Key Takeaways

• Historical CPOM liability runs through several distinct channels: B&P § 17200 (Unfair Competition Law); B&P § 17500 (false advertising); Medical Board discipline for the physician of record under B&P § 2264 (aiding and abetting unlicensed practice); Board of Registered Nursing discipline for delegating and administering RNs; consumer-protection exposure; and — for practices with payor participation — payor recoupment and potentially False Claims Act exposure.
• The California AG’s 2026 enforcement pattern (Aspen Dental settlement, Carbon Health settlement including personal $100,000 civil penalty against the non-licensee co-founder, Art Center Holdings amicus brief) demonstrates that CPOM enforcement can reach non-licensee owners personally, not just the operating entities.
• California’s Unfair Competition Law provides for civil penalties of up to $2,500 per violation, with each violation potentially defined as each transaction or each patient encounter. For a practice operating out of compliance over years of patient volume, aggregate exposure can be substantial.
• Voluntary remediation is materially stronger than reactive remediation as an exposure-mitigation posture. The specific mitigation available in a given case depends on the operating history, the specifics of the remediation, and whether regulators are already involved.
• Historical liability analysis is fact-specific and highly technical. This post is educational, not a substitute for specific-fact analysis with California-specific counsel.

Historical Liability for Non-Compliant California Treatment Businesses

Remediation converts a non-compliant California treatment business into a compliant going-forward structure. The clock stops running from the date the new structure operates properly. What remediation does not do is erase the liability accumulated during the period the practice was operating non-compliantly. That liability is a separate analysis, and for practices that have been operating out of compliance for years, the historical layer can be a meaningful part of the overall exposure — sometimes larger than the going-forward risk.

This post walks through the historical liability categories a non-licensee owner faces after (or during) remediation. It sits under the remediation pillar for the CPOM Acquisition & Remediation cluster and pairs with the LLC conversion and physician-owner sourcing posts in this same batch. Nothing in this post is a substitute for a specific-fact analysis with California-specific counsel — the actual exposure in any given case depends on the operating history, the practice’s specific arrangements, and the applicable limitations periods.

The Framework: What “Historical Liability” Actually Means

When a California treatment business operates through a non-compliant structure — an LLC rendering medical services, a paper medical director arrangement, a fee-splitting MSA, patient billing through a non-physician entity, the practice is out of compliance from the day operations begin. Every patient encounter, every prescription, every billing statement, and every marketing representation during the non-compliant period is a potential compliance violation.

Regulatory enforcement can reach any of these encounters — subject to applicable limitations periods, even after the practice has remediated the structural issues going forward. And for practices that operated non-compliantly for years and served thousands of patients, the potential aggregate exposure is meaningful.

Historical liability analysis maps the exposure across several distinct legal channels, each with its own statute of limitations, remedy structure, and enforcement mechanism. Understanding the map is the starting point for any mitigation strategy.

Channel 1: B&P § 17200 (Unfair Competition Law)

What it covers. California’s Unfair Competition Law prohibits any “unlawful, unfair, or fraudulent business act or practice.” Operating a business that renders medical services without a compliant licensed structure is unlawful under B&P §§ 2052 and 2400, and therefore is a § 17200 violation.

Who enforces. Public prosecutors — the California Attorney General, district attorneys, county counsel, and city attorneys — can bring § 17200 civil actions. Private plaintiffs (including patients, competitors, and — in specific configurations — insurance companies as relators) can bring UCL actions with restitution as the primary private remedy.

Remedy structure. Public prosecutors can seek civil penalties of up to $2,500 per violation under B&P § 17206. What counts as a “violation” is fact-specific — in some cases each transaction, each patient encounter, or each defined act. Injunctive relief is standard. Restitution is available to make patients whole for amounts paid for services rendered by an unauthorized entity.

Statute of limitations. Four years under Code of Civil Procedure § 343 for UCL claims.

2026 enforcement examples. The California AG’s June 2026 Carbon Health settlement imposed $4.4 million in civil penalties on the operating entities under UCL and related theories. The May 2026 Aspen Dental settlement imposed $2 million in penalties and $300,000 in restitution. Both settlements were resolved without admissions of liability.

