
Why Telehealth for Therapists Is No Longer Optional
Telehealth for therapists has shifted from emergency backup plan to core practice infrastructure — and if you have been wondering whether your current setup actually meets 2025 compliance standards, you are not alone. For therapy and behavioral health specifically, virtual care has become the dominant service channel.
According to Grow Therapy’s State of Mental Health Report, behavioral health visits in the U.S. reached 66.4 million in 2024 — surpassing primary care visit totals. As of early 2025, 62.3% of patients with a telehealth claim carried a mental health diagnosis. When people go virtual for healthcare, they are most often seeking therapy.
Many practices launched telehealth hastily during COVID-19, relying on temporary federal waivers that have since expired. Since May 2023, full HIPAA compliance has been back in effect. The Office for Civil Rights (OCR) is actively enforcing again, and a 2024 update to the HIPAA Security Rule added new requirements specifically targeting remote access and telehealth technology.
Critical Compliance Notice: The COVID-era telehealth enforcement waivers expired May 12, 2023. Telehealth on platforms without a signed Business Associate Agreement (BAA) — including consumer Zoom, FaceTime, Skype, and standard Google Meet — is a HIPAA violation. OCR enforcement is active.
This guide walks through every layer of a compliant telehealth launch: technology requirements, legal compliance, state licensing, billing, workflow design, and client experience.
The 7-Step Telehealth Launch Framework for Therapy Practices
Whether you are launching telehealth for the first time or rebuilding your virtual practice on a compliant foundation, these seven steps cover every pillar of a sustainable telehealth operation.
Assess Your Practice Readiness Before You Buy a Single Platform
Before comparing platforms or purchasing equipment, every practice owner needs an honest internal readiness assessment. Telehealth touches your scheduling, documentation, billing, clinical workflows, and staff training. Practices that skip this step end up with expensive tools they cannot fully use.
- ✓What percentage of your current caseload could realistically be served via telehealth?
- ✓Which provider types are trained for and interested in virtual care delivery?
- ✓Do you have administrative staff capacity to manage a virtual intake and scheduling process?
- ✓Is your current EHR or practice management system telehealth-compatible with a built-in compliant video module?
- ✓What is your budget for platform licensing, equipment, and staff training?
- ✓Which insurance panels do you accept, and what are their telehealth reimbursement policies?
Research note: A study in BMC Health Services Research found that healthcare organizations with structured implementation plans and pre-launch readiness assessments achieved significantly higher telehealth adoption rates among both providers and patients. Rushing the setup phase is the most common driver of costly platform switches within the first year.
If your current practice management software does not integrate telehealth, this is the moment to evaluate whether an integrated solution like Therasoft’s telehealth bundle makes more sense than layering a video platform on top of a fragmented stack.

Choose a HIPAA-Compliant Telehealth Platform — and Get the BAA in Writing
This is the single most critical compliance decision you will make. Every platform you use to conduct, document, or transmit session data must be HIPAA-compliant — and that status is only valid if the vendor has signed a Business Associate Agreement (BAA) with your practice. Without a signed BAA, using any platform for telehealth creates legal liability.
Important: Standard consumer Zoom, FaceTime, Google Meet, Skype, and WhatsApp do NOT qualify for HIPAA-compliant telehealth. The COVID enforcement waivers permanently expired May 2023.
When evaluating platforms, look for these non-negotiable features:
| Feature | Why It Matters | Required? |
|---|---|---|
| Signed Business Associate Agreement (BAA) | Legally required under HIPAA for any PHI handling | ✓ Required |
| End-to-end encryption (TLS 1.2+ minimum) | Protects session audio, video, and chat in transit | ✓ Required |
| Unique login credentials + MFA | HIPAA Security Rule access control requirement | ✓ Required |
| Audit logging for session access | Enables breach detection and compliance documentation | ✓ Required |
| Encrypted data storage at rest | PHI stored in the platform must be encrypted | ✓ Required |
| Virtual waiting room | Prevents clients from joining before provider is ready | Strongly recommended |
| EHR / Practice management integration | Reduces documentation burden and scheduling friction | Strongly recommended |
| E-consent and digital signature capture | Documents telehealth-specific informed consent | Strongly recommended |
Integrated platforms that combine telehealth video with your EHR, billing, scheduling, and client portal in a single system dramatically reduce compliance gaps and the administrative burden on your front desk and clinicians.
