Telehealth Licensure Across State Lines: A Founder's Guide to Interstate Compliance

The Core Problem: Physicians Must Be Licensed Where the Patient Sits

If you are building a telehealth platform, here is the wall you will hit: under state medical practice acts, a physician must hold a valid medical license in the state where the patient is located at the time of the visit—not just the state where your company is incorporated or where the physician happens to be sitting. This is not a federal rule; it is a state-by-state requirement, and it means a platform operating nationwide needs physicians licensed in all 50 states (plus D.C. and territories) to serve patients everywhere. This single requirement drives the architecture of nearly every telehealth company. It determines how many physicians you need to recruit, which states you launch in first, whether your platform can prescribe controlled substances, and whether payors will reimburse for virtual visits. The COVID-19 public health emergency temporarily waived many of these restrictions, but those waivers have expired or are expiring, and states are reverting to pre-pandemic licensure rules. The result is a regulatory patchwork that every health tech founder must navigate before writing a single line of clinical protocol. We work with health tech founders on these issues regularly. This guide covers the four legal frameworks that determine where your telehealth platform can operate: the Interstate Medical Licensure Compact, the corporate practice of medicine doctrine, controlled substance prescribing rules under the Ryan Haight Act, and state telehealth parity laws. If you are also building AI-powered diagnostic or clinical decision support features, you should also read our guide on when your health app becomes an FDA-regulated medical device.

The Interstate Medical Licensure Compact (IMLC): What It Does and Doesn't Do

The Interstate Medical Licensure Compact (IMLC) is the most important development in multi-state physician licensing in decades. It is a legal agreement among participating states that creates an accelerated pathway for physicians to obtain licenses in multiple states without starting from scratch in each one. As of August 2025, 36 states plus D.C. and Guam serve as State of Principal License (SPL) members that are processing applications and issuing licenses through the compact. The IMLC estimates that approximately 80% of U.S. physicians qualify for licensure through this pathway.

How the IMLC Works

A physician who already holds a full, unrestricted medical license in an IMLC member state can designate that state as their "State of Principal License" (SPL). To qualify, the physician must meet at least one of these criteria: their primary residence is in the SPL, at least 25% of their practice occurs there, they are employed to practice medicine by an entity in the SPL, or the SPL is their state of residence for federal income tax purposes. The physician must also hold board certification, have no disciplinary history, have no criminal history, and have passed their licensing exams in three or fewer attempts. Once the SPL verifies eligibility, it issues a Letter of Qualification (LOQ). The physician can then use that LOQ to apply for licenses in any other IMLC member state. Each additional state still issues its own license—the IMLC does not create a single national license—but the process is significantly faster and more streamlined than applying independently. The administration fee is $700, and there is typically a $100 processing fee per additional state.

What the IMLC Does Not Do

The IMLC is not a compact license. There is no equivalent of a "driver's license that works in all states." Each state still issues its own license, sets its own renewal requirements, and imposes its own scope-of-practice rules. A physician licensed through the IMLC in Texas and New York must still renew each license separately, meet state-specific CME requirements, and comply with each state's telehealth practice standards. The IMLC also does not cover nurse practitioners, physician assistants, or other non-physician providers—only MDs and DOs. For telehealth platforms, the practical takeaway is this: the IMLC makes it faster and cheaper to get physicians licensed in multiple states, but it does not eliminate the fundamental requirement that every physician must hold a license in every state where they treat patients.

The Corporate Practice of Medicine Doctrine: Why Your LLC Cannot Employ a Physician

The second wall telehealth founders hit is the corporate practice of medicine (CPOM) doctrine. In over 30 states, non-physician entities—corporations, LLCs, and other business structures—are prohibited from practicing medicine or employing physicians to provide clinical care. The doctrine exists to protect the physician-patient relationship from commercial influence, ensuring that medical decisions are driven by clinical judgment rather than corporate profit motives. Texas has one of the strongest CPOM doctrines in the country. The Texas Medical Association's whitepaper traces the doctrine back to the state's Medical Practice Act, which prohibits a physician from allowing another person or entity to use the physician's license to practice medicine. Texas courts have held that when a corporation employs a physician, controls administrative staff, and takes a disproportionate share of fees, the arrangement violates the CPOM doctrine—even if the physician claims to be an "independent contractor." The key test is not the label on the contract but whether the corporation controls medical decisions.

