Telemedicine Practice: Navigating the New Guidelines

A Comprehensive Review for Postgraduate Students in Internal Medicine

Dr Neeraj Manikath , claude.ai

Abstract

The COVID-19 pandemic catalyzed an unprecedented transformation in healthcare delivery, with telemedicine emerging from the regulatory shadows into mainstream clinical practice. In India, the National Medical Commission's Telemedicine Practice Guidelines 2020 provided the first comprehensive legal framework for teleconsultation, fundamentally reshaping doctor-patient interactions. This review examines the regulatory landscape, clinical limitations, prescribing restrictions, and data security imperatives that define contemporary telemedicine practice. Through critical analysis of the guidelines and their practical implications, we provide postgraduate trainees with essential knowledge to navigate this evolving domain while maintaining clinical excellence and medicolegal prudence.

Keywords: Telemedicine, NMC Guidelines, Teleconsultation, Digital Health, Data Privacy, E-prescriptions

Introduction

The World Health Organization characterizes telemedicine as the provision of healthcare services across distances using information and communication technologies for diagnosis, treatment, disease prevention, and continuing medical education. What was once considered experimental has rapidly evolved into an essential component of healthcare delivery, particularly following the COVID-19 pandemic when traditional consultation models faced unprecedented disruption.

India's telemedicine journey began in 2001 when the Indian Space Research Organization initiated a pilot project connecting Apollo Hospital Chennai with a rural facility in Andhra Pradesh. However, regulatory ambiguity persisted for nearly two decades, creating hesitancy among practitioners despite flourishing teleconsultation services. The watershed moment arrived on March 25, 2020, when the Board of Governors, in supersession of the Medical Council of India, released the Telemedicine Practice Guidelines as Appendix 5 to the Indian Medical Council Professional Conduct Regulations 2002. This marked the first statutory recognition of telemedicine practice in India.

The NMC Telemedicine Practice Guidelines 2020: A Framework for Permissible Consultations

Scope and Applicability

The guidelines apply exclusively to Registered Medical Practitioners enrolled in State or Indian Medical Registers, creating a structured approach to teleconsultation while preserving professional accountability. Any RMP can provide telemedicine services from anywhere in India, with professional misconduct complaints filed in the State Medical Council where the practitioner was located during teleconsultation.

Types of Consultations: First-Time vs. Follow-Up

The guidelines distinguish between two fundamental consultation categories:

First Consultation: This refers to either the initial interaction between doctor and patient for a specific condition, or any consultation occurring more than six months after the last in-person visit, even if interim teleconsultations occurred. Critically, the guidelines permit first consultations via telemedicine—a physician need not examine a patient in person before initiating teleconsultation.

Follow-Up Consultation: Any consultation within six months of a first (in-person or video-based) consultation qualifies as follow-up. This distinction carries significant implications for prescribing permissions.

Modes of Communication

The guidelines demonstrate remarkable flexibility, permitting teleconsultation through:

Video conferencing
Audio (telephone) consultation
Text-based communication (email, messaging platforms, SMS)
Asynchronous communication (store-and-forward)

The choice of modality rests with the RMP's professional judgment, considering the clinical scenario, available technology, and patient capabilities. This flexibility particularly benefits rural populations with limited internet connectivity, though it simultaneously increases the potential for diagnostic error.

Essential Elements of Valid Teleconsultation

Seven cardinal elements must characterize every telemedicine encounter:

Context: Clear understanding of the clinical scenario
Identification: Verification of both RMP credentials and patient identity
Mode of Communication: Appropriate selection based on clinical needs
Consent: Implied (when patient initiates) or explicit consent as required
Type of Consultation: First-time vs. follow-up classification
Patient Evaluation: Adequate information gathering for provisional diagnosis
Management: Appropriate counseling, prescriptions, or referral

Pearl: Begin every teleconsultation by explicitly stating your name, qualifications, and registration number—this protects both parties in medicolegal disputes.

