Mendry · Florida 501(c)(3) Nonprofit · Veteran-Built & Independent

Mendry

DCSP Hub · Hub 05

Role

010

of 10

Compliance & Quality

The discipline that prevents problems.

HCCA

CHC · CHRC · CHPC

NAHQ

CPHQ

AAPC

CPCO

(ISC)²

HCISPP

State Boards

Multi-State Licensure

01 Healthcare Compliance Officer A Healthcare Compliance Officer leads the compliance function for a practice or… Series 02 Compliance Analyst A Compliance Analyst examines practice operations through a compliance lens — analyzing… Series 03 HIPAA Privacy Officer A HIPAA Privacy Officer is the designated individual responsible for the practice’s… Series 04 HIPAA Security Officer A HIPAA Security Officer is the designated individual responsible for the practice’s… Series 05 Quality Assurance (QA) Specialist A Quality Assurance Specialist designs and runs quality measurement programs that track… Series 06 Risk Management Analyst A Risk Management Analyst identifies, assesses, and helps mitigate risks across the… Series 07 Audit Coordinator An Audit Coordinator manages the practice’s response to internal audits, external payer… Series 08 Regulatory Compliance Specialist A Regulatory Compliance Specialist tracks the federal regulatory landscape that affects healthcare… Series 09 Accreditation Coordinator An Accreditation Coordinator manages the practice’s accreditation programs — preparing for accreditation… Series 10 State Regulatory Compliance Specialist A State Regulatory Compliance Specialist tracks the state-level regulatory landscape that operates… Reading

DCSP Hub · Compliance and Quality

Role

010

of 10

State Regulatory Compliance Specialist

A State Regulatory Compliance Specialist tracks the state-level regulatory landscape that operates underneath federal regulation — state medical board rules, state privacy laws (CCPA, SHIELD, MHMDA, TDPSA, and others), state corporate practice of medicine rules, state-specific licensure requirements, state insurance commissioner rules, and the constant stream of state regulatory change affecting healthcare practices. The work is state-specific. The work is multi-jurisdictional. And it is increasingly essential as state-level regulation expands faster than federal regulation.

How This Work Happens

State regulatory compliance specialist work happens in three places: as a hospital or health-system employee, as a contractor working through a billing services or RCM company, or as an independent business owner. This page covers all three so you can choose the path that fits your life.

Mendry supports the third path. We are a Florida 501(c)(3) membership platform full of opportunities — not an employer, not a placement agency. We list independent professionals so the practices that need them can find them. Your business. Your contracts. Your rates. Your decisions.

MEMBER ACKNOWLEDGMENT

Membership in Mendry’s DCSP Network is built on these understandings about your business.

Fifteen points. Read carefully. This is the agreement.

You set your own rates. Mendry does not suggest, publish, recommend, or facilitate the sharing of rate information between members.

You bill your own clients and collect your own payment. Mendry does not invoice, collect, hold, distribute, or process payment between you and your clients.

You hold and maintain current professional liability and errors-and-omissions insurance appropriate to your specialty. Mendry does not insure you, indemnify you, or provide coverage of any kind.

You handle your own taxes as an independent business. Mendry does not withhold, report, file, or remit taxes for you. You are responsible for federal, state, and local tax obligations including estimated quarterly payments.

You sign your own contracts directly with your clients. Mendry is never a party to, signatory of, or guarantor of your client agreements, and Mendry does not negotiate, review, or approve your contract terms.

When your work touches Protected Health Information (PHI), you execute a Business Associate Agreement (BAA) directly with each client before beginning work. Mendry is never a party to your BAAs, and Mendry’s website never touches, stores, or transmits PHI.

You hold and maintain all federal, state, and local business licenses, registrations, and certifications your business and work require. Mendry does not verify licenses on your behalf or vouch for your licensure status.

You complete the continuing education your credential requires and maintain current documentation. Mendry does not track CE on your behalf, report CE to credentialing bodies, or guarantee that your CE meets any specific requirement.

You carry full professional responsibility for the quality, accuracy, and timeliness of your work product. Errors, omissions, missed deadlines, and quality disputes are between you and your client. Mendry does not mediate, intervene, indemnify, or carry any liability for your work.

