To start a nonprofit medical clinic, you incorporate as a nonprofit under state law, obtain 501(c)(3) tax-exempt status from the IRS, and then layer on the healthcare-specific approvals a clinic needs to legally treat patients: a state facility license, a Medical Director, a National Provider Identifier, and — depending on what you offer — CLIA, DEA, and Medicare or Medicaid enrollments. The sequence matters. State corporate formation comes first, because your EIN application, your 501(c)(3) filing, and your medical license application all need a legally formed entity to attach to.
Plan on a launch runway of several months at minimum. State facility permit reviews alone often run 60 to 120 days, and Medicare enrollment sits on top of that.
Form the Corporation First
Everything downstream depends on having a nonprofit corporation in existence, so this is where you start.
Recruit a governing board before you file anything. Most states require at least three directors for a nonprofit corporation, and for a clinic you want people who bring clinical experience, financial oversight, and community ties to the table. Directors owe fiduciary duties to the organization, meaning they must act in its interest rather than their own.
Draft bylaws before you incorporate. These are the internal rules that define officer roles (president, secretary, treasurer), set meeting frequency and notice requirements, and establish what counts as a quorum. Solid bylaws head off the procedural disputes that paralyze young organizations when disagreements over spending or program direction arise.
Write a mission statement that is broad enough to allow growth but specific enough to satisfy regulators looking for a charitable purpose. “Providing accessible primary care to underserved populations in [region]” works better than a vague commitment to “improving community health.”
File Articles of Incorporation
Your articles of incorporation create the clinic as a legal entity under state law. File them with the Secretary of State or equivalent agency. The document must include a unique legal name, a physical business address, and a purpose statement making clear the entity exists exclusively for charitable and medical purposes rather than private gain.
You must designate a registered agent — a person or authorized business entity with a physical office in the state who accepts legal documents and government correspondence for the clinic. A P.O. box will not work. Filing fees generally run between $50 and $150.
Two provisions matter specifically for tax-exempt healthcare organizations. Include a purpose clause stating the clinic is organized exclusively for charitable purposes under Section 501(c)(3) of the Internal Revenue Code, and add a dissolution clause specifying that remaining assets go to another 501(c)(3) organization or a government entity if the clinic ever shuts down.1Internal Revenue Service. Does the Organizing Document Contain the Dissolution Provision Required Under Section 501(c)(3) Without these clauses, the IRS will reject your exemption application.
Get an EIN
Once the state issues your certificate of incorporation, apply for an Employer Identification Number using IRS Form SS-4. The online application issues your EIN immediately.2Internal Revenue Service. Obtaining an Employer Identification Number for an Exempt Organization You need the EIN before you can open a bank account, hire staff, or file for 501(c)(3) status. Do not apply for an EIN before your organization is legally formed.
Secure 501(c)(3) Tax-Exempt Status
Federal tax-exempt recognition comes through IRS Form 1023, submitted electronically through Pay.gov.3Internal Revenue Service. Applying for Tax Exempt Status The application is thorough. You will provide three years of financial projections showing anticipated revenue from donations, grants, and patient fees against expected expenses like payroll, medical supplies, and facility costs.4Internal Revenue Service. Instructions for Form 1023 (Rev. December 2024) The IRS uses these projections to evaluate whether the clinic will genuinely spend its money on charitable purposes rather than enriching its founders.
You also need a detailed narrative describing your planned medical programs — the services offered, the populations you will serve, and whether you will charge sliding-scale fees or provide free care. Be specific. “Free diabetes screening and management for uninsured adults” is far more convincing than “healthcare services for those in need.”
Required and Recommended Policies
The dissolution clause is mandatory. Your organizing documents must permanently dedicate the clinic’s assets to an exempt purpose.4Internal Revenue Service. Instructions for Form 1023 (Rev. December 2024)
A conflict of interest policy is strongly recommended but not technically required.4Internal Revenue Service. Instructions for Form 1023 (Rev. December 2024) Skip it at your peril. A good policy requires board members and officers to disclose any financial interest in transactions the clinic is considering and to recuse themselves from voting on those matters.5Internal Revenue Service. Form 1023 – Purpose of Conflict of Interest Policy Given the dollar amounts flowing through a healthcare operation, the appearance of self-dealing alone can trigger IRS scrutiny.
Fees and Which Form to File
The user fee for the full Form 1023 is $600, paid through Pay.gov at submission.6Internal Revenue Service. Form 1023 and 1023-EZ – Amount of User Fee A streamlined version, Form 1023-EZ, costs $275 and is available to organizations that project annual gross receipts of $50,000 or less for each of the next three years and hold total assets under $250,000.7Internal Revenue Service. Instructions for Form 1023-EZ (Rev. January 2025) Most clinics planning to employ physicians and stock medical supplies will exceed these thresholds quickly, so expect to file the full form.
