Telemedicine: RX for the Future of Health Care

Susan E. Volkert[*]

November 1, 2000 6 Mich. Telecomm. Tech. L. Rev. 147 (2000)

Cite as: Susan E. Volkert, Telemedicine: Rx for the Future of Health Care,
6 Mich. Telecomm. Tech. L. Rev. 147 (2000),
available at <http://www.mttlr.org/volsix/Volkert.html>.

Comments about this article should be sent to mttlr@umich.edu


INTRODUCTION
I.   DEFINING TELEMEDICINE
II.  CURRENT LAWS, POLICIES, AND POSITIONS RELATING TO THE PRACTICE OF TELEMEDICINE
      A. Current Federal Law and Applications
      B. State Telemedicine Laws
III. REGULATING THE QUALITY OF CARE: LICENSURE, MEDICAL MALPRACTICE AND THE DOCTRINE OF INFORMED CONSENT
      A. Regulation by Licensure
          1. Current Licensure Laws
          2. National Initiatives: Professional Organizations, Institutions, and Commissions
          3. Current Legislative Activity
      B. Regulating Quality: Serving the Best Interests of the Patient
      C. Informed Consent
IV. REGULATING ACCESS AND STAMDARDS
      A. Regulating Access: The FCC and "Universal" Access
      B. Regulating "Teledevices"
      C. Regulating Access Excess: Protecting The Patient's Privacy, Confidentiality and Security Interests
          1. Privacy, Confidentiality and Telemedicine
          2. Federal Protections
          3. State laws
          4. Professional Codes of Ethics and Private Positions
          5. Proposals
V. REGULATING COSTS: WHAT SERVICE AT WHAT PRICE?
      A. Federal Funding
      B. State Approaches To Reimbursement
      C. Private Funding of Telemedicine
VI. TELEMEDICAL POLITICAL PROPOSALS
VII. A CALL TO ACTION
CONCLUSION


INTRODUCTION

In 1996, eleven people died while trying to climb Mount Everest.[1] Shortly thereafter, physicians worldwide began turning to technology to provide remote medical treatment. In May 1998, physicians, scientists and technologists determined it was time to safeguard the health of another team attempting to scale the world's highest mountain.[2] They turned to telemedicine, equipping the climbers with "Bio-Packs" that measured the climbers' surface and core temperatures, pulse rates and oxygen saturation levels,[3] "Geo-Packs" that constantly updated the climbers' location using a geonavigation system, and EKG and EEG telemetry devices.[4] Just one week before the Mount Everest expedition, a physician in New Jersey practiced a far simpler and more modest form of telemedicine: he answered medical queries using his web site. Three months later, physicians at the University of Colorado Health Science Center developed and implemented plans to make "house calls" to the three Texas RE/MAX pilots during their attempt to fly around the world in a balloon.[5]
Telemedicine is not just for those seeking lofty goals or technologically adept physicians. A mobile telemedicine platform was employed by the U.S. military in Bosnia. Because there were radiologists, orthopedists and other specialists in the United States to immediately address soldiers' illnesses or injuries, soldiers did not need to evacuate to Germany.[6] Patients can effectively now 'dial a treatment'. Telemedicine promises to save lives, improve the quality of medical services, increase access to treatment and even control the skyrocketing costs of health care delivery. In fact, telemedicine is a mechanism to address health care delivery issues that plague the United States. If the goals are quality, access and curtailing costs, telemedicine is one part of a complex answer. And yet, with health care costs escalating, society struggles to realize telemedicine's promise.
Quite simply, telemedicine symbolizes and catalyzes the clash between the reality of our legal and political approach to health care and the American dream of bringing health care to all patients. Telemedicine, like our health care delivery systems, is regulated by many layers of government. Unlike other issues, telemedicine cuts through and challenges the traditional controls of access and cost. As such, telemedicine is a microcosm of our health care delivery system and a lens through which one may analyze the obstacles to access in the current system. This article examines these issues, proposes that telemedicine's goal should be to improve quality, access, and, costs for the American patient, and offers suggestions for obtaining these goals.
In the past five years, professional, governmental, and private organizations' interest in telemedicine has grown exponentially. Although telemedicine is still in its infancy, the technology driving telemedicine continues to advance more rapidly than the laws that apply to its use. Three main issues remain unresolved: (1) who controls quality; (2) how patients gain access; and, (3) who pays for that access? The combination of innovative application of technology and the regulated world of medicine, governed by our unique political landscape, compels us to examine and resolve issues relating to quality, access and costs.
Over the next five years, we are poised to spend over $100 billion on telemedicine and other emerging information technologies.[7] For this investment to pay off, the current framework for regulating telemedicine must be replaced with one that facilitates the delivery of these services.[8] Those seeking to deliver telemedicine must contemplate cost, access and quality, and must pay particular attention to the best interests of the patient.[9]
Although telemedicine has been heralded, it has also been criticized,[10] both for advancing too quickly and for moving too slowly[11], for taking on too much, for not taking on enough and for adding costs to health care. The telemedicine subject has raised a plethora of questions. This article will examine those questions in the context of our legal, regulatory and political/ethical framework. Part I defines "telemedicine" and "telehealth," and explores current and future applications. Part II addresses regulation of quality and focuses on licensure, credentialing, and malpractice actions. Part III considers access and the regulatory monitors of telemedicine: the Federal Communications Commission ("FCC"), the Food Drug and Cosmetic Administration ("FD&CA") and Health Care Financing Administration ("HCFA"). Part IV focuses on the cost of telemedicine, including funding and payment systems for telemedicine delivery services, and suggests guidelines that should provide fiscal support for telemedicine projects. Part V discusses current federal, state and private telemedicine proposals and suggests model approaches for achieving access, quality and cost objectives. Part VI suggests that telemedicine is a means to improving medical treatment. To that end, this article proposes solutions that will drive telemedicine toward improved quality and access for our entire health care delivery system.


I.   DEFINING TELEMEDICINE

Telemedicine can be described as the use of electronic communication and information technologies to provide or support clinical care at a distance.[12] This simple definition is used throughout this paper. Today in the United States, telemedicine is being used in academic medical centers,[13] community hospitals, managed-care companies, and in rural hospitals.[14] Telemedicine is also being used internationally to link providers in developing countries to hospitals in the United States and Europe.[15] Advances in digital communication, telecommunication, and the Internet[16] introduce an unprecedented opportunity to remote access to medical care.
Telemedicine is currently employed in patient care, professional and patient education, research and public-health applications.[17] It has been applied and studied in rural and city environments, by the public and private sector. It is being used in space,[18] on the prairies, on mountaintops[19] and under the sea, domestically and internationally,[20] on the battlefield[21] and in peacetime.[22] It is used in triage[23] and post-surgically,[24] by generalist and specialist alike, for home and clinical care. Telemedicine providers are expanding and cover the entire spectrum of health care practices, from cardiology to trauma medicine, from dentistry to toxicology, and from gynecology to ophthalmology.[25] Telemedicine now and in the future will include the full panoply of health related fields, from administrative services to utilization review,[26] from child-abuse assessment to home health care.[27] Other applications include back-up coverage for physicians, continuing medical education, disability evaluations, home health care, nursing care,[28] pre-operative meetings with patients, quality assurance, remote proctoring, utilization review and consumer education.[29] Care through telemedicine is being provided at home,[30] in prisons,[31] at VA hospitals, in urban settings and in rural areas, in acute and long-term facilities, and by medical specialties and nurses.[32] As technology revolutionizes the communications industry, clinicians' lives will be transformed as well. Specific examples of current applications include: physicians who answer patients' questions through on-line information services; consultation via electronic mail between patients' primary care physicians and tertiary care specialists; linking data systems for evaluations of CT scans or radiology studies; and real-time examination, treatment and diagnosis through interactive television and emergency centers where physicians and/or nurses remotely evaluate patients' symptoms and recommend an appropriate course of action.[33]
By far, the greatest financial supporter of telemedicine has been the government, either directly, or through financial support to hospitals or medical centers. At least thirteen federal agencies and many states provide funding, grants and reimbursements for telemedicine program development.[34] There are reportedly over 150 telemedicine projects being conducted in over four-fifths of our states, involving well over 5000 patients.[35] Telemedicine is widely used by the military-to improve quality and access, and to reduce costs. The Department of Defense has developed battlefield and peacetime telemedicine applications. One of the uses is a "reality helmet" that allows combat medics to communicate with physicians during the critical minutes after a soldier is wounded and before the soldier can be brought from the battlefield. A handheld device monitors the vital signs of the wounded.[36]
Recently, home telemedicine has been growing. A company in the midwest is using telemedicine to provide home health care. A two-way video interaction system, using the existing telephone system, is installed in the patient's home and run through regular telephone lines. The patient and the health care provider can communicate, and the system provides blood pressure, pulse checks and like medical information.[37] Further, telecare often supports video telepharmacy. Pharmacists are able to dispense medication at physician's offices, rural clinics, nursing homes and assisted-living facilities "with just the touch of a button."[38] Telemedicine is a tool that provides enhanced care to rural patients-improving access and the quality of care.[39]
Telemedicine brings promises of reduced health care expenditures,[40] improved cost-monitoring, encouraging better record keeping, and augmented access to quality care.[41] It provides access to health care services by bringing care to the patients, increasing patient understanding of their own health issues, and permitting patients to examine their own health data. In addition, there are promised improvements to the health professional's role by increasing local medical self-reliance, diminishing the sense of professional isolation, expanding educational opportunities for health care providers and offering the potential to reduce malpractice insurance. There are benefits to the community in, for example, permitting nurses to provide greater assistance in the delivery of health care, reducing hospital stays, and in the potential for greatly improved epidemiological studies provided by telemedicine.
As the need for home health and long-term care grows, telemedicine will provide the opportunity to deliver care to those in need who otherwise might not receive care. For example, telemedicine is being used in correctional facilities, and its use shows great potential for further expansion. Other areas, such as hospices and schools, provide testing sites for telemedicine to bring care to patients, reducing the costs of travel without compromising the quality of care.[42] A hallmark of "distance medicine" is that it gives access to care for areas that are medically underserved, or for people that have been traditionally underserved. Medical hospitals such as Texas Tech and the Medical College of Georgia have employed telemedicine to link physicians with patients and other physicians located in remote areas.[43] In many states, physicians are evaluating state prisoners through the use of video-conferencing. In the prison context telemedicine has the additional benefits of reducing traveling time for physicians and minimizing security risks.
Regardless of telemedicine's potential, significant regulatory and policy barriers threaten to disrupt the development of distance medicine. These barriers include reimbursement limitations and uncertain funding, cumbersome credentialing requirements, legal liability uncertainties and malpractice exposure, unclear data on cost-effectiveness,[44] and a lack of uniform national practice standards and telemedicine standards. Additionally, telemedicine has neither practice guidelines nor measurement criteria, and scant information exists regarding clinical efficacy. There is even debate in the medical community regarding telemedicine's direction and infrastructure.[45] As a result, telemedicine is being legislated, regulated, studied,[46] reported, journalized,[47] conferenced, advanced, propounded, debated, bibliographed,[48] and webbed.[49] Telemedicine is being researched and piloted, both on small scale and large commercial endeavors. Telemedicine is the subject of multi-government laws and laws in waiting. However great telemedicine's promise, its full potential to address issues of quality, access and costs are imperiled by the lack of a strategic plan.[50]
With all the promise that telemedicine brings to the treatment of the remote patient, or that the remote physician brings to the patient, telemedicine, is, in itself, an oxymoron. Potentially, it is one more tool in "distancing" the patient from the caretaker and a series of events culminating in taking the physician yet another "real" distance from his ward.
Not long ago, the patient's relationship with his doctor was not merely clinical, but personal as well. This relationship was built at the bedside, not on the "public" operating table. There weren't any intermediaries, or providers, or insurance forms. Since that time, health care has changed and many more parties are involved in the delivery of services: the federal and state governments, insurance companies, Medicare, Medicaid, managed care, and the litany of HMOs, IPOs, PPOs, MSOs-providers of care in every size, shape and form. The patient, once the sole focus of the doctors' attention, now must navigate a new regulatory course to obtain the very treatment sought. With the need to reduce health care costs, and improve access, the patient is, de jure and de facto, further distanced from the physician. In fact, many physicians are torn between their regulators and the person they have sworn to treat. Telemedicine, used initially and primarily in rural areas, holds the promise of reuniting the doctor to the patient.[51] If indeed this is telemedicine's promise, the telemedical community should not lose sight of its axiomatic principle: to bring health care to the patient by bringing the physician to his patient.
The physician, however, is only "virtually" present with the patient. Telemedicine, for all of its potential glory, could, in its application, have a dark side. Although telemedicine is viewed as a panacea for the ills of the underserved, there is the potential that telemedicine will not be used to augment the quality of care to the underserved, but to provide a minimum care from a distance in lieu of care that should optimally be provided in person; e.g. that telemedicine could be employed as a cheaper method to provide the least-necessary care, and in the name of improved access, deny the quality of care to a population that both needs improved quality the most and would ordinarily not be able to get the best care by the best physicians. This underserved population, e.g. the homebound, the prisoner, the elderly, the inner-city populous, need to be protected from potential abuse in using telemedicine solely for the purpose of saving costs.
What, then, are the key legal, regulatory issues posed by the telemedical care? First, to address issues of quality, each state should allow its medical licensing authority to require that any physician practicing "distance" medicine on patients in the state obtain registration from their licensing board. The board should require distance providers to meet minimum practice standards.[52] Enforcement of this requirement would be a matter of comity among the states. For example, California deems it "unprofessional conduct" for a California physician to practice telemedicine into another state without satisfying legal requirements set forth for practice by that state.[53] The states should coordinate credentialing requirements with other states. In addition, each state should coordinate a plan with JCAHO[54] and NCQA[55] to set telemedical credentialing standards in an effort to reduce the burden of obtaining credentials in each location where a remote physician practices. Second, physicians should always obtain informed consent of the patient. With respect to the telemedical practice, this should include the benefits, the risks, and the option of not participating in the telemedical consultation.[56] Third, to protect the confidentiality and privacy of the patient's telemedical treatment, the federal government should set minimum standards requiring: (1) the telepractitioner to obtain the patient's consent before transmitting any information electronically; (2) regulatory protections to deter any violations of confidentiality or invasions of privacy; and, (3) patient access to his or her records-especially records of studies regarding treatment and the disclosure of the risks associated with particular telepractice. Guideposts for regulatory measurement should be thorough and should comprehensively protect the patient's rights. For the most part, current laws, although prolific in this area, do not address the panoply of issues facing the telemedicine practitioner and patient.


