You need to decide right now: which parts of your IOP, PHP, or MAT program can legally run via telehealth in 2026, which payers will actually reimburse those services, and how to structure a hybrid model that doesn't create compliance exposure. The regulatory landscape for hybrid telehealth behavioral health treatment models in 2026 is no longer in flux on paper, but it's fractured across federal rules, state Medicaid programs, and commercial payer policies. This article gives you the operational blueprint you need to make those decisions.
If you're running a behavioral health program, you can't afford to guess. You need to know exactly where the lines are drawn between virtual and in-person care, how to bill for each correctly, and what documentation will survive an audit.
Where Federal Telehealth Waivers Stand in 2026
As of January 1, 2026, several Medicare telehealth flexibilities became permanent. CMS finalized the removal of frequency limits on subsequent inpatient, nursing facility visits, and critical care consultations delivered via telehealth. That matters less for outpatient behavioral health operators than what didn't get finalized: blanket waivers for all behavioral health services.
For behavioral health specifically, the in-person visit requirement was delayed, not eliminated. Established patients who began treatment on or before December 31, 2027, must have at least one in-person visit every 12 months starting after December 31, 2027. New patients starting after that date will need an in-person visit within six months of initiating care, then annually thereafter. If you're building a fully virtual IOP or PHP model with no brick-and-mortar presence, you need a plan for how patients will satisfy that requirement, whether through partnerships with local clinics or scheduled in-person sessions.
Audio-only telehealth for behavioral health services remains permissible under Medicare when video is not feasible, but only for services delivered in the patient's home. That's a narrow carve-out. Most commercial payers and state Medicaid programs have not adopted the same flexibility, which means your billing team needs to track which patients are covered under which rules. Managing behavioral health revenue cycle operations across multiple payer types requires precise documentation of modality and location.
Which Levels of Care Can Run Via Telehealth and Get Reimbursed
The question isn't whether telehealth is clinically appropriate. The question is whether payers will reimburse it. Here's where the lines are in 2026.
Outpatient (OP) Services
Individual therapy, group therapy, and psychiatric evaluations delivered via telehealth are broadly reimbursed by Medicare, most state Medicaid programs, and commercial payers. Medicare covers behavioral health telehealth using two-way real-time audio-video or audio-only when video isn't feasible, billed with appropriate place-of-service codes (02 for telehealth). CMS guidance confirms that RHCs and FQHCs can bill using code G2025 for these services with no frequency limits on certain service types.
If you're running standard outpatient services, telehealth reimbursement is stable. Document the modality, obtain informed consent specific to telehealth, and ensure your platform is HIPAA-compliant.
Intensive Outpatient Programs (IOP)
IOP via telehealth is reimbursed by Medicare and many state Medicaid programs, but not universally by commercial payers. Some commercial plans still require a hybrid model with a minimum percentage of in-person hours per week. Others will reimburse fully virtual IOP but at a lower rate than in-person services.
You need to verify reimbursement policies with each payer in your network before marketing a virtual IOP. If you're in Florida, for example, some commercial plans require at least 30% of IOP hours to be in-person. If you don't track that and bill accordingly, you'll face recoupments. Understanding state-specific billing requirements is non-negotiable.
Partial Hospitalization Programs (PHP)
PHP reimbursement via telehealth is more restrictive. Medicare requires PHP services to be furnished under the direction of a physician and typically expects in-person delivery unless specific exceptions apply. Some state Medicaid programs expanded PHP telehealth coverage during the pandemic and kept those policies, but many reverted to in-person requirements.
If you're operating a PHP, assume you need in-person infrastructure unless you've confirmed in writing that your primary payers will reimburse virtual PHP at the same rate and with the same authorization processes. Most won't.
Medication-Assisted Treatment (MAT)
MAT programs, particularly those prescribing buprenorphine for opioid use disorder, received the most significant regulatory clarity in 2025. The DEA and HHS finalized rules making permanent the telemedicine flexibilities for buprenorphine prescribing that were extended through the end of 2025. Practitioners can now prescribe buprenorphine via telemedicine without an initial in-person visit, provided they meet specific evaluation and treatment standards.
This is a structural advantage for MAT programs. You can onboard patients virtually, prescribe remotely, and bill for those services without the compliance risk that existed in prior years. However, state medical boards may impose additional requirements, so verify your state's rules before assuming full virtual prescribing is permissible.