After review, the IRS issues a Determination Letter confirming tax-exempt status. Grant-makers and major donors will ask to see this letter before writing checks, and it confirms that contributions to your clinic are tax-deductible.
Handle State Medical Licensing
Federal exemption is not a license to practice medicine. That comes from your state.
Your clinic needs a licensed Medical Director who holds an active, unrestricted license to practice medicine in the state. This person carries clinical responsibility for all services the facility provides and is the individual regulators will hold accountable for patient safety. Verify credentials thoroughly, including board certifications, malpractice history, and any disciplinary actions, because the state licensing board will do the same during your facility application.
A facility license or clinic permit from your state’s Department of Health is required before you can see patients. The application typically involves submitting floor plans, demonstrating that equipment meets standards, and describing infection control protocols. Many states require a physical site inspection before granting the permit. Processing times often run 60 to 120 days, so build that lead time into your launch timeline.
Complete Your Federal Healthcare Registrations
Several federal registrations apply on top of state licensing. Which ones you need depends on what services you offer.
National Provider Identifier
Every healthcare facility needs a National Provider Identifier, a unique 10-digit number used in all HIPAA-standard billing transactions.8Centers for Medicare & Medicaid Services. National Provider Identifier Standard (NPI) Apply through the National Plan and Provider Enumeration System, providing your clinic’s legal name, EIN, and the taxonomy code that describes your medical specialty. Without an NPI, you cannot submit claims to any insurer.
CLIA Certificate
If your clinic performs even basic lab work, such as a rapid strep test, a urine dipstick, or a blood glucose check, you need a Clinical Laboratory Improvement Amendments certificate. Any facility that tests materials derived from the human body for diagnosis or treatment qualifies as a laboratory under federal rules.9Centers for Medicare & Medicaid Services. How to Apply for a CLIA Certificate, Including International Laboratories A Certificate of Waiver covers the simplest tests and requires filing Form CMS-116 with your state’s CLIA agency. There are no federal educational or experience requirements for the lab director at a waived-testing facility, though your state may impose additional qualifications.
DEA Registration
Any clinic that prescribes, dispenses, or stores controlled substances needs a Drug Enforcement Administration registration. New hospital and clinic facilities apply using DEA Form 224.10Drug Enforcement Administration. Registration – Diversion Control Division Federal law prohibits handling controlled substances under an expired registration, so calendar the renewal date immediately. Individual prescribers at the clinic also need their own separate DEA registrations.
Medicare and Medicaid Enrollment
If your clinic will serve patients covered by Medicare or Medicaid, enroll as a provider with the Centers for Medicare & Medicaid Services. Institutional providers file Form CMS-855A. The process involves a review by your regional Medicare Administrative Contractor followed by a state survey or accreditation visit to confirm compliance with federal conditions of participation.11Centers for Medicare & Medicaid Services. CMS-855A Medicare Enrollment Application Institutional Providers CMS makes the final decision on eligibility, and you must typically sign a provider agreement before you can bill. Start this well before your planned opening.
Build Compliance In Before You See Patients
Several bodies of federal law apply to your clinic the moment it opens. Retrofitting compliance later is expensive; building it into your workflows now is not.
HIPAA Privacy and Security
Your clinic is a “covered entity” under HIPAA and must comply with both the Privacy Rule and the Security Rule from day one. The Security Rule requires administrative, physical, and technical safeguards for electronic protected health information: a formal risk analysis, a designated security official, access controls so staff only see records they need, and data backup and disaster recovery plans.12HHS.gov. HIPAA Security Series – Administrative Safeguards
Breach notification tightens the stakes. If unsecured patient data is compromised, you must notify every affected individual in writing within 60 days of discovering the breach.13HHS.gov. Breach Notification Rule Breaches affecting 500 or more people trigger an additional requirement to notify HHS within 60 days and to alert prominent media outlets serving the affected area. Smaller breaches can be reported to HHS annually, but the individual notification deadline stays the same.
Anti-Kickback and Stark Law
Nonprofit status does not exempt your clinic from federal fraud and abuse statutes.