Understand State Licensing Requirements — They Apply to Every Session
The rule is straightforward but frequently overlooked: you must be licensed in the state where your client is physically located at the time of the telehealth session — not where your practice is headquartered. If a client is traveling to another state and attends a session from their hotel room, your home-state license may not cover that session.
Research note: According to the Center for Connected Health Policy (CCHP), state telehealth licensing policies vary widely in 2025. There is no single national telehealth license for behavioral health providers — each state licensing board maintains independent authority.
Interstate compact mechanisms that streamline multi-state licensure:
- ✓Counseling Compact — For LPCs; allows compact privileges in participating states without full individual applications.
- ✓PSYPACT — For psychologists; allows interstate practice via the Authority to Practice Interjurisdictional Telepsychology (APIT) credential.
- ✓Social Work Compact — Currently in early implementation; check your state board for current status.
- ✓LMFT Compact — For licensed marriage and family therapists; in development. Check AAMFT for updates.
Even with compacts, you will need to apply and pay fees for privileges in each state. Build this into your telehealth launch timeline — it can take weeks to months depending on the state and provider type.

Build Your HIPAA Compliance Framework for Telehealth
Your existing HIPAA policies were written for an in-person practice. Telehealth introduces a new category of risks and requires its own documentation layer. The 2024 HIPAA Security Rule update explicitly added requirements for remote access security, multi-factor authentication, and telehealth technology asset inventory. If your security risk analysis has not been updated since your practice went virtual, it is incomplete.
- ✓Updated Security Risk Analysis (SRA) — Must reflect all current telehealth platforms, vendor integrations, remote-access workflows, and provider devices. An outdated SRA is one of OCR’s most common enforcement targets.
- ✓Telehealth-specific Privacy Policies — Covering how PHI is handled in video sessions, how session data is stored, and when recordings may occur.
- ✓Business Associate Agreements (BAAs) — Filed and signed with every vendor that touches PHI: telehealth platform, EHR, payment processor, scheduling tool, and cloud storage.
- ✓Telehealth Informed Consent Form — A standalone consent document explaining technology risks, emergency procedures, privacy limitations, and recording policies. Clients must sign before their first session.
- ✓Crisis and Emergency Protocol — Documented procedure for what happens if a client discloses active suicidality during a remote session. Must include: client location at session start, local emergency contacts, and escalation steps if connection is lost.
- ✓Provider Device Policies — Rules governing which devices may be used, screen lock requirements, prohibition on shared family computers, and MFA enrollment.
Good news: If you are running Therasoft as your practice management platform, your BAA with Therasoft covers the core clinical data environment. You still need individual BAAs for any additional vendors you use outside the platform.
Set Up Your Equipment, Workspace, and Backup Systems
A telehealth session is a clinical encounter. The professionalism of your technical setup directly affects therapeutic rapport, client retention, and your ability to read clinical cues. Equipment failures mid-session can disrupt a client at a vulnerable moment.
- ✓Computer or tablet — A dedicated device for clinical use (not shared with household members). Laptop or desktop preferred over smartphone.
- ✓High-speed internet — Minimum 25 Mbps download/upload for stable HD video. Wired ethernet is more reliable than Wi-Fi. Avoid public or shared networks entirely.
- ✓HD webcam — 1080p resolution minimum. Most modern laptop cameras are sufficient; an external webcam improves positioning flexibility.
- ✓Quality microphone — A noise-canceling microphone or headset improves audio clarity. Clear audio matters more than video quality for therapeutic communication.
