Dermatology Telehealth: Setup, Billing and Privacy

By Awais Afzal, Healthcare Operations & Data Analyst · Published October 30, 2026

Dermatology telehealth means live video visits, store-and-forward photo review, or a mix of both. Medicare pays for live video, including at the patient's home, through December 31, 2027. It pays store-and-forward only in Alaska and Hawaii demonstration programs. A practice also needs state licensure, patient consent, usable photos and a platform vendor that signs a business associate agreement.

Most pages that rank for this topic speak to patients or sell a platform. This guide is for the owner or manager who must decide whether to run teledermatology and how: which model fits, which visits to route where, what Medicare and state rules say today, and what the platform contract must cover. It is a narrow companion to our dermatology practice management guide.

Procedure coding and the claim path are covered in dermatology billing services and dermatology revenue cycle management. Dates below were checked on October 22, 2026, and Medicare rules are still moving.

Which teledermatology model fits a practice: live video, store-and-forward or both?

Live video suits visits that need a conversation, and store-and-forward suits visits that depend on images. Medicare’s rule defines an interactive telecommunications system as equipment with at least audio and video that allows two-way, real-time interaction, and defines asynchronous store and forward as sending a patient’s medical information to a practitioner who reviews it without the patient present (42 CFR 410.78).

Source: eCFR, 42 CFR 410.78 (2026); Center for Connected Health Policy (updated Aug. 10, 2026); CMS Medicare Telemedicine Health Care Provider Fact Sheet (Mar. 17, 2020).

The American Academy of Dermatology’s standards say live-interactive communication should be used to establish a relationship with a new patient when an in-person visit first is not possible, and that store-and-forward consultations across state lines are permitted where state law allows (AAD teledermatology standards). Use that for your new-patient policy, and check your state’s rules.

Which dermatology visits suit telehealth, and which belong in the clinic?

Your physicians decide this, in writing, before the schedule opens. A routing table lets the front desk book the right visit type. The table below is an example policy for physicians to adapt and sign off, not a clinical standard.

Source: RCM Finder example policy; not a clinical standard. Each practice’s physicians set routing.

Give the front desk scripts for offering telehealth, explaining photo requirements and sending a caller to the clinic. Our team can run that scheduling and intake step as virtual medical assistants working inside your existing EHR (for example PrognoCIS, eClinicalWorks or athenahealth), which the virtual medical assistant service page describes.

How do you get usable photos, and what consent do you need?

Usable photos come from instructions, prompts and a fixed channel, not from hoping patients know what to do. A 2022 narrative review of 47 studies in JMIR Dermatology found clinician-taken images rated low or poor in roughly 5% to 20% of cases, while low-quality patient-submitted photos ran roughly 10% to 40%. Its advice: standardize how conditions are photographed, use EHR prompts for lighting, field of view and focus, and give patients clear instructions.

• Send written and picture instructions at booking: lighting, distance, focus, a close-up and a wider shot.
• Set a floor for image quality. The AAD standards cite a minimum camera resolution of 800 x 600 pixels for patient photos (AAD).
• Have trained staff review each image before the visit and request retakes early.
• Accept images only through a channel your privacy officer approved, and file them in the chart, not a personal camera roll or email.
• Treat full-face photographs as identifiable. HIPAA’s de-identification list names “full face photographic images and any comparable images” (45 CFR 164.514), so a photo used for teaching or marketing needs separate permission.

On consent, HHS’s telehealth resource notes that most states require informed consent before telehealth treatment, which can be written, electronic or verbal at the start of each session, and that anyone else joining the visit must consent too (Telehealth.HHS.gov). That page is written for behavioral health, so use it as a model, not as the dermatology rule. Your form should cover the visit model, the photo channel, who sees images, retakes and the option of an in-person visit. Have your attorney review it.

Which state licensure rules apply?

The clinician generally needs a license in the state where the patient is located during the visit. The AAD standards say clinicians should hold licensure in the state in which the patient receives virtual services (AAD), and Telehealth.HHS.gov adds that rules vary by state and that providers should verify the patient’s location and obtain consent before the appointment (Telehealth.HHS.gov).

