Setting Up a Telehealth Practice (the Right Way)

This guide covers the operational and regulatory side of telehealth, not tax. For how online-consult income is taxed, see our companion guide on telemedicine income.

The rules telehealth actually runs on

Telemedicine in the Philippines has a real regulatory home. The current framework comes from a joint DOH, DILG, and PhilHealth administrative order issued under the Universal Health Care Act, which permits diagnosis, advice, e-prescriptions, referrals, and follow-up or chronic-condition management delivered remotely. It doesn't require a separate telemedicine license, only that you're a PRC-licensed physician practicing within the same ethical and clinical standards you'd apply in person.

What you can and can't do remotely

The guidelines draw clear lines around what's appropriate for a screen:

You keep the discretion to convert a telemedicine visit to an in-person one whenever the case warrants it.

E-prescriptions: valid, with limits

You can issue electronic prescriptions, and pharmacies are expected to honor them as equivalent to written ones. The validity differs by drug type: antibiotics and antivirals carry a short validity of about a week, while other medicines run longer, around 60 days. Controlled or dangerous drugs are a stricter category with their own prescribing rules, and remote first-time prescribing of them is high-risk and restricted, so tread carefully there and follow the current dangerous-drugs rules.

The privacy obligations you can't skip

The moment you handle patient information online, you're processing sensitive personal data under the Data Privacy Act, and that carries real duties. Every practice handling such data must appoint a Data Protection Officer and put organizational, physical, and technical safeguards in place, and must report a data breach within 72 hours. If your telehealth practice processes the sensitive data of 1,000 or more individuals, or the processing isn't merely occasional, you're generally required to register your data processing system with the National Privacy Commission. Smaller practices still owe the safeguards and the DPO even if registration isn't triggered.

Setting it up in practice

A sound telehealth setup comes down to a few disciplines. Verify the identity of both yourself and the patient at the start of a consult. Document informed consent that spells out how telemedicine works, its limits, how data is handled, and what happens if a referral or in-person visit becomes necessary. Use a secure platform and a secure record system rather than casual messaging apps for clinical data, and keep records as you would for any consult. Consent before recording anything. None of this is exotic; it's the same professionalism as an in-person practice, applied to a channel that makes privacy and documentation matter even more.

Choosing a platform and handling records

The tool you consult on is part of your compliance, not just a convenience. A casual messaging app may be fine for booking, but clinical consultations and patient data belong on a platform with real security, and your records should live in a proper record system rather than scattered across chat threads and personal devices. Practically, that means using a platform that supports secure video and messaging, keeping consultation notes in your medical records the same way you would for an in-person visit, and getting explicit consent before recording anything. If you use a third-party telehealth platform, understand how it stores and protects patient data, because their handling becomes part of your privacy exposure. The convenience of telehealth is real, but it runs on the same duty of confidentiality as your clinic, delivered over a channel that makes a lapse easier and more consequential.

Where telehealth fits a practice

For most doctors, telehealth is a complement rather than a replacement: a way to handle follow-ups, stable chronic patients, and results-review efficiently, while keeping first visits and anything hands-on in the clinic. Used within its lane, it extends your reach and convenience without compromising care. Pushed beyond its lane, into first-time diagnoses or cases that really need an exam, it creates both clinical and regulatory risk. The doctors who do it well treat the guidelines not as red tape but as a sensible map of what a screen can and can't safely do.

Informed consent, done properly

Consent carries more weight in telemedicine than in the clinic, because the patient is agreeing not just to care but to a mode of care with real limits. Good telehealth consent makes those limits explicit: that a remote consult can't replace a physical examination, what will happen if the case needs an in-person visit or a referral, how their data is stored and protected, and, if you record anything, that they've agreed to it. Documenting that consent in the record, rather than treating it as a verbal formality, protects both the patient and you. It's the same principle as any consent, applied to a setting where the boundaries of what you can safely do are tighter and therefore more important to state out loud.

Blending telehealth with in-person care

The strongest telehealth practices aren't purely remote; they're hybrids that route each patient to the right channel. A stable patient on maintenance medication is well served by a video follow-up; a new symptom, a first visit, or anything that needs to be seen and touched belongs in the clinic. Building your practice so patients can move fluidly between the two, a remote follow-up after an in-person work-up, an in-person visit when a video consult reveals something concerning, gives you the reach and convenience of telehealth without stretching it past what it can safely do. Think of the screen as one room in your practice rather than the whole building, and both you and your patients get the best of it.

Frequently asked questions