Healthcare Regulatory Attorney

Henry Meds is a direct-to-consumer telehealth company dedicated to ensuring everyone has the health to live fully, regardless of insurance status or plan. Headquartered in Las Vegas, Nevada, with a largely remote U.S. team, Henry Meds operates under a guiding principle of putting patients first, driven by five core values: Integrity Always, Own It, Be Relentless, Stay Curious, and Win Together.

The Role

Henry Meds is seeking a resourceful healthcare regulatory attorney to guide the company through the complex intersection of telehealth, pharmacy, and digital health regulation. This high-impact, largely autonomous role involves serving as the primary regulatory resource for teams across care operations, medical affairs, pharmacy, product/engineering, growth, and people as they build and scale a compliant, multi-state care delivery model.

The attorney will build out Henry Meds’ compliance program while acting as a trusted legal advisor to the business. As the company grows, this leader will oversee the separation of legal and compliance functions into distinct roles, adhering to industry guidance and best practices. The role requires broad ownership of the healthcare regulatory function, providing both legal and regulatory expertise.

The attorney will be the definitive internal authority on healthcare regulatory matters, shaping the compliance program’s policies, training, risk assessments, and monitoring content. The PC-MSO structure is foundational to the business, and its integrity is a daily operating discipline. With evolving state rules on management company control of clinical entities and telehealth regulations on prescribing, licensure, and consumer health data, the attorney must ensure compliance while enabling growth.

Subject Matter Knowledge

Depth is expected in structural and clinical regulation, including CPOM and fee-splitting, MSA design, fair market value, professional entity governance, state MSO transparency laws, medical board authority, scope of practice, credentialing, peer review, telehealth practice standards, informed consent, and licensure compacts. Additionally, expertise in telehealth operations and data is required, such as the Ryan Haight Act, DEA prescribing, PDMP and e-prescribing, pharmacy and compounding, HIPAA, 42 C.F.R. Part 2, state consumer health data and privacy laws, FTC Act Section 5, tracking technology, TCPA, and AI governance. While there is no current government reimbursement, familiarity with fraud and abuse laws like AKS, Stark, EKRA, CMP, and the False Claims Act is beneficial.

Working Style

Henry Meds seeks an attorney who prioritizes judgment over recitation, offering clear recommendations with a defined risk posture. The ideal candidate should possess business fluency to identify compliant paths rather than merely pointing out non-compliant ones. They should have a builder’s mindset for developing programs that do not yet exist, credibility with clinicians, the ability to hold the line with senior leadership when necessary, and the capacity to write guidance that non-lawyers can act upon without follow-up.

Duties and Responsibilities

• Build and manage an effective compliance program aligned with the seven elements of OIG guidance, including policies and SOPs, role-based training, confidential reporting and investigations, risk assessments, annual work plans, monitoring and auditing licensure, DEA verification, and vendor diligence.
• Oversee the legal integrity of the PC-MSO structure across all states of operation, including CPOM, fee-splitting, and lay control of clinical decision-making. Draft and revise management services agreements, administer affiliated professional entities, and manage state MSO transparency and transaction-notification filings with outside counsel.
• Provide regulatory strategy and advisory services to product, clinical, growth, engineering, and operations teams to shape new products, care models, protocols, and pricing before launch. Maintain a state-by-state telehealth matrix, position papers, and risk register, translating legislative and enforcement developments into actionable priorities.
• Advise on multi-state licensure strategy, scope of practice, supervision requirements for advanced practice clinicians, credentialing, peer review, clinician contracting, compensation, and adverse event, board complaint, and NPDB matters.
• Ensure compliance with the Ryan Haight Act and DEA telemedicine prescribing regulations, including readiness for the anticipated special registration framework. Advise on state prescribing rules, pharmacy and compounding relationships, FDA-regulated promotional and software touchpoints, and requirements from LegitScript, payment processors, and advertising platforms.
• Serve as the Privacy Office for HIPAA, state consumer health data laws, FTC Act Section 5, and tracking-technology exposure. Oversee the Business Associate Agreement (BAA) program, breach risk assessments, OCR reporting, PC-MSO data flows, TCPA and CAN-SPAM outreach rules, and AI and clinical algorithm governance.
• Review advertising claims, testimonials, influencer and affiliate arrangements, website terms, consent flows, and auto-renewal compliance against FTC and state law. Structure referral relationships, patient acquisition channels, discount and waiver programs, and clinician and sales compensation to manage fraud and abuse exposure.
• Draft and negotiate healthcare-regulated contracts and support state expansion through go-live sign-off. Serve as the primary contact for medical boards, health departments, attorneys general, DEA, and OCR, and manage the outside counsel vendor stack.

Qualifications

• A J.D. and active bar membership in good standing in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel in Nevada.
• 6–8+ years of healthcare regulatory experience at a top healthcare regulatory practice, an AmLaw firm’s healthcare group, or in-house at a provider, digital health, or payer organization.
• Direct, hands-on experience with PC-MSO structures, including building, papering, defending, or operating them, with a command of CPOM, fee-splitting doctrines, telehealth practice and modality rules, multi-state licensure, HIPAA, AKS, and state medical board regulation.
• Experience advising on or materially contributing to a healthcare compliance program, with a track record of clear, decisive, risk-calibrated guidance for fast-moving commercial teams.

Preferred Qualifications

• Experience in digital health during a period of multi-state expansion.
• Expertise in DEA telemedicine prescribing and controlled substance workflows.
• Knowledge of state MSO oversight, ownership transparency, and transaction notification regimes.
• Prior service as Chief Compliance Officer or Privacy Officer.
• Experience with government investigations, board inquiries, or OCR matters.