Iowa Telehealth Laws: Licensing, Prescribing, and Penalties

Iowa telehealth laws require providers to meet the same clinical standards that apply to in-person care, and they are set out primarily in Iowa Code Section 514C.34 and Iowa Administrative Code 653-13.9. If you treat an Iowa patient remotely, you need an Iowa license (or a compact privilege), a valid provider-patient relationship, documented informed consent, and a HIPAA-compliant platform with real-time audio and video. Prescribing, insurance coverage, and privacy each carry their own rules on top of that.

What Counts as Telehealth in Iowa

Iowa’s definition is broad on the technology side and narrow on one specific exclusion. Under the Board of Medicine’s standards, telemedicine covers real-time interactive audio-video encounters, asynchronous store-and-forward transmission (where a provider collects patient data and sends it to a specialist elsewhere for later review), and remote patient monitoring. Teleradiology and telepathology are included.¹

The exclusion is the one to memorize. Iowa Code 514C.34 states that telehealth does not include services delivered solely through an audio-only telephone call, email, or fax.² A phone-only visit does not trigger the statute’s insurance coverage protections. If you rely on audio-only encounters, confirm separately with each payer, because Iowa’s parity mandate does not require reimbursement for them.

Some professions have a stricter technology floor. Behavioral health practitioners must use HIPAA-compliant technology with at minimum two-way, real-time audio and video. Non-real-time tools can supplement an appointment or handle communication between visits, but they cannot replace the live encounter.³

Who Needs an Iowa License

If your patient is located in Iowa, you need an Iowa license for your profession. Iowa Code Section 147.2 lists dozens of licensed professions, from physicians and psychologists to nurses, pharmacists, and social workers, and there is no telehealth-specific exemption.⁴

Two compacts make multistate practice easier:

The Interstate Medical Licensure Compact, enacted under Iowa Code Chapter 147B, gives qualifying physicians an expedited path to licensure in other member states. It is not a single multistate license; the physician still gets a full license in each state, just through a faster process.⁵
The Nurse Licensure Compact and the APRN Compact, recognized under Iowa Code Sections 152E.1 and 152E.3, let a nurse licensed in a compact state provide telehealth to Iowa patients without a separate Iowa license, provided the patient is in a compact state at the time care is rendered.⁴

Out-of-state providers who are not covered by a compact need to obtain an Iowa license before treating Iowa patients remotely. Practicing without one exposes you to discipline in both states.

Establishing the Patient Relationship

Before you diagnose or treat anyone by telehealth, you have to establish a valid provider-patient relationship. The Board of Medicine recognizes two ways to do that. If the standard of care for the condition requires a hands-on exam, you need an in-person encounter first. If it does not, the relationship can be formed entirely through a compliant telehealth encounter that uses evidence-based guidelines addressing both clinical and technological requirements.¹

You must conduct a medical interview and, when medically necessary, a physical examination sufficient to support a diagnosis. Iowa’s rules are explicit that a static online questionnaire where a patient checks boxes and receives a diagnosis does not satisfy this requirement. The interview needs to be adaptive, interactive, and responsive.¹

Informed Consent

Consent must be obtained before care is delivered and documented in the patient’s medical record. The Board of Medicine’s disclosure list under Iowa Administrative Code 653-13.9(17) is longer than most providers assume:

The types of services offered and any limitations on drugs or treatments available through telehealth
The licensure, certification, credentials, and qualifications of every provider involved in the encounter
Appropriate uses and limitations of the technology, including how it functions in emergencies
Who may receive the patient’s health information and for what purpose, and the patient’s rights regarding that information
Fees, cost-sharing responsibilities, and payment methods, especially where they differ from in-person visits
Response times for emails and electronic messages sent through the telehealth platform
Any passive tracking mechanisms the platform uses

Missing any one of these items can create a compliance gap during a board investigation.¹

Psychologists practicing telepsychology have additional obligations. Before initiating services with a new patient, a psychologist must verify the patient’s identity and location, and the consent must specifically describe any service limitations caused by the technology.⁶

Prescribing by Telehealth

A provider must establish a valid patient-provider relationship before prescribing any medication through telehealth. That relationship can be formed through either an in-person visit or a qualifying telehealth encounter, but prescribing based solely on a static internet questionnaire is expressly banned, and prescribing based only on a phone call is prohibited unless a valid relationship already exists.¹