II.  CURRENT LAWS, POLICIES, AND POSITIONS RELATING TO THE PRACTICE OF TELEMEDICINE

Telemedicine today is the confluence of a number of areas, with most of the laws, regulators and professionals sharing the principle that telemedicine's end should be to improve the public good. First, it is widely-held that universal health care is a worthwhile goal, and professionals in the health care field are striving to see that all citizens, regardless of their socioeconomic class, or geographic location, have access to quality health care. Second, federal and state governments are attempting, through a variety of laws, to promote more efficient health care and to remove unnecessary barriers to delivery of services. The Telecommunications Reform Act of 1996 reflects the government's aim to provide this access.[57] Many of these ends can be furthered by telemedicine, but telemedicine has barriers preventing universal acceptance.[58] Three regulatory questions dominate this area: (1) licensure, credentialing, and liability; (2) access concerns, including standards for use, confidentiality, privacy; and, (3) economic issues, reimbursement for services, funding and cost effectiveness. Although telemedicine is just one of many health care systems designed to improve access, it provides a model for examining the necessary means for universal access.[59] As is the case in any circumstance involving the use of innovative applications of technology in the regulated world of medicine, the advancement of telemedicine applications will require resolution of many issues, including resolution of many parochial barriers that have been raised.[60] These barriers are often raised to protect the entrenched medical professionals, and fail to put the best interest of the patient first.[61]
In order to understand what action plans may be most successful for the optimum regulation of telemedicine, it is important to track the current laws and plans. The federal government has contributed millions of dollars to telemedicine projects. In fact, many existing state projects depend on federal dollars. But the licensing of telemedicine is controlled at the state level. Although there are some federal laws that facilitate delivery of telemedicine, those laws primarily allocate and release funds to support telemedicine delivery systems and provide reimbursement for services. Each state has either created a telemedicine-friendly environment to facilitate the use of telemedicine or an environment that barricades telemedicine from its borders. After looking at the pieces that make this montage, it is easier to identify the real leverage points to ensure that the best interests of the patient are addressed by those who both have the authority and power to take action.[62] In this section, I will first examine the current applicable laws relating to telemedicine, both federal and state. Next, I will set forth the barriers and checkpoints for telemedical applications-licensure, credentialing laws, as well as the checks on quality delivery-and the potential liabilities.

A. Current Federal Law and Applications

Within the last two years, three major federal laws were enacted which directly influenced telemedicine.[63] The first, the Telecommunications Reform Act of 1996, requires the FCC to assure that health care providers in rural areas have access to telecommunications services at rates comparable to those found in urban areas.[64] The Telecommunications Reform Act speaks to the availability of communication services as a vehicle to provide health-delivery services impacting telemedical services.
In the Telecommunications Reform Act, Congress updated and clarified the notion of "universal service" first articulated in the Communications Act of 1943.[65] In enacting this legislation, Congress required the FCC to ensure that rural healthcare providers have access to telecommunications systems necessary to deliver services at rates comparable to those offered in urban areas.[66] Health care providers, schools and libraries are to have early access to the benefit of advanced telecommunications. As such, Congress gave special consideration to health care providers in rural areas, maintaining that rural health care providers were to receive subsidies to the extent their rural rates were higher than urban rates. The Act defined advanced telecommunications, mandated the FCC institute a Federal State Joint Board, and the FCC was charged to enhance access to "health care providers."[67] Under the law, states are authorized to develop their own definition of services which improve health care delivery. Moreover, states are to encourage the deployment on a reasonably and timely basis of advanced telecommunications capability to all Americans. What this means for telemedicine is yet to be seen but the Telecommunications Reform Act certainly lined the potential wires with gold. The door is open for health care advocates to suggest, develop and deploy advanced telecommunications networks. Most importantly, the FCC authorized the use of up to $400 million each year to help subsidize improvements to rural providers and telecommunications networks and charges for telecommunications services. These funds will provide toll-free access to the Internet, cover long-distance charges of rural healthcare providers using telemedicine applications, and subsidize other telemedicine projects.
The second major reform was the Balanced Budget Act of 1997.[68] On January 1, 1999, the Secretary of Health and Human Services began making Medicare Part B payments for certain telemedical consultations provided to Medicare beneficiaries residing in underserved rural areas. The Secretary is required to establish a methodology[69] for determining the amount to be paid for these kinds of consultations. The subsidy will be shared between the referring physician or practitioner and the consulting physician or practitioner.[70] The Secretary is to report to Congress with an analysis of the manner in which telemedicine and telehealth systems are expanding access to health care services, the clinical efficacy and cost-effectiveness of telemedicine and telehealth services, the quality of the services, and the reasonable costs of the charges relating to telecommunications in these specific rural, frontier and under-served areas. In addition, the Secretary is required to provide a report to Congress, discussing the possibility of expanding reimbursement to areas other than the rural and underserved. The Secretary is to look specifically at providing Part B Medicare coverage for telemedicine services for beneficiaries not located in the designated areas but who are nonetheless homebound and for whom transfer to a care facility would impose a hardship. The Secretary's report must include information regarding the potential costs and savings to Medicare.[71] The Secretary is also to fund a single, four-year demonstration project to use "eligible" health care provider telemedicine networks to improve primary care, and to prevent health care complications to Medicare beneficiaries with Diabetes Mellitus who are residents of these medically under-served rural or inner-city areas.[72]
The third major reform occurred with the Food, Drug and Cosmetic Act. The FDA already regulates medical devices, but the FDA has provided notice that telemedical devices-both hardware and software-are under the jurisdictional arm and regulatory authority of the Food and Drug Administration.[73] FDA, although not regulating the delivery of health care services, regulates technologies associated with health care delivery. The provisions of the law that are most likely to impact telemedical delivery services are the risk-based regulation of medical devices and the standards for medical products, which include DRGs and related devices.[74]


B. State Telemedicine Laws

The federal regulatory scheme provides the framework to view the national boundaries of telemedicine application. The actual building of telemedicine programs and applications is both being legislated and built at the state level. On the state front, telemedicine activity has taken place in some form in every state with the possible exception of Rhode Island.[75] Many states have recently established and coordinated efforts. For example, in California and Kansas professional self-regulation and the governmental regulation of licensure and professional requirements are intertwined. For many reasons, licensure requirements have been designed by the states and are, in fact, delegated to the states as part and parcel of the states' police power. Part of this is historical in nature, part of this is because of the recent trend to decentralize government power to the states, and much of it relates to the growth of the medical profession and the manner in which it has developed. The licensure requirements and credentialing processes are based upon standards that have been developed by the medical professionals. Although under the auspices of the state government police power, the "policing" of the practice of medicine is in the physician's control. Medical boards, the licensing bodies, and even disciplinary panels are usually made up of medical professionals.


III. REGULATING THE QUALITY OF CARE: LICENSURE, MEDICAL MALPRACTICE AND THE DOCTRINE OF INFORMED CONSENT

A. Regulation by Licensure

Licensure is a state-based patient protection system.[76] Since telemedicine poses, by its very nature, the probability that medicine will be practiced across state lines, state cooperation or federal regulation must be considered.

1. Current Licensure Laws

Throughout this country's history, states have been the gatekeepers of medical licensure.[77] Today, every state in the United States has laws and/or regulations that set forth strict requirements to be met before any physician, nurse, dentist or other "health professional" may hold themselves out, and legally practice, that profession within the borders of that particular state.[78] State licensing statutes require a physician to be licensed in the state in which the physician is practicing medicine. When a physician in a state renders telemedical services to a patient in the same state, there is usually no additional requirement for a license. But once the practice of telemedicine extends beyond the state line, licensing issues become more complex. There are several permutations to this "regulatory locus" problem: the patient may be located in a state different from the state in which the physician is located, the physician may be in the same state as the patient but consult with a physician located out of state, or the patient, physician and consulting physician may all be in different states.[79]
Within the last five years, states have begun to enact laws that specifically address telemedicine licensure. States adopt a variety of approaches. First, telemedicine laws sanction liberal interstate practice of medicine. Second, telemedicine practice might employ existing statutory frameworks that provide limited exceptions, including consultation with out-of-state practitioners. Finally, other states prohibit the practice of medicine by a telepractitioner outside the states borders.
Only four states do not provide for out-of-state consultation exceptions.[80] The prerequisite for the "consulting exemption" is that the physician located within the state is the treating physician. In many instances, the limitation imposed on the exemption assures that the outside consultant will not have the authority over the care of the patient being treated within the state.[81] To assist physicians in seeking medical expertise from other physicians out of state, most states have created exceptions to the general rule and permit some form of consulting exception. Until recently, most state statutes did not offer "protection for an out-of-state clinician unless a consultation is requested by or otherwise involves an in-state clinician."[82] In Massachusetts, for example, the licensing requirements do not apply to "a physician or surgeon resident in another state who is a legal practitioner therein, when in actual consultation with a legal practitioner of the [C]commonwealth."[83] This exception to the rule has limitations, as interpreted and thus, the "consultation" exception only applies if the out-of-state physician provides a Massachusetts' patient with a teleconsultation, and, if the out-of-state physician "is consulting with a Massachusetts physician of the same specialty."[84]
Instead of providing more "license" to encourage telemedicine practice, many states' physician licensing boards have placed even more restrictions on consultations, making routine telemedical consultations impractical if not impossible.[85] By limiting the number of consultations an out of state physician may provide without first obtaining a license from the state, by limiting the number of days or type of consultation that may occur, or limiting the state or the locality of the state in which the consultation may occur, states have closed the door on the practical application of "telemedicine."[86]
Strategies to address telemedicine vary from state to state, but most states that have addressed the issue of telemedicine have also addressed the issue of what telemedicine means to their definition of the "practice of medicine." At the end of 1997, at least 15 states [87] had addressed the need to amend or enact new legislation, one state had written an administrative rule addressing out-of-state licensure and another had the Attorney General issue an opinion on the subject.[88] To alleviate the burdens on physicians created by the licensure process, most states have carved out exceptions to the rule requiring a "license" to practice medicine.[89]
Some states, recognizing they may be losing some of their physicians to other states on a regular or consultative basis, have taken the position that they would, in effect, burden access to other state's practitioners.[90] Other states, such as North Dakota, have mandated the study of the use of telemedicine and what is needed for licensing changes.[91] Still other states, such as Illinois, have directed its state health department to study the feasibility of using telemedicine for both rural areas and patients that are homebound.[92] There are a few states that have not fully determined a stance on the licensure issue but have had conferences and/or bills proposed regarding their policy.[93]
In a minority of states, legislatures have restricted consultations, making routine telemedical consultations impossible.[94] These states limit the number of consultations that can occur without obtaining a local medical license, or limit the number of days that consultations occur, or limit the consultations to physicians practicing in bordering states. In a few states, the consultation exemption has been eliminated and the laws now require than any consultation occur only with a physician licensed by that state.[95] A number of states have reduced the existing burdens of individual state licensure by expediting the licensure process. South Dakota and Tennessee have allowed for reciprocity for the practice of telemedicine providing the other state's requirements are not less stringent than theirs. New Mexico has allowed telemedicine licensure by endorsement if a physician otherwise meets the requirements of New Mexico's laws.[96] Finally, Alabama and Tennessee have adopted restricted or special licenses.
State licensure has worked well for many years to regulate physicians. This system delegates to the states the power to adapt their regulations to the needs of their constituents, and gives wide latitude to make changes that will best serve their local needs. On the other hand, to the patient who is in need of a specialist located in another state, to the telepractitioner that cannot obtain a consultation because state laws prohibit the practice of medicine within its boundaries by those not licensed in the state, or to the hospital located on the border of a state with specialized needs located in its sister state, state laws can impede the telepractitioner's practice-in terms of time, expense and licensure requirements.[97]