- ✓Ring light or directional lighting — Natural or front-facing light makes you clearly visible and professionally presented. Avoid windows directly behind you.
- ✓Private, lockable workspace — HIPAA requires sessions be conducted where conversations cannot be overheard by unauthorized individuals.
Backup plan required: Document and test your backup protocol before your first telehealth client. Include: switching to audio-only phone call if video fails, having the client’s direct number on file, and a procedure for what to do if connection is lost during a crisis. Include this in your telehealth consent form so clients know the plan in advance.
Home Office vs. Clinical Office: What the Rules Say
Telehealth from a home office is entirely permissible under HIPAA, provided the workspace meets the same privacy standards as a clinical office: no shared household devices, a screen lock on all devices, a room where conversations cannot be overheard, and written do-not-disturb policies for household members during session hours.

Navigate Telehealth Billing and Insurance Reimbursement
Telehealth billing has stabilized considerably since the post-pandemic uncertainty — but it still requires intentional setup. Coding rules, modifier requirements, and reimbursement rates vary across Medicare, Medicaid, and private insurance, and the rules change frequently enough that practices should review billing configuration at least annually.
Key Billing Concepts for Teletherapy
- ✓Modifier 95 — Used for synchronous real-time audio-video sessions. Required by many payers to distinguish telehealth from in-person claims.
- ✓Modifier GT — Used for Medicare telehealth claims via interactive audio-video telecommunications systems.
- ✓Place of Service 02 — Used when the provider is NOT in a healthcare facility (e.g., home office).
- ✓Place of Service 10 — Used when the client is receiving services in their home.
- ✓Audio-only modifiers (POS 02 + modifier 93) — For applicable audio-only sessions where permitted by the payer.
Research note: Recent data shows private insurers pay nearly the same for telehealth and in-person evaluation and management claims — approximately $99 for telehealth versus $98 for in-person. This parity is not universal across all payer types or states. Always verify with each payer directly.
Medicare Telehealth Provisions (2025)
Medicare telehealth coverage has been extended through September 30, 2025, allowing most behavioral health services to the patient’s home without geographic restrictions, including audio-only coverage for mental health services in defined cases. Watch for Congressional action on further extensions.
Medicaid and Private Payers
Medicaid telehealth rules are set at the state level and vary significantly. Most states now have some form of telehealth coverage parity law, but specifics differ by state. Build a payer-by-payer verification process into your credentialing workflow so each panel’s telehealth policies are documented before you submit the first claim.
Design Workflows That Support Both Clients and Clinicians at Scale
The practices that sustain successful telehealth programs treat workflow design as a clinical priority — not just an IT problem. Poor workflows create burnout for therapists and a frustrating experience for clients.
Telehealth Intake Workflow Best Practices
- ✓Send telehealth-specific consent forms through your HIPAA-compliant client portal before the first session
- ✓Collect a physical address for the client’s session location (required for emergency protocol documentation)
- ✓Conduct a brief 10-minute technology orientation call before the first full session for new telehealth clients
- ✓Confirm which state the client will be in at the time of each session (especially for clients who travel)
- ✓Document the client’s preferred backup contact method and emergency contact in their chart
Managing Clinician Capacity and Screen Fatigue
- ✓Build 10–15 minute buffers between video sessions for note completion and transition time
- ✓Set a daily screen-session ceiling for each provider based on self-reported capacity — not just billable hour targets
- ✓Mix telehealth and in-person days for providers who offer both, rather than dedicating entire days to video sessions
- ✓Establish documentation templates in your EHR specifically for telehealth notes (including session modality, client location, and technology used)
“The number one thing that can make a virtual visit go well is when a counselor is comfortable with delivering care online, can use the tools they have selected, and can put the client at ease — nothing else matters more.”
— Lisa Henderson, LPC, COO & Co-Founder, Synchronous Health, Inc.
5 Costly Telehealth Mistakes Therapy Practices Make (And How to Avoid Them)
Even well-run practices slip up during telehealth setup. These mistakes range from minor inconveniences to HIPAA enforcement exposure.
