Digital Care Is Expanding Faster Than the Regulatory Framework

What Healthcare Organizations Need to Get Right as Virtual Care Becomes Healthcare Infrastructure

Digital care compliance is becoming increasingly complex as virtual healthcare evolves beyond the traditional telehealth visit. Today, digital care can involve physicians, pharmacies, health plans, laboratories, remote patient monitoring devices, electronic health records, artificial intelligence and other healthcare organizations operating within a connected care environment.

That creates tremendous opportunities for access and efficiency. It also creates a more complicated regulatory environment.

As healthcare organizations develop increasingly sophisticated digital-care models, compliance cannot simply be added after the technology is deployed. Regulatory requirements need to be considered as part of the architecture of the care-delivery model itself.

Digital Care Compliance Is Becoming an Infrastructure Question

A virtual visit is relatively easy to conceptualize: a patient communicates with a healthcare professional through telecommunications technology.

A patient may enter a digital platform, complete an intake, interact with a clinician, transmit information from a connected device, obtain laboratory services, receive a treatment plan and have a prescription transmitted to a pharmacy—all without interacting with a traditional physician’s office.

Depending on the model, organizations may need to consider professional licensure, scope of practice, patient location, DEA registration, controlled-substance prescribing, privacy and security, pharmacy requirements, documentation, remote patient monitoring and state-specific requirements.

The compliance question therefore becomes larger than whether a particular video visit is permissible.

Organizations need to understand whether the entire digital-care workflow accounts for the regulatory obligations created throughout the patient’s care journey.

Controlled-Substance Prescribing Is a Stress Test

Few areas demonstrate this challenge better than controlled-substance prescribing.

The scale alone is significant. According to the U.S. Department of Health and Human Services, more than 7 million controlled-medication prescriptions were issued through telemedicine in 2024 without a prior in-person medical evaluation.

That demonstrates how deeply remote prescribing has become integrated into modern healthcare delivery—and why the regulatory framework governing it matters to providers, digital-health companies, pharmacies and technology platforms.

Under the current federal framework, DEA-registered practitioners may, when applicable requirements are satisfied, prescribe Schedule II-V controlled substances through qualifying audio-video telemedicine encounters without first conducting an in-person medical evaluation. Certain Schedule III-V narcotic medications approved for treatment of opioid use disorder may also be prescribed through qualifying audio-only encounters.

But regulatory flexibility should not be confused with an absence of regulation.

Controlled-substance prescriptions must still satisfy applicable DEA requirements and federal and state law. Organizations must understand who is providing the care, where the patient is located, where the practitioner is licensed and registered, what medication is being prescribed, how the encounter occurred and what records must be maintained.

Technology can cross state lines instantly. Regulatory authority does not necessarily travel as seamlessly.

Temporary Flexibility Should Not Become Permanent Architecture

Healthcare organizations should also be cautious about designing permanent operating models around temporary regulatory exceptions.

The current federal telemedicine prescribing extension expires December 31, 2026 unless additional action is taken. DEA has also been developing a longer-term framework addressing controlled-substance prescribing through telemedicine.

Can a digital-care platform accommodate regulatory change without rebuilding its underlying business model?

Organizations should identify regulatory dependencies within their workflows now rather than discovering them after a rule changes.

For example, a scalable digital-care model should be capable of determining where the patient is located, whether the practitioner has appropriate authority, what prescribing requirements apply, what encounter modality is permitted and what documentation must be retained.

Those controls become increasingly important as organizations operate across multiple states and care settings.

AI Makes Regulatory Architecture More Important

AI can already assist with patient intake, documentation, clinical decision support, monitoring, scheduling and administrative coordination. As these systems become more capable, healthcare organizations will need to understand precisely where AI sits within the care pathway.

Automation does not eliminate the regulatory obligations associated with healthcare delivery.

Organizations will need governance structures that establish where human clinical authority begins and ends, how recommendations are reviewed, how decisions are documented and who remains responsible for regulated activities.

Digital Care Compliance by Design

Healthcare regulation is often viewed primarily as a constraint on innovation. For sophisticated healthcare organizations, however, digital care compliance can become a competitive advantage when it is incorporated into the design of the underlying care-delivery model.

A platform designed from the beginning around practitioner authority, state requirements, controlled-substance rules, patient identity, documentation, privacy, monitoring and regulatory change may be considerably easier to scale than one attempting to retrofit those controls after reaching substantial patient volume.

The next generation of digital care will connect patients, clinicians, health plans, pharmacies, laboratories, monitoring technologies, data systems and increasingly intelligent software.

The organizations that succeed in that environment will need more than innovative technology.

GTC Consulting provides healthcare organizations with regulatory compliance, controlled-substance compliance and strategic advisory services. GTC assists organizations in evaluating regulatory risk, operational requirements and compliance considerations associated with evolving healthcare-delivery models.

This article is provided for general informational purposes and does not constitute legal advice. Regulatory requirements vary based on jurisdiction, activity and individual circumstances. Organizations should obtain appropriate legal and regulatory guidance concerning their specific operations.