriented setting rather than a traditional clinical environment.
This doctrine exists to preserve independent medical judgment. It ensures that clinical decisions are made by licensed physicians, rather than by business owners or investors whose financial incentives may conflict with patient safety and quality of care.
CPOM is especially relevant for med spas because services such as Botox, dermal fillers, laser treatments, and chemical peels are regulated as medical procedures in most states. As a result, ownership and operational structures that might be acceptable in other industries can trigger compliance issues in the med spa context.
How CPOM connects to ownership and control:
The doctrine not only restricts who can legally own a medical spa. It also limits who may control medical decision making, supervise treatments, and influence how medical services are delivered. Even when a physician is involved, violations can occur if a non physician owner exercises excessive control over clinical operations.
Published on January 23rd, 2026 | Written by Marc Pamatian
Schedule a Consultation
Ready to find out how your business having its own Chief Bookkeeping Officer can help?