HIV telehealth — virtual care, rules, and privacy in 2026.

For a few years, a telehealth visit felt like a workaround — something you did because the clinic was closed, the bus didn't run, or the world had shut down. In 2026 it is simply part of how HIV care works. Your quarterly check-in might happen from your kitchen table. Your labs might be drawn at a lab five minutes from your house instead of at the clinic across the county. Your therapist may live three hours away and you may have never been in the same room.

What has changed is not whether virtual HIV care exists, but the legal scaffolding underneath it. The COVID-19 public health emergency ended, the temporary permissions attached to it expired, and Congress and federal agencies have been rebuilding the rules in short, expiring increments ever since. That is why the honest answer to "can I do this by video?" is usually yes, followed by four questions about who is licensed where, who pays, what is being prescribed, and where you can safely take the call.

Where telehealth for HIV actually stands in 2026

The emergency-era version of telehealth is gone. The clearest marker is privacy enforcement: the federal Office for Civil Rights ran a Notification of Enforcement Discretion during the pandemic that let clinicians use everyday video apps without penalty, and that discretion expired at 11:59 p.m. on May 11, 2023, followed by a 90-day transition period that ended August 9, 2023.12 Since then, a telehealth visit has had to meet the same HIPAA rules as any other part of your care.

Telehealth did not shrink back to nothing when that happened, because by then there was real evidence behind it — including a rare randomized one. Researchers in the Veterans Health Administration ran a cluster-randomized evaluation across 25 clinics and 1,670 people living with HIV. Groups of people were randomized to have HIV telehealth available at a nearby primary care clinic immediately, or a year later. The primary care sites sat 14 to 114 miles from the HIV specialty clinic, and 21% of veterans with HIV in outlying areas had been traveling more than an hour each way for specialty care.4

In the VA evaluation, documented suppression was 78.3% with telehealth availability versus 74.1% without it (RR 1.06; 95% CI 1.01–1.11). The 91.5% versus 80.0% comparison was a modeled estimate among people who would use telehealth, not a separately randomized comparison of users. Uptake increased with travel time saved.4

HRSA permits telehealth as a way to deliver allowable Ryan White services, provided clinical standards, professional authorization, and applicable state and local rules are met. This funding policy does not by itself prove equivalence across all clinical outcomes.2

HRSA reported 91.4% viral suppression among Ryan White clients receiving HIV medical care in 2024, and nearly 602,000 clients served overall. These are program-level figures, not a telehealth-only result; they should not be directly compared with a national percentage from a different year or denominator.3

What you can do virtually — and what you can't

The CDC's telehealth guide for HIV prevention and care describes three modalities: live two-way interactive video or audio, remote patient monitoring, and store-and-forward, where images or data are sent for a clinician to review later. It also describes three delivery models — direct-to-consumer, where you connect from home; partner site, where you go to a nearby organization that has a private room and equipment; and presenting site, the hub-and-spoke arrangement where a local clinic hosts you while a specialist joins remotely.1 Knowing which model your clinic uses tells you what to expect logistically.

Routinely done by video or phone

• Follow-up visits when labs are already drawn. Reviewing viral load and CD4 results, discussing side effects, adjusting or renewing antiretroviral therapy, and planning the next lab draw are conversations, and conversations travel well.
• Adherence and refill troubleshooting. A 15-minute call about pharmacy delays, a missed shipment, or a schedule that stopped fitting your life often prevents a gap in treatment.
• Non-medical case management and benefits navigation. Explicitly allowable under the Ryan White policy notice.1
• Mental health and substance use counseling. The strongest coverage position of any telehealth service — see the tele-mental-health section.
• PrEP starts and continuations, including home lab collection in some programs — see telePrEP.

