6.2 California Telehealth Regulations & Out-of-State Practice

6.2 California Telehealth Regulations & Out-of-State Practice

The practice of telehealth in California is governed primarily by Business and Professions Code (BPC) Section 2290.5 and Board of Behavioral Sciences (BBS) regulations under 16 California Code of Regulations (CCR) Section 1815.5. As remote therapy has become a standard modality of treatment, mental health professionals must navigate strict legal requirements concerning client consent, emergency protocols, technology standards, and interstate practice boundaries.

---

1. Statutory Definition & Delivery Modalities

Under BPC Section 2290.5, telehealth is defined as the mode of delivering health care services and public health via information and communication technologies to facilitate the diagnosis, consultation, treatment, education, care management, and self-management of a patient's health care while the patient is at the originating site and the health care provider is at the distant site.

Permissible Modalities

• Synchronous Audio-Visual: Real-time, interactive two-way video communication (e.g., encrypted video conferencing platforms).
• Asynchronous Store-and-Forward: Transmission of medical or clinical information (e.g., pre-recorded video, diagnostic documents) to be reviewed at a later time by the clinician.
• Audio-Only Telehealth: Telephonic sessions are permitted under California law, provided the clinician determines that audio-only delivery is clinically appropriate, meets the standard of care, and satisfies all informed consent requirements.

---

2. Mandatory Telehealth Informed Consent

Prior to initiating telehealth services, a clinician must obtain and document informed consent from the client (or the client's legally authorized representative).

Mandatory Informed Consent Components

1. Explanation of Technology: Informing the client about the delivery technology, its limitations, and potential technical disruptions.
2. Risks & Benefits: Discussing privacy risks (such as data interception) and the benefits of remote treatment.
3. Confidentiality Protections: Explaining data encryption and security protocols implemented to protect Protected Health Information (PHI).
4. Right to Withdraw: Clarifying that the client has the right to withhold or withdraw consent to telehealth at any time without affecting their right to future care or treatment.
5. Documentation: Consent may be written or verbal; if obtained verbally, the clinician must document the verbal consent in the client's clinical record prior to delivering care.

---

3. Session-by-Session Mandatory Protocol

California regulations under 16 CCR Section 1815.5 mandate specific operational protocols that clinicians MUST perform at the start of EACH AND EVERY telehealth session.

[Start of Telehealth Session]
          │
          ├── Step 1: Verify & Document Client's Full Name & EXACT Physical Location
          │
          ├── Step 2: Assess Clinical Appropriateness for Telehealth Delivery
          │
          └── Step 3: Maintain Local Emergency Contact Resources for That Location

1. Verify Client Physical Location

At the beginning of each session, the therapist must verify and record the client's exact physical address (e.g., street address, room number, city). It is illegal to assume the client is at their home address; clients frequently log in from workplaces, parked vehicles, hotels, or alternate locations.

2. Assess Clinical Appropriateness

The clinician must evaluate whether telehealth remains clinically appropriate for the client's current diagnostic presentation and safety status. If a client presents in acute crisis, severe psychosis, or active suicidal ideation with plan and intent, telehealth may no longer meet the standard of care, requiring immediate transition to in-person crisis stabilization.

3. Establish Local Emergency Protocols

The clinician must document local emergency resources relative to the client's physical location, including:

• Local 911 dispatch contact number (or local police department direct line, as standard 911 calls route to the therapist's local dispatch, not the client's remote dispatch).
• Contact information for the nearest hospital emergency room and local mobile crisis response team.
• Designated local emergency contact person (e.g., family member, roommate, building manager).

---

4. Jurisdiction & Out-of-State Practice Boundaries

Jurisdictional rules for telehealth are based on a fundamental legal principle: The practice of marriage and family therapy occurs at the physical location of the CLIENT at the time services are rendered.

Key Out-of-State Scenarios

• Client Traveling Out of State: If a long-term California client travels to another state (e.g., vacation, business trip, college), the California therapist cannot lawfully render telehealth services unless the destination state explicitly allows temporary out-of-state practice or tele-psychology/tele-mental health exemptions.
• Out-of-State Clinician Treating CA Client: A therapist licensed in Nevada or New York cannot provide telehealth to a client physically located in California without holding an active California license or registration issued by the BBS.
• Moving Across State Lines: If a client permanently relocates outside California, the therapist must initiate appropriate termination and referral to a clinician licensed in the client's new state of residence.

---

5. Security & Technical Standards

Under HIPAA and BBS guidelines, therapists delivering telehealth must maintain robust technical safeguards:

• Platform Compliance: Must utilize HIPAA-compliant video platforms that execute a Business Associate Agreement (BAA) guaranteeing end-to-end encryption.
• Privacy Environments: Clinicians must conduct sessions from a private room ensuring confidentiality, and verify that the client is also in a secure, private setting.