Congress Just Fired a Warning Shot at Healthcare MSOs

For nearly a century, the corporate practice of medicine (“CPOM”) has primarily been a creature of state law. Healthcare entrepreneurs operating nationally have therefore become accustomed to navigating a patchwork of state ownership and control rules, often through the familiar management services organization/professional corporation (“MSO/PC”) structure. Now, for the first time, Congress is considering legislation that would approach CPOM from a truly national perspective. The recently introduced Stop Corporate Takeovers of Physicians Act would establish a federal prohibition on certain forms of corporate ownership and control of medical practices. While the bill faces an uncertain path through Congress, its significance extends well beyond whether this particular legislation ultimately passes.

What makes this proposal particularly noteworthy for healthcare regulatory professionals is the shift in regulatory authority it represents. Historically, states have determined who may own medical practices, how professional entities must be structured, and how much control a non-clinical management company may exercise over a physician-owned practice. The result is the state-by-state CPOM framework that healthcare attorneys and multi-state operators navigate today. This bill would overlay that system with a federal CPOM standard applicable nationally, while still allowing states to impose more restrictive requirements.

There is a compelling parallel to the FTC’s recent attempt to establish a nationwide rule restricting non-competes. Non-competes, like CPOM, have traditionally been regulated principally at the state level. The FTC’s effort raised significant questions about the federal government’s authority to establish a nationwide rule in an area historically governed by state law.

Similar questions are expected to surround any attempt to federalize CPOM regulation. Congress, of course, operates under a different source of authority than an administrative agency such as the FTC, so the legal analysis would not be identical. Nevertheless, the underlying issue remains central: to what extent will the federal government establish nationwide restrictions in an area of professional regulation historically left largely to the states?

That alone makes this legislation worth watching.

The substance of the bill is equally significant.

Traditional CPOM analysis generally begins with ownership: Who owns the medical practice, and does state law permit that person or entity to own it? The proposed legislation goes considerably further. It would generally require medical practices to be majority owned and controlled by qualifying licensed providers while restricting an MSO’s ability to control areas including hiring and firing, compensation, staffing, billing practices, clinical standards, and payor contracting.

It also targets several contractual mechanisms commonly used in friendly-PC structures. Most notably, the legislation would restrict MSO control over the sale or transfer of ownership interests in a medical practice—potentially eliminating the share transfer restriction arrangements commonly used to maintain continuity between an MSO and an affiliated PC. The bill would also restrict the common model in which an MSO owns the consumer-facing brand used by affiliated professional entities and would establish detailed protections surrounding physicians’ independent clinical judgment.

For national healthcare companies, another provision deserves close attention. The legislation would require qualifying licensee owners to be licensed and present in a state where services are furnished and to be substantially engaged in delivering medical care. That could fundamentally challenge the increasingly common model in which a highly licensed physician owns professional entities across numerous jurisdictions while an MSO provides the administrative infrastructure supporting the platform.

Healthcare attorneys generally would not recommend that MSOs restructure an otherwise compliant MSO/PC setup today simply because this bill has been introduced. However, close attention should be paid to what it represents. Increasing legislative and enforcement attention is being directed toward the relationship between professional practices, MSOs, and outside investors. The federal proposal puts several concepts squarely on the national agenda: ownership, control, share-transfer restrictions, branding, clinical autonomy, and the economic relationship between an MSO and its affiliated professional practice.

For healthcare entrepreneurs, investors, and physicians, the takeaway is not that the MSO/PC model is disappearing. It is that the regulatory environment surrounding that model is evolving quickly, requiring close monitoring.And now, for the first time, that conversation is no longer occurring exclusively in state legislatures and state regulatory agencies. Congress has entered the CPOM conversation.

The New Enforcement Net: How CMS is Catching Non-Compliant Providers via Expanded Exclusion Checks

By: Anita Browning, FRP

Historically, the HHS Office of Inspector General (OIG) acted as the sole gatekeeper for excluding bad actors from federal health care programs under Section 1128 of the Social Security Act. That dynamic has fundamentally shifted. 

HHS Secretary Robert F. Kennedy Jr. officially delegated independent Section 1128 exclusion authority directly to the Centers for Medicare & Medicaid Services (CMS). Working alongside broadened revocation powers under 42 C.F.R. § 424.535, CMS is no longer just processing enrollment forms, it operates as a primary enforcement agency with “force multiplier” authority to cut off billing privileges and exclude entities entirely. The mechanics of how providers are being caught, where screening gaps exist, and the active enforcement push demonstrate why compliance programs must adapt.

Rather than relying on retrospective audits months after money has gone out the door, CMS has overhauled its detection infrastructure to catch questionable entities before claims are paid.

  • Predictive AI Screening: CMS has deployed artificial intelligence models trained to detect anomalies across billing patterns, ownership changes, and affiliation networks in real time.
  • Automated Data Mapping: Automated cross-checks link Medicare enrollment disclosures (Form CMS-855) against federal and state exclusion lists, state licensing boards, and corporate registry databases.
  • Pre-Payment Claims Interception: Flags generated by backend analytics automatically defer payments or trigger immediate administrative scrutiny prior to disbursement.
  • The “One-Link” Trap: If an entity within your administrative, real estate, or capital structure has a single tainted individual, CMS’s interconnected data network flags the entire corporate family—not just the bad actor.

Catching problematic relationships requires looking past direct W-2 employees. Under CMS’s expanded disclosure and enrollment framework, an undisclosed, inaccurate, or excluded entity at any layer of your operational tree exposes an otherwise compliant facility to immediate revocation.

Exclusion checks and background screenings must now cover five specific operational tiers:

EXPANDED EXCLUSION SCREENING NET
1. Capital & OwnershipInvestors, PE sponsors, holding companies
2. Real Estate PartnersREITs, facility landlords, property entities
3. Corporate StructurePublicly traded parent entities & affiliates
4. Clinical LeadershipContracted directors, medical staff managers
5. Operational PartnersAny third-party manager/financial partner

A gap or reporting delay anywhere in this chain grants CMS immediate grounds to initiate revocation or exclusion proceedings under § 424.535.

Aggressive Enforcement: By the Numbers

The impact of this consolidated authority and algorithmic tracking is already taking effect:

Enforcement MetricQ1 2026 VolumeTrend / Impact
CMS Provider & Supplier Revocations1,413+40% jump over previous quarter
Enforcement StrategyPre-payment interventionImmediate loss of Medicare billing privileges
Risk ProfileHigh across all tiersApplies to entities with zero history of prior wrongdoing

Federal officials have explicitly framed these updates as an aggressive posture toward fraud prevention.

Waiting for a payment deferral or a § 424.535 revocation notice is the most costly way to identify a disclosure flaw. Our Health Care Practice Group actively assists healthcare entities in mitigating risk through focused interventions:

  • 360° Exclusion Screening Implementation: Upgrading your background check workflows so screening extends continuously across your entire ownership, management, landlord, and investor network.
  • CMS-855 Enrollment Audits: Reviewing submitted enrollment records to eliminate discrepancies in disclosable relationships, management contracts, and capital entities.
  • Compliance Policy Restructuring: Rewriting internal compliance protocols to reflect CMS’s direct Section 1128 exclusion powers and proactive risk monitoring.
  • Rapid Response Defense: Providing immediate legal intervention, evidence gathering, and administrative representation if CMS defers payments or issues an inquiry.