July 15, 2026
10 min read
By Albert Wong, PhD · Clinical Psychologist
The short answer
You can run therapy groups online legally and well if you cover four bases: a signed group-telehealth consent from every member before the first session; explicit ground rules (private location, headphones, cameras on, no recording); a HIPAA-compliant video platform with a BAA — never consumer Zoom/FaceTime; and licensure coverage for every state your members sit in. Everything else is facilitation skill and decent bandwidth.
Online groups solve group therapy's oldest problem — filling the room. The grief group that couldn't find eight members in your zip code finds them across the whole state. Attendance climbs when the commute is twelve steps to the kitchen table. And the format is legitimate: the APA and HHS both publish best-practice guidance treating group teletherapy as an established modality, not an experiment. But be honest with yourself about what changes when a group goes online: the session now happens in eight rooms you can't see, and the privacy of every member depends on what's happening in the other seven — who else is within earshot, whether headphones are on, whether anyone could hit record. None of that is a reason not to run the group. All of it is a reason to run it the way this guide describes.
Group telehealth needs consent that covers both layers of risk: telehealth risks (interruptions, technical failure, unauthorized access) and group risks (other members can see and hear you, and they are not legally bound to confidentiality the way your therapist is). Most states require documented telehealth consent before treatment; group work adds the member-confidentiality commitments. A solid group-telehealth consent covers:
Walk through it during the individual screening call, collect the signature electronically, and keep the signed copy in each member's own chart. (Screening itself is non-negotiable for groups — the full intake-to-launch sequence is in our starting-a-group guide.)
The platform requirements for group teletherapy are the same as individual telehealth — a HIPAA-compliant platform operating under a Business Associate Agreement, with encrypted sessions — plus three group-specific needs: enough simultaneous participants with usable video, a waiting room so you control who enters (and can screen out anyone joining from a public place), and per-member session links tied to identity rather than a shareable URL. Consumer tools without BAAs (personal Zoom, FaceTime, Google Meet's free tier) fail the baseline, and "we'll just be careful" is not a compliance posture. Our telehealth documentation guide covers the note-side requirements (POS codes, modifiers, and what to document about the modality).
One product note, since it's the reason we wrote this guide: Practice Harbor's telehealth supports group sessions natively — every member joins the same secure room from their own portal, the waiting room shows you who's arrived, members appear to each other by first name only, and it's included on every paid plan (some platforms price group telehealth as a monthly add-on — see the SimplePractice pricing breakdown).
Telehealth happens where the client is located, so every member of an online group must be in a state where you're licensed (or covered by a compact/temporary-practice rule such as PSYPACT for psychologists). This is the quiet constraint on "national" online groups: your marketing radius is your licensure map. Verify each member's physical location at screening and re-confirm at session start when someone's traveling — a member joining from a vacation in a state you're not licensed in is a real problem, not a technicality.
Online groups bill like in-person groups: CPT 90853 per attending member with a telehealth place-of-service/modifier per payer rules (the full 90853 guide is here), attendance still gates billability, and every attendee still gets an individual note. If anything, video raises the documentation bar slightly: note the modality, the client's location state, and any mid-session technology events that affected treatment.
Secure group video with a waiting room, first-names-only privacy, per-member attendance and billing — on every paid plan. Free for pre-licensed clinicians, $19/mo licensed.
Yes. Group teletherapy is an established modality with published best-practice guidance from the APA and HHS. It requires a HIPAA-compliant video platform with a Business Associate Agreement, documented telehealth consent from every member before the first session, and licensure covering each state where a member is physically located during sessions.
A group-telehealth informed consent signed before the first session, covering both telehealth risks (interruptions, technical failure, unauthorized access) and group-specific risks: other members can see and hear the client, member confidentiality is a signed personal commitment rather than a legal guarantee, no recording is permitted, and members agree to join from a private location.
Only a HIPAA-compliant plan operating under a signed Business Associate Agreement — consumer/free Zoom, FaceTime, and similar tools do not qualify. Beyond the BAA, group work needs a waiting room to control entry and per-member session links tied to identity rather than one shareable URL.
The same as in-person group therapy: CPT 90853 billed per attending member, with the payer’s telehealth place-of-service code and modifier (commonly POS 02/10 with modifier 95). Attendance still gates billing — only members present in the video session may be billed — and each attendee still requires an individual progress note.