Personal exposure for non-licensee owners. The Carbon Health settlement imposed a $100,000 civil penalty on the non-licensee co-founder personally, in addition to the entity penalties. This is a documented example of the AG reaching individual owners for UCL enforcement, and it changes the risk analysis for non-licensee owners of California treatment businesses that have operated non-compliantly.

Channel 2: B&P § 17500 (False Advertising)

What it covers. California’s false-advertising statute prohibits false or misleading statements in advertising. Marketing that represented a practice as physician-supervised while the medical director was largely absent; that overstated outcomes for the services offered; that used testimonials without appropriate disclosures; that misrepresented insurance status; or that promised specific results for off-label indications — all of these are potential § 17500 exposures.

Who enforces. Public prosecutors under § 17535. Private plaintiffs under UCL’s fraudulent-prong analysis (B&P § 17204).

Remedy structure. Public prosecutors can seek civil penalties. Injunctive relief and restitution are available. Private UCL fraudulent-prong claims allow restitution to patients and to enforce marketing corrections.

Statute of limitations. Three years under CCP § 338(h) for § 17500 claims; four years for parallel UCL fraudulent-prong claims.

Practical incidence. False-advertising exposure is a common companion to CPOM exposure — practices operating through a non-compliant structure often have marketing that overstated the practice’s clinical structure, which is exactly the § 17500 issue. Aspen Dental’s May 2026 settlement included false-advertising allegations, and Carbon Health’s June 2026 settlement included both CPOM and false-advertising claims. The two channels tend to overlap.

Channel 3: Medical Board Discipline for the Physician of Record

What it covers. B&P § 2264 makes it a public offense to aid and abet the practice of medicine by an unlicensed entity. A physician who served as the paper medical director of a non-compliant LLC — signing off on standardized procedures, lending their license to the practice’s marketing, without genuine clinical engagement — has potential exposure under § 2264 and related Medical Board disciplinary authority under B&P §§ 2227, 2234, and 2260 et seq.

Who enforces. The Medical Board of California, through its Enforcement Division. Complaints can originate from patient reports, competitor complaints, coroner referrals, malpractice-carrier reports, employer reports, or investigations spurred by other regulatory action.

Remedy structure. Medical Board discipline can include public reprimand, probation, license suspension, or license revocation. Fines and cost recovery are secondary. The physician’s professional liability coverage may exclude coverage for aiding-and-abetting-unlicensed-practice claims, leaving the physician personally exposed.

Statute of limitations. Complex — B&P § 2230.5 sets a general seven-year limitation for Medical Board action from the date the Board discovered or should have discovered the act, subject to various exceptions.

Practical incidence. Paper medical director arrangements have been a documented Medical Board enforcement priority. Physicians who lent their names to non-compliant practices face potential Board scrutiny that can outlast their engagement with the practice by years. The physician’s exposure is separate from the owner’s and from the entity’s, and needs to be addressed as part of remediation planning — often the paper physician wants to exit the arrangement, and the exit terms need to include appropriate confidentiality and (where possible) mutual releases.

Channel 4: Board of Registered Nursing Discipline

What it covers. RNs who administered treatments under a defective delegation framework — without patient-specific orders based on a good-faith exam, without current standardized procedures under 16 CCR § 1474, or under a paper medical director arrangement that did not provide genuine physician oversight — have potential exposure under B&P §§ 2761 et seq. and BRN disciplinary authority.

Who enforces. The California Board of Registered Nursing, through its Enforcement Division.

Remedy structure. BRN discipline can include public reprimand, probation, license suspension, or license revocation. Cost recovery is possible.

Statute of limitations. B&P § 2761.1 sets a general limitation for BRN action; the specifics are fact-dependent.

Practical incidence. RNs who worked as nurse-injectors, IV therapy administrators, laser and IPL technicians (under physician supervision), or in other delegated roles at non-compliant practices face potential BRN scrutiny separate from the owner’s exposure. The RN’s exposure is often a diligence and remediation planning consideration — practices that relied heavily on RN clinical staffing need to think about the RN staff’s individual exposure as part of the remediation.

Channel 5: Consumer-Protection Exposure

What it covers. Individual and class claims from patients based on services rendered by a business not authorized to render them, or based on marketing representations the practice did not honor. Claims can proceed under UCL’s private-plaintiff prong, under contract-based theories (for services promised but not delivered as marketed), and — in some cases — under CLRA (Consumers Legal Remedies Act, Civ. Code § 1750 et seq.) if the services qualify as “goods or services” under that statute.

