What Belongs in a Telehealth Consent Form, Clause by Clause

For Medicare, certain care management, virtual communication, and remote patient monitoring services require additional consent. Those requirements make consent an important part of the broader patient intake forms process, especially for digital-first practices where patients may complete registration and medical questionnaires before speaking with a clinician.

The Clauses Every Telehealth Consent Form Should Address

A useful consent form explains the nature of remote care, its limitations, the patient's choices, and the healthcare organization's responsibilities. The following eight clauses provide a practical starting point for structuring the document, although the final wording should be reviewed against applicable state and payer requirements.

Who Provides Your Care

What it says: The form identifies the medical practice responsible for providing care and explains that appropriately licensed healthcare professionals deliver services. If patients access care through a branded telehealth service, it should also distinguish the patient-facing brand from the licensed medical group when they are separate legal entities.

Why it is there: Patients should know which organization is responsible for clinical services and who will make medical decisions. This distinction matters most when a telehealth brand works with independent medical groups rather than directly employing clinicians.

How Visits Work

What it says: The form describes the types of telehealth encounters the practice offers, including video appointments, telephone consultations, and asynchronous care using questionnaires or secure messages. It should explain how patients and clinicians exchange information and whether an encounter involves real-time communication or review at different times.

Why it is there: Patients need to understand what kind of interaction they are agreeing to. Completing an asynchronous questionnaire differs from speaking directly with a clinician over video, so the consent language should reflect those differences rather than describing every service as a virtual appointment.

Benefits, Limits, and Risks

What it says: This clause explains how telehealth may improve access to care while acknowledging its limitations. Some conditions require a physical exam, diagnostic testing, or an in-person evaluation, and technical problems may interrupt communication or prevent completion of an encounter.

Why it is there: Informed consent requires a realistic explanation of what remote care can and cannot provide. Patients should understand that a clinician may determine telehealth is inappropriate for their situation and recommend an in-person visit, emergency evaluation, or another service instead.

Privacy and Security

What it says: The form explains how patient information is collected and communicated during telehealth services, including the use of digital questionnaires, video technology, and patient messaging. It should direct patients to the practice's Notice of Privacy Practices and explain any privacy considerations related to remote communication.

Why it is there: Telehealth relies on electronic information exchange, which makes it important for patients to understand how their information is handled. The consent form should be consistent with the organization's actual privacy practices and distinguish between general personal information and protected health information governed by HIPAA.

A Notice of Privacy Practices serves a separate regulatory purpose and should not simply be replaced with a paragraph inside the telehealth consent form.

Where You Are During a Visit

What it says: Patients are asked to confirm their physical location at the time of care, which may include their state and an address or other location information when appropriate. The form should explain why the practice needs accurate location details before providing remote services.

Why it is there: Provider licensure generally depends on where the patient is located when care is delivered. As a result, a clinician who can treat a patient in one state may not automatically be authorized to provide the same service when that patient travels elsewhere.

This makes patient location especially important for businesses offering telehealth across state lines. Location information can also help a clinician coordinate an appropriate response if an urgent situation develops during an encounter.

Emergencies

What it says: The form explains that the telehealth service is not intended for emergencies and tells patients to call 911 or seek immediate emergency care when necessary. It should also provide appropriate contact information for reaching the practice about routine questions or problems.

Why it is there: Patients need to know the difference between ordinary telehealth support and emergency medical services. Clear instructions can reduce confusion when someone needs immediate assistance rather than waiting for a message response or scheduled consultation.

Prescriptions, Pharmacies, and Fees

What it says: This clause explains that receiving a consultation does not guarantee a prescription. The clinician makes prescribing decisions, and patients should receive information about pharmacy options, service costs, payment responsibilities, and any applicable refund or cancellation policies.

Why it is there: Patients should understand what they are paying for and what outcomes are not guaranteed. Telehealth services may charge for an evaluation even when medication is not prescribed, so payment terms should distinguish between access to a clinical service and a particular treatment result.

For self-pay patients, separate obligations may require a good faith estimate of expected charges. Handle such notices according to applicable requirements rather than assuming the telehealth consent form alone satisfies them.

Choice, Withdrawal, and Observers

What it says: The form explains that agreeing to telehealth is voluntary and describes available alternatives, including in-person care when appropriate. It should tell patients how they can withdraw consent and explain that any additional person observing a visit will be disclosed to the patient, with consent obtained as required.

Why it is there: Patients should have a meaningful choice about participating in remote care rather than feeling that telehealth is their only option. HHS guidance on informed consent specifically recommends informing patients that someone will observe the visit and obtaining consent at the start of the encounter.

Withdrawal does not necessarily reverse care already provided or eliminate payment obligations for completed services. The form should therefore explain how withdrawal affects future participation without promising that earlier clinical or financial responsibilities disappear.

