Skip to main content
v2026.11,858 entries · CC-BY 4.0
LAC HealthMedical Supply Distributor100,000+ medical supplies. 48-hour critical dispatch.Ships from 8 regional U.S. hubs. Net-30 terms for verified institutional accounts.Shop lac.us CodeCASRAIlac.us

Management Services Organization (MSO) in Healthcare: Friendly PC Model, CPOM, and 42 CFR § 1001.952(d) Compliance

How a Healthcare Management Services Organization (MSO) and the Friendly PC model work under CPOM laws, Management Services Agreements, and 42 CFR § 1001.952(d).

Written and maintained by CASRAI Editorial Board

Last updated

A Management Services Organization (MSO) in healthcare is a non-clinical administrative business entity (structured as a general corporation or limited liability company) that provides turn-key operational, financial, human resources, health information technology, and revenue cycle management services to one or more clinical medical practices under a formal Management Services Agreement (MSA). Widely used by multi-state telehealth platforms, health system ambulatory networks, physician practice roll-ups, and clinical research site networks, the MSO structure separates non-clinical business operations and capital investment from licensed medical practice to comply with state Corporate Practice of Medicine (CPOM) prohibitions and federal healthcare fraud and abuse laws (42 CFR § 1001.952(d) and 42 CFR § 411.357(d)).

What Is a Management Services Organization (MSO) in Healthcare?

Under the Corporate Practice of Medicine (CPOM) doctrine enforced in the majority of US states (with particularly strict statutory and regulatory enforcement in jurisdictions such as California, Texas, New York, New Jersey, and Illinois), a general business corporation owned by non-physicians cannot legally practice medicine, employ physicians to render clinical services, or interfere with a clinician’s independent medical judgment. Parallel state anti-fee-splitting statutes prohibit licensed physicians from sharing raw professional patient-care fees with unlicensed laypersons.

To enable health systems, digital health technology companies, or institutional investors to build and scale administrative infrastructure without violating CPOM or fee-splitting laws, healthcare organizations separate the enterprise into two distinct legal entities under the MSO–Friendly PC (Professional Corporation) model:

  1. The Professional Corporation (“Friendly PC” or PLLC / PA): A state-registered professional medical entity owned 100% by one or more physicians licensed in the applicable state(s). The PC holds the organizational Type 2 National Provider Identifier (NPI), Medicare/Medicaid PTAN enrollments, and commercial payer contracts; employs or contracts all physicians, nurse practitioners, and physician assistants; maintains exclusive authority over clinical care, diagnostic ordering, utilization management decisions, and medical record sign-off; and carries medical malpractice insurance.
  2. The Management Services Organization (MSO): A non-professional LLC or C-corporation (which may be owned by a hospital system, a telehealth software company, physicians, or lay investors) that owns the non-clinical operating assets—including clinic leases, non-medical equipment, EHR and software licenses, call centers, and billing systems—and furnishes comprehensive administrative management to the PC in exchange for a fair-market-value management fee under a long-term Management Services Agreement (MSA). Meanwhile, the MSO carries commercial general liability, cyber, and errors and omissions (E&O) insurance for its administrative and technology operations.

Division of Authority in an MSO–Friendly PC Structure: Clinical vs. Administrative Boundaries

State attorneys general, medical boards, and federal auditors examine whether an MSO has crossed the line from administrative management into de facto control of clinical medicine. A compliant MSA strictly partitions governance duties across the two entities:

Operational Domain Friendly PC (Licensed Physician Entity) — Exclusive Authority MSO (Administrative Entity) — Permitted Scope Under MSA
Clinical Personnel & Credentialing Hires, supervises, evaluates clinical competency, disciplines, and terminates physicians, NPs, PAs, and clinical nurses Performs administrative primary-source credentialing verification, payroll processing, and HR benefits administration
Patient Care & Clinical Protocols Sets clinical practice standards, diagnostic/prescribing protocols, appointment duration minimums, and medical necessity criteria Provides EHR software, scheduling engines, and non-clinical patient intake/check-in workflows
Coding, Billing & Payer Contracting Selects and attests to CPT/HCPCS/ICD-10 codes in the medical record; executes payer contracts in the PC’s legal name Submits claims as the PC’s billing agent, works administrative claim denials, and negotiates payer contract templates at the PC’s direction
Medical Records & HIPAA Governance Acts as the HIPAA Covered Entity and legal custodian of patient medical records Acts as a HIPAA Business Associate under an executed BAA to host EHR infrastructure and process billing data
Bank Accounts & Government Receivables Maintains a dedicated PC bank account into which all Medicare/Medicaid payments are deposited directly in the PC’s name Sweeps authorized funds from the PC operating account to pay documented expenses and the contracted MSA management fee

Federal Fraud and Abuse Compliance: 42 CFR § 1001.952(d) (AKS Safe Harbor) and Stark Law

