Consent for Telehealth Template

DOCUMENT CONTROL BLOCK

• Document ID: SOP-TR-OPS-409
• Effective Date: October 24, 2023
• Version: 3.2
• Review Cadence: Annual
• Target Audience: Clinical Operations, Telehealth Coordinators, Attending Physicians, Nurse Practitioners, Compliance Officers, Patient Access Specialists

---

1. Executive Summary & Scope

1.1 Clinical Statement of Operational Boundaries

This Standard Operating Procedure (SOP) defines the institutional mandates, operational workflows, and regulatory parameters governing the acquisition, verification, and archival of Informed Consent for Telehealth Services at Template Registry. Telehealth modalities involve the remote delivery of healthcare services using audio, video, or electronic data communication where the patient and provider are not in the same physical location.

1.2 Regulatory Standards & Jurisdictional Compliance

Execution of this SOP ensures 100% adherence to:

• HIPAA (Health Insurance Portability and Accountability Act): Privacy and Security Rules governing protected health information (PHI) transmission during consent capture.
• State Telehealth Statutes: Jurisdictional mandates regarding specific disclosures (e.g., identity of the provider, provider licensure, risks of remote clinical assessment).
• Condition of Participation (CoP): Centers for Medicare & Medicaid Services (CMS) guidelines requiring explicit patient acknowledgement of risks, benefits, and alternative modes of care.
• The Joint Commission (TJC): Standards for documentation of informed consent in remote care delivery models.

---

2. Prerequisites & Tool Requirements

2.1 Software & Infrastructure Access

• EHR/EMR System: Active, role-based access to Template Registry’s enterprise electronic health record system with cryptographic audit logging enabled.
• HIPAA-Compliant e-Signature Platform: Integration via API with DocuSign Clinical or Adobe Sign Health for remote, verifiable identity binding and timestamping.
• Secure Video Platform: Zoom for Healthcare or Webex Health Edition with end-to-end encryption (E2EE) protocols active.

2.2 Certifications & Training

• Staff Credentials: Clinical staff must hold active, unencumbered state licensure in the jurisdiction where the patient is physically located at the time of the encounter.
• Compliance Certification: All personnel interacting with the consent workflow must complete annual HIPAA Security and Informed Consent Protocol (ISCP) training modules.

---

3. Roles & Responsibilities (RACI Matrix Table)

---

4. Step-by-Step Operational Procedure

Phase 1: Pre-Encounter Verification and Document Dispatch

• 1.1 Review the scheduled appointment manifest in the EHR to identify upcoming telehealth encounters requiring initial or annual recurring consent renewal.
• 1.2 Verify patient identity against state-issued identification data stored in the master patient index (MPI).
• 1.3 Dispatch the Template Registry Standard Telehealth Consent Form (TR-TCF-v3) via the secure patient portal or encrypted SMS link 24 hours prior to the scheduled encounter window.
• 1.4 Flag the EHR scheduling block with status indicator CONCENT_PENDING if electronic execution is not completed 2 hours prior to start time.

Phase 2: Live Clinical Encounter Consent Validation

• 2.1 Initiate the secure video session and verify that both audio and visual feeds are stable and secure prior to initiating clinical dialogue.
• 2.2 Verbally confirm the patient’s physical location at the precise moment of service to ensure jurisdictional licensure alignment.
• 2.3 Review core consent elements verbally with the patient, specifically detailing:
  • 2.3.1 The nature, scope, and technological limitations of telehealth diagnostics.
  • 2.3.2 Potential risks of electronic data interception and breach mitigation protocols.
  • 2.3.3 The right of either party to discontinue the telehealth encounter and transition to in-person care at any time.
  • 2.3.4 Emergency protocol procedures and local emergency services routing if clinical destabilization occurs.
• 2.4 Verify whether the patient executed the document electronically prior to the call; if unexecuted, initiate screen-share assisted electronic signature capture or verbal recorded consent protocol.

Phase 3: Post-Encounter Documentation & Archival

• 3.1 Ensure the finalized consent document—inclusive of digital cryptographic hashes, IP address logs, timestamps, and provider counter-signature—is securely bound to the patient’s permanent EHR chart.
• 3.2 Update the EHR consent tracking module status from PENDING to ACTIVE_VERIFIED, entering the expiration date exactly 365 days from the date of execution.
• 3.3 Transmit a finalized, encrypted copy of the executed consent form to the patient via the patient portal.

---

5. Quality Assurance & Verification Criteria

5.1 Audit Checklist & Acceptance Benchmarks

• Completeness Benchmark: 100% of telehealth encounters must feature a fully executed consent document prior to the initiation of diagnostic or therapeutic evaluation.
• Identity Verification Standard: Photographic or dynamic knowledge-based authentication (KBA) must match EHR demographic records.
• Storage Integrity: Consent files must be stored in PDF/A format with embedded digital signatures compliant with ESIGN and UETA standards.

5.2 Tolerance Thresholds

• Defect Rate Limit: Zero tolerance (0%) for unconsented telehealth encounters, barring documented life-threatening medical emergencies where consent is legally implied.
• Timeliness Threshold: Electronic consent dispatch must occur no later than 24 hours prior to the encounter; verbal re-verification must be documented within 5 minutes of session initialization.

---

6. Practical Troubleshooting Scenarios

Scenario A: Patient Lacks Digital Literacy or Technology for e-Signature

• Symptom: Patient is connected via audio/video but is unable to navigate the portal or electronic signature interface to execute TR-TCF-v3.
• Immediate Corrective Action Protocol:
  1. Transition the encounter to Verbal Consent Protocol as permitted by state statute and institutional policy.
  2. Read the complete disclosure statement verbatim to the patient while recording the session (with patient permission) or having a clinical witness present on the line.
  3. Document the exact phrasing used, the witness's name and credential, and the patient's explicit verbal affirmation in the EHR progress note.
  4. Complete the administrative attestation section of the paper/electronic form, check the "Verbal Consent Obtained" box, and sign as the clinician-witness within 2 hours of call termination.

Scenario B: Patient Located in Non-Licensed Jurisdiction at Time of Service

• Symptom: During Phase 2, Step 2.2, the patient states they are physically located in a state where the attending clinician does not hold an active license or compact privilege.
• Immediate Corrective Action Protocol:
  1. Immediately halt the clinical evaluation portion of the telehealth encounter.
  2. Inform the patient clearly of regulatory and legal boundaries preventing service delivery in their current physical location.
  3. Reschedule the appointment for a date/time when the patient will be within an authorized jurisdiction, or assist the patient in locating a local in-person provider or licensed telehealth provider in their current state.
  4. Document the encounter status as ABORTED_JURISDICTIONAL_MISMATCH in the EHR, ensuring no clinical notes are billed for the session.