# California Regulatory Requirements — NFP Community Hospital + Primary Care / Provider Network

Research brief for the Redlands Health strategy. **Informational only — not legal advice.** California health regulation is unusually strict and fast-moving (two major laws took effect Jan 1, 2026); engage California health-care counsel before any structural decision. Citations point to source-of-truth statutes/agencies where possible.

---

## Part A — The decisive issue: Corporate Practice of Medicine (CPOM)

**The rule.** California prohibits the "corporate practice of medicine." Lay corporations may not practice medicine, employ physicians to practice medicine, or control/influence a physician's clinical judgment. Source: **Business & Professions Code §2400** ("Corporations and other artificial entities shall have no professional rights, privileges, or powers") and §2052; enforced by the **Medical Board of California**.

**What a non-physician / corporation may NOT control** (Medical Board of California guidance):
- Determining what **diagnostic tests** are appropriate
- The need for **referrals/consultations**
- **Ultimate responsibility** for overall patient care & treatment options
- **How many patients** a physician sees / how many hours worked
- Ownership/control of **medical records**
- **Hiring/firing of physicians** as it relates to clinical competency
- Setting the terms of **payer contracts**, **coding/billing**, and **equipment/supply** decisions

**Bottom line for RCH:** A non-profit **community** hospital generally **cannot directly employ physicians** to practice medicine. (Narrow exceptions exist for *district* hospitals [H&S §32125 et seq.], *county* hospitals, the University of California / teaching institutions, and certain narcotic-treatment and specified settings — **RCH, as a private NFP community hospital, does not fall into these**.) So a primary-care group must be built through a compliant structure, not an employment line on RCH's org chart.

### The compliant structures to actually build the group
| Structure | How it works | Who uses it | Notes |
|---|---|---|---|
| **1206(l) Medical Foundation** | A 501(c)(3) foundation operates the clinics; physicians deliver care via a contracted group. | Sutter, Sharp Rees-Stealy, Scripps, Palo Alto Med Fdn | The classic "hospital-aligned employed-equivalent" model. **Statutory bar:** the group must be **40+ physicians, ≥10 board-certified specialties, ≥⅔ full-time**, and the foundation must **conduct medical research and health education** (H&S §1206(l)). High bar — a real build. |
| **Friendly PC + MSO** | Physician-owned **professional medical corporation** (Moscone-Knox, Corp. Code §13400) employs the doctors; an RCH-affiliated **Management Services Organization** provides admin/billing/IT under a management services agreement. | Most PE-backed and system-aligned groups | The physician PC must retain all clinical control. **SB 351 (2026)** tightens what the MSO/affiliate may control (see below). |
| **IPA / contracted network** | Independent physicians (or their PCs) contract with RCH or a payer; no employment. | Most California markets | Fastest, lowest capital; least control. Pairs with a clinically-integrated network (see Part C). |

> **Strategy link:** the [Primary Care](site/primary-care.html) page's "build vs. partner vs. acquire" maps onto this: "build/employ" in CA realistically means **stand up a 1206(l) foundation or a friendly-PC+MSO**, not literal employment.

### SB 351 (signed Oct 6, 2025; effective **Jan 1, 2026**)
Codifies CPOM and restricts **private-equity groups / hedge funds** from controlling clinical decisions or imposing noncompete/non-disparagement terms; AG enforcement. **Critically, hospitals/hospital systems and public agencies were excluded** from the "PE group / hedge fund" definitions — so SB 351's PE restrictions don't target a NFP hospital like RCH. But the underlying CPOM clinical-control limits still bind any MSO structure RCH uses.

---

## Part B — Operating a NFP community hospital in California

1. **Licensure (CDPH).** A general acute care hospital (GACH) license is issued by the **California Department of Public Health**, Licensing & Certification. Authority: **Health & Safety Code §1250 et seq.**; regulations in **Title 22 CCR, Division 5**. No entity may operate/advertise a hospital without this license.
2. **Seismic safety (HCAI / OSHPD).** The **Alquist Hospital Facilities Seismic Safety Act** is enforced by the **Office of Statewide Hospital Planning & Development** within **HCAI**. Buildings must meet Structural Performance Category deadlines — SPC-1 out of acute service by **2020**, SPC-2 by **2030** (extensions possible). Major construction needs HCAI plan review.
3. **Non-profit status & AG oversight.** 501(c)(3) federal + CA Franchise Tax Board exemption. The **California Attorney General must review and approve** any sale/transfer of assets or change of control of a NFP health facility — **Corporations Code §5914–5925** (notice, public meeting, conditions).
4. **Community benefit obligations.** In exchange for tax exemption, NFP hospitals must adopt and update a **community benefits plan** and complete a community health needs assessment — **H&S §127340 et seq.**, with reporting to **HCAI** (expanded by AB 204). "Community benefits" = charity care + community health improvement + other unreimbursed services for vulnerable populations.
5. **Charity care & fair billing.** The **Hospital Fair Pricing Act** (**H&S §127400 et seq.**) requires charity-care and discount-payment policies for financially-qualified (uninsured/underinsured) patients and limits aggressive collections.
6. **Medical staff governance.** Self-governing, peer-reviewed medical staff is required (Business & Professions Code §2282.5; Title 22); the medical staff — not the corporation — governs credentialing and clinical quality.