When a Friendly PC treats beneficiaries covered by Medicare, Medicaid, TRICARE, or other federal healthcare programs, the financial flow between the PC and the MSO is scrutinized under two federal statutes:

1. Federal Anti-Kickback Statute Safe Harbor (42 CFR § 1001.952(d))

Under the federal Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)), the HHS Office of Inspector General (OIG) evaluates whether management fees paid by a PC to an MSO (or discounted management fees offered by an MSO affiliated with a laboratory or imaging center) act as disguised remuneration to induce federal patient referrals. To achieve immunity under the Personal Services and Management Contracts Safe Harbor (42 CFR § 1001.952(d)(1)), the MSA must satisfy six mandatory criteria:

  • Written and Signed Agreement: The MSA must be set out in writing and signed by both the MSO and the PC.
  • Specification of All Services: The agreement must specify all administrative, facilities, and IT services to be furnished by the MSO over the contract term.
  • Minimum One-Year Term: The term of the agreement must be for not less than 1 year (and if terminated early without cause, the parties may not enter into the same or substantially the same arrangement during the remainder of that initial year).
  • Methodology Set in Advance and Fair Market Value (FMV): The methodology for determining the compensation paid to the MSO over the term must be set in advance, be consistent with fair market value in arm’s-length transactions (substantiated by an independent third-party healthcare valuation), and must not be determined in a manner that takes into account the volume or value of any referrals or business otherwise generated between the parties payable by federal healthcare programs.
  • Lawful Business Purpose: The services performed under the MSA must not involve counseling or promotion of a business arrangement that violates state or federal law.
  • Commercial Reasonableness: The aggregate services contracted for must not exceed those reasonably necessary to accomplish the commercially reasonable business purpose of the services.

Fee-Structure Compliance Note: Because percentage-of-collections or percentage-of-net-revenue management fees fluctuate with practice volume, many federal compliance frameworks and state anti-fee-splitting statutes (such as New York and California restrictions) require MSO management fees to be structured as a cost-plus fixed fee or a flat annual/monthly management fee set in advance at fair market value.

2. Federal Physician Self-Referral Law / Stark Law (42 CFR § 411.357(d))

When the MSO–PC arrangement involves physician referrals for Designated Health Services (DHS)—such as clinical laboratory testing, diagnostic radiology/MRI/CT, physical and occupational therapy, durable medical equipment, or outpatient prescription drugs—and referring physicians hold an ownership or compensation relationship in the structure, the arrangement must strictly satisfy an applicable Stark Law exception, such as the Personal Service Arrangements Exception (42 CFR § 411.357(d)), the Fair Market Value Compensation Exception (§ 411.357(l)), or the In-Office Ancillary Services Exception (§ 411.355(b)) inside a qualifying group practice (§ 411.352).

How Healthcare MSOs Operate in Telehealth Networks and Clinical Research

In digital health and clinical research administration, the MSO structure supports two specialized operational models:

  1. Multi-State Telehealth Platform Architecture: A software-as-a-service telehealth developer operates as the technology MSO (owning the mobile app, WebRTC media infrastructure, and non-clinical customer support) while contracting via MSAs with one or more physician-owned Friendly PCs registered across all 50 states to deliver compliant clinical care.
  2. Clinical Research Site Management Organizations (SMOs) and Integrated Research MSOs: Community physician practices participating in industry-sponsored Phase II–IV clinical trials frequently utilize an MSO or Site Management Organization (SMO) to centralize Clinical Trial Agreement (CTA) budget negotiation, regulatory IRB packet preparation, clinical research coordinator (CRC) staffing, and Clinical Trial Management System (CTMS) administration, while the Principal Investigator and the medical PC retain exclusive responsibility for participant eligibility, informed consent, adverse event attribution, and investigational product oversight under FDA 21 CFR Part 312.

Follow CASRAI

Research-administration guidance, standards updates and independent tool reviews.

Ask CASRAI · free to try

Ask about Management Services Organization (MSO) in Healthcare: Friendly PC Model, CPOM, and 42 CFR § 1001.952(d) Compliance

Ask your first 2 questions free below. Subscribers get 150 a day for $29 a month.

An AI assistant specialized in research administration. It cites the sources behind every answer, labels web answers and says when it can't answer.

Answers draw on CASRAI's guides and dictionary plus the federal and funder documents we index: Federal Register, Grants.gov, Regulations.gov and UKRI.

Works on this site and inside Claude, Cursor and the AI tools you already use.

Everything CASRAI publishes — this page, the dictionary, the guides and the news — stays free to read, with no account and no card.

Referenced across the research world

University of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logoUniversity of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logo
  • University of Cambridge logo
  • Columbia University logo
  • Crossref logo
  • University of Edinburgh logo
  • Harvard University logo
  • University of Oxford logo
  • Princeton University logo
  • Stanford School of Medicine logo
  • University College London logo
  • ORCID logo

View CASRAI adoption →