Federal Telehealth Legislation and Policy History

Federal telehealth law has been built in layers — each statute responding to a specific gap, crisis, or constituency that the previous one left unaddressed. This page traces the major legislative and regulatory milestones that shaped what telehealth providers can do, who pays for it, and where patients can receive it. The arc runs from a modest 1997 Medicare pilot program to the emergency expansions of 2020 and the permanent coverage debates still unfolding in Congress.

Definition and scope

Federal telehealth legislation refers to the body of statutes, appropriations riders, and regulatory rules issued by Congress and federal agencies — primarily the Centers for Medicare & Medicaid Services (CMS) and the Drug Enforcement Administration (DEA) — that govern how remote clinical services are authorized, reimbursed, and supervised across the United States.

The scope is narrower than it might appear. Federal law primarily governs Medicare and Medicaid reimbursement, DEA-controlled substance prescribing, and the HIPAA privacy and security standards that apply to telehealth encounters. It does not preempt state licensure requirements, which means a federal telehealth authorization and a state practice law can say very different things about the same clinical encounter. The interplay between those two systems is one of the persistent structural tensions in telehealth policy and regulation.

How it works

The legislative history follows a recognizable pattern: Congress sets a statutory floor, delegates rulemaking authority to CMS or another agency, and then tightens or loosens that floor in response to implementation evidence, budget pressure, or emergency conditions. A few landmark enactments define the modern framework.

1997 — The Balanced Budget Act. Section 4206 introduced the first Medicare telehealth reimbursement provision, but it was tightly constrained: only patients in Health Professional Shortage Areas (HPSAs) qualified, and only a narrow set of services were covered. The intent was rural access, not broad delivery reform.

2001 — BIPA (Benefits Improvement and Protection Act). Congress expanded the geographic originating-site requirements slightly and added federally qualified health centers and rural health clinics as eligible originating sites — a structural detail that still shapes Medicare telehealth coverage calculations today.

2018 — The SUPPORT for Patients and Communities Act. Passed in response to the opioid crisis, this law added a narrow but significant Medicare carve-out: substance use disorder treatment via telehealth no longer required patients to be in a rural HPSA. It was the first time Congress explicitly acknowledged that mental health and behavioral health deserved different geographic rules than other specialties. Mental health telehealth policy has been reshaping itself around that premise ever since.

2020 — Section 1135 Waivers under the COVID-19 Public Health Emergency (PHE). The most disruptive single moment in telehealth legislative history was not a bill — it was an emergency authority. Under Section 1135 of the Social Security Act, the Secretary of Health and Human Services waived 80-plus Medicare restrictions, allowing audio-only visits, eliminating geographic originating-site limits, and permitting telehealth from patients' homes. The DEA simultaneously exercised its own emergency authority under the Controlled Substances Act to allow prescribing of Schedule III–V substances via telemedicine without an in-person prior visit. Both changes are examined in detail on the telehealth post-pandemic policy changes page.

Common scenarios

Three legislative patterns recur across the history and explain most of the coverage complexity practitioners encounter:

1. Geographic originating-site restrictions. From 1997 through 2019, Medicare required that the patient be physically located in a rural county or HPSA at the time of the telehealth encounter. Urban patients, regardless of clinical need, were categorically excluded. This rule shaped — and distorted — where telehealth infrastructure was built.

2. Waivers as de facto permanent policy. The PHE waivers were extended 12 times between 2020 and 2023. Congress ultimately codified many of them through 2024 and then through 2026 under the Consolidated Appropriations Acts, a pattern that illustrates how emergency waivers tend to create political constituencies that make restoration of prior restrictions difficult.

3. Behavioral health carve-outs. Beginning with SUPPORT in 2018 and accelerating with the Consolidated Appropriations Act of 2023, behavioral health services received distinct statutory treatment — including the elimination of geographic and originating-site requirements for mental health encounters under Medicare, effective January 1, 2024 (CMS Final Rule CY 2024). No comparable carve-out exists for most other specialty areas.

Decision boundaries

Understanding what federal law does — and does not — determine helps clarify where gaps persist.

Federal legislation sets the reimbursement eligibility floor for Medicare and Medicaid. It does not determine whether a clinician is licensed to practice across state lines — that remains a state function, addressed through mechanisms like the Interstate Medical Licensure Compact, which as of 2024 included 39 member states (IMLC). The distinction matters because a Medicare-covered telehealth visit between a Florida patient and a Texas physician requires federal reimbursement authorization and Texas licensure — two separate legal questions governed by entirely different bodies of law.

Federal law also does not govern telehealth prescribing rules for non-controlled substances, which fall to state pharmacy boards. For controlled substances, federal DEA authority and state pharmacy law operate concurrently — both must permit the prescription for it to be lawful.

The DEA's proposed Special Registration framework, floated in 2023 as a potential permanent replacement for the PHE telemedicine prescribing flexibilities, would — if finalized — create a new category of registrant authorization specifically for telehealth prescribers. As of the 2024 regulatory calendar, that framework had not been finalized, leaving the prescribing landscape in a holding pattern that telehealth history and evolution will eventually have to account for as a distinct policy era.

One contrast worth holding: the 1997 originating-site rules were designed to limit federal expenditure by restricting access. The 2020 waivers were designed to expand access by suspending those same restrictions. Both produced exactly the outcomes their architects anticipated — which may be the most clarifying fact in the entire legislative record.