Establishing Patient-Provider Relationships in Telehealth Primary Care: Navigating Federal and State Requirements

The rapid expansion of telehealth during the COVID-19 Public Health Emergency (PHE) brought unprecedented flexibility to healthcare delivery, particularly in primary care. However, as the PHE has concluded and temporary waivers have expired, regulatory bodies at both federal and state levels are re-emphasizing and refining the foundational requirements for establishing a legitimate patient-provider relationship in the context of remote care. This is a critical area of compliance for any healthcare business offering or planning to offer telehealth services, especially those in primary care.

The Core Principle: A Valid Patient-Provider Relationship

At the heart of medical practice, whether in-person or virtual, is the establishment of a valid patient-provider relationship. This relationship signifies that a healthcare professional has taken on the responsibility for a patient's care, and the patient has consented to receive that care. Historically, this often implied an in-person visit. Telehealth introduces complexities, as the interaction is remote. Regulatory bodies are keen to ensure that the convenience of telehealth does not compromise the quality, safety, or ethical foundation of care.

Many state medical boards define a patient-provider relationship as one where the provider undertakes to diagnose, treat, or care for a patient, and the patient agrees to such care. Key elements often include:

• Patient evaluation: A thorough assessment of the patient's medical history, symptoms, and current condition.
• Diagnosis: Arriving at a medical conclusion based on the evaluation.
• Treatment plan: Developing and communicating a plan of care, including prescriptions if necessary.
• Documentation: Maintaining comprehensive medical records of the encounter.
• Follow-up: Ensuring mechanisms for ongoing care and monitoring.

Federal Scrutiny: DEA and CMS Perspectives

DEA and the Ryan Haight Act

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires an in-person medical evaluation before a controlled substance can be prescribed via the internet. During the COVID-19 PHE, the Drug Enforcement Administration (DEA) issued waivers allowing for the prescription of controlled substances via telehealth without a prior in-person medical evaluation, provided certain conditions were met. These waivers significantly impacted telehealth primary care, enabling remote prescribing of medications like stimulants, benzodiazepines, and certain pain medications.

As the PHE ended, the DEA has been working to establish permanent telehealth rules for controlled substance prescribing. While initial proposals faced significant pushback, the DEA has extended certain flexibilities, allowing practitioners who established a telehealth relationship with a patient before November 11, 2023, to continue prescribing controlled medications via telehealth without an in-person visit for up to a year (until November 11, 2024). For new patient relationships, the general requirement for an in-person visit or a referral from a practitioner who has conducted an in-person medical evaluation remains the default under the Ryan Haight Act, absent further rulemaking. This underscores the federal emphasis on a substantive initial evaluation for higher-risk medications. (Source: DEA.gov)

CMS and Reimbursement for Telehealth Primary Care

The Centers for Medicare & Medicaid Services (CMS) has also played a crucial role in shaping telehealth primary care. During the PHE, CMS significantly expanded coverage for telehealth services, including audio-only visits, and allowed providers to be reimbursed for services delivered to new patients via telehealth. Post-PHE, while many telehealth flexibilities have been made permanent or extended, CMS continues to refine its policies. For instance, the 2024 Physician Fee Schedule Final Rule includes provisions that continue to allow certain telehealth services to be delivered to patients in their homes and extends payment for certain services. However, the foundational requirement for a legitimate patient-provider relationship remains implicit in all billing and coding guidelines. Fraudulent billing for services where no proper relationship was established is a significant compliance risk. (Source: CMS.gov)

State-Specific Requirements: The Varied Landscape

While federal guidance provides a baseline, state medical boards and legislatures are the primary regulators of medical practice within their borders. This leads to a highly varied and dynamic regulatory landscape regarding the establishment of patient-provider relationships in telehealth primary care.

Many states have adopted definitions or requirements that specify the nature of the initial encounter for telehealth. Common themes include:

• Synchronous Audio-Visual Communication: A significant number of states now explicitly require an initial encounter to be conducted via two-way, real-time audio-visual communication (i.e., live video conferencing) to establish a patient-provider relationship, especially when prescribing non-controlled medications or initiating a new course of treatment. Asynchronous methods (e.g., questionnaires, email, text) are often deemed insufficient for initial evaluations, though they may be acceptable for follow-up care or specific limited circumstances.

  • Example (Texas): The Texas Medical Board's rules on Telemedicine define a valid patient-physician relationship as one established through an initial in-person visit or through synchronous audio-visual interaction. (Source: Texas Medical Board Rules, 22 TAC §174.4)
  • Example (Florida): Florida Statute §456.47 requires that a patient-physician relationship must be established via an in-person exam or through telehealth using two-way audio and visual communication for the purpose of prescribing controlled substances. For non-controlled substances, the rules are slightly more flexible but still emphasize appropriate evaluation. (Source: Florida Statutes, Chapter 456)

• In-Person Exam Requirement: A minority of states may still require an initial in-person examination for certain conditions or for establishing a primary care relationship, although this has become less common post-PHE, particularly for non-controlled substances.

• Documentation Standards: Regardless of the mode of interaction, all states emphasize the need for thorough documentation of the telehealth encounter, including the patient's consent to telehealth, the method of communication used, the findings of the virtual examination, diagnosis, treatment plan, and any referrals.

• Informed Consent: Obtaining informed consent specifically for telehealth services is a universal requirement. This includes informing patients about the limitations of telehealth, privacy practices, and emergency protocols.

• Referral Mechanisms: Telehealth primary care providers must have clear protocols for referring patients to in-person care when a physical examination is necessary, or when the patient's condition cannot be adequately managed remotely.

Implications for Healthcare Businesses

Telehealth Brands and Primary Care Providers

For dedicated telehealth primary care platforms, ensuring compliance with these varied state rules is fundamental. This means:

• Geographic Compliance: Implementing robust systems to verify the patient's physical location and the provider's licensure in that state.
• Technology Requirements: Utilizing secure, HIPAA-compliant platforms that reliably support synchronous audio-visual communication.
• Provider Training: Educating providers on state-specific requirements for establishing patient relationships, virtual examination techniques, and documentation.
• Clear Policies: Developing internal policies that outline the circumstances under which a patient-provider relationship can be established via telehealth, and when an in-person referral is necessary.

Medspas, Dental Practices, and Chiropractic Offices Expanding into Telehealth

Even if primary care is not the core service, any practice offering telehealth should be aware of these principles. For example, a medspa offering initial consultations for aesthetic treatments via telehealth must ensure their state allows for such an initial relationship to be formed remotely, especially if prescriptions (e.g., for injectables, topical creams) are involved. Dental and chiropractic practices offering telehealth for initial assessments or follow-ups must also adhere to their respective board's rules on patient-provider relationships, which often mirror medical board regulations.

Conclusion

The regulatory environment for establishing patient-provider relationships in telehealth primary care is evolving but consistently emphasizes patient safety and appropriate standards of care. While the flexibility granted during the PHE was beneficial, the current trend is towards more defined and often stricter requirements for initial encounters, particularly the preference for synchronous audio-visual communication. Healthcare businesses must proactively monitor federal and state regulations, invest in compliant technology, and train their staff to ensure that every telehealth encounter is built upon a legitimate and well-documented patient-provider relationship. Failure to do so exposes practices to significant legal, financial, and reputational risks. Staying abreast of these nuances is not just about compliance; it's about building trust and delivering high-quality, responsible remote care.