8.6 Telepsychology, Emerging Issues, Rights, and Jurisdiction

Apply Old Duties to New Practice Conditions

Telepsychology is psychological service delivered through telecommunications technologies. The APA Guidelines for the Practice of Telepsychology and the ASPPB Telepsychology Guidelines organize the duties around competence, informed consent, confidentiality and security of data, testing, and interjurisdictional practice. On the EPPP, these items bundle competence, consent, confidentiality, emergency planning, documentation, technology limits, and the legal authority to practice where the client sits.

Jurisdiction is central. Generally, the psychologist must be authorized to practice where the client is located at the time of service. ASPPB's PSYPACT (the Psychology Interjurisdictional Compact) is the key modern development: in participating states, a psychologist with an E.Passport may provide telepsychology across borders (under the authority to practice interjurisdictional telepsychology), and a Temporary Authorization to Practice allows limited in-person work. The EPPP remains the underlying licensing exam; PSYPACT mobility builds on a home-state license.

Consent, Remote Assessment, and Client Rights

Telepsychology informed consent must add the technology-specific elements: the nature and limits of remote service, benefits and risks, privacy/security limits, what happens if the connection drops during a risk discussion, who to contact locally in an emergency, data storage, fees, and whether remote care suits the presenting problem. A client should know the local crisis number and the contingency plan before the first session.

Remote assessment demands caution. Administering a test online can alter standardization, security, observation, identity verification, and environmental control. A psychologist should not assume that an instrument validated for in-person administration transfers to a remote format without checking publisher guidance and validity evidence, and should document any limitation (consistent with Standard 9.06).

Emerging technology does not erase ordinary duties. Artificial intelligence chat tools, automated scoring, digital phenotyping, and messaging platforms raise the same questions about privacy, bias, accuracy, consent, data retention, and accountability. A tool may support administration or documentation, but it cannot replace competent assessment, diagnosis, risk evaluation, or informed communication — the psychologist remains responsible.

Client rights persist in traditional and remote care: informed choice, privacy, respectful and nondiscriminatory treatment, access to appropriate services, participation in decisions, information about fees and records, and complaint/grievance pathways. In institutional settings, rights may also include due process, the least restrictive environment principle, and access to records under governing law.

Exam Strategy

Do not be distracted by a shiny technology label. Ask the same chain every time: Is the psychologist competent? Is the service authorized where the client is? Is consent updated for the modality? Is privacy protected? Is risk planned for? Are client rights respected? Is the decision documented? That structure works for telehealth, social media, AI, and tools that do not exist yet. And because licensure steps, accepted scores, and any Part 2 requirements vary, always defer to the candidate's own licensing board.

Where the Client Is: The Governing Rule

The single most tested telepsychology principle is location of the client governs jurisdiction. A psychologist licensed in State A who treats a client physically present in State B must generally be authorized to practice in State B at the time of service — by State B licensure, by PSYPACT (if both states participate and the psychologist holds an E.Passport with the Authority to Practice Interjurisdictional Telepsychology, or APIT), or by a temporary-practice provision. A college student who is licensed-state-A's resident but is physically in State B during a session triggers State B's rules.

The trap answer relies only on the psychologist's home-state license.

Documentation, Data, and Future-Proofing

Telepsychology records carry extra elements: the platform used, verification of the client's identity and physical location at each session, confirmation that consent covered remote-specific risks, and the contingency taken if technology failed. Data handling should follow HIPAA Security Rule safeguards — encryption, access controls, and a breach-response plan — and any electronic-health-record vendor should sign a Business Associate Agreement.

For emerging issues generally, the EPPP does not expect deep technical knowledge of any one tool; it expects the candidate to map the new fact onto existing duties. Whether the stem involves an AI intake chatbot, digital phenotyping from a smartphone, an online psychometric platform, or a public social-media post, the analysis is identical: competence to use it, informed consent specific to it, privacy and data security, accuracy and bias checks, and retained professional accountability.

A psychologist who lets an automated tool render a diagnosis or risk decision without independent clinical judgment has violated the same duties that would apply to any unsupervised method. This durable framework — competence, authorization, consent, privacy, risk planning, rights, documentation — is what the exam is really testing, regardless of the technology label attached to the vignette.