You market your own business and represent yourself accurately to clients. You do not represent yourself as employed by, certified by, endorsed by, or operating under the authority of Mendry. You may accurately state that you are a listed member of the Mendry DCSP Network.

Your professional relationships are with your DCP clients. You do not have a direct service relationship with veterans through Mendry, and Mendry does not refer veterans to you as patients or clients.

You maintain your own client records, working files, and business records on systems and tools you control. Mendry does not host, back up, store, or have access to your client files or business data.

Your membership in the DCSP Network is conditional on maintaining current credentials, insurance, licenses, and good standing. Mendry may suspend or terminate your directory listing if these standards lapse.

Your membership fee pays for your listing and the educational resources Mendry provides. It does not buy referrals, leads, work, or placement, and is not refundable based on the work you do or do not receive.

You are a member of an independent professional directory. You are not an employee, contractor, agent, partner, joint venturer, or representative of Mendry. Mendry does not direct, supervise, control, schedule, or assign your work.

What This Really Means

The same fifteen points — explained the way a friend would explain them.

01 You decide what to charge.

You research what other professionals in your specialty charge. You look at job boards. You ask peers. You decide what your work is worth, and you tell your clients that number. Mendry does not tell you what to charge. We do not share rate information. That keeps us out of antitrust trouble and keeps you free to price your work the way you choose.

02 You send the bill. You collect the money.

Every month, you send your client an invoice. The client pays you directly — usually by ACH bank transfer or check. Mendry does not touch the money. We never see your invoices. We never collect for you. Money flows from client to you. Period.

03 You buy your own insurance.

Professional liability insurance protects you if a client says your work cost them money. Errors and omissions insurance protects you if you make a mistake in your work product. Every working DCSP needs both. You shop for it. You pay for it. You keep it current. Mendry does not insure you, and the directory does not list you as covered by us.

04 You pay your own taxes — four times a year.

As an independent business, you pay estimated taxes every quarter — April, June, September, and January. You file a Schedule C with your tax return. Mendry does not withhold anything. We do not report your income to the IRS. You are responsible for tracking your income, your expenses, and your tax payments. A bookkeeper or CPA pays for itself.

05 You sign your own contracts.

Every client gives you a contract — sometimes called a Master Service Agreement or a Statement of Work. You read it. You sign it. If something looks off, you take it to your own attorney. Mendry does not read your contracts, does not negotiate them, and is not a party to them.

06 You sign a BAA with every client before you start.

When your work touches information about real patients — their names, dates of birth, diagnoses — that information is called PHI. Before any client lets you near their patient information, you sign a Business Associate Agreement. Every client. Every time. Mendry’s website never touches PHI — we educate you about it, that’s it.

07 You hold your own business licenses.

Some states require a business license to operate. Some cities require a local one. You research what your state and city require, and you hold whatever licenses apply. Mendry does not verify your licenses for you — the verification badge on your directory profile reflects what you upload, not what we check with the state.

08 You keep your credentials and CE current.

Your professional credential needs continuing education hours to stay active. You complete the CE. You track the hours. You report them to your credentialing body. Mendry does not report for you and does not guarantee your CE is enough — that’s between you and your credentialing body.

09 You own the quality of your work.

If you make a mistake in your work, the client may lose money. They may ask you to fix it. They may charge you for the loss. Your insurance and your reputation handle this — not Mendry. Build clean files. Communicate well. Hit your deadlines.

10 You market yourself accurately.

You can tell clients: “I am a listed member of the Mendry DCSP Network.” That is accurate. You cannot tell clients: “I work for Mendry” or “Mendry certified me.” Stick to “listed member of the directory.”

11 Your clients are DCP practices. Veterans are not your clients.

You serve the doctor’s practice or the clinic — the DCP. The veteran is the DCP’s patient, not yours. Mendry does not refer veterans to you. The chain goes: Mendry lists DCPs. DCPs hire DCSPs. DCSPs serve DCPs. You are two steps removed from the patient, which is exactly where you should be.

12 You keep your own records.

Your client files, your invoices, your work product, your tax records — all of it lives on systems you control. Mendry does not host your work. We do not back up your data. Use cloud backup. Treat your business like a real business.

