Published on in Vol 27 (2025)

Preprints (earlier versions) of this paper are available at https://preprints.jmir.org/preprint/53558, first published .
Regulation and Compliance in Telemedicine: Viewpoint

Regulation and Compliance in Telemedicine: Viewpoint

Regulation and Compliance in Telemedicine: Viewpoint

Viewpoint

1Doxy.me Research, Doxy.me, Inc, Charleston, SC, United States

2College of Nursing, University of Utah, Salt Lake City, UT, United States

3Department of Psychiatry and Behavioral Neurosciences, Morsani College of Medicine, University of South Florida, Tampa, FL, United States

4Biomedical Informatics Center, Medical University of South Carolina, Charleston, SC, United States

Corresponding Author:

Julia Ivanova, PhD

Doxy.me Research

Doxy.me, Inc

18 Broad Street

Unit 300

Charleston, SC, 29401

United States

Phone: 1 844 436 9963

Email: julia.ivanova@doxy.me


The US COVID-19 Public Health Emergency ended on May 11, 2023. Lawmakers and regulators extended some flexibilities while they deliberate effective long-term telemedicine policy. Here, we discuss critical challenges in telemedicine compliance and regulation grounded in scholarly literature and current events. We specifically consider obstacles and progress toward solutions in telemedicine law and regulation regarding privacy and security issues, care across state borders, and prescribing over telemedicine in the United States. We conclude that simplified policies are needed to keep telemedicine accessible to providers and patients and that current privacy and security measures need refinement to protect patients appropriately.

J Med Internet Res 2025;27:e53558

doi:10.2196/53558

Keywords



Background

Smartphones and the internet have had a transformative impact on telemedicine over the decades, but the tipping point for telemedicine adoption was the COVID-19 pandemic [Weiner JP, Bandeian S, Hatef E, Lans D, Liu A, Lemke KW. In-person and telehealth ambulatory contacts and costs in a large US insured cohort before and during the COVID-19 pandemic. JAMA Netw Open. 2021;4(3):e212618. [FREE Full text] [CrossRef] [Medline]1]. During the pandemic, numerous health professionals adopted telemedicine to provide care while decreasing exposure to the virus [Telemedicine use among physicians by physician specialty: United States, 2021. 2024. URL: https://www.cdc.gov/nchs/products/databriefs/db493.htm [accessed 2024-05-13] 2]. In the US, legal and regulatory flexibilities enabled the shift of health care services to telemedicine. The Coronavirus Aid, Relief, and Economic Security Act and the Public Health Emergency (PHE) protocols of 2020 implemented most pandemic-era policy flexibilities in the United States, including (1) relaxation of HIPAA (Health Insurance Portability and Accountability Act) compliance requirements, (2) permission to prescribe certain controlled substances via telemedicine, (3) reimbursement for telemedicine equivalent to that of in-person visits, (4) promotion of telemedicine expansion for Medicare, (5) allowances for providers to offer care across state borders regardless of licensure, and (6) new protocols and ICD-10 (International Statistical Classification of Diseases, Tenth Revision) codes for telemedicine visits [CARES Act: AMA COVID-19 pandemic telehealth fact sheet. American Medical Association. 2020. URL: https:/​/www.​ama-assn.org/​delivering-care/​public-health/​cares-act-ama-covid-19-pandemic-telehealth-fact-sheet [accessed 2020-04-27] 3,VanderWerf M, Bernard J, Barta DT, Berg J, Collins T, Dowdy M, et al. Pandemic action plan policy and regulatory summary telehealth policy and regulatory considerations during a pandemic. Telemed e-Health. 2022;28(4):457-466. [FREE Full text] [CrossRef] [Medline]4]. Lawmakers made these changes to increase access to health care nationwide during the pandemic and based these flexibilities on previously considered legislative, regulatory, and policy updates [Chen PG, Heins SE, Dellva S, RAND Health Care. State medicaid telehealth coverage policy decisions since the COVID-19 public health emergency. 2023. URL: https://www.ncbi.nlm.nih.gov/books/NBK605935/?report=reader [accessed 2024-10-28] 5].

The expiration of the PHE in May 2023 created a dilemma for lawmakers, who were unprepared to make decisions about long-term telemedicine policy. To avoid negative impacts and allow more time for decision-making, they extended many telemedicine-related policy flexibilities through December 31, 2024 [Drug Enforcement Administration Health and Human Services Department. Second temporary extension of COVID-19 telemedicine flexibilities for prescription of controlled medications [Public Inspection Version]. 2023. URL: https://www.federalregister.gov/d/2023-22406 [accessed 2024-10-17] 6,Telehealth policy changes after the COVID-19 public health emergency. Telehealth. URL: https:/​/telehealth.​hhs.gov/​providers/​telehealth-policy/​policy-changes-after-the-covid-19-public-health-emergency [accessed 2024-04-29] 7]. Now, regulatory leaders are tasked with assessing current evidence (eg, telemedicine research, stakeholder needs and experiences, security concerns, cases of crime, and fraud) to make informed decisions about permanent federal and state regulations and rules related to telemedicine [Mehrotra A. Telemedicine can change care for the better—with the right rules [Internet]. URL: https://hms.harvard.edu/news/telemedicine-can-change-care-better-right-rules [accessed 2024-04-25] 8].