The Limitations of Virtual Consultation: Knowing When to Insist on In-Person Visit

Inherent Constraints of Remote Assessment

The absence of physical examination represents telemedicine's most fundamental limitation. Subtle clinical signs—peripheral cyanosis, jugular venous distension, cardiac murmurs, abdominal organomegaly, neurological deficits—remain undetectable through digital interfaces. This diagnostic blind spot necessitates heightened clinical suspicion and lower thresholds for in-person referral.

High-Risk Scenarios Requiring Physical Examination

Emergency Presentations: The guidelines explicitly mandate in-person evaluation for emergencies when alternative care is available. Teleconsultation should be restricted to first-aid guidance and immediate referral. Attempting definitive management of acute coronary syndrome, stroke, acute abdomen, or sepsis via telemedicine constitutes dangerous practice.

Complex Diagnostic Dilemmas: When differential diagnosis includes conditions requiring physical examination—for instance, distinguishing between viral pharyngitis and peritonsillar abscess, or between musculoskeletal chest pain and acute coronary syndrome—insist on in-person assessment.

Pediatric and Geriatric Populations: These vulnerable groups present unique challenges. Dehydration assessment, developmental evaluation, and frailty assessment demand hands-on examination. The inability to accurately assess severity of illness in a febrile infant or detect subtle neurological changes in an elderly patient with altered mental status represents genuine risk.

Red Flag Symptoms: Unexplained weight loss, persistent fever, new neurological deficits, uncontrolled pain, or any symptom suggesting serious underlying pathology warrants physical examination regardless of patient convenience preferences.

Medicolegal Precedent: The Pawaskar Case

The Bombay High Court's 2018 judgment in Deepa Sanjeev Pawaskar v. State of Maharashtra established critical precedent. A postpartum woman was admitted based on telephone advice alone, without physician examination. Her subsequent death from pulmonary embolism led to criminal negligence charges. The court held that prescribing treatment without adequate diagnostic information—even via telephone—constitutes professional misconduct. This landmark case predated the 2020 guidelines but established the principle that telemedicine cannot compromise diagnostic thoroughness.

Oyster: Document the clinical reasoning for both conducting teleconsultation and recommending in-person follow-up. Phrases like "advised immediate in-person evaluation given inability to adequately assess severity remotely" provide medicolegal protection.

Professional Responsibility Standards

The guidelines mandate that RMPs maintain the same standard of care during teleconsultation as in-person encounters. This seemingly straightforward requirement has profound implications: the telemedicine platform itself cannot justify substandard care. If adequate information cannot be obtained remotely, the physician must refer for physical examination rather than proceed with uncertain diagnosis and treatment.

Hack: Develop a checklist of conditions that mandate in-person evaluation in your specialty. For internal medicine, this might include: unexplained fever >7 days, chest pain with cardiac risk factors, acute neurological deficits, severe abdominal pain, signs of sepsis, uncontrolled hypertension, suspected deep vein thrombosis, and any presentation with diagnostic uncertainty.

Prescribing via Telemedicine: The Rules for E-Prescriptions

Drug Classification System

The guidelines categorize medications into four lists, with prescribing permissions varying by consultation type and communication mode:

List O (Over-the-Counter): Common medicines like vitamins, oral rehydration solutions, antacids, and simple analgesics. These can be prescribed in any teleconsultation format (video, audio, text) for both first-time and follow-up consultations.

List A (First Consultation Drugs): Relatively safe medications with low abuse potential including antibiotics (excluding those in Schedule H1), antihypertensives, oral hypoglycemics, and bronchodilators. These require video consultation for first-time prescription or can be prescribed via audio/text for follow-up consultations.

List B (Follow-Up Only): Medications requiring greater caution including antidepressants, antipsychotics, anticonvulsants (except Schedule X), certain cardiovascular medications, and hormonal therapies. These can only be prescribed during teleconsultation if previously prescribed during in-person evaluation by the same RMP.

Prohibited List: Absolutely prohibited in telemedicine regardless of modality:

Schedule X drugs (Drugs and Cosmetics Act)
Narcotic and psychotropic substances (NDPS Act 1985)
Notable exceptions: Clobazam, Clonazepam, and Phenobarbitone were subsequently permitted in a 2020 clarification

The high-profile case involving actor Sushant Singh Rajput's alleged procurement of Clonazepam through teleconsultation initially raised questions about guideline interpretation, though subsequent clarifications permitted its telemedicine prescription.

