Healthcare M&A Counsel: Physician Practices, MSOs, and Healthcare System Transactions
By Alex Lubyansky Managing Partner Last updated
Healthcare acquisitions carry a regulatory layer that standard M&A counsel is not equipped to handle alone. Stark Law, Anti-Kickback Statute, HIPAA diligence, corporate practice of medicine restrictions, certificate of need requirements, and Medicare provider enrollment each impose obligations that must be addressed before and through closing. Alex Lubyansky handles these transactions directly, nationwide.
Regulatory Complexity in Healthcare M&A
HIPAA due diligence in a healthcare acquisition covers business associate agreement (BAA) compliance, Security Rule risk analysis documentation, breach history, and PHI data governance across all acquired systems. Buyers assume HIPAA exposure present at the target unless the purchase agreement contains specific representations, covenants, and indemnification protections. See the detailed guide at HIPAA compliance in healthcare acquisitions.
Stark Law (42 U.S.C. § 1395nn) and the Anti-Kickback Statute (42 U.S.C. § 1320a-7b) govern financial relationships between physicians and entities receiving Medicare and Medicaid referrals. In acquisitions, post-closing compensation arrangements with selling physicians must fit within recognized Stark exceptions at fair market value. AKS requires that remuneration not be intended to induce or reward referrals. Both statutes carry False Claims Act liability, treble damages, and potential Medicare exclusion for violations. The practical implications for deal structuring are covered in detail at Stark Law and Anti-Kickback in healthcare M&A.
Certificate of Need (CON) laws, active in approximately 35 states, require state approval before establishing or acquiring certain healthcare facilities, adding beds, or purchasing major medical equipment above defined cost thresholds. CON review timelines vary by state and can materially affect closing schedules. Transactions involving hospitals, ambulatory surgery centers, or nursing facilities in CON states require early state-level analysis.
Medicare and Medicaid provider enrollment transfers do not occur automatically. Asset sales require new enrollment applications under the buyer's NPI; stock sales require a Change of Ownership (CHOW) notification to CMS within 90 days, and the buyer assumes all Medicare liabilities of the prior entity by operation of law. See the full mechanics at Medicare and Medicaid provider number transfers.
State licensing in healthcare is discipline-specific: physician group practices, behavioral health facilities, urgent care centers, and dental service organizations each operate under distinct state licensure frameworks. Licenses typically do not transfer in asset deals and must be reapplied for in the buyer's name. Timing license applications to close with the transaction is a standard coordination task in healthcare M&A. For a full overview of healthcare-specific due diligence scope, see the services page.
MSO Structures and the Corporate Practice of Medicine Doctrine
The corporate practice of medicine (CPOM) doctrine restricts non-physician entities from owning medical practices or employing physicians in states that have adopted it, including California, Texas, New York, and others. The doctrine reflects a policy that clinical decisions must remain free from lay business influence. For private equity, strategic acquirers, and management companies seeking to invest in physician practices in CPOM states, the standard legal structure is the management services organization (MSO) / friendly-PC arrangement.
Under an MSO structure, the acquirer (or its affiliated entity) forms an MSO that owns all non-clinical assets: real estate, equipment, administrative staff, billing systems, and goodwill. The MSO contracts with a physician-owned professional corporation (the "friendly-PC") under a long-term management services agreement. The PC retains the medical license, employs or contracts with the physicians, and provides clinical services. The MSO receives a management fee reflecting the fair market value of services rendered, which is structured to capture the economic value of the practice.
Key legal issues in MSO formation include: (1) the management fee must be at FMV and cannot be structured as a percentage of collections in ways that would constitute fee-splitting under state medical board rules; (2) the MSO cannot direct clinical decisions, override physician judgment, or condition physician employment on referral volumes; (3) the PC ownership arrangement must be documented to satisfy CPOM requirements, typically with the non-physician MSO holding an option to acquire the PC's equity if and when the law permits; (4) the management services agreement must be carefully drafted to avoid characterization as an employment relationship between the MSO and the physicians.
MSO structures are used across dental service organizations (DSOs), optometry platforms, behavioral health companies, dermatology, and urgent care roll-ups. The MSO healthcare guide covers structure mechanics, state-by-state CPOM variation, and common drafting issues in management services agreements.
Common Healthcare Deal Types
Dental Service Organizations (DSOs)
DSO roll-ups aggregate independently owned dental practices under a management platform. CPOM and fee-splitting rules apply in most states. Transactions require careful attention to state dental board regulations, patient records ownership, and dental license continuity. MSO structures are standard for DSO formation in CPOM states.
Optometry and Vision Platforms
Optometry practice acquisitions involve state-specific restrictions on non-optometrist ownership, retail optical co-location arrangements, and vision plan payor contract assignments. CPOM analysis varies significantly by state; some states permit corporate ownership of optometry practices while others do not.
