The short version
- The majority of states impose a telehealth-specific informed consent requirement on top of ordinary consent to treatment. Some accept verbal consent, some require writing, and nearly all require it documented in the record.
- The licence that matters is for the state where the patient is physically located during the visit, not where the clinician is. Verifying location at the start of every session is a compliance step, not a courtesy.
- Interstate compacts speed up licensing; they do not replace it. The Interstate Medical Licensure Compact issues separate state licences through one streamlined application, and does not change any state's requirements or disciplinary authority.
- Prescribing controlled substances by telemedicine is regulated separately again at federal level, and the position has been changed repeatedly on short timescales. Check the current federal rule before building a workflow on it.
Written for the practice building a telehealth service and for the patient reading a consent form before a first video appointment. It covers documents and licensing, not clinical suitability. The rules here are set state by state and change more often than most areas of health regulation, so treat this as the shape of the problem and confirm the current position for every state you operate in.
Two requirements that keep getting confused
Consent to treatment is about the intervention. Telehealth consent is about the mode — that care is being delivered remotely, what that changes, and what the patient can do instead. Most states have layered the second onto the first rather than replacing it, so a telehealth practice needs both, and a general consent to treat does not satisfy the telehealth requirement.
Licensure is a different kind of requirement entirely. Consent is something the patient gives. A licence is something the state gives you, and its absence is not a paperwork defect — it is unlicensed practice. No signature on any form cures it.
What a telehealth consent has to cover
The exact list is state law, and it varies. But the categories recur across jurisdictions consistently enough to be treated as the working structure of the document.
The telehealth consent, region by region
Telehealth consent form
Two of those deserve expanding. The right to in-person care matters because it is the element regulators are most consistent about: the patient must understand that telehealth is an option they are choosing, not a condition of being treated, and that they may withdraw consent later without penalty. And privacy limits matter because the honest disclosure here is not "we use a secure platform". It is that the patient is often in an environment you cannot control, sharing a network you have not assessed, possibly with other people in the room.
Written, verbal, and how often
States split on format. Some accept verbal consent provided it is documented; some require it in writing, with electronic signature generally acceptable; some allow either. The pattern that emerges from state Medicaid policies is that the majority impose some telehealth-specific consent requirement, with the format left to each state — and that documentation in the medical record is close to universal even where writing is not.
Frequency varies too. Some states treat consent as one-time per provider or practice; others expect it at each new episode of care, or annually, or whenever the modality changes. The practical answer for a multi-state practice is to build to the strictest state you operate in rather than maintaining a matrix, because the cost of over-documenting is a form, and the cost of under-documenting is a licensing-board complaint.
Telehealth consent template
The full text free to read — modality and limitations, right to in-person care, patient location and identity verification, technology failure and emergency protocol, and the privacy disclosures a platform notice does not cover.
The patient's location decides the licence
The governing principle across states is that the clinician must be licensed where the patient is located at the time the telehealth technology is used. It follows that a clinician in one state treating a patient in another needs a licence in the second, and that a clinician travelling does not need a licence where they happen to be sitting — they need one where each patient is.
The consequences are not intuitive and are worth stating flatly:
Which of these two locations decides the licence
Where the patient is sitting
Where the clinician is sitting
Outside the licensing state
Inside it
Outside the licensing state
No licence for this encounter
Neither party is where the licence runs. Nothing on any consent form cures it, because consent is not what a licence is.
Still no licence
The clinician being in the right state does not help. The requirement follows the patient, not the practitioner.
Inside it
Generally fine
A clinician travelling does not need a licence where they happen to be sitting — though some states have their own rules about practising from within their borders.
The straightforward case
Establishing the relationship by telehealth is permitted in most states, but not on identical terms, and conditions attach to some categories of care.
Compacts speed up licensing; they do not replace it
This is the most common misconception in cross-state telehealth. The Interstate Medical Licensure Compact does not issue one multistate licence. It is a streamlined pathway: a physician designates a state of principal licence, obtains a letter of qualification from it, and then applies for full licences in other member states through a single process. More than forty states and territories participate. Crucially, the compact does not change a member state's qualification requirements, and it does not affect any state board's authority to discipline a physician who holds a licence through it.
There is now a family of these arrangements covering different professions — nursing and advanced practice nursing, psychology, physical and occupational therapy, counselling, social work, physician assistants, audiology and speech-language pathology, dietetics, EMS and school psychology among them. They differ in mechanism as well as membership: some are expedited-licensing pathways, others operate closer to a privilege to practise. Membership also differs, and several of the largest states sit outside several of the compacts, which tends to be exactly where the demand is.