---

## Part C — Building the primary-care / provider network

### If you only contract (no insurance risk)
Foundation / friendly-PC+MSO / IPA structures above. **No DMHC license** needed to *deliver* care or contract on a fee-for-service / shared-savings basis. Watch:
- **Fee-splitting & referrals:** B&P **§650 / §650.01** (CA), plus federal **Stark** and **Anti-Kickback Statute**.
- **Antitrust for a CIN:** independent physicians may only *jointly negotiate* with payers if they are **clinically and financially integrated** (FTC/DOJ guidance) — otherwise it's price-fixing. A genuine clinically-integrated network is the lawful path to joint contracting.

### If you bear insurance risk → the Knox-Keene Act (DMHC)
The **Knox-Keene Health Care Service Plan Act of 1975** (**H&S §1340 et seq.**), administered by the **Department of Managed Health Care**, governs anyone who bears risk for arranging health care:
| License type | What it allows | When you need it |
|---|---|---|
| **Restricted / Limited Knox-Keene (RKKL)** | Bear **global/downstream risk** as a sub-contractor to a licensed plan; pay provider claims. Cannot create insurance products or contract directly with employers/individuals. | **Taking "global risk"** (professional + institutional) triggers at least an RKKL — DMHC regulation effective **July 1, 2019**. |
| **Full-service Knox-Keene** | Operate your own health plan; sell coverage to employers/individuals. | The full **provider-sponsored health plan** (the "own the plan" endgame). Requires capital/**tangible net equity reserves**, TPA infrastructure, and network-adequacy filings. |

- **Risk-Bearing Organizations (RBOs):** capitated medical groups/IPAs must meet DMHC **financial solvency** standards and report (Title 28 CCR §1300.75.4). DMHC has been **expanding** what counts as risk-bearing requiring licensure (2019 reg; ongoing).

### Network adequacy & timely access (applies once licensed / risk-bearing)
Authority: **H&S §1367.03 / §1367.035** and **Title 28 CCR §1300.67.2.2**. Key standards:
- **Provider ratio:** ≥ **1 full-time primary-care physician per 2,000 enrollees**.
- **Time/distance:** PCP within **15 miles or 30 minutes** of each enrollee (specialty/hospital standards vary).
- **Appointment wait-time (timely access):** urgent (no prior auth) **48 hrs**; urgent (prior auth) **96 hrs**; **non-urgent primary care 10 business days**; non-urgent specialist **15 business days**; non-urgent ancillary **15 business days**.
- **Annual reporting** to DMHC by **May 1** (Timely Access & Network Reporting).

> **Strategy link:** the 1-PCP-per-2,000 ratio is the same number behind the capacity math on the [Primary Care](site/primary-care.html) page — ~12–15 PCP-led teams for the ~22k capturable lives.

---

## Part D — Transaction oversight you'll hit when you grow (new for 2026)

- **AG approval** of NFP hospital asset sales / control changes — **Corp. Code §5914–5925** (already noted).
- **OHCA material-change notice — AB 1415 (signed Oct 11, 2025; effective Jan 1, 2026).** The **Office of Health Care Affordability** (within HCAI) must receive **90-day advance notice** of "material change transactions" (acquisitions, affiliations, MSO deals, etc.) for transactions closing **on/after April 2, 2026**; OHCA may run a **Cost & Market Impact Review (CMIR)** that delays closing. Expanded to cover MSOs, PE/hedge funds, and newly-created entities.
- **OHCA cost-growth targets** apply to large providers/systems as you scale.

---

## Part E — What it means for Redlands Health

1. **You cannot just "employ PCPs."** To build the primary-care foundation, choose a **1206(l) medical foundation** (high bar: 40+ MDs, 10+ specialties, ⅔ full-time, research/education mission) **or** a **friendly-PC + MSO**. This is a structural decision to make early with counsel.
2. **Go at-risk in stages, and license accordingly.** Shared-savings needs no license; **global risk** needs at least a **Restricted Knox-Keene**; the **own-the-plan** endgame needs a **full Knox-Keene** with reserves. Matches the risk ladder on [Plan & Care at Home](site/value-based-plan.html).
3. **Network adequacy is a hard standard, not a goal.** 1:2,000 PCPs, time/distance, and wait-time rules are enforced and reported annually — which is exactly why physician supply (vs. Optum/Beaver) is the gating constraint.
4. **Community-benefit + charity-care obligations** are assets here, not just burdens: the **1% community investment** and "healthiest city" agenda map directly onto the community-benefit plan you already must file with HCAI.
5. **Plan for AG + OHCA review** on any affiliation/acquisition as you grow into a system.

### Key authorities (source-of-truth)
- CPOM: B&P **§2400**, §2052; Medical Board of California guidance
- Medical foundation: H&S **§1206(l)**
- SB 351 (CPOM/PE), effective 1/1/2026
- Hospital licensure: H&S **§1250 et seq.**; Title 22 CCR Div. 5 (CDPH); seismic via HCAI/OSHPD
- Community benefit: H&S **§127340 et seq.**; charity care: H&S **§127400 et seq.**
- AG review of NFP transfers: Corp. Code **§5914–5925**
- Knox-Keene: H&S **§1340 et seq.** (DMHC); network adequacy: H&S §1367.03, Title 28 CCR **§1300.67.2.2**; RBO solvency: Title 28 §1300.75.4
- OHCA / AB 1415 transaction notice, effective 1/1/2026

*Compiled from California statutes and current law-firm/agency analyses, 2025–2026. Verify current text before relying on any provision.*