Still needs a room

• The physical exam. The CDC guide is direct that telehealth is not the right setting when a physical exam is required, and recommends that a first visit with a new provider be in person or followed soon after by one.1
• Blood draws. Someone has to draw them — though that someone can be at a lab near you rather than at your clinic.
• Injectable medications. Long-acting injectable antiretroviral therapy and injectable PrEP are given by a clinician, on a schedule.7
• Anything acute. Chest pain and health emergencies are named specifically as unsuitable for telehealth.1

TelePrEP — what the evidence shows, and how the money works

TelePrEP still requires guideline-based testing. For oral PrEP, CDC recommends HIV antigen/antibody and HIV-1 RNA testing at least every three months, with refills limited to 90 days pending the next HIV test. Baseline kidney and hepatitis B assessment are required for oral tenofovir-based regimens. Ongoing kidney and STI testing depend on age, regimen, exposures, and anatomy.7

Iowa TelePrEP — the public health model

The clearest early proof came from Iowa, where the state health department and the University of Iowa built a pharmacist-led telePrEP service. Pharmacists conducted video visits on people's own smartphones, arranged blood draws at local labs, and mailed the medication. Between February 2017 and October 2018 the program received 186 referrals, 37% of them from public health, and 127 people — 68% — completed an initial video visit. Median age was 32 and 91% were men who have sex with men.5

The outcomes matter more than the design. Of people who completed a video visit, 91% started PrEP. Six-month retention was 61%. And 96% of indicated laboratory monitoring was completed — the number that answers the obvious worry about remote care. The program also found 37 sexually transmitted infections, including 8 syphilis, 10 gonorrhea, and 19 chlamydia; every one was linked to treatment within 14 days, and 80% within three days.5 A well-run virtual program does not skip the testing. It is largely built out of the testing.

The direct-to-consumer platforms — scale, and the trade-offs

Since then, commercial and nonprofit-partnered platforms have taken telePrEP national. A retrospective cohort published in JAMA Network Open in December 2025 analyzed one such platform's records from November 2018 through March 2025: 517,228 interactions, with 162,422 people — 31% — receiving at least one PrEP prescription. The growth is the headline. The platform accounted for under 1% of national PrEP users in 2019 (204 people), 2% in 2020, 9% in 2022, and 19% in 2024, when it served 110,068 people. Close to one in five people using PrEP in the United States were getting it through a single virtual service.6

During the study period, this platform reported no out-of-pocket charges, with medication assistance and nonprofit 340B partnerships supporting services. Those findings describe that platform’s model then; they do not guarantee current eligibility, cost, or availability at any telePrEP service. Ask about medication, visit, and laboratory charges separately.6

Controlled substances after the emergency — the DEA rules, plainly

First, the reassuring part: antiretroviral therapy is not a controlled substance. Nothing in this section governs your HIV medication, or PrEP, or the vast majority of what a telehealth visit for HIV involves. What it governs is the rest of your care — buprenorphine for opioid use disorder, stimulants for ADHD, benzodiazepines, testosterone, some sleep and pain medications, and medical cannabis certification is separate again.

The governing law is the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. It generally requires that a prescriber conduct at least one in-person medical evaluation before remotely prescribing a controlled substance. The statute's definition of the "practice of telemedicine" at 21 U.S.C. 802(54) allows prescribing without that in-person exam only under seven specific circumstances that Congress approved, listed at 802(54)(A) through (G) — one of which lets the Attorney General and the Secretary of Health and Human Services jointly issue rules creating additional circumstances.10

An in-person medical evaluation by the prescribing practitioner generally satisfies the Ryan Haight Act’s prior-examination requirement for that relationship. It does not remove other federal or state prescribing rules, professional standards, or clinical follow-up needs.10

What is in force in 2026

The pandemic-era flexibilities were built on that seventh category, and they have been extended four times. The current authority is the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities for Prescription of Controlled Medications, issued jointly by DEA and HHS, published December 31, 2025, and effective January 1, 2026 through December 31, 2026.10 Under it, a DEA-registered prescriber may prescribe Schedule II through V controlled substances by telemedicine to someone they have never examined in person, provided the prescription is for a legitimate medical purpose in the usual course of practice, the visit uses an interactive telecommunications system, the prescriber is authorized for that class of drug, and the prescription meets the other federal prescription rules.10

Alongside the temporary rule, two permanent final rules were published January 17, 2025 and took effect December 31, 2025: one expanding buprenorphine treatment via telemedicine, and one on continuity of care via telemedicine for veterans.9 The practical result is that three different sets of authority now overlap, which is exactly why prescribers sometimes give confusing answers.