At this critical juncture, it is essential that we consider outcomes, experiences, perspectives, and other evidence resulting from pandemic-era telemedicine policy. By doing so, we can identify critical challenges and potential solutions and ultimately make informed, long-term policy decisions. Here, we summarize high-priority, policy-related challenges, and proposed solutions, focusing on providers and patients. We argue for US federal and state policy that protects patients in the context of new technologies and supports providers’ inclusion of telemedicine in their health care services. We highlight how ambiguities and complexity of laws and regulations effectively obstruct providers and organizations from using telemedicine. This viewpoint is grounded in a literature review of US telemedicine laws and regulations between 2000 and 2022 using legal and scientific databases (ie, HeinOnline, LexisNexis, PubMed, and Google Scholar) and includes post-PHE literature and events to ensure the relevancy of the topics discussed.


HIPAA—known for its privacy and security rules establishing national standards for protecting personal health information (PHI)—mandates providers use telemedicine platforms that provide privacy and security by not storing or having sufficient ways to prevent breaches of PHI [Office for Civil Rights (OCR). HIPAA and telehealth. US Department of Health and Human Services. URL: https://www.hhs.gov/hipaa/for-professionals/special-topics/telehealth/index.html [accessed 2024-04-25] 9]. The PHE flexibilities waived the need to use HIPAA-compliant telemedicine platforms. This flexibility eased the rapid, large-scale transition to telemedicine use during COVID-19 [Office for Civil Rights (OCR). HIPAA and telehealth. US Department of Health and Human Services. URL: https://www.hhs.gov/hipaa/for-professionals/special-topics/telehealth/index.html [accessed 2024-04-25] 9,Lin SK, Deitermann AM, Miller CJ, Garg A, Ungar J, Nguyen HP. Evolving teledermatology policy and reimbursement landscape in the United States. JAAD Int. 2023;11:200-208. [FREE Full text] [CrossRef] [Medline]10]. Unfortunately, HIPAA does not cover all facets of digital practices in health care delivery. For example, third-party digital apps for patients to complete therapies or exercises may not be required to comply with HIPAA, even if providers use it as an adjunct to care [Office for Civil Rights (OCR). Resources for mobile health apps developers. US Department of Health and Human Services. URL: https://www.hhs.gov/hipaa/for-professionals/special-topics/health-apps/index.html [accessed 2023-10-06] 11-Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23] 13]. Providers may use a HIPAA-compliant platform, but patients may be unknowingly in a nonprivate space. Simply expanding the scope of HIPAA to include PHI shared outside of a direct patient-provider relationship may not be enough protection [Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23] 13]. Even in 2018, legal commentary noted that updating the laws and regulations to protect PHI through more rigorous cybersecurity expectations, such as requiring encryption of transmissions and concrete language regarding security measures, is critical in ensuring the security and privacy of PHI [Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23] 13]. HIPAA’s security rules should stipulate the use of feasible cybersecurity measures rather than the basic health care standards [Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23] 13]. A health care practice could determine the best cybersecurity measures that would balance the importance of privacy and security of their patients while ensuring such measures are not a costly burden. To protect patients and providers, we must reconsider emphasizing the best instead of minimum necessary practices regarding privacy and security laws in this new age of digital health telemedicine and apps.

While providers have stated expectations that HIPAA amendments increase protections [Karsten J, Roberts J, Lee NT. Removing regulatory barriers to telehealth before and after COVID-19. Brookings. 2020. URL: https:/​/www.​brookings.edu/​articles/​removing-regulatory-barriers-to-telehealth-before-and-after-covid-19/​ [accessed 2023-10-06] 14,Consolidated appropriations act. 2023. URL: https://www.congress.gov/bill/117th-congress/house-bill/2617/text [accessed 2022-12-29] 15], the proposed changes focus on improving patient access to their PHI and easing administrative burdens [Alder S. HIPAA updates and HIPAA changes in 2024. URL: https://www.hipaajournal.com/hipaa-updates-hipaa-changes/ [accessed 2024-04-09] 16]. These proposed changes would only apply to the current definition of covered entities, and therefore, will not address the challenges regarding third-party health apps. Though HIPAA is the federal standard for PHI protection, state laws can enhance protection above this minimum requirement.

At the state level, the issue of PHI protection has led to the enactment of Washington state’s My Health My Data Act (HB 1155), whereby the state protects PHI beyond the scope of HIPAA [Protecting Washingtonians' personal health data and privacy. URL: https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy [accessed 2023-09-23] 17]. Specifically, this law prevents businesses from inferring health data about an individual based on purchases. It requires regulated entities or businesses to have information on this law within their privacy policies [Protecting Washingtonians' personal health data and privacy. URL: https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy [accessed 2023-09-23] 17]. The My Health My Data Act reflects a general movement toward increased security of individual health information. As the first to pass, the law broadly applies to consumer health data and includes information that may be inferred to determine a person’s past, current, or future health [Washington's My Health My Data Act—are you prepared? URL: https://www.venable.com/insights/publications/2024/02/washingtons-my-health-my-data-act-are-you [accessed 2024-04-29] 18]. Based on the discussions around this and similar proposed laws, we expect to see more proposed state and federal legislation with varying degrees of protection, greatly based on the ability of the government and institutions to enforce such protections [88(R). SB 2064—introduced version—bill text. URL: https://capitol.texas.gov/tlodocs/88R/billtext/html/SB02064I.htm [accessed 2023-10-10] 19-Legislation—SB0790. URL: https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0790 [accessed 2023-10-10] 21]. With no current tangible proposal to amend HIPAA in this way, state legislatures are stepping up their security and protections of PHI: Nevada passed their consumer health law in 2023, though their definitions of health data and protections are more narrowly defined than those of Washington’s law [SB370. URL: https://www.leg.state.nv.us/App/NELIS/REL/82nd2023/Bill/10323/Overview [accessed 2024-04-09] 22].