Where Consent Sits in an Async Intake

Asynchronous telehealth changes the consent workflow because patients may submit medical information before interacting directly with a clinician.

HHS notes that informed consent is typically obtained before the first appointment. For a digital-first service, a practical approach is to place the consent process before the patient's medical questionnaire reaches a clinician for review, allowing the patient to understand the nature of the service before entering the clinical workflow.

A typical asynchronous intake might therefore include:

• Account creation and basic registration
• Presentation of the applicable consent information
• Patient acceptance or another permitted consent mechanism
• Medical questionnaires and service-specific questions
• Submission for appropriate clinical review

Order matters because consent should connect to the service the patient is about to receive. If a patient is entering a prescribing workflow, for example, the consent information should not describe only a scheduled video appointment.

Recording and Updating Consent

Consent also needs to be documented. HHS recommends confirming at patient check-in that the organization has received or recorded required consent and compliance documentation, including verbal consent.

For a video encounter where verbal consent is permitted, the clinician or appropriate team member should document the consent in the patient record according to applicable requirements.

For an asynchronous workflow, the organization should retain sufficient evidence of what occurred, including:

• The date consent was obtained
• The version of the consent information presented
• The patient's response
• The service or workflow to which the consent applied

These are practical recordkeeping recommendations, not a universal federal specification for consent software.

Re-consent should also be considered when the organization materially changes its consent language, introduces a new service, or encounters a state or payer requirement that calls for renewed consent.

Connecting consent with digital patient intake also helps teams consider the entire patient journey rather than treating the form as an isolated document.

How State Rules Change the Text

Even a carefully structured consent form may need additional language depending on where patients receive care.

HHS emphasizes that telehealth informed consent requirements vary by state, so a standardized document should be a starting point, not a substitute for jurisdiction-specific review.

California provides a useful example through its Medi-Cal telehealth requirements. The California Department of Health Care Services offers model telehealth patient consent language informed by Senate Bill 184.

The model addresses several issues that providers may need to explain:

• The patient's right to receive in-person services
• The voluntary nature of telehealth consent
• The availability of transportation to in-person services when other available resources have been reasonably exhausted
• The limitations and potential risks of receiving services through telehealth

Importantly, DHCS states that providers are not required to use its exact model language. Instead, it provides the language as a resource for organizations developing their own consent materials.

This illustrates how a general set of consent clauses can remain consistent while state-specific information changes. An organization operating across multiple states may need variations in the wording, presentation, or documentation method depending on applicable law and payer requirements.

When setting up a telehealth practice, review consent requirements alongside licensing, privacy, clinical workflows, and payment obligations rather than adding them as an afterthought.

FAQs

Do You Need Consent for Telehealth?

Telehealth consent requirements vary by state and service, so no single national answer covers every encounter. In practice, organizations should determine which consent requirements apply and document consent appropriately. Medicare also requires patient consent for specified care management, virtual communication, and remote patient monitoring services, as explained in the CMS Telehealth & Remote Patient Monitoring booklet.

Can Telehealth Consent Be Verbal?

Yes, when applicable law and program requirements allow it. HHS guidance recognizes documented verbal consent during telehealth check-in, but state rules may impose additional requirements concerning the form or method of consent.

When using verbal consent, the organization should document the relevant information in the patient record rather than relying on an undocumented conversation.

How Often Should Patients Re-Consent?

No universal federal interval requires every telehealth patient to sign a new consent form on the same schedule.

Organizations should consider obtaining new consent when the applicable terms materially change, when patients begin a substantially different service, or when a particular law or payer rule requires it. The appropriate frequency should reflect the services provided and the jurisdictions involved.

Is a Telehealth Consent Form the Same as a HIPAA Authorization?

No. A telehealth consent form addresses the patient's agreement to receive care through remote technology and the information necessary to make that decision.

A HIPAA authorization is a separate legal mechanism used for certain uses or disclosures of protected health information that HIPAA does not otherwise permit. The Notice of Privacy Practices is a separate document that explains privacy rights and the organization's information practices.

References

1. U.S. Department of Health and Human Services. (2023). Obtaining informed consent. https://telehealth.hhs.gov/providers/preparing-patients-for-telehealth/obtaining-informed-consent
2. Centers for Medicare & Medicaid Services. (2025). Telehealth & remote patient monitoring (MLN901705). https://www.hhs.gov/guidance/sites/default/files/hhs-guidance-documents/CMS/mln901705_telehealth_services.pdf
3. California Department of Health Care Services. (2025). Patient consent for telehealth services. https://www.dhcs.ca.gov/providers-partners/patient-consent-for-telehealth-services/