The Core Conflict: The Vendor’s Vial vs. The Provider’s Protocol

By: Victoria Perniola, Attorney

For healthcare providers, med spas, aesthetic practices, regenerative medicine clinics, and wellness businesses, the compliance question is rarely limited to: “Am I legally permitted to purchase this product?” The better operational question is: “Can I lawfully use, administer, market, and scale this product within my practice’s specific clinical delivery model?”

That distinction matters because vendor materials usually speak to the product in the vendor’s preferred context. They may describe a growth factor, regenerative, exosome-like, secretome, PDGF, post-procedure, peptide, or cell-derived product as a cosmetic or wellness offering. But those materials are not tailored to the provider’s license, the scope of practice rules of that particular state, corporate structure concerns, supervision requirements, consent documents, staff protocols, or patient-facing claims.

A vendor may be focused on the vial. The provider is responsible for the protocol. 

Federal product and advertising rules, state professional standards, and clinic practice requirements can all apply to the same service line. That is why the provider’s actual use matters. The same vendor-supplied product can raise very different issues depending on how it is sourced, how it touches the patient, whether the skin barrier is disrupted, whether it is topical or injectable, who administers it, and what the practice says the treatment will do.

Where Vendor Claims Diverge from Clinical Reality 

Regulatory risk for biological, peptide, and regenerative therapies and products is entirely dynamic and fact-specific. Three practice-level variables usually drive the analysis:

  1. The Route of Administration: A product marketed as a topical cosmetic intended to support the appearance of intact skin is not the same risk as a product applied after microneedling, radiofrequency (RF) microneedling, laser resurfacing, chemical peels, or another procedure that disrupts the skin barrier. It is also different from an injectable product. If the practice’s protocol introduces the product into broken skin or bypasses the ordinary skin barrier, generic vendor statements about “cosmetic” use may not answer the relevant legal question.
  1. The Scope of Patient Facing Claims: Vendors may use scientific or educational language to describe how to routinely incorporate structural and physiological terminology in their educational literature to explain how a product is intended to work. That language may reference “tissue healing,” “cellular regeneration,” “inflammation reduction,” “scar repair,” “hair regrowth”, “collagen stimulation”, or “biological anti-aging.” But when a practice repeats those phrases on their website, landing pages, advertisements, social media posts, patient FAQs, consent forms, before and after captions, or consultation scripts, the practice may create a separate FDA or FTC issue.

The difference between saying a treatment supports the appearance of smoother skin and saying it regenerates tissue, repairs scars, reduces inflammation, or treats hair loss, is not just branding. Those claims can affect whether the product or related marketing is viewed as promoting an unapproved drug or biologic use, or as making health-related claims that require appropriate substantiation. 

  1. The Turnkey Risk Profile: “Everyone else is using it” is not a compliance strategy. In high-growth areas like aesthetics and regenerative medicine, market adoption can move faster than regulatory review. The fact that another clinic uses the same product, brochure, or social media language does not mean the product fits squarely withinyour protocol, your staff model, your state’s scope of practice rules, or your risk tolerance.

A Practical Vetting Framework for Vendors

Strong practices do not treat compliance as a launch blocker. They use a focused review process so promising service lines can be evaluated, structured, and marketed more cleanly from the beginning. 

  • Isolate the True Route of Administration: Define exactly how the product touches the patient. Is it used on intact skin, applied after a procedure that disrupts the skin barrier, mixed with another product, administered with a device, or injected? The answer materially changes the analysis.
  • Audit the Practice Ecosystem, Not Just the Label: Review your digital assets such as website pages, social media before-and-after pictures and captions, landing pages, patient FAQs, internal staff consultation scripts, and vendor-provided materials. The goal is to align the practice’s messaging with supportable cosmetic or clinical claims and avoid language that suggests disease treatment, tissue regeneration, structural change, systemic healing, or guaranteed outcomes unless backed by an explicit regulatory pathway and there is a legally supportable basis for making those claims.
  • Separate Product Validation from Practice Clearance: Treat vendor literature as helpful technical information, not a legal opinion. A provider still needs to evaluate product sourcing, intended use, route of administration, supervision requirements, your state’ scope of practice rules, corporate practice of medicine limitations, consent documents, and the substantiation supporting patient-facing materials and claims. 

Compliance as a Growth Strategy 

Proactive regulatory review is not a defensive chore that slows your practice down. If done correctly, it is a growth tool to build a high-value, scalable, and highly investable medical enterprise. A service line built with appropriate sourcing, well-documented protocols, supportable claims, clear consent language, and trained staff is easier to launch, market, scale, review, withstand diligence, and defend. 

At Florida Healthcare Law Firm, we help healthcare providers, med spas, wellness businesses, and regenerative medicine practices evaluate product sourcing, service line expansion, advertising claims, consent forms, vendor materials, and FDA/FTC compliance risk before the service goes live. 

Before relying on a vendor’s statement that a product is “compliant,” providers should confirm whether the product, proposed use, protocol, and marketing strategy actually fit the practice’s regulatory risk tolerance.

