Practice type
A video visit begins where the patient is.
When a screen goes dark, the practice should still know where the patient is, who owns the next clinical decision, what was decided, and where the patient can safely go next.
Telehealth is not a smaller version of office care. It is care delivered where the patient is sitting, driving, traveling, or staying when the encounter begins. That fact changes the clinical setting, the available examination, the emergency options, and sometimes the clinician's authority to practice.
Picture a patient who logs in from a car on the way home, not from the California address in the intake form. They describe chest pressure, the connection drops, and the clinician has only a portal message and a callback number. The important question is not whether the video platform worked. It is whether the practice can identify the patient, locate them, assess whether remote care is enough, and hand responsibility to a person or service that can act.
Start with the patient's present location
Before clinical work begins, verify the patient's identity, current physical location, callback number, and the service requested. For a patient located in California, the Medical Board says the treating physician needs a current California license. Other states set their own pathways: a full license, compact privilege, registration, reciprocity, or another state-specific route may be required.
California law defines the originating site as the location of the patient at the time of service. It requires the initiating provider to tell the patient about telehealth, obtain verbal or written consent, and document that consent before providing telehealth. Telehealth does not change the ordinary scope of practice, confidentiality duties, professional responsibility, or standard of care.
Maintain a live authorization map, not a once-a-year spreadsheet. For each patient location, identify the clinician, entity, services, prescribing authority, local laboratory and pharmacy arrangements, escalation route, effective dates, and expiration dates. Check it again when a patient travels or moves. A national marketing campaign and a national intake form do not create authority to care for every person who can book an appointment.
Choose remote care because it is clinically sufficient
The availability of video does not answer whether a visit belongs on video. For each program, decide what information and examination the clinical question requires, what remote assessment cannot establish, which red flags end the remote visit, and where the patient goes next.
This decision should be specific. A stable medication follow-up, a postoperative wound check, a new neurologic complaint, and a patient with escalating suicidal thoughts do not pose the same limits or require the same fallback. A good remote-care protocol names the clinician who can decide that video is adequate, the point at which an in-person examination is needed, and the office, urgent-care, emergency-department, or specialty pathway that receives the patient.
Remote care is a clinical judgment made for this patient and this visit. It is not a promise that every patient in a program can be managed remotely.
Put consent, the encounter, and the next action in an authoritative record
The record should let the next clinician reconstruct the encounter without searching a scheduling system, video platform, text thread, or questionnaire vendor. Capture the clinical history and remote examination, assessment, orders, patient instructions, and the open work that remains after the call.
The practice does not need one technical system for every task. It does need an authoritative clinical record and a reliable way to reconcile information from intake, video, portal messages, remote monitoring, laboratory and imaging orders, and outside partners. Treat an automated note, risk score, transcription, or recommendation as input until the responsible clinician reviews and relies on it under the practice's policy.
For results and referrals, define the owner and backup before the order leaves the practice. The useful question is not whether the report appeared in a portal. It is who reviews a critical, amended, missing, or unanswered result; how that person reaches the patient or covering clinician; and when the task is escalated rather than silently aging in a queue.
Prescribing is a clinical pathway, not a checkout flow
A membership site, messaging tool, or questionnaire does not create a prescribing exception. California treats prescribing, dispensing, or furnishing a dangerous drug without both an appropriate prior examination and a medical indication as unprofessional conduct. The examination may use telehealth, including an asynchronous questionnaire, only when that method meets the standard of care for the patient and decision at hand.
Map the whole path for each drug program: clinician authority, patient location, indication and assessment, pharmacy or fulfillment partner, monitoring, refill criteria, adverse-effect response, and after-hours coverage. This is particularly important when a practice uses compounded products, local partners, mailed medication, or multiple entities to market, schedule, prescribe, dispense, and follow up.
Controlled-substance rules require a separate, dated review. The DEA's temporary federal telemedicine flexibilities currently run through December 31, 2026. They permit certain DEA-registered practitioners to prescribe Schedule II-V controlled medications through audio-video telemedicine without a prior in-person evaluation, subject to the stated limits and all other federal and state requirements. They are not a permanent telehealth prescribing rule, and they do not replace state licensure, standard-of-care, or recordkeeping requirements.
Match the disconnection plan to the clinical risk
Every remote service should have an escalation and lost-connection plan that fits its acuity. Decide when staff try to reconnect, when they call the patient, when they call local emergency services, who documents the outcome, and who remains responsible until the handoff is clear.
Behavioral health deserves a more detailed plan. HHS recommends that telebehavioral-health practices know the patient's current location, local emergency resources, nearby support contact, other clinicians, and the response if the visit disconnects. Do not paste that template into every low-risk visit. Use its underlying discipline: design the response for the patient and service before an emergency exposes the gap.
Treat technology as part of the care system
Map how patient information moves from intake to video, messaging, transcription, e-prescribing, remote monitoring, portals, analytics, and the clinical record. For each step, name the purpose, access roles, retention setting, outage fallback, and the person who reconciles clinically important information into the record.
Where HIPAA applies, the Security Rule requires appropriate administrative, physical, and technical safeguards for electronic protected health information handled by covered entities and business associates. A vendor inventory should therefore support a real privacy and security review, including whether a vendor is a business associate, an independent recipient, or a consumer-directed service. A business associate agreement alone does not establish that the workflow is secure or clinically workable.
Let the issued policy answer the coverage question
Do not assume that a clinician's license, a platform contract, a credentialing record, or a certificate of insurance establishes telehealth coverage. Before a new program or state launch, compare the actual operation with the application, declarations, definitions, endorsements, exclusions, named insureds and professionals, territory, services, limits, defense provisions, and notice terms in the issued policy.
Give the carrier or broker the facts it needs to answer the question: patient locations, clinician licenses and roles, entity names, visit types, prescribing and controlled-substance activity, devices and local partners, after-hours arrangements, and effective dates. Ask in writing when a service, state, clinician, or partner is uncertain. A claims-made policy generally responds according to the policy in force when a claim is reported, subject to its terms, retroactive or prior-acts grant, known-claim and related-claim terms, notice conditions, and any extended reporting coverage; dates matter when a practice changes jurisdictions or vendors.
The final test is practical. If a patient connects from a new state, the visit becomes urgent, the video drops, and an abnormal result returns tomorrow, can the practice name the authorized clinician, current location, clinical record, escalation route, responsible next actor, and the policy or contract route to review? If not, the design needs work before the next appointment.
Sources
- California Business and Professions Code section 2290.5: Telehealth
- Medical Board of California: Telehealth
- California Business and Professions Code section 2242: Dangerous drug prescribing
- HHS Telehealth: Licensing Across State Lines
- DEA: Telemedicine flexibilities extension through 2026
- HHS: The HIPAA Security Rule
- HHS Telehealth: Creating a Telehealth Emergency Plan
- NAIC: Medical Malpractice Insurance