Telehealth's Growing Compliance Footprint
The rapid expansion of telehealth services has introduced new compliance considerations that intersect directly with health information management. RHIA candidates should understand both the documentation standards and the privacy and security implications unique to virtual care delivery.
Documentation Requirements for Telehealth Encounters
- Clear documentation of the modality used, such as audio-video or audio-only, since coverage and billing rules can differ by modality
- Documentation of patient location and provider location at the time of service, which affects licensure and billing compliance
- Verification and documentation of patient identity and consent to telehealth services
- Clinical documentation that meets the same standard of medical necessity and specificity required for in-person visits
Licensure and Cross-State Practice
Providers must generally be licensed in the state where the patient is located at the time of the telehealth encounter, not only where the provider is based. Compliance programs must monitor evolving state licensure compacts and emergency waivers, and HIM documentation should capture the information needed to verify compliance with these rules.
Privacy and Security Considerations
Telehealth platforms must meet HIPAA Security Rule requirements, including encrypted transmission and appropriate access controls. During public health emergencies, temporary enforcement discretion has sometimes permitted use of certain non-public-facing communication platforms, but compliance programs must track when such flexibilities expire and revert to strict platform requirements.
Billing and Coding Compliance Risks
- Incorrect place of service or modifier codes for telehealth claims
- Billing for services that do not meet payer-specific telehealth coverage criteria
- Insufficient documentation to support the level of service billed
- Duplicate billing when a telehealth visit is followed by an in-person visit for the same complaint
Informed Consent for Telehealth
Many states require specific informed consent for telehealth services, separate from general treatment consent, and this consent should be documented in the record. HIM professionals should ensure organizational policy addresses how and where this consent documentation is captured and retained.
Exam Strategy
Expect scenario questions testing whether a described telehealth documentation practice meets compliance standards, particularly around licensure verification, modality-specific billing rules, and platform security requirements.
Key Takeaway
Telehealth compliance blends traditional HIM documentation principles with new considerations around licensure, platform security, and modality-specific billing, making it an increasingly important exam topic.