Client Alerts, News Articles, Blog Posts, & Multimedia

Everything you need to know about BMD and the industry.

Telehealth Flexibility Updates: HIPAA, DEA, and CMS

Client Alert

The Covid-19 Public Health Emergency (PHE) officially ended on May 11, 2023.[1] But what does that mean for telehealth, a field that expanded exponentially during the PHE? Fortunately, many of the flexibilities will remain intact, at least temporarily. This client alert presents a brief overview of the timelines that providers need to follow, but for a more comprehensive review of telehealth flexibilities and when they will end, please see my presentation on the same topic here:[2]


On May 11, the Notice of Enforcement Discretion issued under HIPAA ended, which means providers must use HIPAA-compliant platforms and patient communication tools for all telehealth appointments. The Office of Civil Rights has released a statement allowing for a 90-day transition period for covered health care providers to come into compliance with the HIPAA rules. After that, providers should expect enforcement to resume.


The Centers for Medicare and Medicaid Services (CMS) have extended many of the telehealth flexibilities offered during the pandemic but not all. For example, the waivers regarding telehealth and remote patient monitoring (RPM) cost sharing expired on May 11. [3]  CMS currently reimburses telehealth services at non-facilities at an equivalent rate to in-person rates, but this Medicare payment parity is scheduled to end on December 31, 2023.[4] Also, at the end of 2023, CMS will no longer allow virtual direct supervision.[5] Through the Consolidated Appropriations Act of 2023, many flexibilities were extended through December 31, 2024. [6] These include, among others:

  • FQHCs and RHCs can still serve as distant site providers for non-behavioral and mental telehealth services.
  • Medicare patients may receive telehealth services authorized by the Medicare 2023 physician fee schedule in their homes, and there will be no geographic restriction for the originating site for non-behavioral and mental telehealth services.
  • Certain non-behavioral and mental telehealth services can be delivered using audio-only communication platforms.
  • Providers can use telehealth for recertification of eligibility for hospice care.
  • The acute hospital care at-home program may continue to provide hospital services to patients in their homes using telehealth.

Physical therapists, occupational therapists, speech-language pathologists, or audiologists can still provide telehealth services.

There will be important permanent changes as well including:

  • FQHCs and RHCs can serve as distant site providers for behavioral and mental telehealth services.
  • Medicare beneficiaries can receive telehealth services for behavioral and mental health care in their homes.
  • No geographic restrictions for the originating site for behavioral and mental telehealth services, and services can be delivered using audio-only communication platforms.
  • Rural hospital emergency departments are accepted as originating sites.

DEA – Controlled Substances Prescribing

The DEA proposed new rules for permanent telemedicine flexibilities on Feb. 24, 2023.[1] These rules added flexibility to the Ryan Haight Act, while also trying to guard against any bad actors who are prescribing controlled substances improperly. The new rules would not impact telemedicine consultations that do not involve prescribing controlled substance or practitioners who have previously had an in-person exam. But they would prohibit a practitioner from being able to use telemedicine to prescribe more than a 30-day supply of Schedule III-V non-narcotic controlled medications or a 30-day supply of buprenorphine for the treatment of opioid use disorder without an in-person evaluation or referral from a medical practitioner that has conducted an in-person evaluation. The rules were exceptionally controversial and garnered over 38,000 comments. As a result, the DEA announced on May 10, 2023 that they would allow all COVID flexibilities to continue for another six months, until November 11, 2023. This buys the DEA enough time to rewrite the proposed rules and incorporate the many submitted comments. Therefore, until November 11, 2023 all providers may prescribe controlled substances through telehealth under the same rules that have been utilized throughout the pandemic.

Also notable are all of the telehealth safeguards and rules that individual states have instituted as a result of the COVID-19 pandemic. Ohio, for example, has instituted new laws and rules that govern telehealth for Medicaid patients as well as for all types of providers. The practice and regulation of telehealth will continue to evolve over the next several years, so it is important to understand all of the rules that apply to your practice. For questions, please reach out to attorney Ashley Watson at or any member of the BMD Healthcare Team.