2. National Initiatives: Professional Organizations, Institutions, and Commissions

Notwithstanding the government's interest in promoting telemedicine, many state licensing laws for physicians inhibit telemedicine's full realization.[98] Commissions and professional associations, recognizing that licensure is a key area that needs to be addressed, have proposed a variety of suggestions to remove licensure as a barrier to the practice of telemedicine.[99] Private organizations reflect the tensions between established regulatory systems and emerging reforms, disagreeing over which body-federal or state- deserves primary regulatory power in this area. A Telemedicine Report to Congress suggested that although there is a strong presumption against state preemption, states would have to give way to paramount Federal legislation.[100] As a California Commission suggested, the state adopted a license that permits consultants to practice within the State of California, but the ultimate decision making power rests with the patient's California doctor.[101] The Western Governors' Association has recommended a task force to draft a Uniform State Code for Telemedicine Licensure that would be similar in principle to the Uniform Commercial Code.[102]
The medical societies that have addressed telemedicine issues hold fast to the concept of self-regulation, and although professional organizations have come to a variety of proposed solutions, none espouses a national licensure scheme as proposed by the Telemedicine Task Force.[103] The American Medical Association has examined the interstate[104] licensure issue, and recommends that all physicians be fully licensed in every state where their patients are located and/or where they practice medicine.[105] Likewise, the American College of Radiologists recommends that telemedicine physicians maintain residential licenses in addition to remote state licenses.[106] However, the Federation of State Medical Boards, which in the past had opposed national type legislation, has drafted model legislation that if adopted by states would move a step in between and create a special license for physicians. This approach would eliminate the necessity for a license in every state where the physician might practice telemedicine. In 1996, in response to telemedicine issues, the Federation of State Medical Boards developed this Model Act to regulate medicine across states lines. The Act, as proposed, requires physicians practicing medicine across state lines to obtain a special license issued by a state medical board. The license would be limited to those practicing medicine across state lines, and would be required for regular or frequent telemedicine practitioners. It would exempt a physician who engaged in practice across state lines in an emergency.

3. Current Legislative Activity

Most states that have not enacted statutes directed at telemedicine do have telemedicine bills pending under the following rubrics: individual state, interstate, model act and national licensure proposals. This nomenclature, although somewhat forced, provides a spectrum to look not only at the variety of approaches to regulating the quality of care, but the policy issues driving those approaches.

a. Individual State Licensure[107]
=

Most states, recognizing that special licensing issues are required to further telemedicine, bring telemedicine within their existing "practice of medicine" definitions. California and Mississippi, for example, have expanded their definitions while maintaining exclusive control of medical regulation. [108]California's approach, granting its Medical Board the authority to develop a registration program that would allow out-of-state physicians to provide telemedicine services to California residents, provides a broadened acceptance of the telemedical practice, and simultaneously, addresses quality control over its patients. Most of the laws and legislative proposals require a special license providing for telemedical services, but make exceptions for consultations, educational demonstrations, lectures and emergencies. The California approach, however, is atypical as most states continue to regulate only those physicians practicing within their borders. In fact, the individual state license is the approach endorsed by the American Medical Association (AMA). The AMA's House of Delegates has urged that physicians be licensed in every state where their patients are located.[109]

b. Interstate Licensure

The interstate licensure model has been proposed by one state compendium, the Western Governors' Association. It takes a number of forms: a multistate licensure system, mutual recognition, a uniform interstate licensure system, or interstate compact. State licensing bodies would provide consistent licensure requirements and allow physicians to qualify for practice in other states without duplicative examinations and repetitive application costs. As proposed by the Center for Telemedicine Law White Paper, this system would define which law will govern the conduct of a physician, who practices across state lines, and who holds a license in both states. The physician would not be subject to the requirements of separate and inconsistent state laws. Or, as proposed by the National Council of State Boards of Nursing, registered nurses licensed in one state will be able to practice in any state that adopts the compact, provided they follow the laws and regulations of the state in which they are practicing. Under this system, the licenses are recognized in multiple states, facilitating telepractice, but each individual state has the authority to set its own educational, behavioral and competency requirements. This approach has the advantage of placing the responsibility on the physician to comply with the state laws, and vests each state with the authority to enforce its laws. However, for the telepractitioner specialist needed in many states, or for the telepractitioner practicing in numerous jurisdictions, interstate licensure could be burdensome.[110]

c. The Model Act Approach

In April of 1996, the House of Delegates of the Federation of State Medical Boards ("FSMB") proposed model legislation known as the "Model Act."[111] The Model Act suggests a "special purpose license to practice medicine across state lines upon application for the same from a person holding a full and unrestricted license to practice medicine in any and all states . . . in which such individual is licensed, provided there has not been previous disciplinary or other action against the applicant by the state or jurisdiction." Although no state has endorsed the Model Act in total, several state medical boards have endorsed provisions of the Model Act,[112] and some states have, unsuccessfully, proposed implementation of the Model Act.[113] The Model Act has been criticized by the Western Governors Association, the Mayo Foundation, and the American Medical Association because its provisions are too broad.[114]

d. National Licensure

A national licensure system would eliminate state licensures and replace them with a national-level licensure.[115] Arguably, Congress has the authority to regulate this type of activity since it has a substantial effect on interstate commerce.[116] Although there has been much discussion regarding a national license, and many scholars, especially telemedicine proponents, favor such national licensure, there is no evidence that sufficient support exists for such a scheme. In fact, the Western Governors are "loath to cede this authority to Washington, D.C., when state leadership and cooperation among other interested parties could help to alleviate the licensure burden placed on physicians and patients in a telemedicine context."[117] There are a number of arguments that compel moving to a national licensure system, and equally, a number of arguments that disfavor moving to such a system. Each of these will be examined from a quality of care perspective, with the focus on what ultimately will serve the best interests of the patient.
First, a national licensing system would remove the current barrier that states use to keep out-of-state physicians from entering their state.[118] Second, state licensure limits networking because such requirements limit interstate networking capability.[119] Third, educational and professional competency requirements for an initial state medical license are now more standardized.[120] Every state requires that licensed practitioners graduate from an accredited medical school and pass a national test, the United States Medical Licensing Exam.[121] Fourth, there is now the National Practitioner Data Bank that collects, on a nationwide basis, information about physicians, including licensure matters.[122] Fifth, there is a track record of proving a national system will work, as the federal government funds a great part of the telemedical practice and has been using national licensure for many years.[123] Sixth, national licensure should not pose problems because the federal government clearly has the authority to regulate the medical professions, and has exercised this authority by setting standards in many other areas of health care.[124] Seventh, there now exist coordination efforts of telemedicine programs by the Joint Working Group on Telemedicine (JWGT),[125] including the JWGT's urge to consider a national licensure system.[126] Last, such a system would require uniform standards, as well as a centralized system coordinating physicians data, and would permit physicians to practice in any state without the necessity of obtaining a license in every separate state.[127]
A national system, however appealing in theory, may not be the best practical solution or even the best solution for assuring patients obtain the best quality of care possible. First, a national license does not have the support of all professional groups-this alone is a difficult obstacle to overcome.[128] Second, telemedicine is young. Consensus does not exist on what exactly should be licensed, and by whom.[129] Third, regulation could cause more harm than good.[130] Fourth, licensure exists to protect the patient by keeping the gates closed to anyone who failed to meet the minimum qualifications necessary for entry. States have historically done an excellent job at policing, and there is no data to suggest a national system would work as well as the existing state systems.[131] Last, as our political climate warms to a national licensure system, progress is better ensured through voluntary state entry than by federal preemption and regulation. In fact, as states adopt telemedicine statutes and amend their licensing laws to reflect telemedicine practices, states incrementally move toward a model uniform approach. The energy put into flexible state approaches will protect patients, continuously adapt to fit the needs of the constituents, and simultaneously move toward the best "model" approaches.

B. Regulating Quality: Serving the Best Interests of the Patient

The threat of a malpractice action is another related legal issue which impacts telemedicine's future use and the quality of health services provided to the patient.[132] Telemedicine offers tremendous opportunities to improve both the quality and quantity of healthcare, but may also exacerbate the potential for liability that would arise in more traditional settings.[133] Telemedicine practice challenges the already complicated issues and risks in traditional face-to-face medical settings. To protect the quality of this relationship, whether face to face or through high resolution video, fiber-optic cables, or other advanced imaging technology, we should look to the law of malpractice certainly as a deterrent but also as an indication of what protections should be put in place in the first instance to avoid potential questions of malpractice.[134]
The health care delivery system is in such turmoil that "default" regulation, i.e. liability actions, are also unresolved.[135] Outside of the federal government, telemedicine is in a nascent stage and, as such, no answers exist as to what "liability" may coincide with its use. More than 40 percent of telemedicine programs surveyed[136] have been providing teleconsultations for one year or less.[137] It usually takes at least 21 months following an alleged incident of an adverse outcome for a medical malpractice claim to be brought.[138] One of the reasons we may have so few reported medical malpractice cases relating to telemedical practice is that not enough time has elapsed for claims to have been filed.[139]
Malpractice liability is a potential concern in this relatively "new" health delivery model[140] and for that reason it is perceived as a major barrier to telemedicine's growth.[141] But in the absence of any liability theory's emergence, why are medical malpractice suits perceived as a significant barrier to telemedicine's growth? Quite simply, telemedicine may affect the quality of care and, especially since it is new, the use itself may lead to malpractice liability suits. The uncertainty of its practice, coupled with the fact that care will take place over a distance, may increase the likelihood of malpractice suits.[142] Telemedicine might also augment the potential for missing a signal or symptom that would otherwise be observed in a face-to-face encounter. Skeptics of telemedicine suggest that advanced technology might even mask symptoms that would be noticed if the physician and patient were in the same room, and, thus lead to the increased possibility of misdiagnosis. Other concerns relate to the potential for a mistake in the transfer of information, for dissemination to a third party or loss of the information in the technological transfer. There is, however, no empirical evidence of malpractice claims increasing as a result of telemedical practice.[143] It may be that telemedicine practice will reduce the likelihood of malpractice by bringing care to the patient who might not otherwise have healthcare.[144] Moreover, pragmatic barriers develop: since telemedicine is new, the risks are unclear, and unclear risks cost more to insure.[145]
Another concern to be addressed is whether the practitioner has formed a physician-patient relationship via telemedicine. Medical malpractice cases generally recognize that a physician's duty to a patient is predicated on the existence of a physician-patient relationship. The telemedicine encounter would not change this underlying question, but may complicate the parameters of establishing whether a duty of care has clearly been established. Generally, courts have considered whether the physician has met the patient, examined the patient, reviewed the patient's records, knows the patient by name and was paid for services rendered.[146] A number of courts, wrestling with this issue in the non-telemedical context, indicate that the physician-patient relationship will exist and evolve whether the meeting is in person, telephone or optic image.[147] Generally, courts will find a physician-patient relationship even if the physician has had only brief telephone contact with the patient. In Bienz v. Central Suffolk Hospital, a New York court held that it was a question of fact whether a physician-patient relationship existed, and refused deem a telephone call to a physician's office to initiate treatment insufficient to form a physician-patient relationship.[148] In a Texas case, the court found a physician patient relationship existed between a pathologist and a patient where the pathologist had examined a biopsy slide of the patient, but had never actually met the patient.[149] The latter situation is indicative of what courts could find in a telemedical context where the physician has established a relationship with the patient even though the two have not met face to face.
After establishing the existence of a physician-patient relationship, another question is whether the physician has met the applicable standard of care during the course of treating the patient. Assuming a virtual relationship exists, there will be no liability if the physician or consulting physician has met the applicable standard of care.[150] In the telemedical context, the standard of care owed to the patient must begin with an analysis akin to medical malpractice questions in the non-telemedical context. Medical practice standards of care are "not normally established by either judge or jury."[151] The medical profession establishes the standards of practice; and the courts enforce the standards in a medical malpractice setting.[152] The recognized standards for determining a physician's negligence have been the "national standard" and the local, regional or "community standard." This latter standard or custom of practice by those in the physician's specialty is usually established through expert testimony. The standard of care, by which the conduct of the physician is measured, requires the trier of fact to find that the injury to the patient was caused by a failure to exercise the "required degree of care, skill and diligence" under the circumstances.[153] More and more, courts employ a "national" standard, so the impact of the exact locality of the physician and patient should not impact the outcome. The question, more likely than not, will focus on the physician's knowledge, skill and treatment regime regardless of location. Thus, telemedicine's advent compels jurisdictions toward a national standard of care. For some time, information and consultation have been available via a telephone line, and information regarding where the specialists might be found is always available on the Internet.[154] Any reason to revert to the "local" rule is further diminished since specialists are usually board certified by national tests, rather than local. In Robbins v. Footer, the court found that a nationally certified specialist would be held to a "national" standard of care grounded upon the omnipresent nature of telecommunications.[155] As information becomes more available through medical databases and the Internet, the average physician likely will be held to a higher standard of knowledge. Although no court has held that a physician has a duty to check a national database, use telemedical contacts, or engage in a telemedical consultation, the ability to have "expert" advice instantly available will raise the bar of existing "duty" standards. Predictably, access to such databases will diminish the role of the "locality" rule, augment the use of the "national" standard, and, most likely, establish a higher standard of care bar so that physicians will be required or expected to find readily-available information through existing databases and the use of accessible experts and data. Although not decided in the telemedical context, this standard will allow evidence demonstrating the resources under which the particular physician operates. In Hall v. Hillbun, [156] the court stated:
The duty of care . . . takes two forms: (a) a duty to render a quality of care consonant with the level of medical and practical knowledge the physician may reasonably be expected to possess and the medical judgment he may be expected to exercise, and (b) a duty based upon the adept use of such medical facilities, services, equipment and options as are reasonably available.[157]
Courts following Hall will allow the trier of fact to consider the resources available to the physician, including the facilities, staff and other equipment available in the environment in which the physician practices. For instance, the rural or country physician traditionally was not expected to have the same access to facilities, knowledge or equipment as the city physician.[158] With instant access to information through technology and the availability of distance medicine, the country physician may be able to have access to a host of resources otherwise unavailable.
As telemedicine develops further, the appropriate standard of care is an area that could be better defined by the development of practice guidelines.[159] Defining guidelines will assist physician, patient and regulator alike. A national spokesperson on telemedicine has suggested that of the various legal barriers to the furtherance of telemedical delivery systems, there are "several vexing legal issues that may impede wide adoption of telemedicine by the medical profession" and suggests, with respect to the litigation process, that the set of issues may be "more amenable to amelioration, if not prevention."[160] Sanders suggests that "the most effective approach is the development of practice guidelines for telemedicine, including standard clinical protocols and professional norms of conduct governing clinical encounters."[161]
Whether the risk for potential lawsuits would increase or decease, standards or professional codes of telepractice would assist both physician and patient alike. Actions that telepractitioners could agree to take before practicing "telemedicine at a distance" would inure to the best interest of the patient and, prophylactically, reduce the likelihood of any later lawsuits. Toward this end, there should be full disclosure of the telemedical transaction to the patient. From the patient's standpoint, guidelines addressing what constitutes a "telepractice" would both address concerns the patient may have and, at the same time, provide a solid basis to avoid, as much as possible, any misunderstandings and resulting potential liability.
These guidelines or telemedical codes of professional conduct specifically should address communication between physicians, clarify the roles of the consulting and treating doctors, and provide for disclosures of any conflicts of interest. Additionally, such codes of professional conduct should provide for agreements regarding reimbursement and payment, as well as detailed conditions addressing confidentiality of physician-patient relationship, security, informed-consent requirements and the substantive proposed teletreatment process and options. Since application of the standard of care will depend upon not only the physician's duty to his patient, but many attendant issues relating to the coordination of consulting physicians, ancillary equipment and the proper communication among the treating practitioners, guidelines or codes of professional practice will provide a checklist for physicians to follow. Hopefully, these guidelines will not only help the physicians provide certain basic, minimum information to the patient, but also will reduce practice variation in the telemedical context. Such practice guidelines would provide a base upon which physicians would be able to share "best practices," thus continually improving the process of the practice of distance medicine and concomitantly reducing the margin of error in the practice.[162]
Yet another concern involves the location where an action may be brought. In the traditional face-to-face physician-patient relationship, the forum in which malpractice actions arise was the court of the state in which the diagnosis and treatment occurred. In a situation where the treating physician, the consulting physician and the patient are located in different states, there will multiple forums in which a malpractice action may be brought. As telemedicine becomes more and more commonplace, this area could develop through litigation in the various potential forums-allowing the relevant courts to answer this choice of law question. In this traditional approach, the courts develop the law on a fact-sensitive basis. Today, physicians who practice telemedicine could be subject to the jurisdiction of a patient's state. Physicians usually will have had the "minimum contacts" with the state in which their patient is located unless the court finds that the physician's presence was only "casual" or "isolated."[163] Conflict-of-law principles generally have provided that jurisdiction will be in the state in which the injury occurred and the state that has the greatest connection to the injury.[164] Plaintiffs usually have sought their own local court systems for the simple reason that their courts are convenient and familiar to them. In the telemedical context, it can be foreseen that a plaintiff, having a choice of forums in which to file an action, could shop around and bring a suit in which the awards are most likely to be the highest.[165] In discussing the issues of "multiple forums," the best interests of the patient have received little attention, such as when physicians should be subject to the jurisdiction of their patients' home states. The focus in the future must center on the patient. A number of reasons compel this position. First, physicians who practice telemedicine should be deemed to have the requisite "minimum contacts" with the state in which the telemedical consultation has taken place.[166] Second, jurisdiction over such a case usually will be found in the state in which the injury occurred and the state that has the greatest connection to the injury.[167] Third, the growing sentiment by many states is that their police powers may need to be stronger to protect the health and safety of their residents. States have approached this new arena in a variety of ways, and some states have defined statutorily what will be the jurisdictional reach if such telepractice takes place.[168] To the extent that these choice-of-law issues are anticipated, states could choose to legislate what will be deemed "minimum contacts" in the telemedical context. Such legislation would put both physician, providers, insurers and patients on notice.