Behavioral Health and Substance Use Treatment
Behavioral health acquisitions require analysis of 42 C.F.R. Part 2 confidentiality requirements (which impose restrictions on substance use disorder records beyond standard HIPAA), state mental health facility licensure, Medicaid waiver program participation, and supervision requirements for non-physician clinical staff.
Urgent Care and Ambulatory Surgery Centers
Urgent care roll-ups involve multi-state licensure coordination, facility certification under state DOH regulations, and payor contract assignment issues. ASC acquisitions add CON analysis, Medicare certification, and accreditation (AAAHC or Joint Commission) continuity considerations that affect post-closing operational timelines.
Physician Practice Sales
Physician practice sales range from single-specialty group sales to multi-site platform transactions. Deal structure, CPOM analysis, Stark Law compliance for post-closing employment, non-compete enforceability under state law, and patient notification requirements are core legal workstreams. Sellers and buyers each need independent counsel.
Hospital System and Health System M&A
Hospital mergers and health system acquisitions involve FTC antitrust review for transactions above Hart-Scott-Rodino thresholds, CON requirements in applicable states, CMS CHOW notifications, bond covenant and tax-exempt status considerations for nonprofit systems, and medical staff bylaw continuity. These transactions typically involve longer regulatory timelines than physician practice deals.
Healthcare M&A Legal Process
Healthcare acquisitions require regulatory analysis at each stage of the transaction, not only at due diligence. From initial deal structure through closing and post-closing license transfers, each phase has healthcare-specific legal requirements that must be addressed in sequence. The overview below tracks what this engagement covers.
Regulatory Mapping
Analysis of applicable federal and state regulations: Stark Law, Anti-Kickback Statute, HIPAA, CON requirements, state corporate practice of medicine rules, and licensing obligations specific to the healthcare sector and deal structure.
Deal Structure and MSO Design
Structuring the transaction to comply with corporate practice of medicine restrictions where applicable, including management services organization design, friendly-PC arrangements, and equity transfer mechanics.
Due Diligence Coordination
Healthcare-specific due diligence covering payor contracts, Medicare and Medicaid enrollment, HIPAA business associate compliance, billing and coding practices, provider licenses, and malpractice history.
Purchase Agreement Negotiation
Drafting and negotiating definitive acquisition documents with healthcare-specific representations, covenants, and indemnification provisions addressing regulatory compliance, payor agreements, and provider enrollment continuity.
Provider Enrollment and Licensing Transfer
Coordinating Medicare and Medicaid provider number transfers, state license transfers, DEA registrations, and hospital credentialing to maintain uninterrupted revenue streams through and after closing.
Closing and Post-Closing Transition
Managing closing deliverables, business associate agreement updates, employee and contractor transitions, and post-closing compliance obligations including any required governmental notifications.
What does Acquisition Stars' healthcare M&A engagement include?
Acquisition Stars handles regulatory analysis, deal structuring, MSO design, HIPAA due diligence, purchase agreement negotiation, and provider enrollment coordination for healthcare transactions.
Alex Lubyansky leads each healthcare engagement. Unlike general M&A counsel who outsources regulatory analysis, this practice addresses Stark Law, CPOM, HIPAA, and provider enrollment within the core transaction work. Buyers and sellers each receive direct representation and clear advice on the regulatory constraints that determine how the deal can be structured, what the representations must cover, and what post-closing obligations will apply.
Regulatory Analysis
- ✓ Stark Law and AKS compliance review
- ✓ CPOM and fee-splitting analysis by state
- ✓ CON applicability determination
Structuring and Documentation
- ✓ MSO / friendly-PC structure design
- ✓ Management services agreement drafting
- ✓ Purchase agreement with healthcare reps
Closing Coordination
- ✓ Medicare CHOW notification and filing
- ✓ State license transfer coordination
- ✓ BAA updates and HIPAA transition plan
Related M&A Legal Services
Due Diligence
Comprehensive legal due diligence for acquisitions, including healthcare-specific regulatory review.
Learn more →Buy-Side M&A
Legal representation for acquirers across all industries, including healthcare platforms and roll-ups.
Learn more →Sell-Side M&A
Sell-side representation for practice owners, including physician groups and healthcare operators.
Learn more →Healthcare M&A: Frequently Asked Questions
What is the corporate practice of medicine doctrine and how does it affect healthcare acquisitions?