Antibiotic Prescribing Controversy

The guidelines permit antibiotic prescription if the RMP is "strongly convinced" based on consultation type and mode. However, this creates tension with antimicrobial stewardship principles. Third and fourth-generation cephalosporins, carbapenems, and fluoroquinolones (Schedule H1 drugs) require special documentation by dispensing pharmacists, though the guidelines do not explicitly prohibit their telemedicine prescription.

Pearl: When prescribing antibiotics via telemedicine, document the clinical syndrome clearly ("acute bacterial sinusitis based on purulent rhinorrhea, facial pain, and 10-day symptom duration") and consider narrower-spectrum options unless clinical scenario clearly demands broad-spectrum coverage.

Injectable Medications

General prohibition exists against prescribing injectables via telemedicine, with notable exceptions:

Insulin for diabetes management
Low molecular weight heparin for anticoagulation
Vaccines for immunization
Follow-up medications available only in injectable form

Prescription to healthcare workers for administration requires confidence in both facility setting and worker expertise.

E-Prescription Format Requirements

Every telemedicine prescription must include:

RMP's name, qualifications, and registration number
Patient's name, age, and contact information
Date and time of consultation
Provisional diagnosis with justification
Medication details (generic/brand name, strength, dosage, duration)
Clear instructions for administration
Advice for follow-up or in-person evaluation if needed
Platform/mode of teleconsultation

Hack: Create a standardized template that auto-populates your registration number and required fields. Many practitioners fail to display registration numbers on digital communications—this constitutes guideline violation and invites regulatory action.

The Age Verification Imperative

The guidelines mandate explicit age verification before prescribing, with special provisions for minors. If doubt exists about patient age, age proof must be requested. Consultations with minors require adult presence, with that adult's identity also verified. This provision addresses concerns about unauthorized medication access by vulnerable populations.

Data Privacy and Security: Ensuring Patient Confidentiality on Digital Platforms

The Regulatory Landscape

India's data protection framework for telemedicine comprises multiple overlapping regulations:

Information Technology Act 2000 and IT Rules 2011: These establish baseline requirements for protecting Sensitive Personal Data or Information (SPDI), which explicitly includes health data. Organizations must obtain consent for data collection, implement reasonable security practices, and maintain confidentiality.

Digital Personal Data Protection Act 2023 (DPDP Act): India's first comprehensive data protection legislation, notified in August 2023 with draft implementation rules released in January 2025. Though not yet fully implemented, this Act will fundamentally reshape healthcare data management. Key provisions include:

Designation of healthcare providers as "Data Fiduciaries"
Requirement for explicit, informed, specific, and unconditional consent
Obligations to implement "reasonable security safeguards"
Mandatory breach notification to affected individuals and the Data Protection Board
Penalties ranging from ₹10,000 to ₹250 crores for violations

Telemedicine Practice Guidelines 2020: These defer to existing information technology and data protection laws while emphasizing:

Confidentiality obligations equivalent to in-person consultations
Consent requirements for audio/video recording
Patient rights to record consultations with RMP consent
Prohibition on disseminating patient-identifiable information without consent

National Ethical Guidelines and Professional Conduct Regulations: The National Medical Commission's Professional Conduct Regulations 2023 mandate informed consent and patient confidentiality, applying equally to telemedicine.

The HIPAA Non-Applicability Misconception

A common misunderstanding among Indian practitioners involves the Health Insurance Portability and Accountability Act (HIPAA)—United States legislation with no direct applicability in India. However, Indian healthcare providers handling data of U.S. patients through telemedicine, outsourcing, or billing services must comply with HIPAA. For domestic Indian telemedicine, the DPDP Act represents the primary framework, though its principles align with HIPAA's privacy and security mandates.

Practical Security Imperatives

Platform Selection: Choose telemedicine platforms implementing:

End-to-end encryption for all communications
Secure authentication (multi-factor authentication preferred)
Audit trails documenting data access
Compliance with Indian data localization requirements
Business Associate Agreements (analogous to data processing agreements under DPDP Act)

Popular platforms like WhatsApp, though encrypted, lack features like audit trails and formal healthcare compliance certification. Purpose-built telemedicine platforms offer greater security and compliance assurance.