[1]88 FR 12890; 88 FR 12875; DEA Announces Proposed Rules for Permanent Telemedicine Flexibilities, DEA (March 3, 2023, 12:32 PM),

[1] Telehealth policy changes after the COVID-19 public health emergency, Telehealth.HHS.Gov (February 19, 2023, 1:45 PM),

[2] Please note the presentation was given prior to the DEA’s announcement on May 10, 2023 to extend controlled substance prescribing flexibilities.

[3] OIG Policy Statement Regarding Physicians and Other Practitioners That Reduce or Waive Amounts Owed by Federal Health Care Program Beneficiaries for Telehealth Services During the 2019 Novel Coronavirus (COVID-19) Outbreak, OIG (March 17, 2020); see also FAQs—OIG Policy Statement Regarding Physicians and Other Practitioners That Reduce or Waive Amounts Owed by Federal Health Care Program Beneficiaries for Telehealth Services During the 2019 Novel Coronavirus (COVID-19) Outbreak, OIG (March 24, 2020).

[4] CY 2023 Medicare Physician Fee Schedule (PFS).

[5] CY 2023 Medicare Physician Fee Schedule (PFS).

[6] Consolidated Appropriations Act of 2023, H. R. 2617.

WEBINAR SERIES RECAP | Ending the Public Health Emergency + Post-Pandemic Check-Up

Some may take the position that the rest of the country already returned to a new “normal” following the COVID-19 pandemic.  But healthcare providers continue to implement COVID protocols and navigate the ever-changing healthcare regulations at both the federal and state levels.  It is important for healthcare providers to take time for a “Healthcare Check-Up” with the start of 2023 and the ending of the Public Health Emergency (“PHE”).

Sharp Rise in False Claims Act Cases - Navigating the FCA Waters

Recently, on April 18, 2023, the United States Supreme Court heard arguments regarding the FCA’s scienter, or mental state, requirement. To prove violation of the FCA, the statute requires that a defendant “knowingly” file false claims for payment. The term “knowingly” is defined within the statute to mean a person that acts with actual knowledge, deliberate ignorance, or reckless disregard. Circuit courts are split on how to interpret and apply the knowledge element of the FCA, and based on the Supreme Court’s decision, there will be a large impact on healthcare defendants and their businesses as well as anyone who contracts with, or receives money from, a federal program. A broader interpretation of the FCA would unnecessarily target and stifle healthcare, and other businesses, for simple errors in daily operations. This goes against the intended application of the FCA, which was to prevent fraudulent activity.

Areas of Opportunity in Columbus: Highlights from the Columbus Opportunity Summit

On April 27, 2023 Columbus Business First held its annual Columbus Opportunity Summit, bringing together business and economic development leaders to provide an update on how Central Ohio is preparing for expected growth in the coming years, an issue heightened by the arrival of Intel at its 1,000 acre site in Licking County, just outside of Columbus. The site will be home to two new chip factories with room to grow to a total of eight factories and is a $20 Billion investment.

BREAKING: Biden Administration Has Officially Ended the Two Remaining COVID Vaccine Mandates

As of May 1, 2023, the Biden Administration has officially ended the two remaining COVID vaccine mandates: (1) the Federal Contractor Mandate, and (2) the CMS Healthcare Provider Vaccine Mandate.

Important Update: New Advanced Beneficiary Notice in Effect for Medicare on June 30, 2023

On April 4, 2023, the Office of Management and Budget (OBM) approved an updated Advance Beneficiary Notice of Non-coverage (ABN) form CMS-R-131.[1] Providers can continue using the current ABN form with an expiration date of June 30, 2023.[2] However, all providers are mandated to use the new ABN starting on June 30, 2023, which has an expiration date of January 31, 2026.