How telehealth compliance works

Six pillars determine whether a telehealth session is compliant — and whether the claim survives an audit. Here's what each one means, where the rules vary by state, and how TeleVerify checks them automatically.

Start free trial →

Why this matters now

Telehealth adoption grew an order of magnitude during COVID, mostly under temporary regulatory waivers. Those waivers have expired. Insurers and state regulators are catching up — and the question they ask during an audit is always the same: was the provider properly licensed in the state where the patient was physically located at the time of the session?

"Properly licensed" is more nuanced than it sounds. A provider can be licensed in 12 states and still be out of compliance if the patient travels, the modality isn't permitted, consent wasn't captured the right way, or the prescription crosses a controlled-substance line. Six pillars together determine whether a session is defensible.

The six pillars

1

Cross-State Licensing

The provider must hold a valid license in the state where the patient is physically sitting during the session — not where the provider is, and not where the patient lives.

Most states require a full, unrestricted license. A few offer telehealth-specific registrations or out-of-state practice permits. The patient's location at the moment of care is what controls — a patient on a business trip changes the picture instantly.
Example: A psychologist licensed in CA treats a patient who has moved to TX. Without a TX license or a PSYPACT authority to practice, the session is non-compliant — even if the patient hasn't notified anyone of the move.
2

Licensure Compacts

Interstate compacts let qualifying providers practice across all member states under one authority, without applying for each state license individually.

Eleven compacts cover the most common credentials: IMLC (physicians), PSYPACT (psychologists), NLC (nurses), PA Compact, ASWB (social workers), Counseling Compact, PT, OT, Audiology/SLP, Dietitians, and APRN. Compact eligibility requires active enrollment and a "home state" of legal residence — being in a member state isn't enough on its own.
Example: A nurse with a multi-state license under the NLC can see patients in any of the ~40 NLC member states. But if the patient is in California (non-NLC), a separate CA license is required.
3

Informed Consent

Every state requires patient consent to telehealth — but the form (written vs. verbal), timing, and rules for minors vary materially.

Some states require written consent before the first telehealth visit and again annually. Others accept verbal consent documented in the chart. Minors generally need parental consent except in specific carve-outs (mental health, reproductive care, substance use treatment in some jurisdictions). Session recording layers in one-party vs. two-party state consent law.
Example: A counselor in a two-party-consent state recording a session for supervision needs explicit patient consent to the recording — separate from consent to the telehealth modality itself.
4

Online Prescribing

Prescribing controlled substances via telehealth is governed by both federal DEA rules and state-specific overlays — and the rules are still moving.

The DEA's pandemic-era flexibility for prescribing Schedule II–V drugs without an in-person visit has been extended in stages. State rules vary on stimulants, opioids, buprenorphine, and benzodiazepines independently of the federal floor. Some states require an in-person visit within a defined window; others permit telehealth-only prescribing with documentation.
Example: A psychiatrist prescribing a stimulant to an ADHD patient via telehealth in one state may be fully compliant, while the same prescription pattern in a neighboring state could trigger a board complaint.
5

Professional Board Standards

Each state professional board sets standards specific to the credential — recordkeeping, technology requirements, supervision rules — that apply on top of the licensing question.

A psychologist, a physician, and a social worker all operate under different board standards within the same state. Common variations include minimum recordkeeping years (5 to 10+), technology specifications (encryption, BAA-covered platforms), and rules on whether a supervising provider must be co-located during a session.
Example: A state may permit a licensed clinical social worker to practice telehealth solo while requiring a marriage and family therapist trainee to have a supervisor available in real time.
6

Modality + Privacy

HIPAA, audio-only acceptability, video platform requirements, and patient-location verification are the technical floor every session has to clear.

A signed Business Associate Agreement with the video platform vendor is mandatory. Audio-only telehealth is permitted in most states under specific conditions (often parity-of-coverage limited). Patient location must be re-verified each session because eligibility depends on it. Recording rules and storage requirements add another layer.
Example: A platform without a BAA may be fine for marketing calls but is non-compliant for clinical sessions — regardless of every other pillar being green.

⚖️ Reference information — not legal advice. Always confirm current requirements with your compliance officer, state licensing board, or a telehealth attorney before relying on this for clinical or business decisions.

How TeleVerify checks all six pillars automatically

In-session decision point. TeleVerify verifies patient location during the live session. After the verification result arrives in your TeleVerify view, you decide — within seconds — whether to Continue Session or Discontinue Session. The session timeline (start time, location verified time, decision time, end time) is captured in the signed Compliance Verification Record.

Works with Zoom, Doxy.me, SimplePractice, TherapyNotes, Jane App, or any other telehealth platform (video or phone).

See your coverage map in 60 seconds

Free coverage preview — enter your NPI, get a state-by-state breakdown of your licensure footprint and the gaps that matter most.

Preview your coverage Start free trial