Compliance· 7 min read

Informed Consent for Telehealth: What Every Online Therapist Must Include

A generic consent form doesn't cover telehealth. Here's what your informed consent document must address for online practice — including technology, jurisdiction, privacy, and emergencies.

Informed consent for telehealth must go beyond what a standard in-person consent form covers. At minimum it needs to address: the technology you use and its limitations, what happens in a technical failure, your geographic licensing limits, how client data is handled, emergency procedures when you're in a different location, and — if applicable — AI note-taking. Each of these is a genuine risk that clients have a right to understand.

Why telehealth consent is different

In-person therapy has well-established consent norms. Telehealth adds several unique dimensions:

  • The session happens over technology that can fail
  • Client and therapist may be in different countries or time zones
  • Data is transmitted and stored digitally
  • Emergency response depends on knowing where the client physically is
  • AI tools may be involved in documentation

A consent form that doesn't address these isn't just incomplete — it leaves you professionally exposed.

What to include

Technology and its limitations

  • What platform you use and why it's secure (HIPAA/GDPR compliant)
  • That sessions may be disrupted by technology failure
  • Your backup plan (phone call, reschedule)
  • What the client should do if the connection drops

Geographic and licensing limits

  • The states/countries where you're licensed to practice
  • That clients must inform you of any travel or relocation
  • That sessions may need to pause if a client travels outside your licensed area

Data and privacy

  • How session records are stored and for how long
  • Whether sessions are recorded or transcribed (and consent for AI tools if used)
  • Who has access to client data
  • Client rights to access, correct, or delete their data (especially under GDPR)

Emergency procedures

  • How you handle a crisis when you're not physically near the client
  • That you need to know the client's current location at each session
  • Local emergency contacts and resources at the client's location

Specific AI/recording consent

  • Name of any AI note-taking tool used
  • What data it processes and how it's stored
  • Right to refuse without affecting care

Template language you can adapt

"Our sessions take place via [platform], which is [HIPAA/GDPR]-compliant. Sessions may be disrupted by technology failure — if our connection drops, I will [phone you / email within X minutes]. I am licensed to practice in [jurisdictions], and sessions must occur with you physically located within these areas. Please inform me before any travel or relocation. If you have a crisis between sessions, please contact [local emergency service]."

Keep it readable

Informed consent is only informed if the client actually understands it. Aim for plain language, a conversational review at intake (not just a form to sign), and an invitation to ask questions. Clients who genuinely understand the limits of telehealth have fewer surprises and more trust.

See also: How to Get Client Consent for AI Note-Taking in Therapy.

Frequently Asked Questions

What must telehealth informed consent cover?

At minimum: the technology used and its limitations, what happens in a failure, your geographic licensing limits, how data is handled, emergency procedures, and — if applicable — AI note-taking consent. A standard in-person consent form doesn't cover these adequately.

Cut your documentation to 2 minutes per session.

Eclio generates SOAP, DAP, and BIRP notes automatically. Free during beta, works from anywhere.

Get early access — free