Who enforces. Individual plaintiffs, class representatives, and (in some cases) consumer advocacy organizations.

Remedy structure. Restitution, injunctive relief, and — where CLRA or other punitive-remedy statutes apply — potential punitive damages. Attorney fees are available under specific statutes.

Statute of limitations. Varies by theory — UCL is four years; contract-based claims typically four years; CLRA is three years; other statutory theories vary.

Practical incidence. For predominantly cash-pay practices with substantial patient volume over years, the aggregate consumer-protection exposure can be meaningful, particularly if the practice’s marketing overstated outcomes or the practice’s clinical structure. Refund demands and individual claims are more common than class actions in this space; class actions require specific patterns that not every fact pattern produces.

Channel 6: Payor Recoupment and False Claims Act

What it covers. For practices that participated in commercial payor networks, offered superbill support for insurance reimbursement, or (uncommonly for wellness-oriented practices) participated in Medicare or Medi-Cal, payor recoupment for services rendered by an unauthorized entity is a real category of exposure. Where federal payors are involved, the False Claims Act (31 U.S.C. §§ 3729 et seq.) can apply, including relator provisions that allow whistleblowers to bring cases on behalf of the government.

Who enforces. Commercial payors through contractual audit and recoupment procedures. Federal payors and their contractors (Medicare, Medi-Cal). The Department of Justice for FCA cases. State attorneys general for state-analog FCA claims. Relators (private whistleblowers) under FCA and California’s False Claims Act.

Remedy structure. Recoupment of payments made for non-compliant services. Under FCA, treble damages plus civil penalties per false claim. State-analog FCA remedies vary.

Statute of limitations. FCA has a six-year limitations period (with a 10-year outer limit under specific circumstances). California’s FCA has a six-year period. Commercial payor recoupment is governed by the specific payor contract.

Practical incidence. Limited for predominantly cash-pay wellness, med spa, IV, ketamine, GLP-1, and HRT practices. More significant for practices with commercial payor participation, and much more significant for practices participating in Medicare, Medi-Cal, or other federal payors. Superbill practices deserve careful analysis — the superbill represents to the payor that the services were rendered by an authorized provider, which may not be true if the practice was operating through a non-compliant structure.

The Mitigation Framework

Historical liability is not evenly distributed across all non-compliant practices. Specific factors shift the exposure profile materially:

Duration of non-compliant operation. A practice that operated non-compliantly for six months has a different exposure profile than one that operated non-compliantly for six years. Limitations periods bar older claims, but for practices operating through a continuing violation theory, the analysis can extend.

Patient volume during the non-compliant period. Aggregate exposure scales with patient volume. A practice that served 100 patients has different exposure than one that served 10,000.

Marketing content and outcome claims. Practices with marketing that overstated outcomes, misrepresented clinical structure, or violated FTC endorsement guides have § 17500 exposure on top of the underlying CPOM exposure.

Payor participation. Cash-pay-only practices have limited payor recoupment exposure. Practices with commercial payor participation or federal payor participation have materially higher exposure.

Documented clinical incidents. Practices with adverse-event history, complaint patterns, or clinical incidents that were not adequately addressed have higher risk profiles.

Voluntary vs. reactive remediation. Voluntary remediation — undertaken before regulatory contact — is materially stronger as an exposure-mitigation posture than reactive remediation after a complaint or investigation. Regulators regularly consider voluntary remediation in enforcement and settlement discussions, though there is no formal amnesty framework in California CPOM enforcement.

The mitigation framework for any specific practice is fact-specific and requires California-specific counsel to work through. This post is educational, not a substitute for that analysis.

What About “Just Winding Down”?

Some non-licensee owners of non-compliant practices consider winding down rather than remediating. This can be the right answer in specific fact patterns — for practices that have accumulated exposure disproportionate to their going-forward value, wind-down avoids continued exposure accumulation and lets the owner exit.

Wind-down does not extinguish historical exposure, though. Regulatory limitations periods continue to run after operations cease. Consumer-protection claims can be brought based on services rendered before wind-down. Physicians of record and administering RNs remain exposed to Medical Board and BRN scrutiny. Wind-down changes the going-forward exposure to zero but leaves the historical exposure in place.