The temporary extension permits qualifying opioid-use-disorder treatment by audio-only telemedicine under specified conditions. A separate buprenorphine rule provides a pathway allowing up to a total six-month supply after telephone or video evaluation before an in-person visit or another authorized mechanism is needed. The prescriber must determine which authority and safeguards apply.911

Interstate licensure — why your location during the visit matters

Clinicians generally need authorization to practice where the patient is physically located. This may come from a license, a compact privilege, registration, or a specific exception; ask before a visit while traveling or after moving.2

Licensure compacts are one route to cross-state practice, not a replacement for every state rule. Their effect differs by profession, and membership does not always mean a state is ready to issue licenses or privileges.

The three that matter most

• Interstate Medical Licensure Compact (physicians): This offers an expedited route to separate licenses in participating states. Confirm current implementation and the clinician’s actual license for your location; the compact is not a national medical license.15
• Nurse Licensure Compact: It covers RN and LPN/VN practice, including qualifying telehealth nursing. It does not confer APRN or nurse-practitioner authority or prescribing rights; those must be checked separately.16
• Counseling Compact: On September 20, 2026, the commission lists nine operational states: Arkansas, Arizona, Georgia, Indiana, Louisiana, Minnesota, Ohio, Tennessee, and Wyoming. Verify that the counselor holds the required privilege for your state before booking.17

Three practical consequences. If you move, even temporarily, tell your clinic before your next virtual visit — a visit conducted while you are sitting in another state may not be legal for your provider. If you travel seasonally, which is common in Florida, ask whether your clinician is licensed in both states or whether you need a local bridge. And if you are looking for an HIV-experienced therapist and your state is not yet live in the Counseling Compact, the search may be narrower than it looks online.

Who pays — Medicare, Medicaid, and commercial plans

Coverage is where telehealth gets genuinely messy, because it is set by three different systems on three different clocks.

Medicare

CMS’s February 26, 2026 guidance extends broad Medicare telehealth access, including from home, through December 31, 2027. After that, many services again face rural-site restrictions unless an exception applies. Behavioral-health access has permanent geographic and home-site protections, but covered service, practitioner, and other billing requirements still matter.8

Medicaid

Medicaid is state-by-state, and the variation is real rather than cosmetic. Florida's rule is a good illustration of how specific it gets. Florida Medicaid defines telemedicine as care delivered by a practitioner at a site other than yours for evaluation, diagnosis, or treatment, and reimburses it only when the equipment provides, at minimum, audio and video with two-way, real-time interactive communication. It explicitly does not reimburse telephone conversations, chart reviews, email, fax, or the equipment itself.22 If you are on Florida Medicaid, a phone-only visit may not be a covered visit — ask for video, or ask what the clinic does when video fails.

Commercial plans

Most states have some form of private-payer telehealth law, but "parity" means different things in different statutes — sometimes that a plan must cover a service delivered by telehealth if it covers it in person, sometimes that it must pay the same rate, and sometimes only the first. Call the number on your card and ask three questions: is a video visit with this clinician covered, is a phone visit covered, and is my cost-sharing the same as in person.

Privacy at home — the part nobody plans for

For many people living with HIV, the hardest thing about a telehealth visit is not the technology. It is that a clinic room has a door and your apartment may not have one you can close. Confidentiality risk moved from the waiting room into your living room, and it is worth planning for rather than improvising.

