Ketamine Clinics and the Law

The ketamine clinic sector has grown quickly from a niche alternative offering into a nationwide industry with well over a thousand clinics, with California, Texas, Florida, New York, and Illinois accounting for the largest share. Driven by strong patient demand and the scaling of telehealth, this expansion has also attracted heavy capital, stiff competition, and intense regulatory attention. Ketamine clinics now sit at the intersection of controlled substance laws, telehealth restrictions, the corporate practice of medicine (CPOM) doctrine, off-label prescribing liability, and consumer protection enforcement. Few healthcare business models concentrate so many distinct legal risks in a single operation.

Because ketamine is classified as a Schedule III controlled substance under federal law, clinics and their prescribers must strictly abide by the Controlled Substances Act (CSA) and DEA regulations.

The biggest challenge revolves around remote prescribing. Normally, the Ryan Haight Act mandates an in-person medical evaluation before a healthcare provider can prescribe a controlled substance to a patient. However, pandemic-era flexibilities temporarily waived this rule, and the DEA and HHS have repeatedly extended them, most recently issuing a fourth temporary extension that preserves telehealth ketamine prescribing through December 31, 2026.

While this extension provides vital business continuity, it is strictly temporary and the DEA's long-term framework remains unsettled. The agency has floated a proposed Special Registration for Telemedicine, but permanent rules have yet to be finalized. For clinics that rely heavily on virtual care, the absence of a permanent framework presents serious business risk should the flexibilities sunset without a viable alternative.

The DEA now investigates ketamine clinics with the same approach it used for years against opioid prescribers and also often looks for mandatory biennial inventories, dispensing logs, wastage documentation, and secure storage. Importantly, law enforcement does not always require a criminal indictment. Additionally, the DEA regularly uses its administrative authority to suspend the controlled substance registrations of providers whose prescription volumes do not track with actual, patient-by-patient clinical oversight. Scrutiny usually targets operational red flags: treatment plans that are not truly customized to the patient, physician oversight that is symbolic rather than active, recordkeeping practices that do not satisfy DEA standards, and prescription volume that tracks commercial revenue goals more closely than actual clinical needs. Finally, high-volume, questionnaire-heavy models that ship medication out with minimal clinical interaction are prime targets for regulatory enforcement.

Because outside capital funds a large portion of the sector, the corporate practice of medicine (CPOM) doctrine comes into play. A high-level summary of CPOM is that states like New York, Texas, California, and many others strictly prohibit non-professional entities from employing physicians or dictating medical decisions. Of course, the CPOM doctrine is far more detailed and varies from state to state.

For purposes of CPOM compliance, the industry relies heavily on Management Services Organization (MSO) structures. In these arrangements, a physician-owned professional corporation (PC or PLLC) employs clinical staff and maintains the DEA registrations, while a separate MSO handles business and administrative operations like billing, payroll, marketing, scheduling, and IT support via a management services agreement (MSA). MSAs are the hallmark of all of these arrangements.

When structured carefully, this model is lawful. However, when structured sloppily, it invites intense scrutiny and can lead to severe penalties. Key pitfalls to avoid include:

• Management fees: Fees should reflect fair market value, ideally supported by a formal appraisal, and generally should not be tied to a percentage of clinical revenue, an arrangement that can trigger CPOM and fee-splitting violations.
• Clinical control: The professional entity must retain complete authority over medical decisions and staffing. For instance, an MSO cannot lawfully dictate which medical staff a physician works with.
• Operational discrepancy: Properly drafted agreements and other paperwork alone will not protect a clinic. When clinical supervision in practice diverges from what the written agreement describes, regulators will flag it.

CPOM violations can lead to financial penalties, discipline by the medical board, criminal charges for helping someone practice medicine without a license, and the complete unwinding of the financial agreements.

Off-label use: The vast majority of psychiatric ketamine therapy relies on off-label use. While legal and common throughout the entire healthcare industry, not just in the ketamine space, off-label prescribing can sometimes increase malpractice exposure because providers have no FDA-approved indication on which to rely when establishing the medical standard of care.

Informed consent: Informed consent matters heavily. Clinical consent forms vary widely in quality and are sometimes written at a reading level with which some patients struggle. Should an adverse event occur, a confusing consent form may not be an adequate defense. Clinics thus must use consent documentation that is clear, readable, and individualized.

Delivery pathways: Branded options such as Spravato (esketamine) are subject to a strict federal Risk Evaluation and Mitigation Strategy (REMS) that mandates in-clinic monitoring. Generic and compounded oral or at-home ketamine products, by contrast, have no comparable federal safety framework, which leaves each clinic responsible for its own risk management safeguards.

Patient screening and monitoring: Because ketamine can affect the heart, interact with certain psychiatric conditions, and carry potential for misuse, intake screening becomes essential. A thorough intake establishes a contemporaneous record that the clinician evaluated those factors. Periodic reassessment similarly supports continuity of care and proves helpful for a malpractice claim or a controlled substance violation.

Advertising and consumer protection: Marketing claims can become enforceable statements. The FTC and state attorneys general have pursued telehealth providers for overstating efficacy or hiding cost and cancellation terms. Calling ketamine a proven cure, promising response rates, or implying FDA approval for off-label use can invite regulatory scrutiny, as do testimonials and subscription billing. Additionally, clinics advertising across state lines must account for varying state advertising rules governing professional practices.

State-Level Rules: All of the above pertain to federal law, which is only half the battle. States enforce their own controlled substance laws, prescription monitoring programs, and clinic ownership rules. A model that is fully compliant in one state might violate the law in another, thus complicating multi-state expansion.

The December 31, 2026 telehealth expiration should be treated as a strict planning deadline, and any business that depends on remote prescribing should check whether it can still work if the rules become stricter. MSO structures require careful construction, with management fees set at fair market value and clinical independence preserved in daily practice, not merely on paper. Furthermore, informed consent documents warrant a rewrite so they read clearly and pertain to the individual patient. Expansion into a new jurisdiction may necessitate state-by-state regulatory analysis before any patients are scheduled.

While regulatory enforcement is strengthening, healthcare entities who tackle compliance head-on will come out ahead of their competitors.

Disclaimer: This industry insight is for general information only, is not legal advice, and does not create an attorney-client relationship.