GP TELEHEALTH COMPLIANCE & REGULATORY SUPPORT
Keep your GP telehealth service safe, compliant and audit-ready
HCPA helps GP telehealth services strengthen clinical workflows, Medicare claiming, privacy, prescribing controls and practitioner oversight as virtual patient care grows.

Telehealth changes how care is delivered, not the professional standard expected of the practitioner. The Medical Board of Australia’s telehealth consultation guidelines apply the same clinical expectations to telehealth as other forms of medical care.
When GP telehealth compliance needs immediate action
Problems commonly arise through Medicare claiming, prescribing, patient complaints, privacy incidents or consultations that should have moved to face-to-face care. Address any immediate patient risk first, then preserve the clinical and system evidence needed to understand what happened.
Medicare telehealth eligibility concerns
A practice may discover that a patient did not meet the MyMedicare, eligible telehealth practitioner or exemption pathway required for the MBS item claimed.
Review the affected claims and clinical records, establish the scale of the issue and avoid retrospectively altering notes.
Telehealth prescribing or patient-safety concerns
A virtual consultation may reveal that the available information was not sufficient to safely assess, diagnose or prescribe for the patient.
Check whether the practitioner had enough information to make the decision and whether face-to-face assessment or urgent care should have been arranged.
Privacy or cybersecurity incidents
Telehealth involves health information moving across booking, consultation, messaging and clinical-record systems.
Contain the incident, preserve relevant system evidence and assess whether privacy or data-breach response obligations are triggered.
Ahpra complaint or investigation
A patient complaint or regulatory concern may focus on the quality of assessment, prescribing, records, follow-up or another practitioner’s conduct.
Identify the consultation and practitioner involved, preserve the original record and review the surrounding workflow before preparing a response.
Key GP telehealth compliance requirements
A compliant telehealth model should allow the practitioner to make a safe clinical decision while leaving enough evidence to explain how that decision was reached.
Decide whether telehealth is clinically appropriate
Not every presentation is suitable for remote care.
Practitioners should continually assess whether phone or video provides enough information and have a clear pathway to face-to-face assessment, emergency care or another service when it does not.
The Medical Board’s telehealth guidelines specifically require practitioners to reassess the appropriateness of telehealth during the consultation and arrange in-person care where necessary
Confirm identity, consent and patient location
The clinic should know who is receiving the consultation, obtain appropriate consent and know where the patient is located.
If the consultation moves beyond telehealth, document the referral, escalation or face-to-face pathway as part of the clinical record.
Keep telehealth records clinically complete
The record should show the history, assessment, clinical reasoning, treatment or prescribing decision and follow-up plan relevant to the consultation.
Where a consultation cannot safely remain virtual, the record should also make the escalation or referral pathway clear.
Protect health information across the patient journey
Privacy needs to cover more than the video platform itself.
Booking forms, messaging, payments, clinical records, prescriptions and staff access can all involve sensitive health information. The OAIC Guide to Health Privacy sets out privacy obligations for health service providers, including telehealth and online health services.
Keep telehealth prescribing clinically defensible
Telehealth prescribing still requires an appropriate clinical assessment.
The practitioner needs enough information to prescribe safely, understand relevant history and arrange monitoring or follow-up. The workflow should support that clinical judgement rather than shortcut it.
Check Medicare telehealth eligibility before claiming
For relevant non-referred GP telehealth items, the patient must generally be registered in MyMedicare with the billing practice, meet the eligible telehealth practitioner requirement or qualify for an exemption.
The current MBS telehealth eligibility criteria set out these pathways.
A useful test is whether another practitioner reviewing the record could understand why telehealth was appropriate, what clinical decision was made and what happened next.
Medicare telehealth audits and Ahpra investigation readiness
A telehealth service can face scrutiny from more than one direction. Medicare may review whether an MBS item was correctly claimed, while Ahpra or the Medical Board may examine practitioner conduct, prescribing, documentation or patient care.
Evidence may include:
practitioner registration and provider details
patient identity and telehealth eligibility evidence
consultation, clinical reasoning and prescribing records
MyMedicare or applicable exemption evidence
consent, privacy and access-control records
referral, escalation, complaint and follow-up records

The strongest preparation is to follow a real consultation from booking through eligibility checking, assessment, documentation, billing and follow-up. Each handoff should leave enough evidence to show what the practice and practitioner did.
HCPA can review that workflow, identify gaps in Medicare or clinical evidence and help strengthen the systems surrounding telehealth delivery.