At this time, planned HIPAA amendments focus on increasing patient access to their PHI and would not directly address concerns related to digital tools. Some states are attempting to remedy privacy and security issues identified with the increased use of telemedicine and new technologies. Though their initiative raises awareness and discussion of privacy and security related to telemedicine, the lack of streamlining may increase legal complexities. Until there is a concrete effort to streamline these issues, telemedicine providers must ensure compliance with new state laws and regulations, and patients must be mindful of how they share PHI.


The PHE flexibilities waived the requirement to see a patient in person before prescribing controlled medication including schedule II-V drugs. Before the flexibilities, the Drug Enforcement Administration (DEA) required providers to obtain a waiver for each state where they prescribe medication. The DEA waived this step during the PHE [DEA announces proposed rules for permanent telemedicine flexibilities. DEA. URL: https:/​/www.​dea.gov/​press-releases/​2023/​02/​24/​dea-announces-proposed-rules-permanent-telemedicine-flexibilities [accessed 2023-10-10] 23]. Still, providers had to consider different state laws regulating their prescribing ability [DEA extends telemedicine flexibilities for prescribing of controlled medications: second time is the charm. URL: https://www.foley.com/insights/publications/2023/10/dea-extends-telemedicine-prescribing-controlled/ [accessed 2024-04-10] 24]. The DEA expects to promulgate its final rule incorporating provider and patient expectations since the PHE into its regulations in 2025. Due to this extended timeline, experts' expectations of a third extension of PHE flexibilities was confirmed with the DEA's clean extension of these flexibilities through December 31, 2025 [DEA announces proposed rules for permanent telemedicine flexibilities. DEA. URL: https:/​/www.​dea.gov/​press-releases/​2023/​02/​24/​dea-announces-proposed-rules-permanent-telemedicine-flexibilities [accessed 2023-10-10] 23,DEA extends telemedicine flexibilities for prescribing of controlled medications: second time is the charm. URL: https://www.foley.com/insights/publications/2023/10/dea-extends-telemedicine-prescribing-controlled/ [accessed 2024-04-10] 24].

Patient and provider experiences with these flexibilities have led to robust discourse, especially over the dangers—or lack thereof—of prescribing buprenorphine (schedule III drug) without in-person visits [Kannarkat JT, Kannarkat JT, Torous J. Rebalancing controlled substance regulations in telemedicine. JAMA Health Forum. 2023;4(10):e233251. [FREE Full text] [CrossRef] [Medline]25]. During the pandemic, providers reported that reduced steps in monitoring made them rely more on patients’ decision-making and confront the issue of trust in their patient-provider relationships [Mattocks KM, Moore DT, Wischik DL, Lazar CM, Rosen MI. Understanding opportunities and challenges with telemedicine-delivered buprenorphine during the COVID-19 pandemic. J Subst Abuse Treat. 2022;139:108777. [FREE Full text] [CrossRef] [Medline]26]. However, the same providers noted the ability to see patients in their homes provided them with a new level of insight that they used in assessing their patients [Mattocks KM, Moore DT, Wischik DL, Lazar CM, Rosen MI. Understanding opportunities and challenges with telemedicine-delivered buprenorphine during the COVID-19 pandemic. J Subst Abuse Treat. 2022;139:108777. [FREE Full text] [CrossRef] [Medline]26]. Similarly, a qualitative analysis of provider experiences in prescribing medications for opioid use disorder indicated both positive—including increased insight into patients’ daily lives—and negative experiences, noting issues with patients viewing telemedicine as a less professional encounter [Burke B, Miller E, Clear B, Weiner SG. A qualitative study to determine perspectives of clinicians providing telehealth opioid use disorder treatment. Drug Alcohol Depend. 2024;256:111118. [CrossRef] [Medline]27]. Providers additionally experienced stress due to their uncertainty regarding prescribing laws [Burke B, Miller E, Clear B, Weiner SG. A qualitative study to determine perspectives of clinicians providing telehealth opioid use disorder treatment. Drug Alcohol Depend. 2024;256:111118. [CrossRef] [Medline]27].