DEA Telemedicine Prescribing Rules and What They Mean for Your Program
The DEA's final rule on telemedicine prescribing for controlled substances resolved years of uncertainty. For buprenorphine specifically, the rule allows practitioners to prescribe via telemedicine after conducting an evaluation that meets the standard of care, without requiring an in-person visit first.
For other controlled substances commonly used in behavioral health, including benzodiazepines and stimulants, the rules are stricter. Prescribers generally must conduct an in-person medical evaluation before prescribing Schedule II-IV controlled substances via telemedicine, unless the patient is receiving care in a hospital or clinic setting where another DEA-registered practitioner is present.
If your program includes psychiatric services that prescribe controlled substances beyond buprenorphine, you need protocols that ensure compliance with the in-person evaluation requirement. That might mean scheduling initial in-person psychiatric evaluations even if the rest of your program is virtual, or partnering with local clinics that can provide that service.
How to Structure a Hybrid Model That Works Clinically and Financially
A hybrid model isn't just about offering both options. It's about assigning the right modality to the right service for clinical, compliance, and reimbursement reasons.
Services That Should Be In-Person
Initial psychiatric evaluations for patients who will receive controlled substance prescriptions should be in-person to satisfy DEA requirements. Urine drug screens, breathalyzer tests, and any service requiring a physical specimen obviously require in-person delivery. PHP programming, unless you've confirmed virtual reimbursement, should default to in-person.
For patients in early recovery or those with complex medical or psychiatric comorbidities, clinical outcomes may favor in-person care even when telehealth is reimbursed. That's a clinical judgment, but it's one that should inform your program design.
Services That Can Be Virtual
Individual therapy, group therapy, case management, and psychiatric follow-ups after the initial evaluation can be delivered virtually with strong clinical outcomes and reliable reimbursement. Buprenorphine prescribing and MAT counseling can be fully virtual under the current rules.
Virtual services reduce no-show rates, expand your geographic reach, and lower your overhead. If you're deciding whether to expand capacity, adding virtual slots is cheaper than leasing more space.
Billing and Documentation for Hybrid Models
Every telehealth service must be documented with the correct place-of-service code (02 for telehealth), the modality used (audio-video or audio-only), and the patient's location. You need informed consent that specifically addresses telehealth, including privacy risks and technology requirements. CMS finalized virtual direct supervision rules beginning January 1, 2026, which affect how auxiliary staff can deliver services under physician supervision via telehealth.
If you're managing billing in-house, your staff needs training on these distinctions. If you're outsourcing, your billing partner needs to understand behavioral health telehealth rules specifically. Many general medical billing companies don't. Consider whether it's time to work with specialists who understand addiction treatment billing complexities.
State Licensing and Interstate Telehealth Compliance
Federal rules govern Medicare reimbursement. State rules govern where your clinicians can practice. Those are two different things.
Most states require clinicians to hold a license in the state where the patient is located during the telehealth session, not where the clinician is located. If you're delivering virtual IOP to patients across state lines, your therapists need licenses in every state where patients are receiving care. There are exceptions, including the Interstate Medical Licensure Compact and the Psychology Interjurisdictional Compact (PSYPACT), but those don't cover all professions or all states.
State-by-state variations in telehealth rules create compliance risks. Nebraska, South Dakota, and New York Medicaid, for example, expanded audio-only behavioral health coverage in ways that differ from federal Medicare rules. If you're operating in multiple states, you need a compliance matrix that tracks which services are permissible in which states under which payer rules.
Hiring a clinician licensed in multiple states is more expensive than hiring one licensed in a single state. That's a real cost that affects your staffing model. If you're expanding into new states, budget for licensing fees, application timelines, and potential supervision requirements for out-of-state clinicians.
Technology, Platforms, and HIPAA Compliance
Your telehealth platform must be HIPAA-compliant, which means it needs a Business Associate Agreement (BAA) with the vendor. Zoom for Healthcare, Doxy.me, SimplePractice, and other platforms marketed to behavioral health providers typically offer BAAs. Consumer-grade Zoom, FaceTime, and Skype do not meet HIPAA requirements.