C. Informed Consent

A more feasible approach, however, involves providing informed consent because telemedicine is still new, it is often considered optional treatment rather than the first course of treatment. Whether it is optional or primary, it is unclear under what circumstances telemedicine will be used. Clearly, the patient will need to be advised of alternatives. Providing the patient with sufficient information regarding treatment options will enable the patient to make an informed decision. A patient cannot make a decision unless he understands what is involved in the procedure, how the procedure will benefit him, the risks and/or consequences associated with the treatment and the likelihood of these risks and/or consequences occurring.
The doctrine of informed consent is the duty to provide the patient with sufficient information regarding treatment and options that allows the patient to make an "informed decision regarding" the care. This doctrine was first legally recognized in 1914 and has been reaffirmed over the years.[169] Informed consent, grounded in both statutory and case law,[170] encompasses knowing not only what, when, and how the procedure will be accomplished, but the alternatives to the treatment.[171]
Telemedicine does not alter the physician's general duty to inform the patient about the intended care, but it actually may require a more regimented approach in advising the patient. As such, the necessity for informed consent may be of a higher order in a telemedical practice because some telemedical applications are still considered experimental or riskier than an in-person consultation or procedure.[172] On the other hand, the telemedical approach may provide the vehicle to obtain services and medical approaches that otherwise would not be available locally. There is no question[173] that communicating information regarding telemedical application will require, at a minimum, informing the patient of the diagnosis, the nature and purpose of the treatment, the risks and outcomes, and disclosure of the treating physician's skills and the skills available by another physician through the use of telemedicine, especially if the patient may be able to obtain treatment by a physician who has more expertise than available locally.[174] It is critical for the patient to understand any differences between the prognosis if treated locally and teleconsultation. Equally important, the patient should understand the consequences of not pursuing teletreatment. Even if a physician believes that the patient will be best served by a telemedical consultation or treatment, this is not a decision for the physician, hospital or the insurance company. The decision to use telemedicine, like any other treatment, should require the patient's consent. A right of refusal allows patients to control their own health care.
Since telemedicine may be perceived as a new method of providing treatment to patients, it is equally critical that the use of telemedicine be discussed and documented thoroughly.[175] In fact, California's telemedicine law mandates such a course of action.[176] The California approach is a piece of legislation that has been passed or is being considered in many states.[177] The California statute requires both written and verbal communication prior to the delivery of any telemedical care. In informing the patient, the physician should be certain to set forth that the treatment or consultation will be done via telecommunication. If the application is still considered experimental, either because the technology is new or because the procedure has only been performed face-to-face, then the physician should set forth any limitations, including any equipment limitations, risks of the treatment, and potential consequences.[178]
Just as in any face-to-face treatment, the physician should explain any alternate diagnostic options. Above all, the physician should discuss the confidentiality of the procedure. If persons other than the physician will be present, the physician should explain who they are and their roles in the treatment. Finally, the physician should identify the primary physician, the treating physician and the consulting physician.


IV. REGULATING ACCESS AND STAMDARDS

As reflected by malpractice actions, there are no clearly demarcated lines between quality, access and costs.[179] Like the issue of quality, access must be viewed from a state and national viewpoint because there is no single controlling organization monitoring the progress and regulation of telemedicine. Three federal laws, passed within the last few years, impact telemedicine's future path. Two of these laws, the Telecommunications Reform Act of 1996[180] and the FDA Reform Act of 1996[181] govern entry to the marketplace. The FCC Act of 1996 promises to regulate access to information through telecommunication lines.[182] The FDA Act of 1996 regulates access by regulation of devices into the marketplace. The third, the Balanced Budget Act of 1997, provides the funds to ease telemedicine's path. All three of these federal laws combine to improve the public good and to assist telemedicine's entry to the health care system.[183]