The Anti-Kickback Statute makes it a crime to knowingly offer, pay, solicit, or receive anything of value to induce referrals for services covered by federal healthcare programs like Medicare and Medicaid. Penalties include fines, imprisonment, and exclusion from federal programs.14HHS Office of Inspector General. Fraud and Abuse Laws Under the civil monetary penalties law, each kickback can trigger a penalty of up to $50,000 plus three times the remuneration amount. Safe harbors exist for legitimate employment relationships and fair-market-value personal services contracts, among others, but the burden is on you to structure arrangements that fit within them.
The Stark Law bars physicians from referring Medicare patients for certain designated health services to entities where the physician or an immediate family member has a financial relationship, unless a specific exception applies. Exceptions cover in-office ancillary services, physician services within a group practice, and arrangements at academic medical centers, among others.15eCFR. 42 CFR 411.355 – General Exceptions to the Referral Prohibition Related to Both Ownership/Investment and Compensation Stark is a strict liability statute. Intent does not matter. If a referral arrangement does not fit an exception, it violates the law regardless of whether anyone meant to do anything wrong.
Reasonable Compensation
Nonprofit status does not mean you cannot pay staff well. It means you cannot pay them unreasonably well. The IRS watches for “excess benefit transactions” where someone with influence over the organization receives compensation worth more than the value of their services. The person who received the excess benefit owes an excise tax of 25 percent of the overpayment, rising to 200 percent if not corrected within the taxable period. Board members who knowingly approved the transaction face their own tax of 10 percent of the excess benefit, up to $20,000 per transaction.16Office of the Law Revision Counsel. United States Code Title 26 – Section 4958 Taxes on Excess Benefit Transactions Document compensation decisions with salary surveys and board minutes showing pay was benchmarked against comparable positions.
OSHA Bloodborne Pathogens
OSHA’s Bloodborne Pathogens Standard applies to every clinical facility where staff may be exposed to blood or other potentially infectious materials. Your clinic must maintain a written exposure control plan that identifies which job classifications involve occupational exposure and what engineering controls, such as sharps containers and self-sheathing needles, you use to reduce risk.17Occupational Safety and Health Administration. Bloodborne Pathogens Standard Fact Sheet The plan must be updated annually.
You must also offer the hepatitis B vaccination to every employee with occupational exposure, at no cost to them, within 10 days of their initial assignment. Employees can decline, but you need their signed declination on file.
Insure the Clinic
Medical malpractice insurance is a practical necessity, and your state may require it as a condition of licensure. Most nonprofit clinics buy commercial malpractice coverage for their employed providers.
Nonprofit free clinics that meet specific criteria may qualify for federal malpractice protection through the Federal Tort Claims Act instead. To qualify for the FTCA Free Clinic Program, the clinic must be operated by a nonprofit that does not accept reimbursement from third-party payers (no insurance billing, no Medicare, no Medicaid) and either provides services at no charge or on a sliding-scale basis tied to patients’ ability to pay.18Bureau of Primary Health Care. FTCA Frequently Asked Questions Qualifying clinics must maintain a credentialing and privileging system, run a quality improvement program, and disclose any malpractice claims or disciplinary actions involving their sponsored providers.19Bureau of Primary Health Care. FTCA Application Process Deeming applications must be renewed annually. FTCA coverage protects individual volunteer providers, not the clinic entity itself, so you still need general liability insurance for the organization.
Keep the Status You Earned
Tax-exempt status is not a one-time achievement. Every year, your clinic must file an informational return with the IRS. The form depends on size: clinics with gross receipts of $50,000 or less file Form 990-N, mid-sized clinics can file Form 990-EZ, and clinics with gross receipts of $200,000 or more or total assets of $500,000 or more must file the full Form 990.20Internal Revenue Service. Form 990 Series Which Forms Do Exempt Organizations File Filing Phase In Most clinics with paid staff and a physical facility land in full 990 territory. Failing to file for three consecutive years results in automatic revocation of tax-exempt status. No warning, no grace period.
Public Charity Status
Your 501(c)(3) clinic is classified as either a public charity or a private foundation, and you almost certainly want the former. Public charities face fewer restrictions and are more attractive to donors. To keep that classification, you generally need to show that at least one-third of your total support over a rolling five-year period comes from a broad base of public sources rather than a handful of large contributors. The IRS does not require this demonstration until your sixth year of operations, giving new clinics time to build a donor base.
State-Level Renewals
Most states require nonprofit corporations to file an annual or biennial report with the Secretary of State for a modest fee. If your clinic solicits donations from the public, roughly 40 states also require registration as a charitable solicitation organization, often with a separate filing and fee. Letting either lapse can jeopardize your good standing and your ability to fundraise legally. Medical waste disposal permits, renewed at the state or county level, add another recurring obligation for any clinic generating regulated medical waste.