Prescribing is a third question again
State rules on prescribing by telehealth vary considerably, from permissive to requiring a prior in-person encounter within a defined window for certain categories. Controlled substances add a separate federal layer, and the federal position on remote prescribing has been extended and revised repeatedly on short timescales.
The only responsible thing to say about the current federal rule is that you should read it directly, on the date you are relying on it, from the agency rather than from an article — including this one. Any workflow that assumes a particular flexibility remains in force needs a diary entry against its expiry.
Getting the paperwork in place, in order
- 1
List the states your patients are actually in
Not the states you market to — the states people connect from. Include the ones existing patients have moved to. This list, not your own location, defines your licensing obligation.
- 2
Get licensed in each of them, using a compact where one applies
Check whether your profession has a compact and whether both your home state and the target state are members. Budget the lead time: a compact shortens the process, it does not remove it.
- 3
Build patient location into the start of every session
A required field, asked each time, recorded in the note. This is the control that catches the relocated patient, and it is also a required disclosure item in many state consent rules.
- 4
Draft the consent to your strictest state and use it everywhere
Written, electronically signable, covering modality and limits, right to in-person care, technology failure, emergency protocol and privacy. One document is cheaper to maintain than a matrix and safer than the average.
- 5
Document consent in the record, not only in the form file
Date, method, what the patient agreed to, and the modality used. Nearly every state that requires consent also requires it in the medical record, and a signed PDF in a separate system is not that.
- 6
Diarise renewal and re-consent triggers
A new episode of care, a change of modality, a change of state, and any annual cycle your strictest state imposes. Set the review against the calendar, not against memory.
Privacy sits alongside all of this, not inside it
A telehealth consent is a treatment document. It is not the mechanism for releasing records, and it should not be drafted to do double duty. Sharing information with a third party — an employer, an insurer, another practice — needs its own instrument, with its own required elements, and those rules are covered in HIPAA authorization or records release. Where the encounter is therapy, the confidentiality disclosures belong in a therapy consent form, whose limits differ from those in general medical care.
Similarly, telehealth consent is not a substitute for procedure-specific disclosure. If the remote visit results in a plan carrying material risks, the underlying disclosure obligation is unchanged by the fact that it happened over video — see what informed consent requires. Practices sometimes assume that a thorough telehealth consent covers the treatment as well. It covers the medium.
The part worth paying for
Templates handle the consent document well. They are structured, they cover the recurring categories, and adapting one is an afternoon of work. What they cannot tell you is whether your particular profession has a compact your state joined, whether the state your newest patient just moved to imposes a modality restriction on their category of care, or whether your prescribing workflow still matches the current federal position.
Those three questions are jurisdictional and live, and they are where an hour of specialist advice per state is unambiguously worth buying. The consent form is the visible artefact of a telehealth practice and the least likely part of it to cause a problem.
Sources
General information, not legal advice. This guide explains how these documents and rules generally work. Law varies by jurisdiction and changes, and none of it is applied to your circumstances here. For anything consequential, consult a licensed attorney where you are.
Frequently asked
Do I need a separate consent form for telehealth?
In most states, yes. Telehealth consent is a disclosure about the mode of care — its limitations, the right to be seen in person instead, what happens if the technology fails — and it sits on top of ordinary consent to treatment rather than replacing it. Nearly all states that require it also require it documented in the medical record.
Is verbal consent enough for telehealth?
It depends on the state. Some accept verbal consent provided it is documented in the record, some require it in writing with electronic signature acceptable, and some allow either. A multi-state practice generally does better building one written form to the strictest state's requirement than maintaining different processes per state.
Which state's licence do I need for a telehealth visit?
The state where the patient is physically located when the visit takes place. The clinician's own location is generally not the deciding factor. That is why patient location is asked at the start of every session rather than captured once at registration — a patient who has moved or is travelling can put an encounter outside your licensure without either side noticing.
Does an interstate compact mean I can treat patients anywhere?
No. The Interstate Medical Licensure Compact is an expedited route to obtaining separate licences in member states, not a single multistate licence, and it does not alter any state's qualification requirements or its board's disciplinary authority. Other professions have their own compacts with different mechanisms and different membership, and several large states sit outside some of them.
How often does telehealth consent need to be renewed?
States differ. Some treat it as one-time for the provider or practice, others require it at each new episode of care, annually, or whenever the modality changes. Build renewal triggers into the record rather than relying on recall: a new episode, a change of modality, a change of the patient's state, and whatever periodic cycle your strictest state imposes.