Research on prescribing over telemedicine considered patient outcomes, as well as provider experiences. A study examining Medicaid data during the beginning of the pandemic found that patients who began buprenorphine treatment over telemedicine had higher treatment retention, and there was no change in the odds of opioid-related nonfatal overdose [Hammerslag LR, Mack A, Chandler RK, Fanucchi LC, Feaster DJ, LaRochelle MR, et al. Telemedicine buprenorphine initiation and retention in opioid use disorder treatment for Medicaid enrollees. JAMA Netw Open. 2023;6(10):e2336914. [FREE Full text] [CrossRef] [Medline]28]. A recent review concluded that most providers favored having the ability to prescribe buprenorphine over telemedicine with little to no issues [Krawczyk N, Rivera B, King C, Dooling BCE. Pandemic telehealth flexibilities for buprenorphine treatment: a synthesis of evidence and policy implications for expanding opioid use disorder care in the United States. Health Aff Scholar. 2023;1(1):qxad013. [FREE Full text] [CrossRef] [Medline]29]. While the evidence is not definitive, providers appear to favor having the option of prescribing buprenorphine over telemedicine. However, providers note certain contextual misgivings such as the potential for increased liability and lack of legal clarity [Krawczyk N, Rivera B, King C, Dooling BCE. Pandemic telehealth flexibilities for buprenorphine treatment: a synthesis of evidence and policy implications for expanding opioid use disorder care in the United States. Health Aff Scholar. 2023;1(1):qxad013. [FREE Full text] [CrossRef] [Medline]29]. Though evidence appears to show that telemedicine increases access and results in similar efficacy as in-person treatment using medications for opioid use disorder, the research is still ongoing [Chan B, Bougatsos C, Priest KC, McCarty D, Grusing S, Chou R. Opioid treatment programs, telemedicine and COVID-19: a scoping review. Subst Abus. 2022;43(1):539-546. [CrossRef] [Medline]30,Pham H, Lin C, Zhu Y, Clingan SE, Lin LA, Mooney LJ, et al. Telemedicine-delivered treatment for substance use disorder: a scoping review. J Telemed Telecare. 2023:1357633X231190945. [CrossRef] [Medline]31].

Ideally, there will be a continuation of rigorous research to determine how prescribing buprenorphine—and other controlled substances—over telemedicine affects efficacy, access, health inequalities, and patient safety [Pham H, Lin C, Zhu Y, Clingan SE, Lin LA, Mooney LJ, et al. Telemedicine-delivered treatment for substance use disorder: a scoping review. J Telemed Telecare. 2023:1357633X231190945. [CrossRef] [Medline]31]. Unfortunately, with the DEA’s current timeline, new research is unlikely to inform the final rule. Instead, the DEA will make its decision based on current evidence, the 38,000 written comments providing feedback to its proposed rule, and the two days of public listening sessions that occurred in September 2023 [Drug Enforcement Administration Health and Human Services Department. Second temporary extension of COVID-19 telemedicine flexibilities for prescription of controlled medications [Public Inspection Version]. 2023. URL: https://www.federalregister.gov/d/2023-22406 [accessed 2024-10-17] 6]. The DEA’s final rule is the first step to simplifying the laws and regulations surrounding prescribing over telemedicine, mainly controlled substances. We expect to see moderately more expansive flexibilities than the initially proposed ruling to support the necessary accessibility of opioid use disorder treatment for individuals. Additionally, should the DEA remove the requirement for individual waivers to prescribe in each state, there would be a significant streamlining of procedures providers must follow to prescribe over telemedicine. Considering the DEA’s development of a federal ruling, eliminating the required multiple waivers would align with the premise of reducing federal compliance and regulatory complexities.

The DEA’s final rule also affects how states make rules and regulations. For example, in late 2023, the Georgia Medical Board planned to revert its prescribing policies to prepandemic times. After discussions with the community, it decided to extend PHE flexibilities on the state level through January 31, 2025. The board is waiting to see the DEA’s final ruling before determining its state policy on the subject [Abrar F. Some medications will now require an in-person doctor visit to obtain. Here's why. 2024. URL: https:/​/www.​13wmaz.com/​article/​news/​health/​medical-board-returns-to-pre-covid-protocols-for-certain-prescriptions-in-may-dr-uwa-iguobadia/​93-00c8674a-cf29-4be5-85f3-aa13ac814710 [accessed 2024-04-10] 32]. As with many federal and state dynamics, states will examine national rules and regulations to determine their policies. Based on the DEA's final ruling, we expect to see further changes to laws and regulations at the state level.


A widely cited barrier to telemedicine use is the issue of payment, both for coverage and reimbursement. Parity laws relate to payment for telemedicine services and include coverage parity (insurers must pay for services) and payment parity (insurers must pay for services at an equal rate to in-person visits) [Garber K, Chike-Harris K, Vetter MJ, Kobeissi M, Heidesch T, Arends R, et al. Telehealth policy and the advanced practice nurse. J Nurse Pract. 2023;19(7):104655. [FREE Full text] [CrossRef] [Medline]33]. With the PHE flexibilities, coverage parity ensured that telemedicine services were provided in all states and through Medicare [Parity. CCHP. URL: https://www.cchpca.org/topic/parity/ [accessed 2024-04-10] 34]. Additionally, the flexibilities implemented payment parity for telemedicine services through Medicare so that providers were paid at the same rate as they would for an in-person visit [Expanding services during COVID-19. Nashp. URL: https://nashp.org/expanding-services-during-covid-19/ [accessed 2024-04-10] 35]. During this time, most commercial insurers also provided payment parity [Ellimoottil C. Understanding the case for telehealth payment parity. Health Affairs Forefront. URL: https://www.healthaffairs.org/content/forefront/understanding-case-telehealth-payment-parity [accessed 2024-04-10] 36].

Payment parity on the state level has changed during the COVID-19 era (Table 1) [Expanding services during COVID-19. Nashp. URL: https://nashp.org/expanding-services-during-covid-19/ [accessed 2024-04-10] 35]. On a federal level, Medicare payment parity continues through the end of 2024; however, reimbursement after this extension will depend on Medicare’s telemedicine code categories [Khera N, Knoedler M, Meier SK, TerKonda S, Williams RD, Wittich CM, et al. Payment and coverage parity for virtual care and in-person care: how do we get there? Telemed Rep. 2023;4(1):100-108. [FREE Full text] [CrossRef] [Medline]37].

