Compliance for telehealth clinics is a complex “multi-state puzzle” because the practice of medicine is legally considered to occur where the patient is physically located, not where the provider is.
To manage this, clinics follow a standard operational framework built around five key pillars of compliance:
1. The Licensure & “Compact” Process
Most clinics use specialized administrative teams or software (like Credentialing by Proxy) to manage provider licenses across state lines.
-
Interstate Medical Licensure Compact (IMLC): Clinics use this to expedite licenses for physicians in over 35 participating states. Similar compacts exist for Nurses (NLC), Psychologists (PSYPACT), and Physical Therapists (PT Compact).
-
Special Telehealth Registrations: In states like Florida or Arizona, clinics may opt for a “Telehealth-only” registration, which is often faster and cheaper than a full medical license but restricts the provider from ever seeing patients in person in that state.
2. Modality & Tech Verification
Clinics must audit their technology against state-specific definitions of “telemedicine.”
-
Synchronous vs. Asynchronous: Some states (e.g., Texas) have strictly required live video for initial evaluations, while others allow “store-and-forward” (asynchronous) where a patient submits a photo or questionnaire for later review.
-
Audio-Only: Clinics must verify if a state’s Medicaid or private payer laws allow for telephone-only visits, as many states only reimburse “audio-visual” (video) encounters.
3. Prescribing Safeguards
This is the highest-risk area for compliance. Clinics implement “hard stops” in their Electronic Health Record (EHR) systems based on patient location:
-
Controlled Substances: Clinics must align with the Ryan Haight Act (federal) while also following state rules that may require an in-person exam before a provider can prescribe medications like Adderall or Testosterone.
-
Standard of Care: Some states prohibit prescribing based solely on an online questionnaire; clinics ensure compliance by requiring a face-to-face video interaction.
4. Informed Consent & Disclosures
Compliance teams develop dynamic consent forms that change based on the patient’s ZIP code.
-
Verbal vs. Written: Some states allow verbal consent documented in the notes, while others (like California or Georgia) may require a signed, written telehealth-specific consent form before the first visit.
-
AI Disclosures: As of 2025, several states now require clinics to explicitly disclose if AI is being used for transcription, note-taking, or clinical decision support during the visit.
5. Malpractice & Liability “Tail”
Clinics must verify that their malpractice insurance includes “multi-state” or “interstate” riders.
-
Coverage Limits: Some states have specific “tort reform” caps on damages. A clinic must ensure their policy covers the highest minimum requirement among all the states where they treat patients.