Why telehealth policy still matters

Telehealth remains a major access point for care—but the policy environment has matured since 2020–2022. Providers today need to balance convenience with privacy/security, state licensure rules, and payer coverage requirements.

1) Choose the right telehealth model

Most telehealth programs use a mix of:

• Synchronous care (real-time video/phone visits) for consults, follow-ups, and behavioral health.
• Asynchronous care (store-and-forward) for scenarios like image review, symptom intake, and lab result discussions.
• Remote patient monitoring (RPM) for ongoing vitals and chronic condition monitoring.

Match the modality to clinical appropriateness and your documentation/billing requirements.

2) HIPAA compliance is not optional

If you’re relying on “pandemic flexibility,” update your approach.

HHS OCR’s COVID-era HIPAA telehealth enforcement discretion expired May 11, 2023 (with a transition period through Aug 9, 2023). That means telehealth workflows should be aligned with HIPAA requirements again—especially around vendor due diligence and protecting PHI. HHS.gov+1

Practical checklist

• Use a telehealth platform that supports HIPAA-aligned security.
• Execute a Business Associate Agreement (BAA) where required.
• Confirm secure patient communications, authentication, and access controls.
• Train staff on privacy + incident response basics.

3) Licensure: telehealth happens where the patient is

A common compliance gap is cross-state telehealth. In general, the telehealth encounter is treated as occurring in the patient’s location, which means providers must pay attention to the rules of that state. telehealth.hhs.gov

Tip: Multi-state compacts can streamline licensing for interstate practice. Telehealth.HHS.gov provides a solid overview, and IMLCC is a key pathway for physicians. telehealth.hhs.gov+1

4) Medicare coverage: know the current extension window

Federal policy has continued to evolve. Many Medicare telehealth access options that expanded during COVID have been extended through January 30, 2026 (and CMS also publishes rolling FAQs). telehealth.hhs.gov+1

Action: Treat Medicare telehealth rules as “living policy” and check CMS updates as you build your workflows.

5) Controlled substances via telemedicine: verify current DEA status

DEA and HHS extended certain COVID-era telemedicine prescribing flexibilities for controlled medications through December 31, 2025. Because this area changes frequently, providers should verify what is in effect at the time of prescribing and ensure their process meets DEA requirements. dea.gov+1

6) Reimbursement and state policy: use a reliable tracker

State telehealth requirements and reimbursement rules vary widely (Medicaid, private payer parity laws, consent rules, modality restrictions, etc.). A reliable source for staying current is CCHP’s Policy Finder and their Fall 2025 summary report. CCHP+1

7) Make telehealth accessible

Telehealth must work for real people—across language, disability access, caregivers, and technical constraints.

Build in:

• interpreter options
• accessibility accommodations
• caregiver participation workflows
• clear patient instructions (text/email reminders, login steps, backup phone option)

8) Lab work after a telehealth visit: close the loop with mobile collection

Telehealth often leads to an in-person need: labs.

A strong workflow includes:

• sending the lab order digitally to the lab of choice
• providing the patient a requisition copy
• coordinating mobile specimen collection when the patient can’t (or shouldn’t) travel

Need mobile collection support for your telehealth patients?
Request mobile collection

Updated December 2025 to reflect current HIPAA, Medicare, and DEA telemedicine rules.