The MSO-PC Model: How Telehealth Companies Comply

To comply with CPOM laws, most telehealth platforms use a Management Services Organization (MSO) and Professional Corporation (PC) structure. The MSO—a non-medical entity owned by the startup's founders or investors—provides technology, marketing, billing, and administrative services. The PC—a separate entity owned by licensed physicians—employs the physicians and provides clinical care. The MSO contracts with the PC to provide management services in exchange for a fee. This structure keeps clinical decision-making inside the physician-owned PC while allowing the startup to own the technology platform and infrastructure. This is not a workaround or a loophole; it is a well-established compliance structure used by major telehealth companies. But the structure must be implemented correctly. The PC must retain control over clinical decisions, physician hiring, treatment protocols, and patient care standards. The MSO must not interfere with medical judgment. Any fee arrangement between the MSO and PC must be commercially reasonable and not structured as a disguised revenue share that effectively gives the non-physician entity control over clinical operations. For founders, the practical implication is significant: in CPOM states, your telehealth startup cannot simply hire physicians as W-2 employees. You need a compliant MSO-PC structure, and that structure must be replicated in every state where you operate—because CPOM requirements vary by state.

Controlled Substance Prescribing: The Ryan Haight Act and DEA's 2025 Rulemaking

If your telehealth platform prescribes controlled substances—whether ADHD medications, anxiety medications, opioid use disorder treatments, or pain management drugs—you face an additional layer of federal regulation under the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. The Ryan Haight Act amended the Controlled Substances Act to require an in-person medical evaluation before a clinician can prescribe controlled substances via telemedicine. Congress expected the DEA to issue a "special registration" rule that would create an exception for telemedicine prescribing, but the DEA has still not finalized that rule—17 years after the statute was enacted. During the COVID-19 public health emergency, the DEA issued waivers allowing clinicians to prescribe controlled substances via telemedicine without a prior in-person evaluation and with a DEA registration in just one state. These waivers have been extended multiple times, most recently through December 31, 2025.

DEA's Proposed Special Registration Framework

In January 2025, the DEA released its long-anticipated proposed rule on special registrations for telemedicine prescribing. The rule would establish three categories of registration:

• Telemedicine Prescribing Registration: Authorizes qualified practitioners to prescribe Schedule III–V controlled substances via telemedicine without prior in-person evaluation.
• Advanced Telemedicine Prescribing Registration: Authorizes specialized practitioners (psychiatrists, hospice/palliative care physicians, pediatricians, neurologists) to prescribe Schedule II–V controlled substances via telemedicine.
• Telemedicine Platform Registration: Authorizes qualifying telehealth platforms—defined as entities that facilitate patient-clinician connections via audio-video communications—to dispense controlled substances under specific conditions.

The proposed rule also requires registrants to obtain a separate State Telemedicine Registration from the DEA for each state where patients are located, maintain PDMP checks (eventually covering all 50 states), use both audio and video for encounters, and comply with geographic limitations. Comments on the proposed rule were due March 18, 2025, but final regulations have not yet been issued. The DEA has stated it plans to finalize rules with enough lead time for practitioners to comply before the current flexibilities expire.

What This Means for Telehealth Platforms

Until the DEA finalizes its special registration rule, telehealth platforms prescribing controlled substances are operating under temporary flexibilities that expire December 31, 2025. If your platform prescribes Schedule II–V controlled substances without an in-person evaluation, you should be preparing for a transition to the new special registration framework. That includes ensuring your platform meets the proposed definition of a "covered online telemedicine platform," building systems for PDMP checks across multiple states, and planning for the additional state-by-state registration requirements the DEA has proposed. For a broader look at how your telehealth app might intersect with FDA regulation, see our guide on FDA SaMD regulation for AI health tech.

State Telehealth Parity Laws: Will Payors Reimburse?

