How to Open a Telehealth Clinic in California: 2026 Requirements and How to Secure Your Payments
California telehealth clinics must coordinate professional licensure, physician control, consent, privacy, business registration, and technology before launch. But there is a hidden hurdle that catches many founders off guard: payment processing.
You can have perfect clinical compliance, but if a mainstream processor like Stripe or PayPal flags your telehealth model as "high risk" and freezes your funds, your clinic effectively closes.
Green Payment helps California telehealth founders align their clinical compliance with the strict requirements of payment networks and LegitScript, ensuring your revenue keeps flowing.
California Telehealth Requirements at a Glance
Requirement | What California Requires | Authority |
Licensing authority | California physician licenses are issued by the Medical Board; other professions use their own boards. | Medical Board; BRN; PA Board |
Telehealth practice standard | Telehealth care must meet the same applicable professional standard as in-person care. | BPC § 2290.5 |
Out-of-state practitioner rule | California requires physicians treating California patients by telehealth to hold California licensure. | Medical Board of California |
Patient consent | Providers must explain telehealth, obtain verbal or written consent, and document it. | BPC § 2290.5; DHCS |
Practitioner-patient relationship | Synchronous video may establish a relationship with a new patient; broader modality rules are unverified. | DHCS; confirm with board |
Prescribing via telehealth | Prescribing remains limited by California licensure, scope, informed consent, and applicable rules. | BPC §§ 2052, 2290.5 |
Ownership and corporate practice | Clinical judgment, records, clinical hiring, and other medical functions must remain under appropriate physician control. | BPC §§ 2052, 2400 |
Business registration and fees | Register the applicable entity; review fictitious-name and local filings. No universal telehealth-clinic fee was established. | Medical Board; DHCS |
Privacy beyond HIPAA | CMIA applies to medical information; CCPA exclusions do not necessarily cover every business data stream. | Civil Code § 56 et seq.; § 1798.145(c) |
Note: Beyond state compliance, payment processors and LegitScript will audit these exact areas. If your prescriber isn't properly licensed in CA, or your corporate structure violates CPOM, your merchant account will be terminated.
Do I Need a California License to Treat California Patients?
Yes. Physicians treating patients located in California by telehealth must hold a California license, according to the Medical Board of California and Business and Professions Code § 2290.5. For nurse practitioners, physician assistants, psychologists, therapists, and other professionals, authorization is profession-specific. The California Board of Registered Nursing and California Physician Assistant Board are separate review points.
The Payment Reality: When you apply for a high-risk merchant account or LegitScript certification, you must submit these exact licenses. Green Payment helps you ensure your credentialing documentation is formatted correctly so payment underwriters approve it on the first try.
Can a Non-Doctor Own a Telehealth Business in California?
California’s Corporate Practice of Medicine (CPOM) doctrine strictly restricts unlicensed persons and entities from practicing medicine or interfering with physicians’ professional judgment under Business and Professions Code §§ 2052 and 2400. A non-physician business may provide administrative or back-office services via a Management Services Organization (MSO), but it cannot own or operate the medical practice or exercise undue control over clinical functions. A professional corporation must be at least 51% physician-owned.
The Payment Reality: This is critical for your merchant account. Payment processors and LegitScript require a crystal-clear separation between the MSO (which handles tech, marketing, and billing) and the Medical Practice (which handles clinical care). If your corporate structure is blurry, processors will view you as an unlicensed entity selling prescriptions and drop your account immediately.
What Consent and Privacy Requirements Apply?
California requires the initiating provider to inform the patient about telehealth, obtain verbal or written consent, and document it in the medical record under Business and Professions Code § 2290.5. Furthermore, California’s Confidentiality of Medical Information Act (CMIA) and the California Consumer Privacy Act (CCPA) impose strict data privacy rules beyond standard HIPAA, covering everything from clinical records to website analytics and cookies.
The Payment Reality: Beyond data privacy, you need PCI-compliant, high-risk payment gateways that integrate securely with your EHR without exposing Protected Health Information (PHI). Mainstream processors often lack the specialized infrastructure to handle telehealth data flows safely, which is why Green Payment provisions gateways specifically configured for healthcare compliance.
How Should a California Telehealth Business Handle Marketing and Tech?
Your brand and platform can support access and scheduling, but licensed clinicians must control clinical decisions. Marketing should not imply automatic prescription access, guaranteed outcomes, or universal clinician availability.