13 Your directory listing is conditional, not permanent.

If your credential lapses, your listing pauses. If your insurance expires, your listing pauses. Membership is a standing — you maintain it by keeping everything current. We send you reminders before things lapse. The directory only works if every member listed is actually current.

14 Your membership fee pays for listing — not for leads.

Mendry does not promise you work. The fee you pay covers your spot in the directory and the educational resources we publish. Whether you win the work after that depends on you — your profile, your responsiveness, your rates, your references. Membership is an opportunity, not a guarantee.

15 You are a member. We are a platform. That is the whole relationship.

Mendry does not employ you. We do not contract with you. We do not represent you. We list you. You operate your business. The line between us is clean and clear — and the clean line is what protects both of us.

What This Role Involves

State Regulatory Compliance Specialists know the state regulatory landscape deeply. They track state medical board rule changes. They monitor state legislative sessions for healthcare-related bills. They watch state attorney general enforcement actions. They follow state insurance commissioner guidance. Each state operates its own regulatory framework, and the Specialist knows the states their clients operate in.

State privacy law expansion is core current work. California (CCPA/CPRA), New York (SHIELD), Washington (MHMDA), Texas (TDPSA), Florida (Digital Bill of Rights), Colorado (CPA), Connecticut (CTDPA), and many other states have enacted privacy laws that layer on top of HIPAA. Multi-state practices need compliance with each applicable state law alongside HIPAA.

State medical board rules affect provider operations. Each state’s medical board sets continuing medical education requirements, prescribing standards (including controlled substance requirements), telehealth practice rules, and disciplinary procedures. Specialists track these for clients with providers practicing across multiple states.

The Honest Description

The State Regulatory Compliance Specialist role rewards multi-state regulatory fluency and the patience to track jurisdictional variation. Members who do well in this work enjoy mastering state-specific regulatory frameworks, take pride in keeping multi-state practices compliant across jurisdictions, and find satisfaction in being the expert that practices call when state regulatory questions arise.

The Core Activities

1

Track state regulatory changes across client states

Monitor state medical boards, state legislatures, state attorneys general, and state insurance commissioners for changes affecting client practices.

2

Translate state regulatory changes into practice policy

When state rules change, analyze impact and coordinate practice policy updates. Coordinate with compliance and operations on implementation.

3

Manage multi-state privacy law compliance

Track state privacy law requirements (CCPA, SHIELD, MHMDA, TDPSA, etc.). Coordinate practice compliance across applicable state laws alongside HIPAA.

4

Support state medical board interactions

When state medical board questions or complaints arise, coordinate practice response. Maintain medical board correspondence files.

5

Coordinate multi-state corporate practice compliance

State corporate practice of medicine rules vary significantly. Coordinate corporate structure compliance across states where practices operate.

Where This Role Appears in the Field

In a hospital legal or compliance department

Hospital State Regulatory Specialists work within legal or compliance departments, especially for systems operating across multiple states.

In a healthcare legal or compliance consulting company

Multi-state healthcare consulting firms offer state regulatory specialty services.

As an independent contractor

Telehealth practices and multi-state practices needing state regulatory expertise hire independent specialists for state-specific advisory work.

Federal Payer Workflow

VA CCN, TRICARE & CHAMPVA Credentialing

VA Community Care Network state interactions — VA CCN providers must hold current state licenses in states where veterans receive care. State medical board rules affect VA CCN provider eligibility. Specialists serving VA CCN practices need state-specific expertise alongside federal payer knowledge.

Multi-state practice and federal payer interaction — Telehealth practices serving veterans across state lines through VA CCN, TRICARE, and CHAMPVA must navigate state regulations in each state simultaneously. Specialists who handle this multi-jurisdictional complexity bring rare expertise.

The two-hat reality. In a two-hat practice, this work runs on two parallel tracks at once — VA Community Care credentialing and claims under federal authority, and state medical cannabis practitioner participation under state authority. The two tracks never share a workflow, but they share a deadline: a lapse on either side stops payment and access on both. Members who can hold both tracks steady at the same time are the ones two-hat practices keep.

