BOLO Insights & Legal Updates

Healthcare MSO Agreements: Who Controls Clinical Decisions?

A management services organization (MSO) can make life easier for clinicians: payroll, leasing, credentialing coordination, billing support and technology can be handled through a specialized administrative company. Problems arise when the management contract quietly grants a nonclinical entity authority over treatment decisions, professional staff, patient records or referral economics. A polished contract that announces “clinical autonomy” in its first paragraph is not enough if the rest of the agreement functions differently.

The critical inquiry is how the organization actually works. Who decides patient treatment? Who controls the medical practice? Who bills, and under which provider enrollment? Who can hire, discipline or terminate licensed professionals? Those operational facts should match the legal structure and written allocation of duties.

Administrative management and clinical judgment are different

An MSO ordinarily may support appropriately structured administrative operations such as equipment procurement, office space, nonclinical personnel, payroll administration and technology. But New Jersey medical-practice structure requirements, including N.J.A.C. 13:35-6.16, must be evaluated when physicians practice through a particular entity or contractual arrangement. A management contract should not presume that an unlicensed investor or MSO can direct medical judgment merely because it owns the scheduling software or furnishes the staff.

The New Jersey Board of Medical Examiners regulations portal identifies the governing medical board rules and access to the current administrative code. A proposed arrangement involving physicians, advanced practice clinicians or other licensed professionals also needs analysis of their particular professional and entity rules, not a single generic corporate-practice template.

Five control questions to answer before signing

First, who determines diagnosis, treatment, patient discharge and appropriate referral? Second, who chooses the licensed providers, grants clinical privileges where applicable and supervises professional services? Third, who owns and lawfully controls patient records and required clinical documentation? Fourth, who selects billing codes, authorizes clinical attestations and responds to medical-record requests? Fifth, what may the MSO do if it disagrees with a clinician’s judgment?

These questions reveal whether practical authority aligns with contractual recitals. An MSO may help manage a schedule, but it should not be able to cancel medically necessary care solely because a payment metric fell below a target. The agreement also should not make a vendor the sole custodian of records the professional entity must produce for treatment, lawful access or payer review.

Fees, compensation and referral risk

MSO compensation can include fixed charges, expense allocations and other agreed structures. But a management fee that depends on patient referrals or federally reimbursed service volume may create concerns under federal or state fraud-and-abuse law. The Anti-Kickback Statute can apply to remuneration intended to induce or reward referrals for federally reimbursable items or services. The parties should assess legitimate service value, how fees are determined, contracts involving related parties and whether an applicable exception or safe harbor actually fits.

HHS-OIG explains major fraud and abuse laws affecting physician relationships. A fee described as fair market value is not automatically compliant. Similarly, a contract that is common in another state may violate a restriction applying to the licensed practice in New Jersey.

Revenue cycle arrangements create a second control problem

If an MSO submits claims, maps codes or manages payer portals, the agreement should state who is permitted to approve each function and who retains responsibility for accurate documentation and billing. Identify the owner of payer credentials, the source of truth for clinical notes, the claims audit trail and the process for correcting submitted information. The practice should have meaningful access to reports showing collections, denials, credit balances and outstanding appeals.

An audit may involve an MSO that holds a billing platform, a practice that holds the EHR and a clinician who remembers the patient encounter. Contracts need an evidence-preservation and cooperation plan that permits the parties to reconstruct legitimate claims even after the commercial relationship ends.

HIPAA and third-party access

An MSO that handles protected health information for a covered provider may be a business associate, requiring appropriate contractual assurances and safeguards. HHS provides sample business associate agreement provisions. Whether a particular relationship requires a BAA depends on the entities and functions. Where applicable, data-access, security incident reporting, subcontracting and termination provisions should align with the MSA rather than contradict it.

Do not treat a BAA as permission for unlimited secondary use of patient data. Specify permitted access by role, necessary system permissions, subcontractor controls, and the operational process for lawful return, retention or transition.

Exit rights protect both sides of the business

A medical practice may need uninterrupted EHR access, phone numbers, scheduling, revenue cycle data, patient communications and vendor accounts after the MSA ends. The MSO may reasonably require payment of properly earned fees and a structured transition. Negotiate a practical handoff: export formats, time limits, transition support charges, dispute handling, ongoing claims and appeals, and access to original records.

A transition clause should not make patient safety or statutory record access contingent on an unrelated commercial dispute. Conversely, the clinical business should not assume all MSO technology licenses and employees can be transferred without third-party permission.

An MSO formation checklist

Map every legal entity and ultimate owner, every management or professional agreement, each payment stream, payer participation and record custodian. Review the licensed entity structure first, then write the MSA around lawful operations. Run a scenario in which a payer suspends payments and asks who approved disputed claims. Run another in which a physician terminates the MSO relationship with unresolved records requests. The planned structure should have practical answers to both.

BOLO Health Law works on healthcare business formation and contracts, RCM and vendor agreements, and MSO governance reviews.

Primary sources

New Jersey State Board of Medical Examiners Regulations; HHS-OIG: Fraud and Abuse Laws; HHS: Sample BAA Provisions.

Attorney advertising. General educational information reviewed October 18, 2026, not legal advice. Rules and deadlines depend on the particular notice, facts and jurisdiction. Reading this article does not establish an attorney-client relationship; representation is subject to conflicts, admission and engagement terms.

Need counsel for the facts behind the issue?

General legal education cannot assess the records, contract terms, procedural posture or deadlines in your own matter. BOLO reviews select matters involving healthcare providers, regulated businesses and individuals, subject to conflicts, scope and jurisdiction.

Read how BOLO researches and reviews legal content. Do not send confidential records through public inquiry forms. Contact alone does not establish representation or extend any deadline.