A. Regulating Access: The FCC and "Universal" Access
The first law, the Telecommunications Reform Act of 1996, promises access to information for all citizens, regardless of their geographic location.[184] Telemedical activities in areas where the need was often the greatest was impossible because communication access in rural and other underserved areas was not established. Basic telephone connections simply did not exist.[185] Historically, communication costs in rural and other underserved areas were set by telecommunications providers, often easily accomplished because of the lack of competition for those markets. Large segments of the population, including rural and low-income households, were and still are unable to afford local access to a network, rendering them medically disenfranchised.[186] Even if the providers offered discounts to health care practitioners, they could not because state and federal utility laws prevented them-the threat, of course, being pricing discrimination. With the passage of the Telecommunications Reform Act of 1996, carriers must now provide telecommunications services to health care providers serving rural areas at rates that are comparable to those imposed in urban areas.[187]
The purpose of the Telecommunications Act of 1996 is to provide universal access.[188] The legislation accomplishes this by increasing competition through deregulation, and establishing a universal service fund that would subsidize rural and other disadvantaged telecommunication users. In the long run, the free market should work to increase competition, lower costs, and provide better service and more consumer choices. This revived market, free and open to competition, should result in local and long-distance phone companies, and wireless, satellite and cable companies competing in each others' playing fields.[189]
For the purposes of this discussion, the key importance of the 1996 Telecommunications law is that it provides, inter alia, universal communications services at affordable rates for rural, high-cost, or low-income areas.[190] In order to bring the widespread availability of basic communications services at affordable prices, the Act requires the FCC to ensure that rural health care providers have access to essential telecommunications systems to deliver services at rates comparable to those offered in urban areas.[191] It was the first time universal service benefits had ever been specifically targeted to rural health care providers.[192] The guiding principles are quality service at just and reasonable rates, services for rural and isolated consumers at rates comparable to those in urban areas, and access to telecommunications services for rural health care providers. The major aim of the Act was to enhance health care in America.[193] The telecommunications providers in rural areas, according to the Act, must be compensated via a fund designed to promote universal access to modern telecommunications.[194] The challenge was, and four years after its passage still remains, to compensate rural health care providers for much higher telephone line charges,[195] due to the distance, than their urban counterparts[196] and remove the enormous access barriers associated with the growth of telemedicine.[197] Health care via telemedicine should not be hampered by excessive telecommunications rates in rural areas, by lack of equipment standards, or by regulatory and legal barriers imposed by the FCC.[198] This is no small matter since communications costs in underserved areas could end up costing four to five times the rates charged in urban settings.[199]
Procedurally, the FCC and the States share responsibility for the Act's implementation.[200] The FCC is charged with addressing any federal or state preemption disputes arising under the Act.[201] The States also have a significant role: their duty is to address local competition and intrastate universal service.[202] The Joint Advisory Committee Task Force is to figure out how to implement the Act, a significant responsibility. The FCC's role is to assure that there is a general policy as well as specific implementation of equitable distribution of reasonably priced, quality services that are affordable to the populace.[203]
The Act required the FCC to issue regulations as well as to appoint a Joint Advisory Committee Task Force to make recommendations to the FCC.[204] The Advisory Committee made its recommendations, and in May, 1997, the FCC's Universal Service Report and Order was issued,[205] providing major financial support for telemedicine.[206] The Universal Service Order required telecommunications companies to provide rural health care providers comparable access to telecommunications services to those of urban areas.[207] The health care provisions established a $400 million per year[208] subsidy to rural health care providers to bring them up to par with their urban counterparts. Last, the Order provided that carriers furnishing telecommunications services to health care providers will be entitled to treat the amount of service provided against their universal service obligation and receive a reimbursement for any amount that exceeds the obligation. Those providing non-telecommunications services will be entitled to a direct reimbursement for the eligible amount. These moneys will be available to provide toll-free access to the Internet, and to pay for the long-distance charges that rural healthcare providers using telemedicine applications will incur. The telemedicine projects will be eligible for subsidies; the funding will come from the federal "universal service fund" provided by the telephone companies and their customers.[209] The Order recommended that two corporations be created to administer the universal program: the Rural Health Care Corporation (RHCC)[210] and the Schools and Libraries Corporations. Additionally, the FCC established a number of committees and boards to advise and administer the support of the new program.[211]
Immediately after the order was issued it was praised,[212] criticized,[213] questioned[214] and challenged.[215] For example, it was enthusiastically cheered by the health care community. Questions, however, were also raised, concerning the extent of the $400 million subsidy,[216] and whether the restriction on the availability of discounts and subsidies to non-public, for-profit entities include physicians and specialty clinics that try to operate on a for-profit basis. What did it mean for the "new type of health care organization, such as Columbia" that is for-profit?[217] Why did the FCC limit the bandwidth to T1 speeds of 1.54 Mbps?[218] And a specific problem, raised by some of the states is the provider's ability to actually obtain telecommunication services at discounted rates. Under the Act, the telecommunications carrier is obligated to provide its services to a rural health care carrier at a discounted rate if the provider makes a bona fide request for services that are needed for providing health care services to a rural community. This poses a problem in some states because the service requires the use of facilities owned by long-distance carriers that do not fall within the definition of an eligible telecommunications carrier; therefore, they are not entitled to receive reimbursement for providing the discounted service to rural health care provides. The FCC has recognized that it needs to address this as a problem, because, in many remote areas, patients will not be able to benefit from the very mechanism Congress established for them.[219]
There are at least two major impediments that rural health care officials recognize could deter providers' applications. First, they must be aware of the program; second, the provider must have a computer, software and capital sufficient to support participation. But even more significant, if the provider is using either AT&T, MCI or Sprint, the provider cannot receive a discount because these companies do not provide local service and are not eligible telecommunication carriers.[220]
The FCC Act's solution to increasing access was fraught with problems.[221] In early February, 1998, GAO reported that the FCC broke the law in ordering the creation of the Universal Service Fund Administrative entities. GAO found that the entities administering the "E-rate" and telemedicine portions of the Universal Service Fund did not have the authority to establish the two separate entities. In making this finding, the GAO also found that despite the FCC's illegal action, the FCC, and not Congress, has direct oversight authority for the administrative spending of the corporations. The corporations, the Schools and Libraries Corporation and the Rural Health Corporation, were both created to implement the legislative mandate to connect schoolchildren to the Internet and bring the latest medical advances to those underserved rural areas that were in need.[222] Congress directed the FCC to combine RHCC with the Schools and Library Corporation and Universal Services Administrative Corporation under the umbrella of the universal-service fund.
This new development immediately placed the 1996 Telecommunications Act once more in the political spotlight. Sides were taken, with the chairman of the Senate Commerce, Science, and Transportation Committee calling the findings "serious," and promising to "work to ensure that the FCC revises the schools and libraries and rural health care programs and that the agency abides by the spirit and intent of the law."[223] The original sponsors of the Amendment that became the E-rate and telemedicine provisions didn't see the GAO finding as a "threat to the program," and viewed it as "more of a logistical problem."[224]
But this "small" problem opened the door for a re-examination of the issues. Amid the criticism that the FCC is overemphasizing "E-rate" and telemedicine programs, discussion began to take place to introduce a bipartisan bill that would require some "hard new thinking on how we fund universal service."[225] The FCC continued its support to the universal service programs, and FCC Chairman William E. Kennard said he planned to "'have a conversation with wireless carriers to make sure they're paying their fair share to support universal service."[226] Toward that end, the Rural Health Care Corporation, the Corporation charged with administering the funds, continues to accept applications.[227]
Moreover, a fatal flaw in the 1996 Telecommunications Act is arguably Congressional nonfeasance in addressing only a fraction of the universe, e.g. those in rural areas, as opposed to the medical "have nots" in urban areas as well. This is not a small omission. Universal service that applies only to a fraction of the population, and may not be affordable to even those covered by the Act, is not "universal." It appears that the implementing provisions fall far short of the original intent of the 1934 Telecommunications Act.[228] From an implementation standpoint, state activity will be critical and states will need to take the initiative, will need to begin planning for telemedicine and will need to anticipate interstate systems. Unfortunately, only one interstate planning group, the Western Governors Association,[229] has formed a regional group to address interstate telemedical issues.[230]
As indicated by the above, the promises of the 1996 Act are great, but the execution, to date, proves less so. The missing thrust has been a force that compels the players to act in the best interest of their patients. Telemedicine has the potential to bring access to health care for people of every economic background in all locations, but the ideal of this legislation is ensnared in politics and money. The above regulatory gyrations reflect the fact that universal "access" is more a legislative dream than a reality. The FCC, is regulating in piecemeal fashion and no one appears to have the big picture of how access will be provided, who will provide the access, how much it will cost, and who will pay.[231] Moreover, "universal" cannot be universal if it addresses only a part of the ultimate vision. If, therefore, the cost to be calculated is not "universal," it would be impossible to know the actual cost of universal care. It is axiomatic, that with a matter so weighty, in addition to the "vision" of "universal service," a plan needs to be put in place to move forward toward realizing "universal access." The current vision omits a portion of the universe, e.g. the medically underserved population, including those in urban areas as well as rural areas. The question of how to unravel these problems could be addressed through comprehensive governmental regulations, which set forth in-detail the telemedical tasks to be accomplished. There is another approach, however. Rather than legislate, the FCC should set specific goals. That is, the FCC should clearly define universal service, set forth how the country should approach that clear definition, and establish milestones to mark and measure progress. In addition to the enormous amount of money on the table, the real harm is the ultimate effect (or non-effect) falls on the medically underserved. To this end, the Western Governors' Association Telemedicine Policy Review Group listed "universal service" as one of its top four areas that should be addressed for telemedicine to successfully grow.[232]
The key to moving universal service from a vision to reality must be a combination of clear Federal regulation and allowances for free market price regulation and service distribution.[233] Not only will the marketplace seek the optimum route for delivery, but it will tailor solutions to each community.[234] Additionally, freeing the market will result in better technologies and cheaper delivery systems, architectures the FCC seemingly cannot imagine. The proper role for the regulator, then is a discrete, albeit a difficult, role: to define what is meant by universal access, to provide the supporting funding mechanisms through reimbursement or tax incentives,[235] and to regulate violations of federal laws.[236] As patients, especially the home-bound patient, increasingly require medicine and treatment delivery, distances should be virtual and should not override the needs of the patient.[237]
B. Regulating "Teledevices"
There is one federal regulatory agency that has done an excellent job in acting as the gatekeeper to access-the Food and Drug Administration. In this area of access regulation, the FDA has been a proactive protector of the patient's best interest.[238] The Food, Drug and Cosmetic Act regulates certain software and hardware intended for use in telemedicine applications.[239] The FDA must clear certain telemedicine devices for marketing, ensure proper and accurate labeling, and regulate manufacturing specifications which guarantee quality control.[240] As gatekeeper to obtaining regulatory access to the telemarketplace, FDA's guidelines set forth the Agency's position regarding what is, and what is not, a telemedical device (e.g., a telephone used in teleconsultation is not a medical device but hardware used to assist remote evaluations of radiological results is a teledevice). The FDA has spent considerable time addressing this issue, but the guidelines are vague and rely upon "intent for use" as the primary consideration in determining if a telemedical device is FDA regulated. The FDA should have a formal notice of proposed rulemaking so manufacturers will have clear regulations that will specify what devices are more likely than not to be subject to FDA approval. This notice of proposed rulemaking should spark debate over the definition of a teledevice as well as providing the FDA with information regarding what is being developed in the marketplace, what questions the manufactures of these devices have, and what ambiguities could pose problems in the future for physician, manufacturer and patient alike.
Within the FDA, The Center for Devices and Radiological Health (CDRH)[241] has regulatory oversight of clinical telemedicine[242] and is responsible for restricting access and ensuring the safety and effectiveness of the medical devices used in telemedical practice.[243] The CDRH's oversight includes regulation of the commercialization of health care delivery technologies,[244] including setting standards for mammography equipment, practices and personnel.[245] The FDA's regulation of telemedicine systems ensures that telemedicine systems are properly evaluated and validated so as not to pose a substantial risk to patients. The medical images transmitted by telemedicine systems must be transmitted with sufficient detail and resolution to permit accurate diagnoses. For example, the FDA has regulatory oversight of the Mammography Quality Standards Act (MQSA) of 1992. This oversight includes the regulation of personnel, equipment, practices, and procedures in use in facilities that are conducting mammography. There is also a separate division that is responsible for interpreting and developing standards so that they will be specifically applicable "to telemammography as that becomes a viable modality."[246]
The FD&CA defines a medical device to include "instruments, apparatus, implements, machines used in direct, clinical, preventive, diagnostic and therapeutic services, consultative and follow-up service, remote monitoring, and rehabilitative services."[247] In issuing the policy enforcing the Act, CDRH has taken the position that any device that is used in patient education, provided it is in the context of delivering health care to individuals, is also included when "education" is medical device labeling information.[248] Medical devices, to the CRDH, include the hardware that produce medical images, and the software and equipment used to transmit, store, process, display and copy. The FDA will look to what the manufacturer claims in making the product, how the product is advertised and whether the product has a specific medical purpose. For telemedicine practice, the FDA's position of whether or not a device is "intended" for the use in the diagnosis, treatment or prevention of disease may not be subject, at present, to a legal litmus test.[249] For instance, although it is clear that the telephone is not subject to FDA regulations,[250] hardware supporting remote CT scans is considered a medical device.[251] The definition of "device" under the statute includes "components" of devices and consequently, whether a component is subject to the provision will depend on the same reasoning as applied to complete devices.[252] Software associated with diagnostic or medical applications may be classified as a device depending on its intended use.
Assuming the FDA classifies an item as a "device," the FDA then classifies the device into one of three categories. The classification is based on the degree of regulation needed to ensure safety and effectiveness, including the level of risk to the health and safety of the patients.[253] Class I devices, such as tongue depressors, do not present an unreasonable risk of injury or illness and require only general controls;[254] Class II devices, such as hearing aids, are subject to additional regulations, because general controls alone are not sufficient to provide assurance of safety and effectiveness;[255] Class III devices, such as the HIV device, are subject to pre-market approval (PMA) requiring the manufacturer to file an application with the FDA demonstrating the device is safe and effective.[256] PMA review could take a long time because it requires the manufacturer to submit a detailed application with information addressing the device's design, components, properties, principles of operation, manufacturing process and performance standards.[257] To act in the patient's best interest, the CDRH, primarily through its subdivision, the Division of Reproductive Abdominal, Ear, Nose, and Throat and Radiological Devices (DRAERD) has established certain categories that would be exempt from the burdensome requirements. The FDA subjects certain devices to review under a pre-market notification (510(k)) or a pre-market approval application (PMA), after the device has been used so that the FDA will be aware of any significant, or potential, problems.[258] The FDA therefore exempted general purpose devices from the rigorous requirements of the Act.
To date, FDA has regulated various devices including telemammography,[259] pacemakers,[260] hearing aids,[261] intraocular lens,[262] and rubber prophylactics.[263] The FDA has cleared many teledevices. The device that perhaps captured the most attention during the process of FDA approval was Home Access Express-an at-home HIV test.[264] However, the statute's ambiguity presents a problem as it may not be clear to the manufacturer that the "device" marketed under the FDA's regulatory authority.[265] If there is a doubt regarding whether the "device" is within the parameter of the FDA's authority, the FDA has the authority to make a decision subject to judicial review testing the intent of the manufacturer in bringing the product to market.[266]
Until the FDA promulgates detailed standards, questions will remain regarding what is, and what is not, a "teledevice." For instance, a software system that tracks blood donations is a "device."[267] Expert programs that evaluate x-rays, databases of medical literature that assist physicians in determining prescriptions may be a device.[268] Even a one-of-a-kind device, such as a custom-designed laser, may not be exempt from FDA's jurisdictional reach.[269]
Although the FDA's authority to restrict access and its jurisdictional sweep remain unsettled,[270] the FDA clearly intends to regulate telemedical software.[271] The FDA's interpretation of its jurisdictional sweep will be key in addressing future telemedical issues.[272] In a series of dialogues, draft policies,[273] publications, revisions of draft possibility,[274] announcements, and public workshops,[275] the FDA, through the CDRH continues, albeit slowly, to review the issues.[276] In general the FDA intends to regulate software when it is intended for use in diagnosis, cure, mitigation, treatment, or prevention of disease.[277] The FDA has acknowledged that products that are not "intended" to be used for a medical purpose are not medical devices, and therefore are not within the FDA jurisdictional ambit-even if the device may be employed in medical use.[278] Therefore, not all software used in medical facilities is within FDA regulatory control.
Problems with the status quo involve the FDA's attempts at proactive regulation without clear regulatory guidelines.[279] Without clear guidelines, we depend upon the strength of the FDA to regulate the manufacturer seeking approval of a new product or software for use in telemedical applications. To date, however, the FDA has not held formal hearings.
Today, stand-alone medical software is subject to regulation on a case by case basis. The FDA drafted policies in 1987 and 1989 that classified software as a medical device; but the FDA has yet to issue a proposed or final rule. Because software undergoes frequent upgrades, a step-by-step approval process could require continual FDA action-proving difficult for developers and the FDA. This regulatory dilemma has potentially two outcomes. On one hand, if regulatory review must occur each time the software is adapted, potentially powerful tools could be denied to patients and their physicians. On the other hand, if the FDA exercises too little regulatory review, substantial risks would be shouldered by the patient.[280] In a 1996 report, the Council on Competitiveness noted a lack of common standards and languages for communications and computing activities, and suggested a review of national information infrastructure technologies. To promote the use of new technologies in the health care arena, the Council's report recommended that the FDA should not regulate "stand alone medical decision-support except when it 'both introduces substantial risks to patients and is to become a commercial product.'"[281] With the market expanding so rapidly, some additional action should be taken to protect the best interest of the patient. The average patient may be able to determine the results of a home pregnancy test, or a home ovulation test, but what about the coumadin home analysis?[282]
We should learn from history that calamity, as a regulator, does not serve the best interest of the patient. Barely 60 years ago, the fledgling FDA did not have the authority to require new drugs be tested for safety.[283] After a small company in Tennessee exploited a market, within four weeks almost one-third of the patients receiving the new wonder drug elixor sulfamilamide died from diethylene glycol poisoning. The FDA, then, had no power to even seize the drug. Thirty years later, there was still no requirement that new drugs had to be labeled and tested to do what they were supposed to do. There was no FDA requirement at the time to label pharmaceuticals with specific instructions of when the drug should not be taken. Thalidomide, after all, did what it was supposed to do: put its patients to sleep.[284] After this tragedy, in which thalidomide caused over 1,000 birth defects in Europe, congressional hearings focused more attention on the shortcomings of the FD&CA. Congress unanimously passed the 1962 Drug Amendments,[285] requiring that not only must drugs be proven safe, but that, prior to marketing, all new drugs be proven effective for their intended use.[286] After thalidomide, pharmaceutical companies had to list adverse reactions and contraindications, spelling out when a drug such as thalidomide should not be taken as well as when it was safe to take it and by whom. Until 1976, medical devices were not regulated, unless FDA classified the devices first as a drug.
With the market expanding so rapidly, action needs to be taken to protect the best interests of the patient. The FDA is the appropriate body for such regulation. For the most part, the teledevices that are being marketed are in the patients' best interests since the average company usually contemplates sufficient time for appropriate FDA and other governmental approval. In fact, companies and markets are required to submit their plans to the FDA when the company begins to promote or market a product as having, even potential, medical applications. The FDA's good manufacturing practices require that the manufacturer or distributor submit to the FDA a pre-market notification.[287] Therefore, under most circumstances, by the time a product is hitting the market, the tests should not be speculative nor experimental. Absent clear and unequivocal information that a device or software will cause no harm to the patient, that device should be regulated and studied.[288] In addition, the FDA should aggressively regulate any new telemedical technologies. Although there may be much to gain by proceeding quickly to market, there could be more of a risk to the patient being treated at a distance instead of on-site. Where the patient is concerned, empirical evidence is essential to protect patients from risky or dangerous telemedical applications. In all instances, unless there is a serious countervailing social reason to move forward with doubt, the needs of the patient, distanced from his physician, must be paramount.