• Temporary practice laws let a provider treat an existing patient for a limited time while the patient is in another state.
• Reciprocity lets neighboring-state providers offer telehealth in some border states.
• Some states let licensed out-of-state providers register to practice telehealth, often with conditions such as an unrestricted license, liability insurance and an annual fee.
• Compacts can shorten the path to a second license. HHS notes the Interstate Medical Licensure Compact authorizes physicians to practice in multiple states, and its compacts page does not list a physician assistant compact (Telehealth.HHS.gov). Check each state board for PAs and NPs.

Build the rule into scheduling: ask where the patient will be on the day of the visit, record it, and block the booking if no clinician holds a license there. Travelers and patients near state lines are where practices slip. Confirm with counsel before offering cross-state visits.

Where does Medicare telehealth stand as of October 22, 2026?

Medicare’s home-based telehealth flexibilities run through December 31, 2027, according to CMS’s telehealth FAQ, updated in October 2026 (CMS). Set a review date rather than assume it will hold.

Source: CMS Medicare Telehealth FAQ (updated Oct. 2026); eCFR, 42 CFR 410.78; CMS CY 2027 Physician Fee Schedule proposed rule fact sheet (July 14, 2026).

CMS also publishes a yearly list of services payable when furnished by telehealth, and changes take effect each January 1 through the physician fee schedule rule (CMS). Confirm your visit code is on the 2027 list. A proposed-rule summary from Applied Policy (a secondary source) calls BB and BC proposals while the FAQ lists them as required, so confirm the final wording before changing claim forms.

What are the documentation and billing basics?

A telehealth claim stands on the same note as an office visit, plus the facts that make it a telehealth visit. This section covers only what changes when the visit is remote.

1. Confirm the service type is covered by the payer for telehealth, then check eligibility before the visit.
2. Document the modality (live video, audio-only or store-and-forward), where the patient was, where the clinician was, and who else took part.
3. Document consent, including the photo channel, and attach reviewed images to the chart.
4. Choose the place of service from the patient’s location (POS 02 or 10 for Medicare) and add the modifiers the payer requires. The POS 10 telehealth guide and the telehealth modifiers guide give background; check each against the payer’s current policy.
5. Record why a patient was sent to in-person care.
6. Bill under the rendering clinician, licensed where the patient was.

The AAD page also tells members that from October 1, 2026, rural health clinics and federally qualified health centers must report individual CPT or HCPCS codes, the revenue code and modifier 93 or 95 for non-behavioral distant-site telehealth (AAD). Other practices should not assume the same rule. The CMS FAQ does not address modifier 95, so ask your Medicare contractor and each payer which modifier applies. The telehealth billing guide covers general coding background.

What privacy and platform checks must a practice make?

Any vendor that stores or transmits patient images or video for you is a business associate, so a signed agreement comes before the first visit. HHS says a cloud service provider that stores electronic protected health information is a business associate and must sign a BAA, even if it holds only encrypted data (HHS). Without one, the customer is in violation.

Do not rely on pandemic-era leniency. HHS reports that the notifications of enforcement discretion for telehealth ended at 11:59 p.m. on May 11, 2023, with a transition period through August 9, 2023 (HHS OCR). HHS describes what a BAA must contain: permitted uses, safeguards, breach reporting, subcontractor flow-down, return or destruction of data, and termination rights (HHS).

Put these questions to every video or image vendor, and keep the written answers:

1. Will you sign a business associate agreement before we load any patient data, and does it cover subcontractors?
2. Where are images and recordings stored, for how long, and can we export or delete them?
3. Who at your company can see our images, and is access logged?
4. Do images reach the chart in our EHR, or do staff download and re-upload them? See the dermatology EHR evaluation checklist for the handoff questions.
5. Are recordings off by default?
6. What happens to our data if we end the contract?

Include patient-side privacy in the consent talk: a private room and a plan if the call drops. For wider security, use the HIPAA compliance checklist for medical practices., and for booking forms see the dermatology website design guide.

How should a practice roll out dermatology telehealth?

Start with one physician, a few visit types and one payer mix, then widen. A pilot shows where photos fail and which claims return while mistakes are cheap.

