Building a Telehealth Compliance Calendar

A telehealth compliance calendar has two layers: the recurring dates every clinician and entity carries (licenses, registrations, revalidations) and the rule dates that move the whole practice. The 2026 to 2028 rule dates to put on it now, the recurring items, and how to set lead times so nothing lapses.

Build the calendar in two layers. The first is recurring: every license, compact privilege, telehealth registration, DEA and state controlled-substance registration, payer revalidation and vendor contract, by clinician and by state, with a lead time long enough to renew. The second is rule dates: the federal and state changes that alter what the whole practice can do. Most practices keep the first in a spreadsheet and forget the second until a deadline passes.

Which rule dates belong on the calendar now?

December 31, 2026. DEA's fourth temporary extension of telemedicine flexibilities for controlled substances (90 FR 61301) ends. Every controlled-substance patient seen only by telemedicine needs a documented plan for January 1, 2027. See what changes on January 1, 2027.
When published. DEA's Special Registration for Telemedicine final rule. It went to OIRA on August 25, 2026 with a Unified Agenda target of November 2026. Put a placeholder on the calendar and a task to read the rule within a week of publication.
Early November 2026 (expected). CMS's CY2027 physician fee schedule final rule, which will settle the proposals in 91 FR 43842, including whether RPM and RTM clinical staff must be direct employees from January 1, 2027. See the 2027 RPM direct employee proposal.
November 2026 (expected). The Center for Connected Health Policy's Fall 2026 state telehealth law report. Re-check every state you serve against it.
January 1, 2027. Medicare telehealth claims tied to certain virtual platform arrangements, and incident-to telehealth, need the new modifiers required by § 6209(g) of the Consolidated Appropriations Act, 2026 (CMS proposed BB and BC).
December 31, 2027. Medicare's telehealth flexibilities under the Consolidated Appropriations Act, 2026 end: the home as an originating site, no geographic limits, the expanded practitioner list, FQHC and RHC distant site services, and audio-only. See the Medicare telehealth hub.
January 1, 2028. The deferred in-person requirement for Medicare tele-mental health takes effect unless Congress extends it again. See Medicare's in-person requirement for tele-mental health.
January 1, 2029. Oregon SB 951's MSO restrictions reach arrangements that existed before the law. See Oregon SB 951.

Recurring items for each clinician

Each state license and its renewal date, plus the CE due before renewal. CE tracking help: White Glove CME.
Each compact privilege or letter of qualification, which can lapse with the home-state license.
Each telehealth-specific registration (Florida's under Fla. Stat. § 456.47(4) is the common one) and its renewal rules.
Each DEA registration, which is state-specific, and each state controlled-substance registration where the state requires one.
Board certification and maintenance of certification cycles.
Malpractice coverage, including whether it covers patients in every state.
Collaboration or supervision agreements for NPs and PAs in states that require them.

Recurring items for each entity

Medicare revalidation (generally every five years) and changes of information, which have their own reporting windows. Enrollment help: White Glove Credentialing.
Commercial payer recredentialing and CAQH reattestation.
Entity registrations and foreign qualifications in each state, and the registered agent.
Vendor contracts and BAAs: renewal, price change notices, and the termination notice window.
HIPAA security risk analysis review, policy review, and annual training.
Website and tracking review, at least quarterly and on every site release.

How much lead time should each item get?

Set the reminder at the processing time plus a margin, not at the expiration date. A rough guide:

License renewals with CE: 120 days, so missing CE can be finished.
New state licenses for expansion: as long as the board's posted processing time plus fingerprinting, often several months.
DEA renewals: 60 days, and confirm the renewal posted.
Payer revalidations: 90 days.
Contract termination windows: 30 days before the notice deadline, which itself is often 60 to 90 days before renewal.
Rule dates: a planning task six months out, a readiness check 60 days out.

Who owns the calendar?

One named person, with a backup. Each entry should name the responsible party, the evidence of completion (a license lookup screenshot, a confirmation number), and a hard rule: scheduling blocks a clinician from seeing patients in a state the day a required credential lapses.

Our Compliance Calendar & Rule Watch ($495 per month) builds the calendar for your roster and states and updates it as rules publish. See pricing.

Common questions

What telehealth deadlines are coming up in 2026 and 2027?

DEA's temporary telemedicine flexibilities end December 31, 2026. New Medicare telehealth modifiers for certain platform arrangements start January 1, 2027. Medicare's telehealth flexibilities, including audio-only, run through December 31, 2027, and the tele-mental-health in-person requirement is deferred to January 1, 2028.

How early should a telehealth practice start license renewals?

About 120 days before expiration when CE is due, so any missing hours can be finished. For new state licenses, start as early as the board's processing time and fingerprinting require, which is often several months.

Who should own a telehealth compliance calendar?

One named person with a backup. Every entry should list the responsible party and the proof of completion, and scheduling should block a clinician in any state where a required credential has lapsed.