Telehealth and malpractice coverage

Many malpractice policies cover telehealth as part of a clinician's professional services, but the details live in the policy's definition of professional services, its territory clause and any telemedicine endorsement or application warranty. The questions that decide coverage are where the patient is located, where the clinician is licensed, what technology is used and whether the practice is a platform or employer. Get the answers in writing before you start seeing patients by video, and again when you add a new state.

Telehealth is the same duty of care in a different setting

A malpractice claim alleges that a clinician fell below the standard of care and the patient was harmed. Telehealth changes the facts, not the elements. Typical allegations include a missed diagnosis made without a physical exam, a delayed referral for an emergency, prescribing without adequate evaluation, failure to document consent, a dropped connection during a crisis session, and a privacy breach. The malpractice policy responds to a claim for damages arising from a covered professional service, and the question is whether the policy language treats a video, phone or messaging visit as one.

Where the patient is matters

Licensure is state-based. The general rule, reflected in Federation of State Medical Boards guidance and state practice acts, is that the practice of medicine occurs where the patient is located at the time of the encounter, so a clinician usually needs a license (or compact privilege) in the patient's state. Compacts such as the Interstate Medical Licensure Compact for physicians, the Nurse Licensure Compact and PSYPACT for psychologists streamline multistate practice. They vary by state and profession, and each state's rules on prescribing, supervision and consent differ.

That produces insurance consequences:

• Territory. Many policies cover claims arising from services rendered within the United States or its territories, but some are restricted by state of licensure. A claim for a patient in a state where the clinician was not licensed may trigger an exclusion for services rendered without a required license, or a regulatory defense limit that doesn't cover the underlying claim.
• Suit location. A patient can often sue in the state where they live. The policy territory and "suit" provisions need to allow a suit brought anywhere in the covered territory.
• Disclosure. Applications ask which states you practice in and whether you provide telehealth. An inaccurate answer is the sort of misstatement that can lead to a coverage dispute. See insurance applications: why accuracy matters and what misrepresentation costs.

State rules on telehealth coverage, consent, prescribing and tort law differ. Use workers' comp and benefits requirements by state for workers' comp and benefits, and consult your state board and counsel for practice rules.

How policies treat telehealth

There is no single standard form. Medical professional liability is written on carrier forms (often claims-made, with occurrence options), and the telehealth treatment varies:

1. Included in the definition. The policy defines professional services as including services rendered by telemedicine, electronic or remote means.
2. Added by endorsement. A telemedicine endorsement may apply conditions: licensure in the patient's state, use of HIPAA-compliant technology, documented informed consent and a sublimit.
3. Silent. The policy says nothing, and you rely on a general definition of professional services. Ask the carrier to confirm in writing.
4. Excluded or restricted. Some policies exclude certain modalities, such as prescribing controlled substances without an in-person visit, direct-to-consumer services, or services outside the licensed state.

Policy forms vary and underwriting guidelines change. Ask for the telemedicine wording itself, not the sales summary.

Who is the insured?

Employed clinicians. If a hospital, group or practice employs you, the employer's coverage often includes employed clinicians for work within the scope of employment. Confirm that telehealth from home or from another state is within scope.

Independent contractors. Clinicians contracting with a telehealth platform often need their own coverage. The platform may provide a master policy that includes contractors, may require them to carry limits, or may name itself as an additional insured. Check which. See medical malpractice insurance for physicians and practices.

The platform or practice entity. The company arranging visits faces claims of negligent credentialing, vicarious liability, technology failures and corporate practice of medicine issues. Platforms generally need entity-level medical professional liability, technology errors and omissions, cyber and D&O coverages. The gaps between entity and individual coverage are where disputes arise.

Supervised staff. Nurse practitioners, physician assistants and therapists may need to be named as insureds on the supervising physician's or practice's policy.

Privacy, security and the cyber policy

Telehealth adds a data exposure: video platforms, messaging, remote access, patient portals, device storage and vendor contracts. Malpractice policies generally do not cover privacy breach response costs; regulatory fines are sometimes covered under a limited sublimit. A cyber policy picks up breach response and sometimes regulatory defense, and often requires specific security controls. See HIPAA breaches and cyber insurance for healthcare providers and cyber insurance: what it covers for a business.

HIPAA civil money penalties, as adjusted for inflation in 2025 (45 CFR 102.3), range from $145 per violation at the low end of the first tier to $2,190,294 per violation at the top of the fourth. Whether penalties are insurable depends on state law and policy wording. Business associate agreements with your telehealth vendor assign security duties but do not transfer your liability.

Claims-made mechanics apply

Most malpractice policies for clinicians are claims-made, so switching carriers or leaving a platform can leave earlier work without coverage unless you carry prior acts coverage or buy tail. If you change platforms or move to a group, confirm that the new policy's retroactive date matches the old one, or buy an extended reporting endorsement. See tail coverage and extended reporting periods and the tail coverage cost calculator. Also check whether the policy includes a consent-to-settle clause: some malpractice forms let the insurer settle without your consent, which affects your reputation and licensing record.

A hypothetical example

Say a therapist licensed in two states starts seeing clients by video. A client travels and logs in from a third state, where the therapist holds no license. A crisis session goes wrong and the family files a complaint. The therapist's carrier asks whether the services were rendered where the therapist was licensed. The answer depends on the policy's territory and licensure wording and on the third state's law. A written pre-check, with the carrier confirming coverage and a documented practice of verifying the client's location at each session, would have narrowed the problem. The scenario is hypothetical, and outcomes depend on policy wording and law.

Questions to ask your carrier or broker

• Does the policy's definition of professional services include telemedicine, audio-only and messaging?
• Is there a telemedicine endorsement, and what conditions or sublimits apply?
• Are there licensure or state-of-patient conditions?
• Does coverage extend to services I give from a home office or from another state?
• Are contractor or supervised clinicians covered?
• Is regulatory proceeding defense covered, and to what limit?
• How do my malpractice and cyber policies coordinate on a privacy claim?
• What are the retroactive date and tail terms?

Key takeaways

• Telehealth is usually within malpractice coverage only if the policy's professional services and territory wording say so; get confirmation in writing.
• The patient's location drives licensure, which drives coverage conditions. Verify location at each visit.
• Platform contractors, employed clinicians and the entity itself can each have different coverage.
• Pair malpractice with cyber coverage for privacy exposures and check claims-made tail terms before any change.