How to Start a Compliant Medical Spa in Florida (2026 Legal Guide)

How to Start a Compliant Medical Spa in Florida

Starting a medical spa in Florida requires more than aesthetic expertise. This 2026 legal guide on How to Start a Compliant Medical Spa in Florida explains the essential compliance requirements for med spa owners, including licensing, physician supervision, HIPAA compliance, staffing rules, insurance, contracts, and regulatory oversight. Learn how to legally structure and protect your Florida medical spa business for long-term success.

Continue reading

Florida Medical Spa Laws Every Owner Must Know in 2026

Florida medical spa laws

Florida medical spa laws continue evolving in 2026, creating new compliance challenges for med spa owners, physicians, nurses, and aesthetic clinics. This detailed guide explains Florida med spa regulations, Botox laws, HIPAA requirements, medical director responsibilities, and legal strategies to help aesthetic businesses operate safely and remain compliant.

Continue reading

The Corporate Practice of Medicine Is No Longer a Passive Compliance Issue

By: Carlos Arce, Attorney

Having represented numerous management service organizations (MSOs) and physician practices throughout the country, I have seen firsthand where these arrangements succeed — and where they become legally vulnerable.

At the center of the issue is one concept: control.

The modern MSO-PC model has become one of the most widely utilized structures for healthcare growth and investment. In many states, the framework allows non-clinical business executives and investors to participate economically in healthcare ventures without directly owning the professional entity that practices medicine. But this is where many organizations misunderstand the purpose of corporate practice of medicine (CPOM) laws.

The goal of CPOM restrictions is not simply to prohibit ownership. The goal is to prevent non-medical personnel from exercising control over clinical judgment, medical personnel, or the physician practice itself. And regulators are beginning to scrutinize these arrangements more aggressively than ever before.

The Real Issue Is Not the Structure — It’s the Control Dynamic

Most MSOs and physician groups focus heavily on drafting management services agreements (MSAs), equity restriction agreements, succession documents, and shareholder arrangements designed to protect financial investments and operational continuity.

But regulators are increasingly asking a more practical question:

Who actually controls the practice?

That question goes beyond corporate charts and legal diagrams.

It reaches into:

• Operational authority 

• Decision-making rights 

• Governance structures 

• Succession mechanisms 

• Transfer restrictions 

• Physician autonomy 

• Day-to-day operational conduct 

Typically, physicians must retain autonomy over:

• Clinical decision-making 

• Medical personnel 

• Standards of care 

• Patient treatment 

• Supervision of providers 

• Medical policies 

• The professional practice itself 

The challenge arises when the MSO relationship becomes so operationally dominant that the physician is effectively reduced to a figurehead. When that occurs, regulators may view the arrangement as violating CPOM doctrines — regardless of what the contracts say on paper.

California, New York, and Texas Are Leading the Charge

Certain states have always been more aggressive regarding CPOM enforcement, particularly:

• California 

• New York 

• Texas 

These states are highly sensitive to arrangements that appear to subordinate physician authority to business operators or investors. And importantly, there is no true “50-state” template.

Each jurisdiction has:

• Different statutes 

• Different regulatory guidance 

• Different attorney general positions 

• Different board interpretations 

• Different case law

What works in one state may create significant risk in another. California, in particular, issignaling heightened scrutiny over so-called “captive PC” structures — arrangements where physicians technically own the professional corporation, but meaningful control arguably rests elsewhere.

Regulators are increasingly evaluating provisions such as:

• Succession agreements 

• Equity transfer restrictions 

• Management approval rights 

• Ownership reassignment mechanisms 

• Delegation authority 

• Operational veto powers 

For example, if an MSO has the ability to effectively replace the physician owner, transfer control, or dictate operational authority in a manner that undermines physician independence, regulators may interpret that as unlawful control. The issue is not merely theoretical anymore.Enforcement posture is changing.

Contracts Alone Will Not Protect You

One of the biggest misconceptions I see is the belief that carefully drafted contracts alone solve the problem. They do not. Regulators examine not only the documents, but also the real-world behavior of the parties.

That means:

• How decisions are actually made

• Who directs employees 

• Who controls finances 

• Who negotiates payer relationships 

• Who supervises operations 

• Who disciplines providers 

• Who has ultimate authority during disputes 

If the operational reality contradicts the contractual language, the arrangement becomes vulnerable. In other words: Your actions must match what your contracts say. If your agreements state that physicians maintain independent clinical authority, but the MSO is functionally directing the practice, regulators will focus on the operational conduct — not simply the paper.

What Physicians Need to Understand

Physicians entering MSO relationships must understand the legal and regulatory implications before signing agreements.

Too often, physicians assume:

• “This is standard.” 

• “Everyone is doing it.” 

• “The MSO handles everything.” 

• “The lawyers already approved it.” 

But physicians themselves may ultimately face scrutiny from:

• State medical boards 

• Attorneys general 

• Regulatory investigators 

• Licensing authorities 

And when those inquiries occur, physicians must be prepared to answer truthfully:

Who really controls the practice?

If the physician cannot confidently demonstrate meaningful authority and independence, the structure may already have a problem.

What MSOs Need to Understand

MSOs also face substantial risk.