Controlled substances add a federal layer. The Ryan Haight Online Pharmacy Consumer Protection Act generally requires at least one in-person evaluation before a provider can prescribe Schedule II through V controlled substances.⁷

DEA-registered practitioners currently have broader authority under a temporary extension of COVID-era flexibilities. Through December 31, 2026, any DEA-registered practitioner may prescribe Schedule II through V controlled substances via telehealth without a prior in-person evaluation, provided the prescription is issued for a legitimate medical purpose, the encounter uses an interactive audio-video system, and the prescription otherwise complies with DEA regulations.⁸ The DEA published a proposed rule in January 2025 for a permanent Special Registration framework, but a final rule has not been issued. Plan for the possibility that stricter requirements take effect in 2027.

Insurance Coverage and Reimbursement

Iowa Code Section 514C.34 prohibits health insurers from discriminating between in-person and telehealth coverage. If a plan covers a service face-to-face, it must also cover that same service when delivered by telehealth, and insurers cannot impose additional conditions, exclusions, or benefit limits because the encounter happened remotely.⁹

Coverage parity is not the same as payment parity. Coverage parity means the insurer must pay for the service. Payment parity means the insurer must pay the same rate as an in-person visit. Iowa provides broad coverage parity for all telehealth services, but the payment parity guarantee applies specifically to mental health services: for mental health conditions, a carrier must reimburse providers and facilities at the same rate it would pay for the identical in-person service. For other telehealth services, reimbursement rates depend on the provider’s contract with the insurer.⁹

On the federal side, Medicare beneficiaries can receive telehealth from anywhere in the United States through December 31, 2027, without geographic or facility-type restrictions. Starting January 1, 2028, most non-behavioral-health telehealth services will again require the patient to be at a medical facility in a rural area. Behavioral health telehealth services are permanently exempt from geographic restrictions under the Consolidated Appropriations Act of 2021, so patients can receive behavioral health visits from home regardless of location.¹⁰

Privacy, Security, and Technology Standards

Every Iowa telehealth encounter must comply with HIPAA’s privacy and security framework, including all amendments through October 2024. The Board of Medicine’s standards require written protocols with password protection, encryption, and other reliable authentication techniques to safeguard patient-identifiable information.¹

Behavioral health practitioners must use HIPAA-compliant platforms with two-way, real-time audio and video at minimum.³ Psychologists providing telepsychology must gain competency in a given technology before using it with patients and may only use technologies that are both secure and functioning properly.⁶

The practical point: a consumer video app is where providers get into trouble. HIPAA-compliant telehealth platforms typically cost between $10 and $55 per month for a single provider.

What Happens If You Get It Wrong

Falling short of the standard of care during a telehealth encounter opens you to the same disciplinary process as any other clinical failure. Iowa’s licensing boards can investigate complaints, hold hearings, and impose sanctions ranging from required continuing education at the low end to full license revocation at the high end. Other common outcomes include fines, license suspension, probation, restrictions on prescribing privileges, and public reprimands. Telehealth is not treated as a lesser form of care.⁹

Privacy and security failures carry federal consequences. The HHS Office for Civil Rights enforces HIPAA civil monetary penalties on a tiered system based on culpability, with per-violation amounts running from roughly $1,461 at the lowest tier up to $2,190,294 at the willful-neglect-not-corrected tier, and an annual cap of $2,190,294 per tier. The figures adjust annually for inflation.¹¹ A single data breach involving unencrypted patient video sessions can generate violations across hundreds of patients, pushing total penalties well into the millions.

1
Iowa Administrative Code. IAC 653-13.9 Standards of Practice – Telemedicine
2
Iowa Legislature. Iowa Code 514C.34 Health Care Services Delivered by Telehealth – Coverage
3
Iowa Administrative Code. IAC 481-2062.5 Telehealth Appointments
4
Justia Law. Iowa Code Section 147.2 – License Required
5
Iowa Legislature. Iowa Code 147B.1 Interstate Medical Licensure Compact
6
Iowa Administrative Code. IAC 481-884.2(4) Telepsychology
7
HHS. Prescribing Controlled Substances via Telehealth
8
Federal Register. Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities for Prescription of Controlled Medications
9
Justia Law. Iowa Code Section 514C.34 – Health Care Services Delivered by Telehealth – Coverage
10
CMS. Telehealth FAQ
11
Federal Register. Annual Civil Monetary Penalties Inflation Adjustment