The corporate practice of medicine (CPOM) doctrine, recognized in roughly two-thirds of states, prohibits lay (non-physician) entities from employing physicians or directly owning medical practices. The restriction exists because states reserve clinical decision-making for licensed professionals and want to prevent business interests from influencing patient care. In practice, this means a private equity firm or management company cannot simply purchase the stock of a physician-owned practice and have physicians become its employees. The common workaround is the management services organization (MSO) / friendly-PC structure: a non-physician entity (the MSO) owns all non-clinical assets and contracts with a physician-owned professional corporation (PC) for clinical services under a long-term management services agreement. The PC retains the medical license and clinical authority; the MSO captures the economic value. CPOM rules vary significantly by state. California, Texas, and New York impose strict prohibitions; other states are more permissive or silent. Any healthcare acquisition involving physician employment must be analyzed under the CPOM doctrine of every state where the practice operates.
How does the Stark Law affect physician practice acquisitions?
The Stark Law (42 U.S.C. § 1395nn) prohibits physicians from referring Medicare patients for designated health services (DHS) to an entity with which the physician or an immediate family member has a financial relationship, unless a specific exception applies. DHS includes laboratory, imaging, physical therapy, and a range of other services. In acquisitions, Stark Law is relevant in several ways: (1) Compensation structures: post-closing employment or contractor arrangements between the acquirer and selling physicians must fit within a recognized Stark exception, most commonly the bona fide employment exception or the personal services exception, both of which require compensation at fair market value (FMV) not taking into account the volume or value of referrals. (2) Existing referral arrangements: due diligence must identify any pre-closing arrangements that may not have satisfied a Stark exception, which could represent undisclosed government repayment liability. (3) In-office ancillary services: practices that bill for ancillary services under the in-office exception must maintain compliance post-closing. Violations carry False Claims Act liability, including treble damages and per-claim civil penalties, and can result in Medicare exclusion.
What does HIPAA due diligence cover in a healthcare acquisition?
HIPAA due diligence in a healthcare acquisition examines how the target handles protected health information (PHI) and whether its practices create regulatory or litigation exposure for the buyer. Key areas include: (1) Business associate agreements (BAAs): identifying all vendors, subcontractors, and service providers that receive PHI and confirming current, compliant BAAs are in place; BAAs must be updated or re-executed to reflect the new ownership. (2) Security risk analysis: confirming the target has conducted and documented a HIPAA Security Rule risk analysis and implemented required technical, administrative, and physical safeguards. (3) Breach history: reviewing any prior breaches, HHS Office for Civil Rights (OCR) investigations, or state AG actions, and assessing unresolved exposure. (4) EHR and data systems: evaluating whether electronic health record systems are certified and whether data migration plans comply with HIPAA. (5) Patient consent and authorization records: confirming adequacy of consent forms and authorization processes. Undisclosed HIPAA violations can result in post-closing indemnification claims; buyers typically seek representations and escrow protections covering HIPAA compliance.
How do Medicare provider numbers transfer in a healthcare acquisition?
Medicare provider enrollment does not automatically transfer to a buyer. The mechanics depend on deal structure. In an asset sale, the buyer must enroll as a new Medicare provider under its own National Provider Identifier (NPI) and obtain a new Provider Transaction Access Number (PTAN). The buyer cannot bill Medicare until enrollment is approved, which can take weeks or months, creating a gap in revenue. Buyers often negotiate a transition period during which the seller continues billing under its existing enrollment for services rendered post-closing, though CMS guidelines impose strict limits on this arrangement. In a stock or membership interest sale, the legal entity holding the enrollment does not change, so the provider number theoretically continues without re-enrollment, but the transaction must still be reported to Medicare as a change of ownership (CHOW) under 42 C.F.R. § 489.18. CMS must be notified within 90 days of the CHOW, and the buyer assumes all Medicare liabilities of the prior owner by operation of law, including any outstanding overpayments or compliance obligations. Medicaid enrollment is governed separately by each state, and many states treat an asset sale or even a significant ownership change as requiring new enrollment applications. Coordinating these transfers before closing is critical to maintaining uninterrupted billing and cash flow.
Related Articles
MSO Healthcare Guide: Management Services Organizations Explained
Structure mechanics, state-by-state CPOM analysis, and MSO agreement drafting considerations.
HIPAA Compliance in Healthcare Acquisitions
What buyers need to review before closing: BAAs, breach history, security risk analysis, and PHI diligence.
Stark Law and Anti-Kickback Statute in Healthcare M&A
How federal physician self-referral and remuneration rules shape deal structure and post-closing compensation.
Medicare and Medicaid Provider Number Transfers in Acquisitions
Asset sale vs. stock sale treatment, CHOW notification timelines, and strategies for maintaining billing continuity.
M&A Due Diligence Guide
Comprehensive overview of legal due diligence for acquisitions, with healthcare-specific considerations.
Healthcare Acquisition Counsel, Nationwide
Alex Lubyansky handles healthcare M&A transactions directly: physician practice acquisitions, DSO and MSO structures, HIPAA diligence, Stark Law compliance, and provider enrollment coordination. Submit transaction details to begin the engagement assessment.