Your Roadmap to becoming an independent State Regulatory Compliance Specialist

This is the step-by-step path. Follow each step in order.

Step

Build foundational compliance or legal experience

Most state regulatory specialists come from compliance, healthcare legal, or regulatory backgrounds with 3 to 5 years of experience.

Step

Develop deep expertise in 3 to 5 specific states

State regulatory work rewards depth in specific states over breadth across all 50. Choose target states based on client geography (often Florida, California, New York, Texas, and other large states).

Step

Set up your business

Step

Get professional liability insurance

Errors and omissions coverage.

Step

Sign HIPAA Business Associate Agreements

Every client signs a BAA.

Step

Find your first client

Telehealth practices expanding to new states and multi-state practices needing regulatory monitoring are natural first clients.

Step

List in the Mendry DCSP Network

Position yourself around specific states where you have deep expertise. Practices searching for Florida or California regulatory expertise will find specialists faster than generalists.

Step

Build your book of business

State specialists often work on retainer with 3 to 6 clients providing ongoing state regulatory monitoring across specific states.

Education & Experience Pathways

Members exploring this role typically come into the work through one of these learning paths:

Senior compliance transitions

Compliance professionals who develop state regulatory focus transition into state specialty work.

Healthcare legal backgrounds

Healthcare attorneys and paralegals with multi-state practice experience bring complementary expertise.

Military MOS adjacent paths

Military legal administration roles translate well — 27D (Paralegal Specialist), military JAG support roles with multi-jurisdictional experience.

The Skill That Distinguishes Strong Specialists

State Regulatory Compliance Specialists who grow fastest are the ones who develop deep expertise in specific states paired with strong relationships at those state medical boards and regulatory agencies. The Specialist who knows the Florida Board of Medicine staff by name resolves issues faster than the generalist looking up phone numbers.

The Realities of the Work

The State Regulatory Compliance Specialist role is jurisdictional specialty work with continuous monitoring requirements. The work requires sustained focus on state regulatory channels and the ability to translate state variation into actionable practice guidance.

It is highly remote-work friendly. State regulatory monitoring happens through state websites, regulatory publications, and professional networks. Compensation is at the senior specialty level because the multi-state expertise commands premium rates.

Income — Research the Range

Mendry does not publish specific income figures because numbers vary based on credential, geographic market, employment type, specialty focus, and experience. Here are the authoritative sources to research current income data:

BLS — Medical and Health Services Managers

BLS data covering regulatory compliance roles.

bls.gov/ooh/management/medical-and-health-services-managers.htm

HCCA Compliance Salary Survey

HCCA compensation data with regulatory specialty breakouts.

hcca-info.org

AHLA — American Health Lawyers Association

AHLA publishes resources for state regulatory healthcare specialty work.

americanhealthlaw.org

Indeed & Glassdoor — Real-Time Market Data

Active market data for state regulatory compliance positions.

indeed.com · glassdoor.com (search "state regulatory compliance healthcare")

How to Know If This Role Fits You

The State Regulatory Compliance Specialist role is a good fit for members who like multi-jurisdictional regulatory work and find satisfaction in mastering state-specific frameworks. Members who can hold the differences between 5 state regulatory environments in their head. Members who enjoy state-level regulatory complexity. For the right person, especially with telehealth growth driving multi-state demand, it is one of the fastest-growing specialty paths in healthcare compliance.

About this content. Mendry is a Florida 501(c)(3) nonprofit membership platform. This page is educational and does not constitute medical, legal, financial, or placement advice. Compliance requirements, HIPAA standards, and regulatory frameworks vary by setting, payer, accreditation body, and state. Always confirm current requirements with the relevant authority before making professional decisions. Mendry does not employ, place, refer, or supervise compliance professionals. All members listed in the DCSP Network operate their own independent businesses, set their own rates, sign their own contracts, and carry their own insurance. Mendry does not provide treatment, prescribe or sell cannabis, complete state forms, or collect PHI. Emergency: 911 · Veterans Crisis Line: 988 (Press 1) · Text 838255.

Your Specialty. Your Business. Your Network.

Mendry lists independent credentialing professionals so the two-hat practices that need them can find them. Your business, your rates, your clients, your decisions — we provide the visibility and the platform.