1. Name a policy owner, a privacy sign-off and a billing owner.
2. Adopt the visit routing table, the licensure check and the consent form.
3. Sign the BAA, configure the platform, and test the photo path with staff as patients.
4. Train the front desk on scripts, and the clinical team on documentation prompts.
5. Run a short pilot; review no-shows, retakes and denials.
6. Set a recheck date for the Medicare dates and any state rule changes.

Our recommendations

1. Decide the model before the vendor. Choose live video, store-and-forward or hybrid from your visit mix and payer rules.
2. Make visit routing a physician-signed policy. Give the front desk a table so booking does not need a clinical call.
3. Ask where the patient will be, every time. Licensure and place of service both follow location.
4. Get the BAA signed first. No images or video reach a vendor until the agreement and written answers are in place.
5. Calendar Medicare's dates. Review in early 2027 and before the end of 2027, and re-read the CMS FAQ when the final fee schedule rule appears.

Bottom line

Dermatology telehealth works when the model, the licensure check, the consent, the photos, the platform contract and the claim all line up before the first visit. Use the dermatology practice management guide to see where telehealth fits among scheduling, billing and software, and the practice management system page if you want claim tracking and reporting around the new visit type.

Frequently asked questions

Does Medicare pay for teledermatology?

Medicare pays for live video visits for services on its telehealth list, including at the patient’s home, through December 31, 2027, per CMS’s October 2026 FAQ. It pays store-and-forward only for federal demonstration programs in Alaska and Hawaii. Check each commercial payer and your state Medicaid program separately.

Can a dermatologist treat a patient in another state by video?

Generally the clinician needs a license in the state where the patient is during the visit. Some states allow temporary practice, reciprocity or registration, and licensure compacts can help. Rules vary, so confirm with the state board and your attorney, and record the patient’s location each time.

What is the difference between store-and-forward and live video?

Live video is a real-time visit with audio and video. Store-and-forward means images and history are sent and reviewed later, without the patient present. Many practices combine them: photos before a short live visit. Payers treat the two differently, so billing rules should drive the choice.

Do we need a business associate agreement with our video platform?

Yes, if the vendor creates, receives, maintains or transmits protected health information for you. HHS says a cloud provider storing ePHI is a business associate, even if the data are encrypted. Get the BAA signed before any patient data are loaded.

Which dermatology visits should stay in person?

Your physicians decide. Many practices keep procedures, full skin exams and new lesions of concern in the clinic, and use telehealth for follow-up, medication checks and result reviews. Write the routing as a signed policy so staff apply it the same way each time.

What should the consent form for teledermatology include?

Most states require informed consent for telehealth. Cover the visit model, how photos are sent and stored, who can see them, what happens if images are unusable, and the option of an in-person visit. Have your attorney review the form for your state.

Sources

1. Telehealth — CMS (2026)
2. Medicare Telehealth FAQ (updated Oct. 2026) — CMS (2026)
3. List of Medicare Telehealth Services — CMS (2026)
4. CY 2027 Medicare Physician Fee Schedule Proposed Rule fact sheet — CMS (2026)
5. CY 2027 PFS Proposed Rule First Night Summary — Applied Policy (2026)
6. 42 CFR 410.78 Telehealth services — eCFR (2026)
7. Store-and-forward (Medicaid and Medicare) — Center for Connected Health Policy (2026)
8. Medicare Telemedicine Health Care Provider Fact Sheet — CMS (2020)
9. HIPAA and Telehealth — HHS Office for Civil Rights (2023)
10. Guidance on HIPAA and Cloud Computing — HHS Office for Civil Rights (2026)
11. Sample Business Associate Agreement Provisions — HHS Office for Civil Rights (2017)
12. Licensing across state lines — Telehealth.HHS.gov (2025)
13. Licensure compacts — Telehealth.HHS.gov (2025)
14. Teledermatology Standards — American Academy of Dermatology (2026)
15. Teledermatology resources — American Academy of Dermatology (2026)
16. Store-and-Forward Images in Teledermatology: Narrative Literature Review — JMIR Dermatology (2022)
17. Informed consent for telebehavioral health — Telehealth.HHS.gov (2024)
18. 45 CFR 164.514 De-identification — eCFR (2026)