Data Storage and Retention: Electronic health records and teleconsultation logs must be retained for durations specified under relevant acts (typically 5 years for clinical records). Storage must employ:

Encrypted databases
Access controls limiting viewing to authorized personnel only
Regular backup with disaster recovery protocols
Compliance with data localization rules if storing outside India

The Third-Party Platform Dilemma: When patients and RMPs use third-party communication platforms, responsibility for data breaches becomes complex. While platforms bear some responsibility, RMPs cannot claim complete absolution if they selected insecure platforms or failed to obtain informed consent about privacy risks.

Pearl: Begin teleconsultations with a brief privacy statement: "This consultation will be conducted via [platform name]. Your health information will be kept confidential in accordance with medical ethics and data protection laws. Do you understand and consent to proceed?" Document this consent.

Cybersecurity Threats in Healthcare

The healthcare sector faces disproportionate cyber risk. India witnessed over 1.9 million healthcare cyberattacks in 2022, including the notorious AIIMS New Delhi ransomware attack that forced shutdown of digital services. Common threats include:

Ransomware encrypting patient records
Phishing attacks targeting credentials
Unauthorized data exfiltration
Denial-of-service attacks disrupting telemedicine services

Hack: Implement these basic security practices:

Strong, unique passwords with password manager
Enable two-factor authentication on all platforms
Regular software updates to patch vulnerabilities
Employee training on phishing recognition
Incident response plan for potential breaches
Cyber insurance coverage

Patient Data Rights Under Emerging Legislation

The DPDP Act grants patients ("Data Principals") significant rights:

Right to Access: Patients can request copies of their health data
Right to Correction: Patients can request correction of inaccurate data
Right to Erasure: Patients can request deletion (with exceptions for legal/medical necessity)
Right to Nominate: Patients can designate someone to exercise rights in case of death or incapacity

Healthcare providers must establish processes to honor these rights while balancing medical record retention requirements.

Consent Management Complexities

The DPDP Act's consent requirements create practical challenges:

Consent must be "free, specific, informed, unconditional and unambiguous"
Processing must be limited to specified purposes
Patients can withdraw consent (though this may preclude continued treatment)
Special provisions apply for children and individuals with disabilities requiring parental/guardian consent

Oyster: In emergency situations, the DPDP Act permits processing without consent. Document medical emergencies clearly: "Patient presented with suspected myocardial infarction. Emergency teleconsultation provided without explicit consent given life-threatening nature of presentation."

Cross-Border Data Transfers

The DPDP Act permits international data transfer except to countries restricted by the Central Government (list pending notification). Healthcare providers offering telemedicine to international patients or using cloud services with foreign servers must:

Ensure recipient countries have adequate data protection
Maintain security safeguards during transit and storage abroad
Include appropriate contractual protections with foreign entities

Medicolegal Considerations and Professional Misconduct

Actionable Offenses Under the Guidelines

The following constitute professional misconduct in telemedicine:

Prescribing prohibited drugs via any teleconsultation mode
Prescribing List B drugs during first consultation
Failing to maintain same standard of care as in-person consultation
Prescribing without provisional diagnosis
Conducting consultation when patient requests in-person visit
Misusing patient images or sensitive data
Advertising telemedicine services
Failing to display registration number on communications
Conducting anonymous consultations

Penalties align with those for in-person professional misconduct under the National Medical Commission Act 2019 and can include reprimand, suspension, or removal from the medical register.

Liability in the Digital Age

Telemedicine does not reduce liability; if anything, it demands heightened vigilance. Several factors increase risk:

Inadequate clinical information from limited remote assessment
Technical failures interrupting consultations
Miscommunication in audio-only or text-based consultations
Patient misrepresentation of symptoms or history
Inability to perform appropriate physical examination

Pearl: When in doubt, err on the side of caution. The phrase "I recommend in-person evaluation to ensure accurate diagnosis and appropriate treatment" protects patients and practitioners alike.

