Do all states require written telehealth consent?

No. Requirements vary. Some states mandate written consent, some accept verbal consent that you document in the record, and some require nothing beyond the ordinary informed consent any visit needs. Because telehealth follows the patient's location, the state that matters is where your patient sits during the visit. Look up that state's board rule and telehealth statute rather than assuming a national standard.

Is verbal consent enough?

Where a state accepts verbal consent, a clear contemporaneous note that you obtained consent, what the patient agreed to, and the modality used generally satisfies the requirement. A signed written form is stronger evidence and is required in some states, so a signed form at intake is a defensible default even where verbal consent would technically pass. The goal is provable agreement.

How do I handle consent for a minor over telehealth?

Consent must come from the person with legal authority for that minor, and state law decides who that is. HIPAA treats a valid personal representative as the patient. Over telehealth you also verify that you are speaking with that person and confirm their identity and location. Where a minor may consent to certain care alone, that state's minor-consent law controls who signs and who sees the record.

Does Medicare require a separate telehealth consent?

Medicare requires patient consent for certain communication-technology-based services, and it can be obtained once and documented rather than at every visit. That is separate from your state's telehealth consent rule and from ordinary informed consent. Record the consent in the chart and note the date. For services you bill to Medicaid, check the individual state program, because those consent rules differ.

Where do I find my state's telehealth consent rule?

Start with your licensing board's telehealth regulation, then the state's telehealth statute, then the Medicaid manual if you bill Medicaid. These three sources usually settle whether written consent is required and what must be documented. When they conflict or are silent, documenting written consent at intake is the conservative choice and reduces your malpractice liability if a dispute later arises.

Telehealth consent: which states require it documented

Is there a federal telehealth consent rule?

There is no single federal law that sets a telehealth consent requirement, so the consent rule that binds you is the one in the state where your patient sits, and it varies from state to state 1Ref 1U.S. Department of Health and Human Services (2026).Licensure — Telehealth policy.That telehealth is governed by the state where the patient is located, so the patient's state law sets the applicable consent rule.. Federal telehealth guidance treats documented informed consent as a best practice and recommends capturing it before the first visit, whether or not your patient's state makes it mandatory 2Ref 2U.S. Department of Health and Human Services (2026).Telehealth for providers.Federal provider-facing telehealth guidance recommending documented informed consent and best-practice operations..

That means the question is never answered once for your practice. If you see clients located in several states, you can be operating under several different consent rules at the same time. The obligation attaches to the patient's location, so a client who moves or travels can change what your record has to show.

Which states require documented consent, and how to find yours

States take three broad approaches, and you cannot assume one of them is the national rule. Some require the patient's written consent to telehealth; some accept verbal consent as long as you document that you obtained it; some specify nothing beyond the ordinary informed consent any visit needs. The safest move is to look up your patient's state directly rather than generalize from your home state 1Ref 1U.S. Department of Health and Human Services (2026).Licensure — Telehealth policy.That telehealth is governed by the state where the patient is located, so the patient's state law sets the applicable consent rule..

Three sources usually settle it:

Your licensing board's telehealth regulation for the state where the patient is located — the same body of state licensure rules that governs whether you can see the patient at all.
The state's telehealth statute, which sometimes sets a consent requirement the board rule does not repeat.
The Medicaid provider manual for that state, if you bill Medicaid, because the program can add its own consent form.

When those sources conflict or go silent, documenting written consent at intake is the conservative default.

Verbal versus written consent: what satisfies the requirement

When a state does require telehealth consent, what satisfies it is usually straightforward: a record that you obtained consent, what the patient agreed to, the modality used, and that the patient understood the limits of remote care. A signed written form is the cleanest evidence, but a clear contemporaneous note of documented verbal consent generally meets a verbal-consent standard 2Ref 2U.S. Department of Health and Human Services (2026).Telehealth for providers.Federal provider-facing telehealth guidance recommending documented informed consent and best-practice operations.. The point is provable agreement, not one specific piece of paper.

A workable telehealth consent covers the modalities you may use, the privacy and technology risks, what happens if the connection fails, how the patient reaches you between visits, and how emergencies are handled given that you are not in the room. Capturing those elements once, in writing, tends to satisfy the strictest state on your panel and simplifies the rest.

Medicare and Medicaid have their own consent expectations

Payers add consent expectations on top of state law. Medicare requires the patient's consent for certain communication-technology-based services, and that consent may be obtained once and documented rather than repeated at every encounter 3Ref 3Centers for Medicare & Medicaid Services (2025).Telehealth Services.Medicare telehealth rules, including patient consent for certain communication-technology-based services and its documentation.. Medicaid consent rules are set program by program and differ across states, so a service covered without extra consent in one state's Medicaid can require a signed form in another. Read the manual for the program you bill.

Keep the payer consent separate in your mind from the clinical informed consent and from the state telehealth consent. They can all be satisfied by one well-built intake packet, but they answer to different authorities, and an audit will look for the specific one it cares about. Note the date consent was obtained so an annual requirement is easy to evidence.

Consent for minors and clients who cannot consent for themselves

When the patient is a minor or an adult who cannot consent for themselves, the consent has to come from the person with legal authority, and HIPAA defers to state law on who that is — treating a valid personal representative as the individual 4Ref 4HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law on who may consent for a minor or incapacitated adult and treats a valid personal representative as the individual.. Telehealth adds a verification step: you confirm not only that the person consenting has authority, but that you are actually speaking with them and where they are located.

State minor-consent law complicates this further. In some states a minor may consent alone to certain behavioral-health or substance-use care, which changes both who signs and who may see the record. Document who provided consent, their relationship to the patient, and how you verified their authority, because that is the part a later dispute turns on.

What to record every telehealth visit

Whatever your patient's state requires, the same short list belongs in every telehealth note: that consent was obtained and how, the patient's physical location, your location, the modality, how you verified the patient's identity, and who else was present. Add the technology-based-service consent when you bill Medicare for those services 5Ref 5U.S. Department of Health and Human Services (2026).Telehealth policy.The current federal telehealth policy frame and which flexibilities are permanent, dated to July 2026 for volatility.. This is the documentation that makes the note defensible and that answers a payer or board question months later.

Built into a template, these fields cost seconds per visit and close the most common gaps a reviewer finds. What makes a clinical note defensible on a telehealth claim is rarely the therapy content — it is proof that consent, location, and identity were handled the way the patient's state requires. Federal telehealth policy on which flexibilities are permanent shifts over time, so treat any specific rule here as current to July 2026 and reconfirm at renewal.