Table 1. Number of states with pre-, peri-, and post-PHEa payment parity laws.

States, n
Pre-PHE

Medicaid4

All insurers11
PHE

Medicaid14

All insurers20
Post-PHE

Medicaid6

All insurers21

aPHE: Public Health Emergency.

At this point, it is unknown whether Medicare will implement permanent changes on the federal level and whether certain states will permanently continue payment parity for telemedicine services. Differences in state and federal laws can impede health care providers’ ability to navigate payment, reducing patient health care access [Khera N, Knoedler M, Meier SK, TerKonda S, Williams RD, Wittich CM, et al. Payment and coverage parity for virtual care and in-person care: how do we get there? Telemed Rep. 2023;4(1):100-108. [FREE Full text] [CrossRef] [Medline]37]. These laws burdened providers with understanding the changing legal landscape of telemedicine and determining whether it is fiscally feasible.

Overall, there is federal coverage parity through Medicare, and all 50 states and Washington, DC, offer coverage parity with some variation in language [Parity. CCHP. URL: https://www.cchpca.org/topic/parity/ [accessed 2024-04-10] 34]. While there is uncertainty regarding payment parity continuance through Medicare, the physician fee schedule for 2024 posted for Medicare included payment parity and granularity in types of telemedicine visits [2024 physician fee schedule final rule released. American Psychological Association. 2023. URL: https://www.apaservices.org/practice/reimbursement/government/2024-physician-fee-schedule-final-rule [accessed 2024-04-10] 38]. On the state level, payment parity continues to evolve. States look to one another to determine what has worked effectively and what has not in choosing and implementing their parity laws. State and federal legal definitions of telemedicine visits may differ. Still, there is clear support for ensuring that telemedicine is sustained as a health care delivery option in the United States. We see the trend that state laws will eventually conform to those of Medicare, resulting in unified definitions of telemedicine and its reimbursement. Until this happens, providers may continue to view payment parity as a hindrance to implementing telemedicine in their workflow.


During the PHE, providers could deliver health care nationwide with any state license. Unlike the DEA’s extension of the flexibility—allowing a provider to have a single waiver to prescribe controlled substances nationwide—lawmakers did not extend the PHE flexibility that allowed providers to care for patients across state lines without a license in each state. States have varied in their regulation of telemedicine across state borders [Federal telehealth laws. CCHP. URL: https://www.cchpca.org/federal/pending-legislation/ [accessed 2023-10-04] 39]. For example, if a provider is licensed in New York and treats a patient who is in California for college or lives part-time in Florida, they can only see the patient within New York (even if the provider is out of state during the visit) [Physician license. Interstate Medical Licensure Compact. 2016. URL: https://www.imlcc.org/ [accessed 2024-04-29] 40]. In the same example, if the New York provider has a patient in New Jersey, that patient would have to drive into New York to be seen over telemedicine. Such requirements have created the telemedicine parking lot phenomenon wherein patients drive to the nearest location within the provider’s state and park to be seen via telemedicine to comply with state laws and licensure [Khan A. Telehealth laws need to be updated for a post-COVID health system. URL: https:/​/chlpi.​org/​news-and-events/​news-and-commentary/​health-law-and-policy/​telehealth-laws-need-to-be-updated-for-a-post-covid-health-system/​ [accessed 2024-04-10] 41].

Regulatory changes allowing providers to see patients outside their states may increase patient safety and continuity of care [Saliba V, Legido-Quigley H, Hallik R, Aaviksoo A, Car J, McKee M. Telemedicine across borders: a systematic review of factors that hinder or support implementation. Int J Med Inform. 2012;81(12):793-809. [CrossRef] [Medline]42,Willis A. Utilizing telehealth to practice medicine across state lines: the enforceability of physician non-compete agreements and non-solicitation clauses notes. Hofstra Labor Employment Law J. 2022;39(1):250. [FREE Full text]43]. A policy initiative, supported by professional organizations, such as the American College of Physicians and the American Medical Association, would ease regulatory compliance and eliminate a significant barrier to telemedicine care delivery across US state borders [Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23] 13,Willis A. Utilizing telehealth to practice medicine across state lines: the enforceability of physician non-compete agreements and non-solicitation clauses notes. Hofstra Labor Employment Law J. 2022;39(1):250. [FREE Full text]43-Andriola M. Telemedicine and legal disruption. Health Law Policy. 2019;13(2):30. [FREE Full text]46]. Licensure compacts exist for health professionals outside physicians, that is, nurses, physical therapists, occupational therapists, speech-language pathologists, audiologists, psychologists, and emergency medical professionals, that enable practice across multiple states [Licensure compacts. URL: https://telehealth.hhs.gov/licensure/licensure-compacts [accessed 2024-04-10] 47]. Unfortunately, not all compacts act in the same way: while the Interstate Medical Licensure Compact for physicians only helps to streamline the licensing process, the Nurse Licensure Compact allows nurses to hold one license and practice in all participating states [Garber K, Chike-Harris K, Vetter MJ, Kobeissi M, Heidesch T, Arends R, et al. Telehealth policy and the advanced practice nurse. J Nurse Pract. 2023;19(7):104655. [FREE Full text] [CrossRef] [Medline]33]. The larger scope of the Nurse Licensure Compact overcomes the additional barriers of time, complexity, and money that providers face. Of course, with each licensure compact, there are rules and regulations at the state level that would require amendment including definitions and functions of noncompete agreements and standards of care [Lhospital DE. Expansion Of telemedicine during COVID-19 and the issue of non-compete agreements. Virginia State Bar. 2021. URL: https://virginialawyer.vsb.org/publication/?i=690953&article_id=3863379&view=articleBrowser [accessed 2023-05-22] 48-Adler-Milstein J, Kvedar J, Bates DW. Telehealth among US hospitals: several factors, including state reimbursement and licensure policies, influence adoption. Health Aff (Millwood). 2014;33(2):207-215. [CrossRef] [Medline]51]. Ultimately, licensure compacts help simplify and codify the laws and regulations surrounding practice across state lines. Lawmakers and regulators need to remedy the level of complexity in the state and federal legislation in the face of the patient’s needs and the providers’ abilities [Wang CJ, Liu TT, Car J, Zuckerman B. Design, adoption, implementation, scalability, and sustainability of telehealth programs. Pediatr Clin North Am. 2020;67(4):675-682. [CrossRef] [Medline]52]. Since the PHE, more states have joined or are in the process of joining these licensure compacts. For example, the Interstate Medical Licensure Compact currently includes 39 states and Washington, DC, and the Nurse Licensure Compact consists of 41 states [Physician license. Interstate Medical Licensure Compact. 2016. URL: https://www.imlcc.org/ [accessed 2024-04-29] 40,Home. Nursecompact. URL: https://www.nursecompact.com/ [accessed 2024-04-10] 53].