Your Electronic Health Record (EHR) should integrate with your telehealth platform to streamline documentation. If clinicians are toggling between systems to document a session, you're increasing documentation errors and reducing productivity. Choosing the right EHR system for behavioral health should include evaluating telehealth integration.
You also need a technology access plan for patients. If a patient doesn't have reliable internet or a device capable of video, you need a protocol for how they'll access care. That might mean audio-only sessions where permissible, loaner devices, or partnerships with community centers that provide technology access.
Accreditation Considerations for Hybrid Telehealth Models
If you're pursuing CARF or Joint Commission accreditation, your hybrid model must meet their telehealth standards. Both accrediting bodies have specific requirements for informed consent, technology security, clinician training, and clinical appropriateness of telehealth services.
CARF, for example, requires that telehealth services meet the same clinical and administrative standards as in-person services, including staff qualifications, service planning, and outcome measurement. Joint Commission has similar requirements plus additional standards for technology reliability and patient safety.
If you're deciding between accreditation bodies, understanding how each evaluates telehealth is part of that decision. More detail on those distinctions is available in guides comparing accreditation options for behavioral health programs.
Frequently Asked Questions
Can IOP be fully virtual in 2026?
Medicare and many state Medicaid programs reimburse fully virtual IOP, but commercial payers vary. Some require a hybrid model with a minimum percentage of in-person hours. Verify reimbursement policies with each payer before marketing a fully virtual program. Clinically, fully virtual IOP can be effective for motivated patients with stable housing and reliable technology, but it's not appropriate for everyone.
Will Medicare and Medicaid pay for telehealth behavioral health in 2026?
Yes, with conditions. Medicare reimburses behavioral health telehealth for established patients with periodic in-person visits and allows audio-only when video isn't feasible. State Medicaid programs vary significantly. Some states expanded telehealth coverage permanently, others reverted to pre-pandemic rules. You need to verify your state's Medicaid telehealth policies and update your billing practices accordingly.
Do I need a separate telehealth license?
No, there's no such thing as a "telehealth license." Clinicians need to be licensed in the state where the patient is located during the session. If you're delivering care across state lines, your clinicians need licenses in each state, unless they qualify for an interstate compact. Budget for multi-state licensing if you're expanding your telehealth footprint.
What place-of-service code do I use for telehealth?
Use place-of-service code 02 for telehealth services delivered via audio-video or audio-only. If the service is delivered in-person, use the appropriate in-person code (e.g., 11 for office, 53 for community mental health center). Using the wrong code will result in claim denials or recoupments.
Can I prescribe buprenorphine via telehealth without ever seeing the patient in person?
Yes. The DEA's final rule made permanent the flexibilities allowing buprenorphine prescribing via telemedicine without an initial in-person visit, provided the prescriber conducts an evaluation that meets the standard of care. This applies specifically to buprenorphine for opioid use disorder. Other controlled substances have stricter requirements.
Building Your Model: Next Steps
You now have the regulatory framework. Your next step is to map your current services against these rules and identify where you have compliance gaps or reimbursement risks.
Start by auditing your current telehealth practices. Are you documenting modality and location correctly? Do you have informed consent forms that address telehealth specifically? Are your clinicians licensed in every state where patients are located? Are you using the correct place-of-service codes?
Then model your financials. Compare reimbursement rates for virtual versus in-person services across your payer mix. Calculate the cost of adding virtual capacity versus expanding physical space. Factor in multi-state licensing costs if you're expanding geographically.
Finally, build clinical protocols that assign modality based on clinical appropriateness, not just convenience. Some patients will do better in person. Some will do better virtually. Your intake process should assess technology access, housing stability, and clinical complexity to guide that decision.
If you're building a new program or restructuring an existing one, getting the billing and compliance infrastructure right from the start will save you from costly fixes later. Whether you're launching an IOP, expanding MAT services, or adding telehealth to an existing program, the operational decisions you make now will determine whether your model is sustainable in 2026 and beyond.
Need help structuring your hybrid telehealth model, verifying payer policies, or ensuring your billing practices meet 2026 compliance standards? Forward Care specializes in behavioral health billing and revenue cycle management for treatment providers. We help IOP, PHP, and MAT programs maximize reimbursement while minimizing compliance risk. Contact us today to discuss how we can support your program's growth.
