6.3 California Telehealth Regulations (BPC 2290.5) & Electronic Practice

6.3 California Telehealth Regulations (BPC 2290.5) & Electronic Practice

Exam Core Principle: Telehealth practice in California is governed by Business and Professions Code (BPC) Section 2290.5 and Board of Behavioral Sciences regulations set forth in Title 16, California Code of Regulations (16 CCR) Section 1815.5. Social workers providing electronic services must adhere to strict informed consent, location verification, emergency planning, and jurisdictional licensing rules.

The expansion of tele-behavioral health requires clinicians to maintain rigorous legal and technological standards. Clinicians must understand that telehealth is a mode of service delivery, not a separate license or distinct discipline, and standard statutes governing confidentiality, scope of practice, and emergency intervention apply fully during electronic practice.

---

Statutory Framework & Definition (BPC 2290.5)

Under BPC Section 2290.5(a)(6), telehealth is legally defined as:

"The mode of delivering health care services and public health via information and communication technologies to facilitate the diagnosis, consultation, treatment, education, care management, and self-management of a patient's health care while the patient is at the originating site and the health care provider is at the distant site."

Key Telehealth Modalities

• Synchronous Interaction: Real-time, two-way interactive audio-video communication (or real-time audio-only communication where authorized by statute).
• Asynchronous Store-and-Forward: Transmission of client medical information, diagnostic images, or clinical data to be reviewed at a later time by the clinician.

---

Mandatory Telehealth Informed Consent

Under BPC Section 2290.5(b), social workers must complete specific informed consent procedures prior to initiating telehealth services.

Statutory Consent Mandates

1. Informed Disclosure: The social worker must inform the client about the use of telehealth, including how electronic service delivery functions, potential technological limitations or security risks, and alternative in-person care options.
2. Consent Format: Consent may be obtained verbally or in writing from the client.
3. Mandatory Documentation: The clinician MUST explicitly document the client's verbal or written consent in the client's clinical record prior to rendering telehealth services.

---

Session-by-Session Mandatory Verification Protocol (16 CCR 1815.5)

To ensure client safety and jurisdictional compliance, BBS regulations in 16 CCR Section 1815.5 mandate that a social worker perform a specific 4-part protocol at the beginning of EVERY telehealth session:

1. Client Identity Verification

• Verify and document the client's full legal name and identity at the start of the session.

2. Exact Physical Location Verification

• Confirm and document the client's exact physical address (including street address, city, and specific room or location) where the client is situated during that specific session.

3. Local Emergency Contact & Resource Plan

• Determine and document contact details for local emergency response resources in the physical jurisdiction where the client is located (e.g., local police department dispatch, local crisis team, or nearest emergency room).
• Rationale: Calling 911 from the therapist's office reaches local emergency dispatch in the therapist's city, NOT the client's location if the client is in a different county or municipality.

4. Clinical Appropriateness Assessment

• Continually assess whether telehealth remains clinically appropriate for the client, considering factors such as crisis level, active suicidal ideation, cognitive stability, and technological security.

[Start of EVERY Telehealth Session Checklist]
  │
  ├── 1. Verify Client Full Identity
  ├── 2. Confirm Exact Physical Street Address & City
  ├── 3. Confirm Local Emergency Resources for Client's Jurisdiction
  └── 4. Assess Ongoing Clinical Suitability for Remote Care

---

Jurisdictional Licensing & Out-of-State Practice Rules

Jurisdictional rules for telehealth are strictly based on the physical location of the client at the time service is delivered, NOT where the therapist's office is located or where the client permanently resides.

California In-State Licensing Rule

• To provide telehealth to a client physically located in California, the practitioner MUST hold an active, valid California license or associate registration issued by the BBS.

Client Traveling Outside California

• If a California client travels temporarily to another state (or resides in another state) and requests a telehealth session, the social worker cannot lawfully render services unless authorized by the receiving state.
• The social worker must verify the licensure and tele-behavioral health laws of the state where the client is physically located during the session. Practicing in another state without authorization constitutes unauthorized practice of social work under that state's statutes.

---

Technological Safeguards & HIPAA Security Compliance

Electronic clinical practice requires adherence to federal HIPAA Security Rule regulations and state privacy statutes:

• Encryption Standards: Video platforms must provide end-to-end encryption (AES 256-bit encryption standard).
• Business Associate Agreements (BAAs): Social workers utilizing third-party video platforms, cloud storage, or electronic billing services must execute a formal Business Associate Agreement (BAA) with the vendor to ensure HIPAA compliance.
• Physical & Technical Environment: Both clinician and client must maintain private environments to preserve confidentiality. Clinicians should use private offices, white noise machines, headphones, and password-protected Wi-Fi networks.