Federal telemedicine flexibilities waive the in-person evaluation requirement for prescribing controlled substances by telehealth through December 31, 2026, and Medicare's relaxed originating site rule lets a patient join a visit from anywhere in the United States through December 31, 2027. Neither rule changes where the clinician must be licensed to see that patient. A patient who logs on from a state other than the one listed in the chart can put a visit outside the clinician's prescribing authority, outside the payer's billing rules, and outside the practice's emergency plan, often without anyone noticing until an audit or a crisis makes it visible.
Why Patient Location Drives the Legal Analysis
A telehealth encounter is treated, for licensure purposes, as taking place where the patient is physically located, not where the clinician sits. That location determines whether the clinician holds the authority to treat that patient in that state, whether a controlled-substance prescription is consistent with federal and state law, which place of service code and originating-site rule apply to the claim. It also determines what the practice's emergency response plan should trigger if the visit turns into a crisis. DEA's in-person evaluation waiver layers on top of state licensure and prescribing authority rules, which it leaves in place. The extension itself conditions the flexibility on continued compliance with other federal and state law.
What Platform Data Can and Cannot Confirm
A device's reported location, an IP address, or an area code are signals, not verified facts. Patients travel with phones that retain a home address in an app profile, use a shared family account, or connect through a VPN or a hotel network that resolves to a different state entirely. No single verification method is established as legally sufficient in every jurisdiction. The more reliable practice is to ask the patient directly where they are at the start of each encounter and to record the answer in the chart, treating any technical signal as a cross-check rather than a substitute.
The clinician's prescribing authority, the payer's billing rules, and the practice's emergency plan all turn on the same fact: where the patient was physically located at the moment of the visit.
A Location Change Discovered Mid-Visit
Sometimes the mismatch surfaces mid-visit: a patient mentions they are visiting family out of state, or a location prompt contradicts the intake form. When that happens, the clinician should pause before issuing or continuing a controlled-substance prescription until the clinician's authority to treat a patient physically located in that state is confirmed, and should document what was learned, when it was learned, and what the clinician did in response. An emergency plan keyed to the practice's home state can point a crisis to the wrong responders if the patient is actually elsewhere. Local emergency resources are reached based on where the patient is, not where the clinician is.
Documenting Location for Payers and Boards
A chart that shows only the practice's address, with no record of where the patient actually was, gives a reviewer nothing to check the claim against. A payer's post-payment review, or a UPIC program integrity audit of telehealth billing, can treat a mismatch between the documented location and the billed place of service or originating site as grounds for a recoupment demand. A pattern of inconsistent or absent location documentation can also draw broader scrutiny under the False Claims Act if it affected what was billed. The coding side of this problem, which place of service code applies, is covered in Telehealth Place of Service Coding Errors.
Why Early Legal Counsel Is Critical
It is critical that telehealth providers promptly retain experienced healthcare defense counsel upon receiving an audit notice, a board inquiry, or any other government request tied to telehealth location documentation. Early legal intervention can protect the provider's rights, confirm which state's licensure and prescribing rules actually applied to a given encounter, avoid an inadvertent admission, and allow counsel to communicate with investigators or auditors on the provider's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to unnecessary risk.
How Health Law Alliance Can Help
Health Law Alliance has represented 2,500+ clients nationwide. The firm represents telehealth providers and practices facing a payer audit, a board inquiry, or a federal investigation connected to where a patient was located during a visit. If your practice needs help building a defensible location-verification and documentation process, or is already facing an inquiry, contact Health Law Alliance's telehealth defense attorneys for a free, confidential consultation.