Speak with an HCPA GP telehealth consultantWhat to do after a Medicare telehealth audit or Ahpra concern
Identify the issue
Confirm which practitioner, consultation, MBS claim or clinical process has been questioned.
Protect affected patients
Address any immediate prescribing, follow-up or patient-safety concern and arrange further care where required.
Preserve the evidence
Retain clinical notes, billing records, platform logs and communications without retrospectively altering the original record.
Correct the underlying process
Fix the workflow, training or system weakness and document how the change will reduce the risk of recurrence.
Why choose HCPA for GP telehealth compliance?
Telehealth compliance often breaks down between systems. Booking establishes patient and Medicare eligibility, the consultation drives the clinical decision, the practice software records it and the billing process determines what is claimed.
HCPA reviews that complete pathway to identify where clinical, Medicare or privacy requirements are being lost between steps.
businesses supported
consultants
client revenue generated
Support can include telehealth workflow reviews, Medicare compliance, prescribing and escalation pathways, privacy controls, patient records and corrective-action planning.
Frequently asked questions about GP telehealth compliance
How can a GP telehealth service meet Ahpra, Medical Board and privacy requirements across its consultation model?
Build the requirements into the patient journey rather than managing them as separate policies.
The workflow should support patient identification, consent, appropriate assessment, complete clinical records, privacy, prescribing, follow-up and escalation to face-to-face care where needed.
The Medical Board’s telehealth guidelines cover professional expectations for doctors, while the OAIC Guide to Health Privacy addresses the handling of patient health information.
What should a telehealth practice do if it faces a Medicare audit or Ahpra investigation?
Start with the exact consultation, practitioner or claim that has been questioned.
Preserve the original clinical and billing evidence, address any ongoing patient risk and determine whether the concern is isolated or reflects a wider workflow problem.
Corrective action should address the underlying process rather than reconstructing documentation after the event.
What is the Medicare 12-month rule for GP telehealth?
One pathway to eligibility for relevant GP telehealth items is for the practitioner, or another eligible practitioner at the same practice, to have provided the patient with a qualifying face-to-face service in the preceding 12 months.
MyMedicare registration with the billing practice is now an alternative eligibility pathway for relevant GP telehealth services. However, to register for MyMedicare through Services Australia via the HPOS Organisation Register, a practice must typically operate out of a physical location providing Medicare-funded services and be accredited (or working toward accreditation) against the National General Practice Accreditation Scheme, while specific exemptions such as after-hours urgent but non-emergency consults and Focused Psychological Strategies (FPS) therapy consults also continue to apply.
Does a previous phone or video appointment satisfy the 12-month rule?
No.
A previous phone or video consultation does not itself count as the qualifying face-to-face service for the eligible telehealth practitioner pathway.
Where an exemption is used, the relevant requirements should be documented in the patient’s clinical record.
When should a telehealth consultation move to face-to-face care?
When the practitioner cannot obtain enough information remotely to assess or manage the patient safely.
This may arise because of the presenting issue, need for physical examination, diagnostic uncertainty or emerging clinical risk.
The workflow should make escalation easy rather than creating pressure to complete every consultation remotely.
Does telehealth software make a GP service privacy-compliant?
No.
Secure technology is only one part of the privacy environment. The practice still needs appropriate permissions, staff training, information-handling processes and a plan for responding to privacy incidents.
The OAIC expects health practices to establish and maintain active privacy-management processes.
What should a GP document for a Medicare telehealth claim?
The clinical record should support both the service provided and the MBS item claimed.
Where relevant, the practice should also be able to demonstrate the patient’s MyMedicare, eligible telehealth practitioner or exemption pathway.
Can telehealth prescribing be investigated by Ahpra?
Yes. Telehealth does not lower the expected standard of clinical assessment or prescribing.
A regulator may consider whether the practitioner had sufficient information to prescribe safely, whether the assessment and reasoning were appropriate and whether follow-up or escalation was adequately managed.
What should a national telehealth practice consider about patient location?
The practice should know where the patient is during the consultation, particularly where urgent escalation may be required.
Location can affect which emergency, referral or prescribing requirements apply and becomes particularly important if the patient becomes clinically unstable during remote care.
What is a common compliance weakness in GP telehealth services?
Treating booking, clinical care and billing as separate systems.
A patient may pass through eligibility checking, consultation, prescribing, documentation and claiming, so a gap at one stage can create problems later. Periodically tracing a real patient journey end to end can expose those handoff failures before an audit or complaint does.
Related GP telehealth resources
Starting a GP telehealth business
Planning to deliver general practice care online?
Growing your GP telehealth practice
Ready to attract more patients and increase consultation volumes?

