N.Y. Comp. Codes R. & Regs. tit. 14, § 596.6
(1) The distant/hub site telemental health practitioner must:
(vi) deliver services from a secure site/location which ensures the minimum standards for privacy for recipient-clinician interaction are met as follows:
(4) Telemental health services must be rendered using telemental health technologies. A provider of services approved to offer telemental health services shall adopt and implement technology in a manner that supports the standard of care to deliver the services, the features of which include at least:
(11) Telemental health services shall not be used:
(iii) to satisfy any specific statutory examination, evaluation or assessment requirement necessary for the involuntary removal from the community, or involuntary retention in a hospital pursuant to any of the provisions of article 9 of the Mental Hygiene Law. Physicians conducting such examinations, evaluations or assessments may only utilize telemental health services on a consultative basis.
(b) Protocols and procedures.
A provider of services approved to utilize telemental health services must have written protocols and procedures that address the following:
(2) Informed consent. Protocols must afford persons receiving services the opportunity to provide informed consent to participate in any services utilizing telemental health services, including the right to refuse these services and to be apprised of the alternatives to telemental health services, including any delays in service, need to travel, or risks associated with not having the services provided by telemental health, and risks associated with receiving telemental health services in an off-site location. Such informed consent may be incorporated into the informed consent process for in-person care, or a separate informed consent process for telemental health services may be developed and used.
(3) Confidentiality. Protocols and procedures must be maintained as required by Mental Hygiene Law section 33.13 and HIPAA at 45 CFR parts 160 and 164 and shall apply to both the originating/spoke site and the distant/hub site. Such protocols shall ensure that:
(8) Recipient rights. Recipient rights policies must ensure that each individual receiving telemental health services:
(11) Ownership and maintenance of records.
(ii) The distant/hub site shall maintain copies of all documentation completed by the distant/hub telemental health practitioner unless the telemental health practitioner records the information directly within the originating/spoke site’s electronic medical record system.
(c) Guidelines of the office.
The office shall develop guidelines to assist providers in complying with the provisions of this Part and in achieving treatment goals through the use of telemental health services. The office shall post such guidelines on its public website.
(a) General requirements.