Navigating Healthcare M&A in New York: Corporate Practice of Medicine (CPOM) and DOH Regulations

The healthcare industry in New York is undergoing a massive wave of consolidation. Private equity firms, hospital networks, and ambitious physicians are rapidly acquiring medical practices, dental clinics, and highly profitable med-spas across Manhattan, Long Island, and Albany. However, healthcare Mergers and Acquisitions (M&A) are heavily policed by both state and federal agencies. Executing a standard corporate buyout of a medical facility is illegal in New York. To successfully navigate these perilous regulatory waters, you must employ specialized legal structuring. We highly recommend utilizing our US Lawyers directory to find an elite New York healthcare M&A attorney who can ensure your transaction is fully compliant.

Unlike buying a restaurant or a software company, buying a medical practice involves strict patient privacy laws, state licensing boards, and anti-kickback statutes. The most formidable barrier for corporate buyers is New York's restriction on who can actually own a medical business. Here is how healthcare M&A is successfully structured in the Empire State.

Navigating NY CPOM Doctrine for Private Equity Buyers

New York has one of the strictest Corporate Practice of Medicine (CPOM) doctrines in the United States. Codified under N.Y. Educ. Law § 6512, this doctrine dictates that only a licensed New York physician can own a medical practice or employ other doctors. A private equity firm, a business entrepreneur, or even an unlicensed hospital administrator cannot legally own shares in a Professional Corporation (PC) under N.Y. Bus. Corp. Law § 1507 or a Professional Limited Liability Company (PLLC) under N.Y. Ltd. Liab. Co. Law § 1207 that provides medical services. Precedents such as State Farm Mut. Auto. Ins. Co. v. Mallela, 4 N.Y.3d 313 (NY Court of Appeals 2005) established severe penalties for violating this doctrine, including the total forfeiture of all medical revenues collected by the illegally structured entity.

Management Services Organization (MSO) M&A Structuring

If non-doctors cannot buy a medical practice, how are private equity firms pouring billions into New York healthcare? They use a Management Services Organization (MSO) model.

Instead of buying the medical practice directly, the corporate buyer acquires all the non-clinical assets of the clinic (the building lease, the medical equipment, the billing software, and the administrative staff). The corporate buyer then sets up an MSO. The actual medical practice (the PC) is transferred to a "friendly" licensed New York physician. The MSO and the PC then enter into a heavily negotiated Management Services Agreement (MSA). The MSO provides all administrative support to the clinic in exchange for a management fee, while the licensed doctor retains 100% control over all clinical and patient-care decisions.

Transferring NY DOH Licenses and Medicaid Provider Numbers

When merging or acquiring healthcare facilities, dealing with state agencies is notoriously slow. If you are acquiring an Article 28 facility under N.Y. Pub. Health Law § 2801-a (like an ambulatory surgery center or a diagnostic clinic), you cannot simply execute a stock purchase and take over. Any change of ownership requires prior approval from the New York State Department of Health, Albany. You must generally file a Form DOH-155-A, New York, New York State Department of Health, Certificate of Need Application to prove the transfer serves the public need.

Furthermore, the target company's ability to bill Medicare and Medicaid is its financial lifeblood. An M&A transaction often triggers a requirement to file change-of-ownership forms with the Office of the Medicaid Inspector General, Albany. If these forms are filed incorrectly, the government can immediately suspend the clinic's billing privileges, cutting off cash flow on day one.

Due Diligence for HIPAA Compliance in Medical Buyouts

In standard M&A, the buyer reviews the seller's customer lists freely. In healthcare M&A, looking at patient records during due diligence can trigger a massive federal violation. The Health Insurance Portability and Accountability Act (45 C.F.R. § 164.502) heavily restricts how Protected Health Information (PHI) is shared. Your attorney must set up a highly secure, HIPAA-compliant virtual data room. Any patient data shared with the buyer for financial auditing must be completely de-identified. If the buyer uncovers during due diligence that the seller has suffered a data breach they failed to report, the buyer must demand severe financial indemnification in the purchase agreement to cover future government fines.

Direct Acquisition vs. MSO Structure in New York

Frequently Asked Questions (FAQ)