C. Regulating Access Excess: Protecting The Patient's Privacy, Confidentiality and Security Interests
1. Privacy, Confidentiality and Telemedicine

Who is entitled to patient information, who must provide releases for that information, and who should have access to the information? In most respects all of these questions, and the attendant issues of privacy and confidentiality, are not unique to telemedicine. Telemedicine augments privacy concerns, however, because it promises to make common the transmission and storage of personal information. In the traditional patient-physician relationship, privacy and confidentiality were always an issue, but with telemedicine, the patient's records and medical history will be shared with the consulting physician, with two sets of staffs and possible technicians supporting the telemedicine system.[289] Although current mechanisms could be sufficient to hold every physician and medical provider accountable,[290] the traditional concepts of privacy and confidentiality are dramatically changed with telemedicine.
In the health care context, privacy has been protected by an ethical obligation of the health care provider to preserve the confidentiality of medical information, and as a legal right to privacy from the unwarranted use of personal-health information. Confidentiality "refers to a relationship (e.g. between patient and physician) that includes an expectation that personal information obtained as part of that relationship will be protected."[291] Both Reed Hundt, the former chairman of the Federal Communications Commission and Donna Shalala, the agency head of the Department of Health and Human Services, have openly criticized the lack of security and information standards relating to telemedicine, telemedicine systems, telemedicine information and the lack of systems to provide confidentiality and security safeguards in the use of telemedicine or telehealth technology and services.[292] Without appropriate privacy protections, telemedicine cannot be established as a viable treatment alternative.
A number of different confidentiality issues may arise as a result of telemedicine. There may be an improper disclosure, there may be either unauthorized access or an abuse of the information accessed, there may be identification of patients within the data aggregated, or there may be the problem of data integrity and authenticity.[293] Liability could arise in a number of different situations given the nature of the different types of breaches. Concerns exist relating to the ready accessibility to electronic patient information, the conveyance of video images, the presence of additional persons, the possible loss of control over the route of medical information, the integrity of electronic record keeping, and the potential for unauthorized access and disclosure of records. In many instances, leaked information on medical information could cause the loss of a job, the loss of reputation, and, potentially, the loss of health-insurance availability.
Traditionally, and with few exceptions, the issues of privacy and confidentiality, especially relating to the physician-patient relationship, are matters the federal government left to the states. Issues of patient consent, provider confidentiality, and overall security of telemedicine information encompass not only medical histories and records, but image transfers, electronic information stored in the computer, and the security of the data stored.
Unlike many other countries, the U.S. has the barest threads of common law and no encompassing federal statute, nor any visible, or feasible mechanism to address the complicated issues raised by the burgeoning area of telemedicine and telehealth.[294] The issue hasn't been addressed for lack of notice, or lack of debate, but rather more of a paralysis of what should be done and who should be in charge.[295] Debates rage over whether federal regulation of telemedical privacy is appropriate, whether an optional uniform model statute would work, and whether privacy is further threatened by the potential implications of international telemedical practice.[296] Whether in the name of federalism or states' rights, virtually no consensus has been reached on what should be done.[297] Most state laws do not address issues of privacy and confidentiality of medical records within a single statute, but rather states affirm a right to privacy and confidentiality through a web of statutes, regulations and policies. In many states, as in a web, there are gaps and sometimes overlapping laws.[298]
Other substantive areas, in what would on their face appear to be of less concern in life's value chain, have had more success in addressing privacy and confidentiality provisions, e. g. video copying[299] and credit reporting.[300] Congress has passed a number of laws which protect our financial privacy interests.[301] To date, no one has successfully led a charge to garner consensus on a national level to enact one uniform federal law that would comprehensively address privacy issues relating to our health.[302] Interestingly, we have a right to inspect, our financial history,[303] but there is neither a right nor an obligation to a health information, records or history.[304]

2. Federal Protections
Unlike many other countries,[305] the United States has no national law that protects data. The current law, enacted well over 20 years ago, applies to information that is in the possession of the government.[306] Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), some relief in this arena is promised.[307] HIPAA "requires that any health plan, health care clearinghouse or health care provider who transmits health information in electronic form must maintain reasonable and appropriate administrative, technical and physical safeguards to ensure the integrity and confidentiality of information, protect against any reasonably anticipated threats to the security of information, and prevent unauthorized use or disclosure of information."[308] If Congress fails to act, then the Clinton Administration's recommended standards, which cover both privacy and protection of individually identifiable health information, will go into effect.[309] HIPAA will also require the Secretary of the Department of Health and Human Services to promulgate rules regarding the electronic transfer of medical information, and it is anticipated that those rules would include the use of "unique identifiers and electronic signatures."[310] Until July, 1998, development of the system by the Department of HHS to create such a "unique health identifier" was making little headway, but when public hearings began to solicit comments on the proposed health care codes, the issue evoked mixed reactions, stirring contentious arguments from almost every front. Like salt on an old wound, the patient ID proposal's debate woke every health care sleeping giant from a summer's sleep. The standards will include security to protect health information. H.R. 4250 considered but rejected a delay in the program to give every citizen a computer identification number to track health care from cradle to grave.[311] The hearings on the national medical identifier raised privacy implications to the surface, re-erupting the debate and bringing to the forefront the privacy debate in general and, specifically, the impact of the medical-computerized world on the telemedical patient.[312] The national identifier, like telemedicine, is the center of the maelstrom but certainly just an symptom of the complex overall problem.[313]
Under HIPAA, the Secretary of HHS is also required to adopt standards for certain transactions to enable health information to be exchanged electronically.[314] The National Committee on Vital and Health Statistics (NCVHS)[315] is complying with the law, and addressing issues, barriers, and challenges that face the health care issues, including questions regarding security issues in the implementation. The law requires that, within 24 months of adoption, all health plans, health care clearinghouses, and health care providers who choose to conduct transactions electronically must comply with the standards.[316]
Today, the only other laws protecting patient privacy and confidentiality in the health care arena that could apply include the Privacy Act of 1974[317] and some federal laws which protect the identities and records of patients who seek treatment for drug and alcohol abuse.[318] The Privacy Act merely provides that federal departments and agencies that obtain confidential information from private individuals may use that information only for the purpose for which it was collected.[319] Thus, an immediate concern is simply that the federal government is not the exclusive user of telemedicine, and any information gained through private action will not be protected under the Privacy Act. The Privacy Act does restrict the federal government's ability to disclose private medical information, but most individuals do not submit their personal medical records to a federal governmental agency.[320] The Privacy Act does extend to health care facilities under federal operation and to medical record systems under contract with the federal government, but this leaves private entities and the private health care industry outside the Privacy Act umbrella. With the recent legislation and recognizing privacy concerns, HCFA has become sensitive to its own use of health information and has recently required that Region II HMOs and CMP, cease using the Internet to transmit or store any protected information. HCFA policy states that "acceptable encryption mechanisms are not currently available for the Internet to insure the degree of privacy, HCFA, plans, and contractors are required to maintain."[321]

The above legislation and agency focus on health-information security is breathing life into an almost dead hope for federal privacy laws addressing the use and protection of health information.[322] On September 11, 1997, HHS released medical-record confidentiality recommendations to Congress. HHS urged Congress to treat parties that obtain health care information "under false pretenses" or that engage in "knowing and unlawful use or disclosure of health information" as felons. The proposal would make anyone who violates the statute face fines or imprisonment.[323] In addition, penalties would be "higher" in cases where the violations are "for profit or monetary gain." Civil monetary penalties could be levied against providers or plans that violated any part of the statute. Under this proposal, providers would not be permitted to condition treatment on a patient's giving consent for disclosure of health records, "unless the disclosure is necessary for a health care or payment purpose." Moreover, the plans would be prohibited from conditioning payments on consent to disclosure. The legislation would allow providers and or plans to disclose health information without patient authorization only in limited emergency health situations or when the public health was at stake.
A flurry of bills was introduced in the past few years addressing health information and privacy. H.R. 52, the Fair Health Information Practices Act of 1997 ("FHIPA") and S.B. 346, the Patient Protection Act ("PPA") suggest further protection of health information and confidentiality of patients' records. H.R. 52 would permit the use of health information by a health trustee if the purpose is compatible with and directly related to the purpose for which the information was collected or received by the trustee or unless the trustee received disclosure authorization.[324] Other bills that simmered in Congress include the Medical Privacy in the Age of New Technology Act,[325] the Federal Privacy of Medical Information Act,[326] the Medical Records Confidentiality Act,[327] all suggesting various improvements in this area, but none successful in securing passage to date. These bills would mandate patient authorization for disclosure of information for the purposes of medical treatment or payment, permit patients to obtain, copy and correct their medical records, provide civil and criminal penalties for any unauthorized disclosure of patient records and require that records be kept of patient data that had been disclosed. Furthermore, the bills permit the states to set stricter privacy rules and permit patients to designate some information as specifically protected. During the summer of 1998 discussion on the issues of patient rights, patient confidentiality, medical-records confidentiality, unique patient identifiers, managed-care confidentiality, confidentiality of electronic records, reached a crescendo.[328] Interestingly, for the first time in U.S. history, there may not be a consensus on what should be in such a uniform federal policy, but there are more overlapping suggestions than ever before.[329] In fact, the proposals suggesting that we have a uniform federal law also proposed that, for the first time, federal law would preempt any state law that had not adopted a similar baseline for protection of public-health data.[330] In other words, there would be a federal law establishing a floor or minimum legal standards.[331] Those state laws that provided more stringent requirements than the federal "minimum" standards would be exempt from the federal confidentiality proposals.[332] Although no proposal has been legislated to date, states that afforded protection to their constituents equal or greater to a proposed uniform minimum standard would be free to legislate in this area. This freedom provides latitude for the states to enact more protective legislation, and to experiment in meeting the needs of their specific issues.
3. State laws
Various state laws offer an idiosyncratic hodgepodge of protection but no uniformity in content or protection for the confidentiality and privacy of health records. With few exceptions,[333] state laws are generally inadequate to provide protection. A number of states have enacted laws or regulations to protect individuals against the unauthorized disclosure of their private medical records by either physicians, health care professionals or other third parties.[334] These laws address concerns relating to the dissemination of the record, recordkeeping, accidental release, third party review, tampering and/or destruction of records and lack of any deterrence mechanisms.[335] Some states, such as California, have taken action to address health care providers that "utilize electronic record keeping systems only."[336] The California Confidentiality Act provides a cause of action to any patient for improper disclosure of their medical record. In addition, California has enacted confidentiality protections for any patient information that is stored electronically as part of a telemedicine consultation or diagnosis.[337] Most states have legislation that addresses the use and dissemination of medical records, and many states do address confidentiality of specific class of medical information, including certain records relating to HIV status, drug and or alcohol abuse, minors' medical records, or mental health records.[338] But if a state telemedicine practitioner, covered by state confidentiality provisions, collaborates with out-of-state practitioners, the privacy laws of another state may apply and that other state's laws may only offer different and perhaps even minimal privacy protection.[339] Choice-of-law questions, although not unique to medical suits, become even more complicated in the telemedical situation. The complexity of all of these issues without the introduction of the telemedical patient is mind boggling. Adding other layers of legal issues, including the problems of what state law would apply, the law where the patient resides, the practitioner resides, the breach arose, makes for a classic moot-court problem but one which would be a nightmare for the unwary telemedical patient whose privacy had been breached. Telemedicine interjects the real-life fact pattern with which we all will soon live with: the patchwork of state confidentiality laws is "a legal, political and practical mess."[340] The availability of telemedical assistance does not solve the problem but do bring compelling reasons to move to a uniform federal system that will offer a "floor" of minimum protection for every American.
4. Professional Codes of Ethics and Private Positions
Anticipating a problem with the ambiguity in the law regarding medical records maintained by computer, the American Medical Association's Council on Ethical and Judicial Affairs formulated standards for addressing the confidentiality of medical records that are maintained by computer. The AMA's Regulation 5.07 requires that the "utmost care and effort must be taken to protect the confidentiality of all medical records, including computerized records."[341] Nine guidelines were developed to assure physicians take the utmost care in maintaining their patient's confidentiality. These guidelines, ranging from authorization to make additions, to access to the records, would apply to any telemedicine application. Obviously, they are guidelines by a professional organization, and although arguably imposing an ethical duty, neither have the force and effect of law, nor do they cover those outside of the physician and medical-service organizations. The AMA opposes any kind of unique patient identifier "unless it can be proven that they are absolutely necessary."[342] Strong opposition to patient identifiers is grounded in the AMA's belief that the potential for abuse is enormous. The AMA has argued that before any such identifier system is put in place, stronger privacy protection must be in place.[343] The AMA and other public-health advocates are also concerned that having a federal law that preempted state laws would prohibit the states from enacting more stringent privacy legislation.[344]