Start with what your clinic owes you. Since the enforcement discretion ended in 2023, telehealth has to meet the HIPAA Security Rule like anything else.12 Federal guidance on audio-only care draws a line that surprises people: the Security Rule does not apply to a traditional landline call, because that is not electronic transmission — but it does apply to voice over IP, mobile calls, apps, Wi-Fi, and any recording or transcript.13 A clinic's risk analysis is expected to consider interception, encryption, authentication, and whether devices lock themselves.13

Your side of the call

Federal guidance expects clinicians to use reasonably private settings and reasonable safeguards, including lowering their voices and not using speakerphone.13 The same advice works for you, plus what HIV telehealth programs have learned about creating private space: a room with a door that closes; sound masking such as music or white noise; sound-dampening curtains or soft furnishings. One counterintuitive note from that guidance — headphones help you hear, but they also make people talk louder, so watch your own volume.1

• Pick the room before the appointment, not two minutes into it. A parked car, a bathroom, a stairwell, or a friend's place all count.
• Use headphones and keep your voice down. Whoever is on the other side of the wall hears your half, not the clinician's.
• Ask about audio-only if video is the problem. Video that shows your bedroom to a stranger is a privacy cost too. But check coverage first — Florida Medicaid, for instance, does not reimburse telephone-only visits.22
• Ask whether the visit is recorded, who can see the note, and how results reach you. Portal messages and mailed letters are not equally private in a shared household.
• Lock your own device. HIPAA stops at your screen; a passcode and an auto-lock are your job.12

Accessibility — rights you already have, in writing

Telehealth is covered by federal civil rights law, and the specifics are stronger than most people realize. Joint guidance from the HHS Office for Civil Rights and the Department of Justice's Civil Rights Division applies Section 504 of the Rehabilitation Act, the Americans with Disabilities Act, Title VI of the Civil Rights Act, and Section 1557 of the Affordable Care Act to telehealth, and points to the regulation requiring that health programs delivered through electronic and information technology be accessible.14

If you are Deaf, hard of hearing, blind, or have low vision

• Communication aids and services must be provided free of charge to you.14
• A provider may not require you to bring your own interpreter or captioner.14
• The provider must arrange effective communication for your needs, such as a qualified interpreter or real-time captioning, with suitable technology. Both are not automatically required for every person or visit.14
• Patient-facing technology must be compatible with screen readers.14

If you have a disability that affects how visits work for you

• A reasonable modification may include allowing a support person to join from another location when needed for access; discuss the arrangement with the clinic.14
• Reasonable modifications include scheduling a longer appointment when you need more time.14
• A blanket refusal to offer telehealth to people with intellectual disabilities is unlawful.14

If English is not your first language

Providers must take reasonable steps to give people with limited English proficiency meaningful access — not only to the visit itself, but to information about telehealth being available and to scheduling it. The platform must be able to support telephone or video remote interpreters, and providers should tell you that language services are free. The guidance also warns against relying on family members or friends to interpret, citing confidentiality, conflicts of interest, and domestic violence concerns.14 In HIV care that caution is not abstract — the person offering to translate may be the person you have not disclosed to.

The digital divide — the barrier policy has not fixed

Telehealth requires an appropriate connection, device, and private place. CDC guidance identifies these as practical access barriers. Ask the HIV program about accessible equipment, a partner site, or an in-person option. HRSA allows eligible services to be delivered by telehealth subject to clinical and local requirements.12

The national numbers show the shape of it. In a Pew Research Center survey fielded February through June 2025, 78% of U.S. adults subscribed to home broadband — but that ranged from 54% of adults in households earning under $30,000 to 94% at $75,000 and above. By race and ethnicity, home broadband ran 81% among White adults, 71% among Black adults, and 68% among Hispanic adults. Sixteen percent of adults were smartphone-only internet users, with no home broadband at all — and that figure rose to 34% of adults in households under $30,000.18

What help still exists

The largest program is gone. The Affordable Connectivity Program, which gave millions of households a monthly internet discount, stopped providing the benefit on June 1, 2024 after Congress did not appropriate additional funding; April 2024 was the last full month it was available. The FCC also warns that some websites still solicit ACP enrollment information even though the program has ended.19