With the end of the PHE, US Congress and regulators allowed certain telemedicine policy flexibilities to continue temporarily. At the same time, lawmakers and regulators work to align pre-PHE policies with current provider and patient needs relating to telemedicine. Over 100 pieces of proposed federal legislation currently address aspects of telemedicine, with more proposals from state lawmakers [Federal telehealth laws. CCHP. URL: https://www.cchpca.org/federal/pending-legislation/ [accessed 2023-10-04] 39]. This viewpoint reviewed how COVID-19–era PHE flexibilities paved the way for telemedicine adoption, summarized the policy challenges that arose, and described how policy leaders are attempting to resolve the challenges.

In the coming months and years, we anticipate changes to privacy and security laws, potential changes to HIPAA, and increasing consideration of how privacy laws function concerning emergent digital health technologies. After the DEA's final ruling regarding prescribing over telemedicine, expected in 2025, we anticipate further state-level changes in laws and regulations to better align with the federal standard. We anticipate that current regulatory trends supporting telemedicine coverage and payment parity will continue and that more states will adopt interstate licensure compacts for their health care professionals. Overall, our assessment of these critical topics reveals that while telemedicine is now an unmistakable part of health care, there is a need to codify the laws and regulations on a federal and state level. Such a move would ensure patient privacy, security, and quality of care and ensure provider support through definitive, clear pathways to comply with telemedicine laws and regulations.

Authors' Contributions

All authors contributed to conceptualization, review, and editing. JI drafted the manuscript.

Conflicts of Interest

BW is a shareholder, and all other authors are employees of Doxy.me Inc, a commercial telemedicine company.