Mistake #1: Using a platform without a signed BAA. The most common — and most serious — error. Many practices assume that because a platform says it is HIPAA compliant on its website, that is sufficient. It is not. You need a signed, executed BAA on file before the first session.
Mistake #2: Skipping the state licensing check for existing clients. When you add telehealth, audit your current caseload for interstate licensing compliance — not just screen new clients. If a client moves across state lines or starts connecting remotely from another state, you need a license there.
Mistake #3: Using the same informed consent form for telehealth and in-person clients. Telehealth requires a separate, specific consent covering technology risks, emergency procedures, and privacy limitations. Several state licensing boards specifically require standalone telehealth consent.
Mistake #4: Not having a documented crisis protocol for remote sessions. Every telehealth practice needs a written procedure for how to respond if a client is in crisis during a session — especially if connection is lost. Failure to have one is both an ethical concern and a potential licensing board issue.
Mistake #5: Assuming telehealth billing codes are the same as in-person. Claims without the correct telehealth modifiers and place of service codes will result in denials — or claims paid incorrectly and flagged in a payer audit. Build telehealth-specific billing templates into your practice management system from day one.
Frequently Asked Questions: Telehealth Setup for Therapists
Your Telehealth Practice Is a Clinical Asset — Treat It Like One
Telehealth is no longer a temporary accommodation or a nice-to-have in the therapy world. As of 2025, over 80% of mental health providers offer some form of virtual care — and client demand has not slowed down. What has slowed down is the regulatory tolerance for practices running on outdated setups, expired waivers, and disconnected tools.
The practices winning with telehealth right now are the ones who built it correctly: on a compliant platform, with proper licensing, clear documentation, integrated billing, and sustainable clinician workflows. These are not bureaucratic boxes to check — they are the structural foundation of a practice that clients trust and that can grow without constantly putting out compliance fires.
The seven steps in this guide represent the full arc of a telehealth launch. If you are just getting started, work through them in order. If you are auditing an existing program, prioritize the highest-risk gaps first — platform BAA verification and state licensing are the two most urgent for most practices.
Good news: The right practice management platform removes most of the friction. When your telehealth video module, EHR, scheduling, billing, client portal, and documentation tools live in one integrated system — with a single BAA covering the clinical data environment — the operational burden drops significantly. That is the difference between duct-taped compliance and sustainable virtual care.
Telehealth done right is a competitive advantage. Done wrong — or left on a setup that has not been revisited since 2020 — it is a liability. The investment you make in a proper foundation today pays dividends in client retention, staff sustainability, and practice growth for years to come.
- AI in Mental Health Has a Slop Problem — 8 Red Flags

- 7 Critical Prior Authorization Behavioral Health Failures Draining Your Practice

- HIPAA Compliant AI for Therapists: 9 Critical Truths

Sources & Research References
- U.S. Department of Health & Human Services. (2023). HIPAA Rules for Telehealth Technology. telehealth.hhs.gov
- Medcurity. (2026). Telehealth HIPAA Compliance: Complete Guide for Providers. medcurity.com
- HIPAA Journal. (2026). HIPAA Guidelines on Telemedicine. hipaajournal.com
- American Psychiatric Association / Psychiatric News. (2023). HIPAA Rules for Telehealth Once Again in Effect. psychiatryonline.org
- Grow Therapy. (2025). 8 Mental Health Trends Driving Change in U.S. Care in 2026. growtherapy.com
- Crown Counseling. (2024). 30+ Teletherapy Statistics. crowncounseling.com
- Agents of Change Prep. (2025). Telehealth in 2025 and Beyond. agentsofchangeprep.com
- TheraPlatform. (2025). Telehealth Laws for Therapists. theraplatform.com
- SimplePractice. (2024). The Complete Guide to Private Practice Telehealth. simplepractice.com
- CIVHC. (2025). New Telehealth Analysis Shows Sustained Demand for Mental and Behavioral Health Services. civhc.org