Lifeline remains. It provides a discount of up to $9.25 a month on qualifying internet or bundled service, or $5.25 for voice-only, and up to $34.25 a month for subscribers on Tribal lands. You qualify with household income at or below 135% of the federal poverty guidelines or through participation in a qualifying program such as Medicaid or SNAP. There is one benefit per household, and you cannot apply it to both a wireline and a wireless service at the same time. Survivors of certain crimes can receive up to $9.25 through a dedicated pathway and may apply for the standard benefit after six months.20

Local options may include a clinic partner site or library internet access. Ask about equipment, accessibility, and a private room; availability differs by location. A Ryan White program may provide eligible services through telehealth under HRSA policy, but that does not guarantee a nearby facility.12

Tele-mental health — the strongest case in the whole field

Medicare permits qualifying behavioral-health telehealth from home and audio-only visits in specified circumstances. That does not make every phone call reimbursable. Under current CMS guidance, applicable in-person mental-health requirements are deferred until 2028, with exceptions; confirm coverage and the care plan.88

For opioid use disorder, ask about telemedicine initiation of buprenorphine. The applicable temporary or permanent prescribing pathway, state law, and clinical assessment determine the requirements; a six-month supply is not an automatic entitlement.11

Two practical notes. First, integrated care is worth asking for by name — HIV clinics that host behavioral health inside the same program mean your therapist can talk to your HIV clinician, and the Ryan White policy notice already treats telehealth as an allowable modality for outpatient services and non-medical case management.1 Second, licensure still binds. If your state is not yet live in the Counseling Compact, a counselor in another state may not be able to see you even by video.17 Our companion page on mental health and HIV goes further into what to look for in a therapist.

When telehealth is the wrong tool

Good virtual care includes knowing when to stop and go in. Federal HIV telehealth guidance names health emergencies, chest pain, and situations requiring a physical exam as unsuitable for telehealth, and recommends that an initial visit with a new provider happen in person or be followed soon after by one.1

• Anything acute. Chest pain, trouble breathing, a severe or unusual headache, fever with confusion, a new rash with mouth sores or peeling skin, or a rash that appears soon after starting a new medication. Do not schedule a video visit for these. Call 911 or go in.1
• A physical exam you actually need. A new lump, an abnormal breath sound, unexplained weight loss, a wound, an anal or genital lesion, or an eye change — a camera cannot palpate, listen, or examine.1
• Injection appointments remain essential. Cabotegravir PrEP has its own initiation and every-two-month schedule, while lenacapavir PrEP is given every six months. Testing, missed-dose, and discontinuation plans differ. Long-acting HIV treatment follows a separate regimen-specific plan.^[23]7
• Labs and vaccines. Viral load, CD4, kidney function, lipids, hepatitis B serology, and STI testing all require a specimen; most vaccines require an arm.7 The visit can still be virtual — just not the draw.
• Anything you cannot say out loud where you are. If a roommate, family member, or partner is within earshot and you are being asked about disclosure, safety, or substance use, reschedule or move rather than answering carefully.14

Florida In Focus — the statute, Medicaid, and a program that got there early

Florida had a telehealth law before the pandemic, which is part of why the state's rules changed less than others when the emergency ended. Section 456.47, Florida Statutes, passed in the 2019 legislative session, was signed June 25, 2019, and took effect July 1, 2019. It set standards of practice for telehealth in Florida, including how patient evaluations are conducted, record-keeping, and the prescribing of controlled substances.21

The piece that affects you most as a Floridian is the registration requirement. Out-of-state practitioners must register with the Florida Department of Health in order to provide telehealth to people located in Florida — through the department's online licensing portal, choosing the "Out-of-State Telehealth Providers" board, or by paper application. Clinicians who already hold a current Florida license do not need the separate registration.21 The department verifies submitted information against the National Practitioner Data Bank, and can suspend or revoke a registration, issue a reprimand, or send a letter of concern.21

Translated: if you are in Florida and you found a virtual HIV or mental health provider based elsewhere, there is a specific thing to ask. Are you licensed in Florida, or registered with the Florida Department of Health as an out-of-state telehealth provider? A real program will answer immediately.