Licensure and prescribing rules determine whether your platform can operate in a state. Telehealth parity laws determine whether you will get paid. As of 2025, the majority of states have enacted some form of telehealth parity law requiring commercial insurers and Medicaid programs to reimburse telehealth visits at the same rate as in-person visits. The Center for Connected Health Policy (CCHP), the federally designated National Telehealth Policy Resource Center, maintains a searchable database of state telehealth laws and reimbursement policies that covers all 50 states and D.C. However, parity laws are not uniform. Some states require parity only for live video telehealth, while others include store-and-forward and remote patient monitoring. Some states mandate payment parity (same reimbursement rate as in-person), while others require only coverage parity (the service must be covered, but the rate can differ). Medicaid telehealth coverage varies even more widely, with some states requiring prior authorization for telehealth visits and others restricting the types of services that can be delivered virtually. For telehealth platforms, the reimbursement landscape matters as much as the licensure landscape. A state where you can legally operate but cannot obtain reimbursement may not be worth the investment in licensing and physician recruitment.

The Post-COVID Cliff: What Changed When the Waivers Expired

The COVID-19 public health emergency created the most permissive telehealth regulatory environment in U.S. history. Many of those flexibilities have already expired or are scheduled to expire in 2025–2026, creating what policy analysts call a "telehealth policy cliff." Key changes include:

• Medicare geographic and originating site restrictions: Without Congressional action, Medicare telehealth coverage reverted to pre-pandemic rules on October 1, 2025, meaning beneficiaries in most of the country can only receive reimbursed telehealth services from designated rural originating sites.
• FQHC and RHC eligibility: Federally Qualified Health Centers and Rural Health Clinics lost their ability to serve as distant site providers for most telehealth services after December 2025.
• DEA prescribing flexibilities: The waiver allowing controlled substance prescribing without an in-person evaluation is set to expire December 31, 2025, unless the DEA finalizes its special registration rule or Congress extends the waiver again.
• State-level waivers: Many states issued emergency waivers allowing out-of-state physicians to provide telehealth services to in-state patients during the pandemic. Most of these waivers have expired, meaning the standard licensure requirement is back in force.

The practical effect is that the regulatory flexibility telehealth companies enjoyed from 2020 through 2024 is narrowing. Platforms that launched during the pandemic relying on waived licensure and prescribing rules now face the full weight of pre-pandemic requirements—and in some cases, stricter rules as states formalize their post-pandemic telehealth policies.

Actionable Next Steps

If you are building or scaling a telehealth platform, here is the compliance framework we recommend working through before expanding into new states:

1. Map your target states: Identify the states where your patient population is concentrated. Use the CCHP policy finder to check each state's telehealth licensure requirements, prescribing rules, consent requirements, and reimbursement policies.
2. Audit your physician licensing strategy: Determine whether your physicians qualify for the IMLC pathway. If they do, use the compact to accelerate multi-state licensing. If they don't (for example, because they lack board certification or have disciplinary history), plan for state-by-state licensing with longer timelines.
3. Structure your MSO-PC correctly: In CPOM states, ensure your corporate structure separates clinical decision-making (owned by the PC) from business operations (owned by the MSO). Have a healthcare attorney review the MSO-PC agreement, fee structure, and operating policies in every state where you operate.
4. Build a controlled substance compliance program: If your platform prescribes controlled substances, prepare for the DEA's special registration framework. This means auditing your platform against the proposed "covered online telemedicine platform" definition, building multi-state PDMP checking capabilities, and planning for state-by-state telemedicine registrations.
5. Verify reimbursement before launching: Confirm that commercial payors and Medicaid in each target state will reimburse the specific services you deliver via telehealth. Do not assume parity—check the CCHP database and verify directly with major payors.
6. Plan for the post-waiver environment: Build your compliance program around permanent regulatory requirements, not temporary waivers. If your current operations depend on a flexibiliy that has an expiration date, build a transition plan now.

Telehealth licensure across state lines is not a single compliance hurdle you clear once. It is an ongoing operational requirement that touches physician recruitment, corporate structure, prescribing authority, and reimbursement. The platforms that succeed are the ones that treat multi-state compliance as a core business function—not a legal afterthought. If your telehealth company is navigating multi-state licensure, CPOM compliance, or DEA prescribing rules, we can help. We work with health tech founders on the full spectrum of healthcare regulatory compliance, from MSO-PC formation to FDA SaMD classification to mental health app data privacy. Book a consultation to map your compliance roadmap.