  1. Weiner JP, Bandeian S, Hatef E, Lans D, Liu A, Lemke KW. In-person and telehealth ambulatory contacts and costs in a large US insured cohort before and during the COVID-19 pandemic. JAMA Netw Open. 2021;4(3):e212618. [FREE Full text] [CrossRef] [Medline]
  2. Telemedicine use among physicians by physician specialty: United States, 2021. 2024. URL: https://www.cdc.gov/nchs/products/databriefs/db493.htm [accessed 2024-05-13]
  3. CARES Act: AMA COVID-19 pandemic telehealth fact sheet. American Medical Association. 2020. URL: https:/​/www.​ama-assn.org/​delivering-care/​public-health/​cares-act-ama-covid-19-pandemic-telehealth-fact-sheet [accessed 2020-04-27]
  4. VanderWerf M, Bernard J, Barta DT, Berg J, Collins T, Dowdy M, et al. Pandemic action plan policy and regulatory summary telehealth policy and regulatory considerations during a pandemic. Telemed e-Health. 2022;28(4):457-466. [FREE Full text] [CrossRef] [Medline]
  5. Chen PG, Heins SE, Dellva S, RAND Health Care. State medicaid telehealth coverage policy decisions since the COVID-19 public health emergency. 2023. URL: https://www.ncbi.nlm.nih.gov/books/NBK605935/?report=reader [accessed 2024-10-28]
  6. Drug Enforcement Administration Health and Human Services Department. Second temporary extension of COVID-19 telemedicine flexibilities for prescription of controlled medications [Public Inspection Version]. 2023. URL: https://www.federalregister.gov/d/2023-22406 [accessed 2024-10-17]
  7. Telehealth policy changes after the COVID-19 public health emergency. Telehealth. URL: https:/​/telehealth.​hhs.gov/​providers/​telehealth-policy/​policy-changes-after-the-covid-19-public-health-emergency [accessed 2024-04-29]
  8. Mehrotra A. Telemedicine can change care for the better—with the right rules [Internet]. URL: https://hms.harvard.edu/news/telemedicine-can-change-care-better-right-rules [accessed 2024-04-25]
  9. Office for Civil Rights (OCR). HIPAA and telehealth. US Department of Health and Human Services. URL: https://www.hhs.gov/hipaa/for-professionals/special-topics/telehealth/index.html [accessed 2024-04-25]
  10. Lin SK, Deitermann AM, Miller CJ, Garg A, Ungar J, Nguyen HP. Evolving teledermatology policy and reimbursement landscape in the United States. JAAD Int. 2023;11:200-208. [FREE Full text] [CrossRef] [Medline]
  11. Office for Civil Rights (OCR). Resources for mobile health apps developers. US Department of Health and Human Services. URL: https://www.hhs.gov/hipaa/for-professionals/special-topics/health-apps/index.html [accessed 2023-10-06]
  12. Davis J. Fed’s updated mobile health app tool aims to reduce HIPAA compliance mistakes. URL: https:/​/www.​scmagazine.com/​analysis/​feds-updated-mobile-health-app-tool-aims-to-reduce-hipaa-compliance-mistakes [accessed 2023-10-06]
  13. Double secret protection: bridging federal and state law to protect privacy rights for telemental and mobile health users. Duke Law Journal. 2018. URL: https://dlj.law.duke.edu/article/double-secret-protection-sherman-vol67-iss5/ [accessed 2023-05-23]
  14. Karsten J, Roberts J, Lee NT. Removing regulatory barriers to telehealth before and after COVID-19. Brookings. 2020. URL: https:/​/www.​brookings.edu/​articles/​removing-regulatory-barriers-to-telehealth-before-and-after-covid-19/​ [accessed 2023-10-06]
  15. Consolidated appropriations act. 2023. URL: https://www.congress.gov/bill/117th-congress/house-bill/2617/text [accessed 2022-12-29]
  16. Alder S. HIPAA updates and HIPAA changes in 2024. URL: https://www.hipaajournal.com/hipaa-updates-hipaa-changes/ [accessed 2024-04-09]
  17. Protecting Washingtonians' personal health data and privacy. URL: https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy [accessed 2023-09-23]
  18. Washington's My Health My Data Act—are you prepared? URL: https://www.venable.com/insights/publications/2024/02/washingtons-my-health-my-data-act-are-you [accessed 2024-04-29]
  19. 88(R). SB 2064—introduced version—bill text. URL: https://capitol.texas.gov/tlodocs/88R/billtext/html/SB02064I.htm [accessed 2023-10-10]
  20. Legislation—HB0995. URL: https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/hb0995?ys=2023RS [accessed 2023-10-10]
  21. Legislation—SB0790. URL: https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0790 [accessed 2023-10-10]
  22. SB370. URL: https://www.leg.state.nv.us/App/NELIS/REL/82nd2023/Bill/10323/Overview [accessed 2024-04-09]
  23. DEA announces proposed rules for permanent telemedicine flexibilities. DEA. URL: https:/​/www.​dea.gov/​press-releases/​2023/​02/​24/​dea-announces-proposed-rules-permanent-telemedicine-flexibilities [accessed 2023-10-10]
  24. DEA extends telemedicine flexibilities for prescribing of controlled medications: second time is the charm. URL: https://www.foley.com/insights/publications/2023/10/dea-extends-telemedicine-prescribing-controlled/ [accessed 2024-04-10]
  25. Kannarkat JT, Kannarkat JT, Torous J. Rebalancing controlled substance regulations in telemedicine. JAMA Health Forum. 2023;4(10):e233251. [FREE Full text] [CrossRef] [Medline]
  26. Mattocks KM, Moore DT, Wischik DL, Lazar CM, Rosen MI. Understanding opportunities and challenges with telemedicine-delivered buprenorphine during the COVID-19 pandemic. J Subst Abuse Treat. 2022;139:108777. [FREE Full text] [CrossRef] [Medline]
  27. Burke B, Miller E, Clear B, Weiner SG. A qualitative study to determine perspectives of clinicians providing telehealth opioid use disorder treatment. Drug Alcohol Depend. 2024;256:111118. [CrossRef] [Medline]
  28. Hammerslag LR, Mack A, Chandler RK, Fanucchi LC, Feaster DJ, LaRochelle MR, et al. Telemedicine buprenorphine initiation and retention in opioid use disorder treatment for Medicaid enrollees. JAMA Netw Open. 2023;6(10):e2336914. [FREE Full text] [CrossRef] [Medline]