Many organizations understandably want strong contractual protections around:

• Capital investment 

• Operational continuity 

• Brand protection 

• Growth strategies 

• Exit rights 

• Financial stability 

But there is a line between protecting an investment and exerting impermissible control. The more aggressive the governance provisions become, the more regulators may question whether the arrangement crosses into unlawful territory. The solution is not abandoning the MSO model.The solution is structuring relationships carefully, state-by-state, with a genuine respect for physician autonomy and operational compliance.

The Bottom Line

The corporate practice of medicine is no longer a passive compliance issue sitting quietly in the background. States are paying attention. Attorney general offices are paying attention. Medical boards are paying attention. And they are increasingly focused not only on ownership — but on operational control. For physicians and MSOs alike, the takeaway is simple: A compliant structure is not just about how the documents are drafted. It is about whether the operational reality truly reflects physician independence and lawful governance. Because in today’s regulatory climate, form without substance is no longer enough.

The Regulatory Middle Ground: Navigating Non-Pharmacy Supply Chains in Clinical Practice

By: Caitlin A. Kopppenhaver, Attorney

The traditional landscape of clinical procurement often centers on two familiar pillars: the 503A compounding pharmacy and the 503B outsourcing facility. Because these entities are commonly associated with patient-specific compounded preparations and certain compounded sterile product models, many providers operate under the assumption that these are the only legal avenues for acquiring sterile products. However, as the wellness industry evolves toward specialized peptides and complex biologics, a significant knowledge gap has emerged regarding the roles of manufacturers, wholesale distributors, and third-party logistics providers (3PLs).

This gap becomes particularly evident when a workflow involves the receipt of lyophilized products intended for provider-controlled reconstitution and immediate administration. In these scenarios, the entity shipping the product may not be a pharmacy at all, and the workflow may still be supportable if the required regulatory elements are satisfied. The confusion often stems from a lack of familiarity with how title transfer and licensure operate outside of the pharmacy model. Unlike a pharmacy, which dispenses or compounds within a pharmacy framework, a manufacturer or distributor may sell or transfer product within a drug-supply-chain framework, and a 3PL generally facilitates the movement of that product without ever taking legal ownership.

The critical distinction for any clinical practice lies in the classification of the product being supplied and the nature of the final preparation step. When a lyophilized vial arrives from a 3PL or distributor, the responsibility for the final preparation may shift to the clinician or clinical practice, depending on the product, labeling, and ordering pathway. This process raises important questions about the boundary between compounding and reconstitution consistent with manufacturer labeling or instructions. While federal and state regulations may provide a pathway for certain non-pharmacy supply-chain models, the specific legal mechanics that allow a non-pharmacy to participate in such a workflow remain a nuance of supply-chain law that is frequently overlooked.

For practices utilizing these models, the challenge is ensuring that the administrative handling on-site does not inadvertently cross the line into unlicensed compounding. Understanding the interplay between federal distribution standards and the local practice of medicine is essential. Without a clear grasp of how a 3PL differs from a traditional pharmacy in the eyes of the law, a practice may find itself operating within a sophisticated supply chain without fully understanding the regulatory guardrails that make it possible. Identifying these structural differences is the first step in mastering the complexities of modern medical procurement.

LinkedIn Callout:

A lot of clinicians are familiar with two procurement pathways: 503A compounding pharmacies and 503B outsourcing facilities.

But those are not the only entities that may appear in a lawful medical supply chain.

Depending on the product and the structure, a clinical practice may also encounter manufacturers, wholesale distributors, private-label suppliers, and third-party logistics providers. These entities do not all serve the same legal function, and they should not be analyzed as if they are pharmacies.

This is where a lot of confusion comes up.

For example, if a product is supplied in lyophilized form and requires provider-controlled reconstitution before administration, the legal question is not simply: “Did this come from a pharmacy?”

The better questions are:

Who manufactured the product?

Is the product itself lawfully marketable for the intended use?

Who sold it?

Who took title?

Who shipped it?

How is it labeled?

Is the supplier properly licensed or registered?

What exactly is the provider doing on-site?

Is the provider reconstituting consistent with labeling/instructions, or doing something that starts to look like compounding, repackaging, dispensing, or manufacturing?

That analysis is highly fact-specific.

Some non-pharmacy supply-chain models may be supportable. Others may create significant regulatory exposure, especially where the product, labeling, title transfer, licensure, or on-site handling is not clearly understood.

The takeaway is not that every non-pharmacy model works, but rather that “not a pharmacy” does not automatically mean “not lawful”,  and it also does not automatically mean the model is safe. The legal analysis follows the actual flow of the product, not just the label placed on the supplier.

Nurse License Lookup Florida in 2026: The Smart Way to Verify Credentials Instantly

Nurse License Lookup Florida

Verifying nursing credentials is essential for patient safety and legal compliance. This complete guide to nurse license lookup Florida explains how to check license status, avoid hiring risks, and stay compliant with Florida healthcare regulations in 2026. Whether you are an employer, nurse, or patient, learn the latest methods, tools, and best practices for accurate and reliable license verification.

Continue reading