7 Multi-State Telehealth Compliance Mistakes You’re Making in CA, WA, and VA (and How to Fix Them)

You already know how complex it is to manage a single behavioral health clinic. Now, imagine scaling that across state lines into heavyweights like California, Washington, and Virginia. The promise of telehealth is massive: more reach, better access for patients, and a streamlined business model. But the regulatory landscape in 2026 is under more pressure than ever.

At KBBG Systems LLC, we know the landscape because we’ve lived in it. We specialize in helping providers like you cut through the regulatory noise. Whether you are running an eating disorder treatment facility or a multi-state mental health practice, compliance isn't just about avoiding a fine; it’s about protecting your reputation and your revenue.

If you’re currently seeing patients in CA, WA, and VA, you might be making one of these seven common mistakes. Here is how to spot them and, more importantly, how to fix them.

1. The "Home State License" Fallacy

One of the most frequent errors we see is the assumption that your primary license allows you to follow the patient wherever they go. It’s a common misconception: "If I’m licensed in California, and my patient goes on vacation to Washington, I can still treat them, right?"

The Reality: In the eyes of the law, the practice of medicine (and behavioral health) occurs where the patient is physically located at the time of the service.

• California: Strict on licensure; practicing without a CA license for a patient in CA is a no-go.

• Washington: Very specific about telehealth-specific training for licensed providers.

• Virginia: Requires practitioners to be licensed by the applicable Virginia health regulatory board.

👉 The Fix: Implement a strict "Location Check" at the start of every session. If the patient is in a state where your provider isn't licensed, you cannot proceed. To stay ahead of these shifts, check out our guide on multi-state behavioral health licensing in 2026.

2. Ignoring Washington State’s Unique Training Requirements

Washington is a bit of an outlier. Unlike many states that just say "be licensed," Washington requires healthcare professionals who provide telehealth services to complete telemedicine training.

Many providers expanding into the Pacific Northwest miss this nuance in their behavioral health policies. If your clinicians haven't completed a training program that meets the Washington Department of Health standards (covering things like RCW 43.70.495), your practice is technically out of compliance.

The Fix: Audit your HR files for all clinicians seeing patients in WA. Ensure they have a certificate of completion for a Washington-approved telehealth training course. This is a quick win that prevents major headaches during a state audit.

3. Missing the "Physical Location" Documentation in Every Note

Whether you are billing Medicare, Medicaid, or a commercial payor like Aetna or Blue Cross, documentation is the first thing auditors look at. A major mistake we see in CA and VA is the failure to document the patient's physical address for every session.

Saying "the patient was at home" isn't enough. In a 2026 Medicaid audit, that vagueness is a red flag. Auditors want to see a specific city or address to verify the service was rendered within the state lines where the provider is credentialed.

The Fix: Update your EHR templates to include a mandatory field for "Patient Current Location." We’ve seen this mistake cost providers thousands in recouped funds. For more on this, read about the 7 telehealth documentation mistakes auditors catch every time.

4. Overlooking California’s Complex Prescribing Rules

If your practice involves medication management: especially for eating disorders or dual-diagnosis patients: California’s prescribing laws are a minefield. You cannot simply prescribe controlled substances via telehealth without navigating both federal DEA rules and the Medical Board of California’s specific requirements.

California requires a "prior examination" that meets the standard of care. While this can often be done via synchronous audio-visual telehealth, the documentation must prove that the examination was sufficient to justify the prescription.

The Fix: Create a state-specific prescribing protocol. Ensure your psychiatric providers are aware of the differences between CA, WA, and VA laws regarding controlled substances. Do not rely on a "one size fits all" prescribing policy.

5. Using "Consumer-Grade" Platforms Without a BAA

We still see it: providers using platforms that are "encrypted" but lack a signed Business Associate Agreement (BAA). In 2026, the Office for Civil Rights (OCR) is no longer as lenient as they were during the early 2020s.

If you are using a platform to see patients in Virginia and you don't have a BAA, you are violating HIPAA. This applies to your video platform, your email, and even your cloud storage for patient records.

The Fix: Verify that every piece of technology used in your telehealth workflow has a signed BAA. If they won't sign one, don't use them. This is a foundational element of mental health compliance.

6. The DEA Multi-State Registration Gap

This is a big one for 2026. If you have a provider in Virginia prescribing controlled substances to a patient in Washington, that provider needs a DEA registration for each state where the patient is located, unless specific federal exceptions apply.

Many practices assume one national DEA number covers them. It doesn't. This mistake can lead to federal scrutiny and the loss of prescribing privileges.

👉 The Action Step:

1. Map out where your patients are.

2. Map out where your prescribers are.

3. Ensure the DEA registrations match the patient locations.

7. Falling Behind on Accreditation Standards (TJC vs. CARF)

Whether you are accredited by The Joint Commission (TJC) or CARF, your telehealth services are under the microscope. In 2026, TJC has a heavy focus on how telehealth integrates into your overall Quality Assessment and Performance Improvement (QAPI) plan.

Mistake #7 is treating telehealth as a "separate" entity from your main clinic's compliance program. CARF and TJC expect to see that your telehealth patients receive the same level of care, emergency planning, and outcome tracking as your in-person patients.

• CARF: Looks for specific telehealth technology assessments.

• The Joint Commission: Focuses on patient identification and emergency procedures (what happens if a patient in VA has a crisis while the therapist is in CA?).

The Fix: Integrate telehealth into your internal auditing process. Don't wait for a surveyor to find the gap. We recommend a complete internal audit checklist to keep your team on track.

How to Stay Ahead of the 2026 Audit Surge

The industry is under pressure. With the 2026 Medicaid audit surge, state regulators in California, Washington, and Virginia are coordinating more than ever. They are looking for easy wins: unlicensed practice, poor documentation, and missing training certificates.

Your Compliance Checklist for CA, WA, and VA:

• ✅ Verify Licensure: Use a tracking system for all multi-state licenses and expiration dates.

• ✅ WA Training: Ensure all WA-facing staff have their telemedicine training certificates.

• ✅ Emergency Protocols: Do you have the contact info for the local mobile crisis team in the patient’s specific city in Virginia? You should.

• ✅ Consent Forms: Use state-specific consent forms. California has specific language requirements that Virginia might not.

We Are Your Partners in Compliance

Navigating multi-state regulations feels like trying to hit a moving target. But you don't have to do it alone. At KBBG Systems LLC, we’ve built our reputation on helping behavioral health leaders like you stay compliant so you can focus on what matters: patient care.

We don't do cookie-cutter solutions. We dive into your specific workflows, your payor mix (Medicare, Medicaid, Commercial), and your accreditation goals to build a robust compliance framework.

Success in 2026 looks like a practice that can expand fearlessly into new states, knowing their behavioral health licensing and policies are bulletproof.

Ready to shore up your multi-state operations? Let’s build a system that drives both compliance and growth. Explore our consulting services and let's get to work.