Wind-down analysis is one of the walk-away scenarios covered in the buyer-diligence toolkit — Spoke #13 in this cluster. For an owner already operating a non-compliant practice, wind-down should be evaluated against remediation on a specific-fact basis.

The Case Law Backdrop

Two California cases inform the historical liability analysis:

People ex rel. Allstate Ins. Co. v. Discovery Radiology Physicians, P.C., 94 Cal. App. 5th 521 (2023). Confirms that UCL enforcement can reach captive-PC and paper-physician arrangements, and that insurance companies as relators can pursue CPOM enforcement through UCL. The case is a cornerstone of the AG’s 2026 enforcement pattern.

Epic Medical Management, LLC v. Paquette, 244 Cal. App. 4th 504 (2015). Establishes that percentage-of-revenue MSA fees are lawful when properly supported by fair-market value documentation, but that MSA arrangements that give the MSO effective control over clinical decisions can support fee-splitting and CPOM claims. The case is the touchstone for MSA-structure analysis and the AG’s 2026 enforcement framing.

Neither case makes historical liability a categorical certainty in any specific fact pattern. Both cases illustrate that CPOM enforcement can reach the entity, the physician of record, and — as Carbon Health confirmed in 2026, the non-licensee owner personally.

When to Bring Counsel Into the Historical Analysis

Before the remediation begins. The going-forward structural remediation and the historical liability analysis are related but distinct. Counsel that handles both can structure the remediation to optimize both the going-forward compliance posture and the historical liability mitigation strategy.

Bay Legal, PC represents non-licensee owners of California treatment businesses through structural remediation, physician-partner sourcing, historical liability analysis, and post-remediation compliance discipline. Call (650) 668-8000 or schedule a consultation at baylegal.com/contact.

Frequently Asked Questions

Does remediation eliminate my historical liability?

No. Remediation stops the going-forward compliance clock and produces a structure that survives regulatory scrutiny going forward. Historical liability — exposure accumulated during the non-compliant period, is a separate analysis and is not extinguished by remediation. Regulatory limitations periods continue to run, and enforcement can reach back to encounters and marketing during the non-compliant period subject to those limitations.

What is the biggest single exposure category for a typical non-compliant med spa?

Fact-dependent, but for many practices B&P § 17200 (Unfair Competition Law) civil penalties represent the largest potential exposure at scale, particularly if a public prosecutor treats each patient encounter as a separate violation subject to the $2,500-per-violation cap. False-advertising exposure under § 17500 often runs alongside. For practices with heavy marketing exposure or with substantial patient volume over years, the aggregate potential exposure can be meaningful.

Can I be personally liable as the non-licensee owner?

Yes. The California AG’s June 2026 Carbon Health settlement imposed a $100,000 civil penalty on the non-licensee co-founder personally, in addition to the $4.4 million in entity penalties. Personal exposure for non-licensee owners is documented in California CPOM enforcement, and the risk profile depends on the operating history, marketing, and specific arrangements.

What about the physician of record — what is their exposure?

Physicians who served as paper medical directors of non-compliant practices face potential Medical Board discipline under B&P § 2264 and related provisions. The physician’s exposure is separate from the owner’s and separate from the entity’s. Discipline can range from reprimand to license suspension or revocation depending on the specific facts. The physician’s professional liability coverage may exclude aiding-and-abetting-unlicensed-practice claims, leaving the physician personally exposed. Remediation planning should include a conversation with the physician of record about the physician’s own exposure and, where appropriate, exit terms that include confidentiality and (where possible) mutual releases.

Is voluntary remediation stronger than waiting for enforcement?

Yes. Voluntary remediation — undertaken before regulatory contact, is materially stronger as an exposure-mitigation posture than reactive remediation after a complaint or investigation. Regulators regularly consider voluntary remediation in enforcement and settlement discussions. California CPOM enforcement does not include a formal amnesty framework, and voluntary remediation does not guarantee any specific outcome; it does, however, position the owner materially better than reactive remediation.

Talk to a California Healthcare Historical Liability Attorney

Bay Legal, PC represents non-licensee owners of California treatment businesses through historical liability analysis, structural remediation, and post-remediation compliance discipline. If you are approaching remediation and want to understand the historical exposure that will remain after the going-forward structure is fixed, call (650) 668-8000 or schedule a consultation at baylegal.com/contact.