  29. Krawczyk N, Rivera B, King C, Dooling BCE. Pandemic telehealth flexibilities for buprenorphine treatment: a synthesis of evidence and policy implications for expanding opioid use disorder care in the United States. Health Aff Scholar. 2023;1(1):qxad013. [FREE Full text] [CrossRef] [Medline]
  30. Chan B, Bougatsos C, Priest KC, McCarty D, Grusing S, Chou R. Opioid treatment programs, telemedicine and COVID-19: a scoping review. Subst Abus. 2022;43(1):539-546. [CrossRef] [Medline]
  31. Pham H, Lin C, Zhu Y, Clingan SE, Lin LA, Mooney LJ, et al. Telemedicine-delivered treatment for substance use disorder: a scoping review. J Telemed Telecare. 2023:1357633X231190945. [CrossRef] [Medline]
  32. Abrar F. Some medications will now require an in-person doctor visit to obtain. Here's why. 2024. URL: https:/​/www.​13wmaz.com/​article/​news/​health/​medical-board-returns-to-pre-covid-protocols-for-certain-prescriptions-in-may-dr-uwa-iguobadia/​93-00c8674a-cf29-4be5-85f3-aa13ac814710 [accessed 2024-04-10]
  33. Garber K, Chike-Harris K, Vetter MJ, Kobeissi M, Heidesch T, Arends R, et al. Telehealth policy and the advanced practice nurse. J Nurse Pract. 2023;19(7):104655. [FREE Full text] [CrossRef] [Medline]
  34. Parity. CCHP. URL: https://www.cchpca.org/topic/parity/ [accessed 2024-04-10]
  35. Expanding services during COVID-19. Nashp. URL: https://nashp.org/expanding-services-during-covid-19/ [accessed 2024-04-10]
  36. Ellimoottil C. Understanding the case for telehealth payment parity. Health Affairs Forefront. URL: https://www.healthaffairs.org/content/forefront/understanding-case-telehealth-payment-parity [accessed 2024-04-10]
  37. Khera N, Knoedler M, Meier SK, TerKonda S, Williams RD, Wittich CM, et al. Payment and coverage parity for virtual care and in-person care: how do we get there? Telemed Rep. 2023;4(1):100-108. [FREE Full text] [CrossRef] [Medline]
  38. 2024 physician fee schedule final rule released. American Psychological Association. 2023. URL: https://www.apaservices.org/practice/reimbursement/government/2024-physician-fee-schedule-final-rule [accessed 2024-04-10]
  39. Federal telehealth laws. CCHP. URL: https://www.cchpca.org/federal/pending-legislation/ [accessed 2023-10-04]
  40. Physician license. Interstate Medical Licensure Compact. 2016. URL: https://www.imlcc.org/ [accessed 2024-04-29]
  41. Khan A. Telehealth laws need to be updated for a post-COVID health system. URL: https:/​/chlpi.​org/​news-and-events/​news-and-commentary/​health-law-and-policy/​telehealth-laws-need-to-be-updated-for-a-post-covid-health-system/​ [accessed 2024-04-10]
  42. Saliba V, Legido-Quigley H, Hallik R, Aaviksoo A, Car J, McKee M. Telemedicine across borders: a systematic review of factors that hinder or support implementation. Int J Med Inform. 2012;81(12):793-809. [CrossRef] [Medline]
  43. Willis A. Utilizing telehealth to practice medicine across state lines: the enforceability of physician non-compete agreements and non-solicitation clauses notes. Hofstra Labor Employment Law J. 2022;39(1):250. [FREE Full text]
  44. Elliott VL. Telehealth and telemedicine: description and issues. Washington, DC. Library of Congress; 2016. URL: https://apps.dtic.mil/sti/citations/AD1172117 [accessed 2023-08-22]
  45. Hoffman LC. Telehealth, children, and pediatrics: should the doctor make house calls again, digitally articles and surveys. Nova Law Rev. 2019;43(3):321-352. [FREE Full text]
  46. Andriola M. Telemedicine and legal disruption. Health Law Policy. 2019;13(2):30. [FREE Full text]
  47. Licensure compacts. URL: https://telehealth.hhs.gov/licensure/licensure-compacts [accessed 2024-04-10]
  48. Lhospital DE. Expansion Of telemedicine during COVID-19 and the issue of non-compete agreements. Virginia State Bar. 2021. URL: https://virginialawyer.vsb.org/publication/?i=690953&article_id=3863379&view=articleBrowser [accessed 2023-05-22]
  49. Wolf TD. Telemedicine and malpractice: creating uniformity at the national level. William Mary Law Rev. 2020;61(5):1505. [FREE Full text]
  50. Chang H. Evaluation framework for telemedicine using the logical framework approach and a fishbone diagram. Healthcare Informatics Res. 2015;21(4):230-238. [FREE Full text] [CrossRef] [Medline]
  51. Adler-Milstein J, Kvedar J, Bates DW. Telehealth among US hospitals: several factors, including state reimbursement and licensure policies, influence adoption. Health Aff (Millwood). 2014;33(2):207-215. [CrossRef] [Medline]
  52. Wang CJ, Liu TT, Car J, Zuckerman B. Design, adoption, implementation, scalability, and sustainability of telehealth programs. Pediatr Clin North Am. 2020;67(4):675-682. [CrossRef] [Medline]
  53. Home. Nursecompact. URL: https://www.nursecompact.com/ [accessed 2024-04-10]


DEA: Drug Enforcement Administration
HIPAA: Health Insurance Portability and Accountability Act
ICD-10: International Statistical Classification of Diseases, Tenth Revision
PHE: Public Health Emergency
PHI: personal health information


Edited by A Mavragani; submitted 10.10.23; peer-reviewed by L Celine, K Drude; comments to author 29.02.24; revised version received 29.05.24; accepted 27.09.24; published 23.01.25.

Copyright

©Julia Ivanova, Mollie R Cummins, Triton Ong, Hiral Soni, Janelle Barrera, Hattie Wilczewski, Brandon Welch, Brian Bunnell. Originally published in the Journal of Medical Internet Research (https://www.jmir.org), 23.01.2025.

This is an open-access article distributed under the terms of the Creative Commons Attribution License (https://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work, first published in the Journal of Medical Internet Research (ISSN 1438-8871), is properly cited. The complete bibliographic information, a link to the original publication on https://www.jmir.org/, as well as this copyright and license information must be included.