Introduction
Healthcare M&A transactions face a regulatory approval gauntlet that has no equivalent in other sectors. A technology company acquiring another technology company needs HSR antitrust clearance and perhaps a CFIUS national security review. A pharma company acquiring a hospital system might need HSR clearance, state attorney general approval in 15 states, CMS Medicare provider number reassignment, DEA controlled substance license transfers, state health department licensure approvals, and Certificate of Need determinations in states that require them. This regulatory complexity is one of the defining features of healthcare deal practice, and it directly drives the deal certainty mechanisms (reverse termination fees, ticking fees, extended outside dates) that are standard in healthcare transactions.
Federal Regulatory Layer
HSR Antitrust Filing
The Hart-Scott-Rodino pre-merger notification is required for all transactions above the dollar thresholds (approximately $119.5 million in 2025). Healthcare transactions are subject to disproportionate FTC scrutiny: healthcare Second Request rates significantly exceed the overall average, and the FTC has an active healthcare enforcement program.
The initial HSR waiting period is 30 days (15 days for cash tender offers), but healthcare deals receive Second Requests at a higher rate than other industries, extending the review to 6-12+ months. Second Requests in healthcare are particularly burdensome because the FTC demands granular data on market definition (geographic and product), pricing, payer contracts, referral patterns, and competitive overlap by service line.
CMS and Medicare Considerations
Transactions involving Medicare-participating providers (hospitals, physician practices, home health agencies, skilled nursing facilities) may require reassignment or revalidation of Medicare provider numbers. CMS provider enrollment changes can take 60-120 days, and any gap in provider enrollment can interrupt Medicare reimbursement. For healthcare services transactions, coordinating the CMS provider enrollment timeline with the deal closing timeline is a critical workstream.
DEA and Controlled Substance Licensing
Any healthcare entity that handles controlled substances (pharmacies, hospitals, physician practices, drug manufacturers) must hold DEA registration. Transactions that change ownership or control of the registered entity may require new DEA registrations, which can take 4-8 weeks. In pharma and biotech acquisitions, technology transfer of drug manufacturing processes may involve FDA notifications and supplement filings, which add to the timeline.
State Regulatory Layer
The state-level regulatory requirements are where healthcare deal complexity truly compounds. Unlike federal approvals (one HSR filing, one CMS process), state approvals must be obtained in every state where the target operates, and each state has its own requirements, timelines, and review processes.
- Mini-HSR Laws
State-level antitrust notification requirements that apply to healthcare transactions below the federal HSR threshold or that impose additional review even for HSR-reportable transactions. As of 2025, approximately 15 states have enacted healthcare-specific mini-HSR laws that require advance notice of healthcare mergers and acquisitions, even for transactions that are too small to trigger federal HSR filing. These laws vary significantly by state: some require only notice, others require affirmative approval, and some impose waiting periods of 30-120 days. The proliferation of state mini-HSR laws since 2022 has meaningfully increased the regulatory burden for healthcare services roll-up strategies that involve multiple small acquisitions across many states.
| State Requirement | States Affected | Timeline | Most Common In |
|---|---|---|---|
| Attorney general notice | ~43 states | 30-90 days | Hospital mergers, large services deals |
| Mini-HSR filing | ~15 states | 30-120 days | Healthcare services, below-threshold deals |
| Health department licensure | All 50 states | 30-180 days | Hospitals, ASCs, home health, SNFs |
| Certificate of Need (CON) | ~35 states | 60-365+ days | Hospitals, ASCs, SNFs, imaging centers |
| Certificate of Public Advantage (COPA) | Select states | 90-180 days | Hospital mergers in concentrated markets |
Certificate of Need (CON) Implications
Approximately 35 states require Certificate of Need approval for establishing or expanding certain healthcare facilities. In the M&A context, CON requirements can affect transactions involving hospitals, ambulatory surgery centers, home health agencies, and skilled nursing facilities. If the transaction involves a change in ownership of a CON-regulated facility, the new owner may need to obtain a new CON or transfer the existing one, a process that can take 2-12 months depending on the state.
The Compounding Effect
The cumulative impact of multi-state regulatory requirements on deal timelines is enormous. A PE firm acquiring a healthcare services platform operating in 25 states might need to coordinate:
- Federal HSR clearance (30 days initial, potentially 6-12+ months if Second Request)
- Attorney general notifications in 20+ states
- Mini-HSR filings in 5-8 states
- Health department licensure transfers in 25 states
- CON transfers in 10+ states
- CMS provider enrollment changes for dozens of Medicare-participating locations
- DEA registration transfers for controlled substance locations
Each of these workstreams has its own timeline, document requirements, and review process. The longest single requirement determines the minimum closing timeline, and delays in any one jurisdiction can cascade through the entire deal calendar.
The next article covers FTC antitrust enforcement in healthcare, including the new enforcement paradigm targeting serial acquisitions and PE-backed roll-ups.
Free Interview PDF Guide