Florida Medicaid

Florida Medicaid's telemedicine rule requires interactive equipment with, at minimum, audio and video and two-way real-time interactive communication, and does not reimburse telephone conversations, chart reviews, email, fax, or the equipment. Practitioners bill fee-for-service telemedicine with modifier GT.22 Practically: plan for video, and if your connection cannot carry video, tell the clinic before the visit so they can arrange something that is actually covered.

Jacksonville got there first

The CDC guide describes a UF Health Jacksonville Virtual Visit program launched in September 2017, using partner locations with private space and devices. Its service volumes and staffing are historical program examples; contact the clinic for current availability.1

Tampa is in the evidence base too: the James A. Haley Veterans' Hospital was one of the three VA systems in the cluster-randomized telehealth evaluation that found improved documented viral suppression where telehealth was available.4 For help locating HIV care and wraparound services in the state, start with our find care page.

Red flags — telling good virtual HIV care from a storefront

Virtual care has grown fast, and not all of it is built well. The difference is rarely the website. It is whether the program does the testing, the linkage, and the follow-up that the clinical guidelines require.

Warning signs

• No HIV or infectious disease expertise anywhere in the picture. A general telehealth service prescribing antiretroviral therapy or PrEP with no HIV-experienced clinician, pharmacist, or consultant is working outside its depth.
• PrEP without appropriate HIV testing: Oral PrEP needs testing at least every three months; injectable schedules and test requirements differ. Ask how the program obtains results before prescribing or administering the next dose.7
• No baseline hepatitis B screening or kidney function check before starting oral PrEP — both are required, and stopping oral PrEP with untreated hepatitis B carries real risk.7
• No plan for a positive result. Ask directly: what happens if my HIV test is reactive? A serious program links you to local HIV care; a serious program also refers you to a local clinician if hepatitis B screening comes back positive.6
• No STI-testing plan: Screening intervals and specimen sites should follow the regimen, sexual history, anatomy, and CDC guidance. Oral-PrEP follow-up is not one identical six-month schedule for every patient.5
• No accountable clinician: Ask who reviews your information and prescribes, how to reach them, and when a live or in-person assessment is needed. Some care can use asynchronous review; a questionnaire alone does not tell you whether a service is appropriate.
• Evasiveness about licensure. A program that will not tell you which state its clinicians are licensed in — or, in Florida, whether they are registered as out-of-state telehealth providers — is telling you something.21
• No privacy explanation: Ask how the platform protects records and whether the clinic has any required business-associate agreement. HIPAA obligations depend on the vendor’s role; the answer should explain that relationship.13
• Surprise costs. Ask what the visit, the labs, and the medication each cost before you start. Reputable programs are specific, and many are free.6

What good looks like

Start here — a short list that actually moves things

1. Ask your current provider whether telehealth is available, out loud. Many programs offer it and never mention it; some make it the default and let you decline.1 If your clinic does not offer it, ask whether a partner site or a hosted visit at a nearer clinic is possible.1
2. Verify coverage before the visit, not after. Ask your plan whether video is covered, whether phone is covered, and what your share is. If you have Medicare, expanded telehealth from home runs through December 31, 2027, and behavioral health protections are permanent.8 If you have Florida Medicaid, plan on video.22
3. Sort out labs first. Ask which lab near you your clinic can send orders to, and get the draw done before the visit so the appointment is about results rather than scheduling.
4. Test the technology beforehand. Check the camera, microphone, portal, and backup number so a connection problem is easier to resolve.
5. Pick your room, and your fallback room. Use headphones, keep your voice down, and remember that a parked car counts as privacy.13
6. Request access support. Tell the clinic if you need interpreting, captioning, an accessible format, more time, or a support person. Required communication aids must not be charged to you; ordinary covered-visit charges may still apply.14
7. If connectivity is the barrier, say so. Ask about Lifeline, about library hotspot lending, and about clinic or partner-site rooms.201
8. Plan continued prescriptions. If you rely on remote controlled-medication prescribing, ask what will happen after the current temporary extension ends on December 31, 2026.10
9. If you move or travel, tell the clinic. Licensure follows your location during the visit, not your mailing address.15