Documentation as Legal Protection

Meticulous documentation serves dual purposes: ensuring continuity of care and providing medicolegal protection. Essential elements:

Detailed history obtained during teleconsultation
Limitation of examination ("assessment based on history and video observation only; physical examination not performed")
Clinical reasoning for diagnosis and treatment plan
Rationale for prescribing via telemedicine vs. recommending in-person evaluation
Patient's understanding and acceptance of limitations
Follow-up plan with specific timeframes
Red flag symptoms warranting immediate in-person evaluation

Hack: Use structured templates with mandatory fields. Many electronic medical record systems now include telemedicine-specific templates addressing guideline requirements.

Insurance Reimbursement and Economic Considerations

Current Status: The Insurance Regulatory and Development Authority of India issued guidelines in June 2020 advising insurers to allow telemedicine where in-person consultation is covered. However, implementation remains patchy, with many insurance companies lacking clear telemedicine reimbursement policies.

Challenges to widespread reimbursement include:

Defining "medical necessity" for teleconsultation vs. in-person visit
Determining appropriate fee structures (typically lower than in-person rates)
Concerns about overutilization and unnecessary consultations
Fraud prevention and verification of genuine medical consultations

As telemedicine matures, expect more structured reimbursement frameworks. Documenting medical necessity and appropriateness of teleconsultation strengthens reimbursement claims.

Future Directions and Emerging Challenges

Artificial Intelligence Integration

AI-powered diagnostic support, symptom checkers, and triage algorithms increasingly complement telemedicine. The guidelines acknowledge that AI/machine learning tools can assist RMPs with patient evaluation and diagnosis, but mandate that final counseling and prescribing remain solely the RMP's responsibility. This preserves accountability while leveraging technological advancement.

Training and Competency Requirements

The guidelines mention forthcoming mandatory online training programs for telemedicine practice. As these develop, expect evolution toward telemedicine as a distinct competency requiring specific skills:

Virtual rapport building
Remote physical examination techniques (e.g., patient-performed examination under guidance)
Technology troubleshooting
Digital communication clarity
Recognition of limitations requiring in-person assessment

Pearl: Develop telemedicine skills deliberately. Practice video consultations with colleagues, seek feedback on communication clarity, and reflect on cases where virtual assessment proved inadequate.

Telepsychiatry and Specialty-Specific Guidelines

The Indian Psychiatric Society, Telemedicine Society of India, and NIMHANS released Telepsychiatry Operational Guidelines in May 2020, providing specialty-specific direction. Expect similar detailed guidance for other specialties as telemedicine becomes mainstream.

Addressing the Digital Divide

Despite India's 900 million internet users, significant portions of the population lack reliable connectivity, digital literacy, or access to smartphones/computers. This digital divide risks creating two-tiered healthcare. Addressing this requires:

Public telemedicine centers in underserved areas
Multilingual interfaces (the DPDP Act mandates information in all 22 scheduled languages)
Simple, low-bandwidth platforms for areas with poor connectivity
Integration with public health programs like Ayushman Bharat

International Telemedicine

The current guidelines explicitly exclude consultations outside India's jurisdiction. As globalization increases, expect frameworks for cross-border telemedicine addressing:

Medical license recognition across jurisdictions
Liability in international consultations
Cross-border data transfer compliance
Currency and payment processing
Time zone considerations for synchronous consultation

Practical Pearls, Oysters, and Hacks: A Summary

Pearls (Best Practices):

Always identify yourself with name, qualifications, and registration number at consultation start
Document clinical reasoning for both conducting teleconsultation and recommending in-person follow-up
When prescribing antibiotics remotely, document the clinical syndrome supporting bacterial infection
Begin consultations with privacy statement and obtain recorded consent
Develop telemedicine skills deliberately through practice and reflection

Oysters (Hidden Gems of Knowledge):

The Pawaskar case established that telephone prescribing without adequate diagnostic information constitutes negligence—predating the 2020 guidelines
Emergency situations permit data processing without explicit consent under DPDP Act
Schedule H1 drugs (third/fourth-generation antibiotics) require special pharmacy documentation but aren't explicitly prohibited in telemedicine
The DPDP Act grants patients right to nominate someone to exercise data rights after death—relevant for terminal illness discussions
Business process outsourcing providers handling non-Indian subjects' data are exempt from many DPDP provisions