5. Proposals
The issue of confidentiality of medical records, while not in dispute in a theoretical sense, is far from resolved in a practical sense. There is still no consensus concerning the issue of medical records' confidentiality and privacy.[345] Other areas of debate include, who is responsible, what should be protected, and how the confidentiality should be protected. Various positions have been espoused ranging from a strong sentiment that federal legislation is warranted and needed, that federal legislation would be desirable but is not feasible, that a uniform model act would be appropriate, and that this is a matter of state interest.[346] Simply, no united movement, representing the interests of the patient, exists. For the time being, patients must live with the status quo-each individual must rely on the ethics of the health care practitioner.
We are a country that takes pride on our information capabilities, and the protection of our citizen's rights, but the laws protecting the confidentiality of patients' medical records fall short of providing adequate coverage.[347] Federal laws and proposals, while proliferating, do not today fill in the cracks of the current melange of state laws addressing what is and what is not protected. This lack of coverage and uniformity in what coverage does exist offers patients, and especially telemedicine patients only "patchwork" protection-hit or miss "confidentiality" coverage-carries potentially a high price tag, with the patient carrying the burden that such protection is there. In response to the variety of state laws, the National Conference of Commissioners on Uniform State Laws proposed the Uniform Health Care Information Act. This Act would requires health care providers to implement reasonable safeguards to ensure the security of all health care information, requires providers to notify patients that records are maintained and the patients may access their records, permits authorized representatives or parental guardians of the patient to have these rights, and permits disclosure if and only if the patient authorizes such disclosure, except under narrow exceptions.[348]
Protection of confidentiality and privacy in the telemedical context requires both technical and legal solutions.[349] Technical options could include universal identifiers, authentication, authorization procedures, audit logs, firewalls and cryptography.[350] These options are attractive regardless of the legal framework chosen-whether federal preemptive law, individual state law or some combination of the two. Clearly, the issue of medical confidentiality is far broader than telemedicine but the patient's ability to employ telemedicine without sacrificing privacy of medical records and treatment depends on laws that will not only advance telemedicine but provide protection to the patient. Today, that protection does not exist. There still is no uniform national standard that protects the confidentiality of health information. Only 28 states allow patients access to their health information but even these statues are not uniform in their approaches. There is a lack of what information is protected, what is "confidential," who is protected, what information is covered, and most statutes fail to address penalties for unauthorized disclosure of health information.[351] In the best of all worlds, legislation that would offer protection to any patient, including the telemedical patient, is far preferable than legislation targeted to the telemedical patient alone. But the debate must begin to offer solutions aimed at protecting the patient first. Congress should unequivocally establish patient protections establishing that the patient has a right to know what data is being used and entered into the telemedicine system; the patient has a right to know who is entering the data, the patient has a right to review the individual records for accuracy and that there is in place a national law establishing civil and criminal penalties for anyone who wrongfully releases confidential information or obtains data from individual medical records.

V. REGULATING COSTS: WHAT SERVICE AT WHAT PRICE?

Telemedicine is no longer just a playground for dreamers, enthusiasts and pilot programs. It has become a strategic tool for hard-eyed hospital administrators and entrepreneurial practitioners, whose first questions are: Does it make sense economically? Does it improve efficiency enough to justify its cost? Will it help the bottom line?[352]
As of the year 2000, the United States has spent as much as 1.5 trillion dollars on health care costs, with as much as $15 billion dollars on health care "systems."[353] Part of the problem in initiating any new system, practice or technology is money.[354] Telemedicine is no longer for dreamers, but the question remains whether it will reduce health care costs. Will it fulfill its promise of improving the quality of care, augmenting access to care and can it be both economically feasible and cost effective? The issue of paying for telemedicine is a complex and critical issue. Clearly, changes in our health care delivery system and in our demographics signal a strong future for telemedicine. The search for solutions, including managed care, where the focus is on cost containment, continues. With an aging population, there will be more patients, more home health care and nursing-care needs, and as medical science continues to prolong life and cure disease, there will be more chronic medical conditions needing treatment. Toward this end, there are policy questions concerning who should pay and for what and the more difficult questions relating to the cost effectiveness of telemedicine.


A. Federal Funding

In 1997, the federal government, for the first time, approved limited reimbursement of federal funds for on-going medical consultations. The consultations are limited to those who perform telemedical consultations for rural Health Personnel Shortage Areas (HPSAs). Under the provisions, reimbursement will be established for all eligible Part B Medicare services at normal co-payment rates. Combined with the provisions in the Telecommunications Act of 1996 and subsequent actions by the FCC, this Congressional action represents two major public policy decisions that will facilitate better access to health care "for all Americans regardless of their geographic location or socioeconomic status."[355]
On November 2, 1998 HCFA finalized regulations on the new rural health care reimbursement program, providing payment for professional consultation by a physician.[356] HCFA interpreted the legislation, however, as not allowing the reimbursement of fees for store-forward consultations.[357] In effect, the provider or practitioner must actually be present on both ends of the consultation. The regulations will make teleconsultation reimbursement difficult. HCFA has determined that Medicare will not pay for a consultation involving a pre-recorded exam, and that the consultation must include a clinical assessment directed by the physician-consultant and involve feedback from the consultant to the referring physician. This real-time exchange of information also requires the patient's presence.[358] In addition, telemedicine advocates face a number of problems concerning regulation. HCFA limits reimbursable services to live interactive video, ruling out most store-forward services.[359] The final rule states that "review of dermatology photos would not be considered a consultation. We believe that this would be a new service for which payment could not currently be made under Medicare."[360] Moreover, the final rule restricts who will be considered eligible to practice under the program; it also forbids certified nurse anesthetists, and anesthesiologist assistants to provide referrals under the program.[361]
In addition to providing reimbursement for telemedical consultations, the Secretary must also provide for a single, four-year demonstration project to use eligible health care provider telemedicine networks to apply high-capacity computing and advanced networks to improve primary care, and prevent health care complications, to Medicare beneficiaries with diabetes mellitus who are residents of medically underserved rural areas or medically underserved inner-city areas.[362]
To understand telemedicine's cost efficiencies, studies need to produce clearly defined outcome results. These studies should take into account not just issues of getting medicine to patients in rural areas, but health care to the patient population of the future.[363] In January 1999, Medicare began covering teleconsults in professional shortage areas.[364] In contrast to Medicare, HCFA permits Medicaid state agencies to establish state-coverage policies for telemedicine.[365] To date, approximately 10 states permit reimbursement for telemedicine.[366] The states are a fertile area for study, comparison, and outcome data research. HCFA should be looking to the states' experience to learn what telemedicine services should be employed to improve quality and access while reducing costs.[367] For example, telemedicine has gained increasing popularity in the provision of mental-health and substance-abuse services for Medicaid beneficiaries. The Montana Medicaid program has been providing telemedicine services to patients who are more than 100 miles away from the nearest mental health or substance abuse practitioner. [368]There have been a number of outcome studies that clearly demonstrate certain telemedical services do, in fact, provide increased access and assist the patient in need. Until very recently, however, public and private reimbursement for telemedicine services has been a mirror image of the federal government's fragmented and scattered view of telemedicine reimbursement policies.[369]


B. State Approaches To Reimbursement

If telemedicine is going to work, if it is going to be studied and resources provided, it will be far more advantageous to provide those resources in a steady "stream" of reliable funds, than, as in the past, on the drips and drabs of funding or grant moneys.[370] The States recognized that self-reliance is marked by the development of their own reimbursement mechanisms. Although many projects began, a number of projects failed, not for lack of interest or success, but simply as a result of the spigot running dry. States have taken various approaches to telemedicine and to their territorial state health issues. In contrast to HCFA's limited reimbursement of telemedicine services, in which the state has great control over the reimbursement of medical services, such as with Medicare, other types of telemedicine consultations may be reimbursed.[371] A number of states have provided for reimbursement for telemedicine under their Medicaid plans or have legislated telemedical services be treated in the same manner as face-to-face delivery services. California has been an active laboratory, and certainly has been the vanguard in all areas relating to telemedicine-especially on the issue of reimbursement.[372] On September 24, 1996 California passed S.B. 1665, which now requires all payers in California-as a matter of law-to have integrated telemedicine into their reimbursement policies. It also required that by July 1, 1997 Medi-Cal eliminate its requirement for a face-to-face consultation. Until this law was enacted there were no provisions for telemedicine reimbursement in California.[373] To date, at least twelve states[374] have some form of Medicaid coverage for telemedicine services and some states have limited reimbursement for home health and/or mental health services,[375] which will be reimbursed under Medicaid.[376] Four states, including California, have enacted non-discrimination insurance provisions, thus precluding exclusion of coverage because it is tele-based and encouraging private insurers to begin indemnifying telemedicine consultations.[377] In addition, Hawaii and Vermont have similar provisions pending.[378] Other states are following the lead and taking aggressive action.[379]