When reviewing your tech stack, you must include a payment processor that actually allows telehealth. If you try to use Stripe, Square, or PayPal, their automated algorithms will detect terms like "telehealth," "GLP-1," or "prescription" and freeze your funds.
The Solution: LegitScript certification is the key that unlocks compliant advertising and stable payment processing. Green Payment specializes in pairing LegitScript-certified telehealth clinics with high-risk merchant accounts that Visa and Mastercard recognize as compliant.
What Changed Recently in California Telehealth Rules?
October 7, 2025: Governor Newsom announced AB 688, the Telehealth for All Act of 2025, which includes provisions for a publicly available Medi-Cal Telehealth Utilization Report beginning in 2028.
January 1, 2026: The California Consumer Privacy Act (CCPA) statutory text took effect in the latest version published by the California Privacy Protection Agency.
April 1, 2026: The California Attorney General announced an amicus filing concerning corporate-practice restrictions and MSO control over physician-owned practices, highlighting the need for strict separation of clinical and administrative duties.
January 28, 2026: The Physician Assistant Board reported legislation affecting CURES reporting for testosterone and mifepristone, reinforcing strict prescribing-data compliance.
The California Telehealth Launch Sequence (With Payment Integration)
Define the model: Services, patient locations, clinical professions, modalities, payer plans, and escalation model.
Confirm physician licensure: Verify every physician’s California license with the Medical Board of California or Osteopathic Medical Board.
Verify mid-level authority: Check NP, PA, and other professional authority with the relevant California board.
Structure the entity: Choose the entity and physician-ownership structure with California healthcare counsel; separate MSO administration from clinical control to comply with CPOM. (Crucial for LegitScript approval).
Register the business: Review the practice name, obtain a Medical Board Fictitious Name Permit if required, and check Secretary of State registration and local business licenses.
Build clinical workflows: Consent, identity, patient-location, synchronous-video, audio-only, emergency, referral, and in-person-escalation.
Select your tech & EHR: Review privacy, security, access, and business-associate terms for EHR, video, messaging, and payment vendors.
Secure your payments & compliance: Partner with Green Payment to secure a high-risk merchant account and begin your LegitScript certification. Do not skip this step before launching ads.
Map privacy obligations: Cover CMIA, HIPAA, CCPA, and PCI-DSS across every data and payment category.
Review marketing: Ensure claims, testimonials, and disclosures are compliant with state boards, LegitScript, and ad platforms.
Test everything: Clinical documentation, records ownership, scheduling, support escalation, and payment processing continuity before accepting patients.
Frequently Asked Questions
Can an out-of-state doctor provide telehealth to California patients? No. The Medical Board states that a physician treating a patient located in California by telehealth must hold California licensure. Payment processors will also terminate your account if they detect out-of-state prescribing into CA.
Can a nurse practitioner open a telehealth clinic in California? Yes, but it requires California Board of Registered Nursing authorization and a review of scope, furnishing, supervision, and practice-setting rules. Ownership and clinical-control questions remain separate.
How do I get a merchant account for my California telehealth clinic? Mainstream processors like Stripe and PayPal classify telehealth as "high risk" and will routinely freeze or terminate your account. To secure stable processing, you need LegitScript certification and a specialized high-risk payment partner like Green Payment. We build the compliance bridge between your clinic and the payment networks.
Is a white-label telehealth platform automatically compliant in California? No. Platform compliance depends on configuration, contracts, vendors, data flows, clinical structure, and California obligations. Independent legal, privacy, and payment processing review remains necessary.
Green Payment: Your Payment & Compliance Partner in California
Launching a telehealth clinic in California is complex. You are navigating the Medical Board, CPOM restrictions, strict prescribing laws, CMIA, and CCPA. Don't let a frozen Stripe account be the thing that derails your launch.
Green Payment was built to solve the exact payment and compliance challenges described in this guide. We help California telehealth founders:
Secure stable, high-risk merchant accounts that mainstream processors won't touch.
Navigate LegitScript certification from start to finish, ensuring your corporate structure and clinical documentation pass with flying colors.
Avoid the payment processing traps that freeze funds and stall growth.
Launch and scale with the financial infrastructure that makes everything else possible.
If you are structuring your California MSO, preparing for LegitScript, or trying to figure out how to accept payments without getting dropped by your processor — let’s talk.
Ready to secure your payments and get growing? Contact Green Payment today!