Hacks (Practical Shortcuts):

Create condition-specific checklists mandating in-person evaluation (chest pain + risk factors, unexplained fever >7 days, etc.)
Use standardized templates auto-populating registration number and required prescription fields
Implement structured EMR templates with mandatory telemedicine-specific fields
Develop a brief privacy statement template for consultation initiation
Maintain a quick reference guide of List A, B, and Prohibited drugs accessible during consultations

Conclusion

The post-COVID telemedicine boom has permanently altered healthcare delivery in India. The NMC Telemedicine Practice Guidelines 2020 provide essential structure to this transformation, balancing innovation with safety, accessibility with quality, and convenience with accountability. For postgraduate trainees, mastering telemedicine requires understanding not just the clinical skills of remote assessment but also the legal frameworks of permissible practice, the ethical imperatives of data protection, and the professional responsibilities of diagnostic accuracy.

Telemedicine is neither inherently superior nor inferior to traditional consultation—it is different, with unique strengths and limitations. The skilled practitioner recognizes when virtual assessment suffices and when physical examination proves essential. As healthcare continues its digital evolution, those who navigate the regulatory landscape while maintaining clinical excellence will best serve their patients in this new paradigm.

The guidelines represent a beginning, not an endpoint. Expect continued evolution as artificial intelligence integration advances, specialty-specific protocols develop, and the Digital Personal Data Protection Act's full implementation reshapes privacy obligations. Remain informed, practice thoughtfully, document meticulously, and never compromise diagnostic thoroughness for digital convenience.

References

Board of Governors in supersession of the Medical Council of India. Telemedicine Practice Guidelines. March 2020. Available at: https://www.nmc.org.in
Venkatesh U, Gandhi PA. Telemedicine practice guidelines in India: Global implications in the wake of the COVID-19 pandemic. World Med Health Policy. 2022;14(2):315-330.
Mathur S, Sutton J. Telemedicine practice guidelines of India, 2020: Implications and challenges. Indian J Psychiatry. 2021;63(3):308-311.
Pai AK, Kedare SP, Krishnan A, et al. Understanding the medico-legal aspects of telemedicine in India. Cureus. 2023;15(7):e42577.
Government of India. The Digital Personal Data Protection Act, 2023 (No. 22 of 2023). Ministry of Electronics and Information Technology, August 2023.
Deepa Sanjeev Pawaskar and Another v. State of Maharashtra. Bombay High Court, Criminal Writ Petition No. 2031 of 2016, Judgment dated July 25, 2018.
Dinakaran D, Basavarajappa C, Manjunatha N, et al. Telemedicine Practice Guidelines and Telepsychiatry Operational Guidelines, India—A Commentary. Indian J Psychol Med. 2020;42(6):583-587.
Insurance Regulatory and Development Authority of India. Guidelines on Telemedicine Services. Circular IRDAI/HLT/REG/CIR/117/06/2020, June 2020.
Nishith Desai Associates. Telemedicine in India: The Future of Medical Practice. Research Paper, 2021.
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
National Medical Commission. National Medical Commission Registered Medical Practitioner (Professional Conduct) Regulations, 2023.
Jain S, Panda PK, Kumar A, et al. Challenges and recommendations for enhancing digital data protection in Indian Medical Research and Healthcare Sector. NPJ Digit Med. 2025;8:21.
Greenhalgh T, Koh GCH, Car J. Covid-19: a remote assessment in primary care. BMJ. 2020;368:m1182.
Hollander JE, Carr BG. Virtually Perfect? Telemedicine for Covid-19. N Engl J Med. 2020;382(18):1679-1681.
Bashshur RL, Doarn CR, Frenk JM, et al. Telemedicine and the COVID-19 Pandemic, Lessons for the Future. Telemed J E Health. 2020;26(5):571-573.

Conflict of Interest: None declared

Funding: None

Acknowledgments: The authors acknowledge the National Medical Commission and NITI Aayog for their pioneering work in establishing the regulatory framework for telemedicine practice in India.