C. Private Funding of Telemedicine

Although originally few in number, a growing number of private organizations have issued studies on the cost-effectiveness of telemedicine.[380] While conclusions indicate that telemedicine can save costs, no one study is definitive, and a common framework from which to draw comparisons does not exist.[381] The Texas Telemedicine demonstration project was probably the first to deal with the issue of costs. A study of the Texas data conducted by Arthur D. Little documented a savings of approximately 14% over conventional practice, with a payback projected in 2.6 years.[382] The study, privately-funded, linked major public and private providers in Austin, Texas with a 23-bed hospital, a renal dialysis center, a community mental health center, and a prison infirmary in a town of 4,000 people 65 miles away. No providers were reimbursed, no state or federal funds were obtained. Foundation moneys were used, together with contributions from telecommunications industry and health care sources.[383]
In reviewing a number of the projects, both federally and privately funded, a number of observations can be made. Telemedicine is a viable option for systems with limited resources. However, when the health care provider is responsible for the greater part of the total costs of illness . . . the economic benefit of telemedicine becomes immediately apparent. Additionally, telemedicine systems are cost-effective in nonclinical services, such as continuing medical education. Moreover, the use of telemedicine and medical centers "can deliver quick and efficient patient services without the overhead costs of bringing and keeping patients on site."[384] Most importantly, initial studies report that patient satisfaction with telemedicine is "quite high."[385]
HCFA's regulations provide recognition that telemedicine is both a new delivery system and "significant opportunity"[386] for the further enhancement of telemedicine coverage. But the regulations are too restrictive, especially for a "pilot program." The proposed regulations require the teleconsult be "interactive," that the "provider" be actually present on each end of the consultation, that beneficiary eligibility depends upon the place of residence or location of service, that the site of the teleconsult must "effectively transport the patient to the consultation," and that the payment process is cumbersome, providing for only the consulting practitioner to submit the claim and receive the payment, and then remitting the fee to the presenting practitioner.[387]
The issue of telemedicine and regulation of health care costs, in many ways, mirrors the same issues relating to quality and access. There is a role for the federal, state and private sector in which each plays a part in moving telemedicine toward a health-delivery system that can provide improvements to quality and access to care simultaneously saving costs. Such a solution calls for a "balanced federalism" in health reform.[388] In this context, the federal government regulates the broad outline, or national standards, after consultation with the states and the input of the private sector. The states, however, implement these standards, and have the regulatory imprimatur to improve and expand. The entrepreneurial spirit of the states, coupled with unshackling the reins of prohibitive reimbursement schemes, should spur the private marketplace to do what it does best-"follow the money." In following the money, however, states must not trade savings for quality. It is fair to expect that telemedical technologies will assist the health care industry to better deliver health care at costs that approach those of the traditional practices.[389] So far, however, there is scant proof that those in rural areas will get care at less cost than traditional methods.[390] No doubt, as the money flows to support new technologies, this will change.[391] Many of telemedicine's economic benefits may be difficult to assess through the traditional economic measures in use today.[392] For example, if a rural patient cannot get any care at all, is this a fair method to approach telemedicine's cost-effectiveness? Reimbursement mechanisms for telemedicine consults need to be aligned with goals for health care reform.[393]
A number of options exist with respect to reimbursement initiatives. The federal government could facilitate education by disseminating information regarding initiatives, including states' initiatives in telemedicine, centering its study around the issues of cost, quality and access. Such an would be especially appropriate insofar as many states have provided special appropriations for telemedicine studies.[394] Gathering information is a function the federal government performs well since it has the infrastructure and assistance and professional expertise.[395] Since many of our federal health care dollars are spent on presently employed and former federal employees, the federal government should encourage health plans to propose policies on telemedicine and provide coverage, if appropriate. The federal government should also: (1) have the medical communities in the federal government work with the professional medical associations to address the Official Medical Fee Schedule to facilitate reimbursement for telemedical services;[396] (2) immediately address any barriers to the Telecommunications Reform Act of 1996 and facilitate removal of those barriers; (3) employ grants for scientific research; (4) provide financial support, either directly or through incentives, for telemedical public health initiatives;[397] and, (5) bolster the educational use of telemedicine and telehealth by providing incentives/reimbursement for preventive medicine. Study after study indicates there is a forceful role for the federal government to play in the area of preventive medicine.[398] In the area of education, significant expense could be avoided by educating physicians and patients alike.
States have an important role to play too. States have incredible leverage to move forward and accomplish more, tailor the reimbursement schemes to the needs of what is in the best interests of their patient constituency. States should consider California and Oklahoma's approaches to telemedicine.[399] Additionally, states could (1) examine the practices of California,[400] Georgia, Kansas,[401] Texas and Louisiana, (2) provide funding for physicians in underserved areas, whether it be rural or inner city, (3) reimburse and/or provide tax incentives for education, (4) provide funds to train health care professionals and (5) examine the patient's needs in the state and begin to address where there is a telemedical solution to address some of those needs.[402]
Telemedicine needs stable sources of revenue. Congress, and the states should establish what sources are necessary for their respective patients, designate task forces to study what telemedicine services should be reimbursed and specify the types of services, amounts, mechanisms for financing services and a clear basis for reimbursement. Moreover, Congress should demand, as a condition precedent for federal funding, outcome studies detailing telemedicine's successes. Such outcome studies, whether directed by the government, or by the private sector,[403] will provide useful benchmarking data of the benefits telemedicine can bring.[404] The funding from private sources came, in the past, from the telephone companies, from private foundations, and, most recently, from selected providers. The private sector today is very much involved in telemedicine and has determined where it ought to invest, but it is the responsibility of regulators to assure that all laws and regulations are followed to protect the best interests of the patients and to enact laws that will facilitate telemedicine rather than stunt its growth.


VI. TELEMEDICAL POLITICAL PROPOSALS

The reality of telemedicine's current legal framework and the promises telemedicine brings to address the issues of quality, access and care is bridged by numerous proposals at the federal, state and private levels. The sheer number of proposals-each one addressing a one or more of the barriers to telemedicine implementation-reinforces the difficulty in managing telemedicine as a proposal or a legislative solution. Again, telemedicine exemplifies the issues and barriers that already hinder delivery of health care.
In the last three Congressional sessions, there have been over sixty pieces of federal legislation relating to telemedicine. During the 103rd Congress, at least twenty-two different legislative bills were introduced.[405] During the 104th Congress,[406] another twenty-two pieces of proposed telemedicine legislation were introduced, and the 105th Congress also introduced twenty-two pieces.[407] Of these federal proposals, few became law and many are still bills pending legislative action. At last count there were 15 federal agencies directly addressing telemedicine projects.[408] Countless agencies can affect telemedicine applications, federal projects, and funding.[409] On the state level, at least 20 states have taken legislative action, either through laws directly addressing telemedicine, or laws that impact telemedicine. In addition, there are state commissions, compacts, intergovernmental agencies, various licensing boards, state committees and professional associations addressing issues of "distance" medicine.[410] One federal bill, the Telehealth Act of 1996, has lingered in Congress for over two years, with little sign of movement. In addition to requiring HCFA to reimburse for telemedicine activities,[411] it would have required a status report on the efforts to ease licensing burdens on practitioners, and provided seed money to local communities to support telemedicine programs. This ill-fated bill, however, did not address privacy and confidentiality.[412]
The Institute of Medicine (IOM) has supported the exploration of telemedicine, but has strongly recommended that before Congress or the States adopt this new technology, a business plan should be implemented. The IOM seeks to address the clinical process of caregiving, the patient's status or health outcome, access to care, the costs to the patients, payers, providers and society, and the satisfaction of the clinicians and patients with the technology.[413] The JWGT has submitted a report that raised a number of barriers to the expansion of telemedicine, including reimbursement, lack of an explicit and fair policy for paying for telemedicine services, assessment of barriers to support telemedicine in managed-care systems, national licensing system, removal of barriers relating to liability and patient confidentiality and a telemedical code of ethics. Other potential barriers include hospital-admitting privileges, liability, privacy and system design issues, a clear definition of telemedicine and administration programs.[414] The states have clearly preceded the federal government in reforming telemedicine regulation, but it is clear that there are many remaining barriers to be removed. Federal and the state governments, working together toward this end, could strike a regulatory balance that would avoid the pitfalls of past health care reforms.


VII. A CALL TO ACTION

Analysis of telemedicine's future resembles a glance into a crystal ball. There is a flurry of activity, but no clear design or direction. Telemedicine portends a long life with lots of promise but also a rocky journey with many snags along the way. With telemedicine's ability to track diabetes patients at home, to monitor physicians' health scaling the highest mountain top in the world, to provide emergency treatment to soldiers wearing smart shirts, to assist early detection and treatment of an isolated patient's rare cancer, and to enable a father to find a physician to treat the spinal cord injury of his paralyzed son, telemedicine is struggling to grow against the weight of legal and governmental restraints.
Although telemedicine is not the solution to the national health care quandary, it promises a series of breakthroughs to problems that beset the delivery of services to our patients. A unified approach might address a number of legal and financial hurdles. However, neither our legal, financial nor political system welcomes a one-shot solution. Rather, the idiosyncratic and diverse systems compete, often producing a far better product. Telemedicine is unique because despite numerous stakeholders and operation on multi-functional levels, it lacks uniform leadership.
With respect to quality, my assumption is that quality is not an end, but a process of improvement. As such, our unique federal-state system has traditionally left to the various states the determination of appropriate criteria to regulate the practice of medicine in the best interests of the patient. Credentialing is governed by state laws that regulate hospital licensure. Likewise, the task of punishing those who breach the state's standards and the duty of care owed to their patient has been addressed by the states. Even as states move toward a national standard of care, it is state law that governs in any civil malpractice action.
There are numerous reasons that militate for the states retaining their police powers, especially with respect to telemedical advances. One overarching reason, however, argues against federal preemption. As we strive to minimize defects in this health-delivery quality process, the more innovation, guarded experimentation, and flexibility will produce a better delivery system, admittedly not all occurring in one miraculous cure, but rather in an incremental fashion over a period of time. States should adopt critical laws that drive politicians, institutions, and care-givers to act in the best interest of patients. To ensure quality of care is not compromised, states, rather than the federal government should enact laws to protect their constituents.[415] In this regard, three proposals are suggested. First, a registration program, directed by the state medical licensing board, should require that physicians practicing telemedicine across state lines be registered by the state's licensing board. California's approach is an appropriate model. Second, the Medical Board should coordinate telemedicine licensure and credentialing with other states. Third, either the appropriate state agency or medical licensing board should review telemedicine programs and technologies, providing policies and guidelines for credentialing off-site telemedicine practitioners. Specifically, policies should set forth when, and under what circumstances, a hospital must credential a remote physician. Moreover, JCAHO and NCQA should develop guidelines for credentialing at health care centers where the remote physician's only practice is via telemedicine. By continuing to use the state-regulating bodies as gatekeepers of registration, licensing and credentialing, the states' medical boards retain the power to issue regulations, to screen physicians, and to ensure standards are equal or better to that within the state. Additionally, the states retain the flexibility to make improvements as technology and other laws in this area change. The foregoing keeps focus on the patient consumer and provides latitude for the state-licensing board to both regulate, enforce and suggest appropriate legislative changes.
The second line of recommendations addresses accelerating and regulating access to telemedical practice. It is ironic that telemedicine is a key proposal to solve access problems, especially for those in medically underserved areas, and yet, access to the underserved is more of a problem than ever before. Both the federal and state regulators have key roles to play. The federal government, through Congress' broad grant of authority in the Telecommunications Act of 1996, should more aggressively propose solutions to the underserved. Instead of focusing on the many difficulties involved with arranging access to rural areas, the FCC should work closely with HHS to design cost-effective incentive programs to enhance service in urban and rural areas. Additionally, the states have an obligation to implement Section 254(h) of the Reform Act. States should be held accountable for the provision of services that deliver remote care at rates that are reasonably comparable to rates charged for similar services in urban areas in that State. Second, although the FDA has been aggressive in addressing telemedicine, it should propose regulations defining a "teledevice." Additionally, the FDA should address what recommendations might be necessary to manage the international implications of telemedical practice.
Last, privacy and confidentiality are critical issues, not unique to telemedicine, but important in the telemedical context. A number of parallel solutions should be pursued. First, initial procedural measures can be put in place immediately. Such measures should include educating physicians and patients, training telemedical staff, identifying sensitive data, providing contractual protection and setting up periodic monitoring of the security policies. Second, there are a number of possible technical safeguards, including firewalls, encryption, authentication, and verification. The most significant changes will take place through imposition of stringent privacy and confidentiality standards for telemedicine practitioners. Each practitioner has not only a legal obligation but also an ethical obligation to assure confidentiality. In this area, a federal law establishing uniform national standards would ensure privacy and confidentiality of medical records. There is, however, no overarching federal law establishing uniform national standards. Nonetheless, a number of bills are currently pending. State laws, as they exist today, are inconsistent. In the absence of federal legislation, a uniform medical-information protection statute should be drafted, and each state should then adopt and improve upon its model language. Although implementation in this area may be difficult, a state-by-state approach may lead to the same end. In addition to protective language, this bill should impose severe penalties for any breaches of privacy. Moreover, aggrieved patients should have, either under federal or state law, a private right of action for improper disclosure of their medical records.
Telemedicine promises ultimately to save costs, thus satisfying a third major problem in our health care delivery process. In the interim, like any start-up or pilot project, it may take money and research to find the best approaches for telemedicine. All parties have a role in this regard, and all have vested interests. The role of federal and state governments should support those projects that bring the care to their patients in the most cost-effective manner. Much could be done to improve the federal government's approach to telemedicine. Organization of the issues has already begun. Sadly, though, no funds have been directed to the programs that most greatly benefit patients. Although the federal government has appointed a task force, no visible federal leadership, no clear federal or fiscal policy, and certainly no strategic outline have developed. Reimbursement policies set by HCFA, however, pave the way for the private marketplace. Although there is now a demonstration project studying telemedicine's virtues, the reimbursement policy proposed seems far too restrictive. Since HCFA already allows state Medicaid agencies to establish their own coverage policies, Medicaid spending in telemedicine should be tracked by the federal government. In this regard, California could be a model example for the federal government to follow. Instead of limiting reimbursement to the narrow area carved out in the pilot program, Congress should not only permit but require private health insurance and managed-care plans to integrate telemedicine into their existing reimbursement policies, treating telemedicine as traditional face-to-face care.


CONCLUSION

Telemedicine is not the magic pill that will cure our ailing health care system, but it is a potentially miraculous treatment that promises improvements to our delivery systems, bettering quality, access and eventually even costs. Telemedicine will not thrive on a one-shot approach; it requires a regimen of treatments. Its future solution to our health care system's problems of access, quality and costs is best insured by a collaboration of efforts-by the federal, state and private sectors, by bureaucrat, physician and technician. This collaborative effort should have one driving force and end: acting in the best interest of the patient. By moving toward this goal, all players can compete and even without a strategic plan, guarantee improvements and better access and treatments to patients.