# Starting a virtual clinic in Colorado: 2026 telehealth requirements

Colorado now offers a brand two routes to cover patients in the state. A provider can hold a Colorado license, including one obtained through the Interstate Medical Licensure Compact, which Colorado has joined, or, beginning January 1, 2026, a provider with an out-of-state credential can register with the applicable Colorado regulator under C.R.S. 12-30-124 and deliver telehealth to Colorado patients within Colorado's scope of practice. The registration carries one hard limit that matters for many verticals: a registered provider may not prescribe controlled substances. Nurse practitioners have full practice authority under AANP's classification. Colorado is a strong corporate practice of medicine state under its Medical Practice Act, with professional entities that may have lay directors and officers but not lay shareholders. This page covers licensure and the new registration, corporate practice and MSO structure, nurse practitioner scope, controlled substance prescribing and pharmacy fulfillment for a virtual clinic serving Colorado patients. This is general information, not legal advice.

## Summary

- IMLC: Member
- Out-of-state telehealth: Registration available (C.R.S. 12-30-124, effective January 1, 2026) (Yes (out-of-state telehealth provider registration with the applicable regulator, effective January 1, 2026))
- NP practice: Full practice
- CPOM: Strong
- PA Compact: Enacted
- APRN Compact: Not enacted
- Data as of: 2026-10-05

## Requirements

| Requirement | Rule in Colorado | What it means for a brand |
| --- | --- | --- |
| Physician licensure | A provider treating a patient located in Colorado must be licensed, certified or registered in Colorado; the IMLC offers an expedited route to a full Colorado license. | Colorado-licensed physicians are required for any program that may prescribe controlled substances; otherwise registration is an alternative. |
| Out-of-state telehealth | From January 1, 2026, a provider with an out-of-state credential may register with the applicable Colorado regulator under C.R.S. 12-30-124 (SB 24-141, amended by SB 25-129), practice within Colorado's scope, disclose their location, keep an emergency protocol, and not open a Colorado office or prescribe controlled substances. | Registration adds Colorado coverage quickly for non-controlled programs; confirm the DORA application process and fee directly. |
| Nurse practitioner practice | AANP classifies Colorado as full practice; NPs may evaluate, diagnose, treat and prescribe under the board of nursing without a physician agreement. | NP-led programs can staff Colorado independently, by Colorado license or by registration for non-controlled care. |
| Practice ownership (CPOM) | Strong statutory CPOM under the Medical Practice Act; practice through a professional corporation, LLC or LLP with physician-only shareholders, though lay directors and officers are allowed; SB25-083 voids provider noncompetes (per the guides). | Use an MSO plus a physician-owned professional entity with a fair-market-value management fee and noncompete-free provider agreements. |
| Controlled substances | A registered out-of-state provider shall not prescribe a controlled substance as defined in C.R.S. 12-280-402(1) (C.R.S. 12-30-124); the Colorado Medical Board treats questionnaire-only prescribing as below the standard of care and bars medical marijuana recommendations via telehealth. Federal DEA telemedicine rules also apply. | Route any controlled substance prescription to a Colorado-licensed prescriber and keep registered providers on non-controlled programs. |
| Pharmacy fulfillment | A pharmacy shipping into Colorado needs a Colorado resident or non-resident pharmacy license; CCHP notes a Colorado pharmacist may not dispense if they know or should know the order lacked a valid preexisting patient-practitioner relationship. | Confirm the fulfillment pharmacy's Colorado non-resident license and that each order carries a documented provider-patient relationship. |

## Do you need a Colorado medical license to provide telehealth?

Colorado applies the patient-location rule. The State Board of Psychologist Examiners states that psychotherapy occurs where the patient is located, and the same logic governs medicine: a provider treating a patient in Colorado must be licensed, certified or registered in Colorado. Colorado is a member of the Interstate Medical Licensure Compact, so a physician with a qualifying state of principal license can obtain a full Colorado license through the compact's expedited process. CCHP also lists the Nurse Licensure Compact and the Physician Assistant Licensure Compact among Colorado's compacts.

The new option is the out-of-state telehealth registration in C.R.S. 12-30-124, created by SB 24-141 and amended by SB 25-129. Beginning January 1, 2026, an applicant with an out-of-state credential may provide telehealth to patients located in Colorado if the applicant is registered with the applicable regulator and practices within Colorado's scope of practice. Under SB 24-141, applicants apply to DORA, designate an agent, are ineligible if their credential was limited, suspended or revoked for discipline in the preceding five years, and must report out-of-state discipline.

Registered providers take on Colorado's professional standards as if they were Colorado licensees providing comparable in-person care, including rules on prescribing, identity verification, documentation, informed consent, confidentiality, privacy and security. They must give patients guidance on follow-up care, keep a written emergency protocol and a current list of local hospitals, urgent care centers and crisis providers, make a good-faith effort to contact local emergency services in an emergency, disclose their location and that they have no physical location in Colorado, and refrain from opening a Colorado office or providing in-person care without a Colorado credential. The statute also states that a registered provider shall not prescribe a controlled substance as defined in C.R.S. 12-280-402(1).

For a brand, registration is a fast way to add Colorado coverage for non-controlled programs such as GLP-1 weight loss, hair loss, skin and sexual health. Any program that may involve a controlled substance needs Colorado-licensed prescribers. Confirm the current application process and fee with DORA; those details were not in the sources we fetched.

## Colorado corporate practice of medicine and MSO rules

Our dataset classifies Colorado as a strong corporate practice of medicine state, and both 50-state guides describe it as stricter than most. The doctrine is statutory, rooted in the Medical Practice Act. The Permit Health guide cites the Act's CPOM provision and notes an inconsistency in its own source list between the older C.R.S. 12-36-117 numbering and the current 12-240-138 numbering; the MedPath guide likewise rests the classification on the Medical Practice Act. Permit Health adds that the Colorado Medical Board ranked fourth nationally in per-capita serious enforcement actions for 2019 through 2021.

The permitted structures are specific. Both guides state that medicine may be practiced through a professional corporation, an LLC or a registered LLP, that a professional corporation may have lay directors and officers, but that shares may not be issued to or held by non-physicians. Permit Health lists statutory exceptions for hospital employment under C.R.S. 25-3-103.7 and for provider networks under C.R.S. 6-18-303(2), and describes the exceptions as aimed at preventing referral conflicts and undue influence on physician judgment. MedPath reports that fee-splitting is permitted and flags two 2025 laws: SB25-083, which voids provider noncompete agreements, and SB25-126, which adds a pre-merger notice requirement.

For a non-clinician brand the structure is a management services organization owned by the brand, providing technology, storefront, marketing, billing support and non-clinical staff to a physician-owned Colorado professional entity under a management agreement priced at fair market value. The lay-director allowance means a brand representative can sit on the professional entity's board, but equity must stay with physicians and clinical control must stay with the physician owner. The noncompete ban affects how provider agreements are drafted. MyOrbitHealth delivers the medical layer through licensed providers under an MSO and friendly-PC structure built for states with this posture.

Have Colorado counsel review the entity type, the share ownership, the board composition and any provider agreements in light of SB25-083.

## Colorado nurse practitioner scope of practice

AANP classifies Colorado as a full practice state (map data dated 05/2026). AANP's definition is that state practice and licensure laws permit all NPs to evaluate patients, diagnose, order and interpret diagnostic tests, and initiate and manage treatments, including prescribing, under the authority of the state board of nursing. A Colorado-licensed NP can therefore anchor a program without a collaborating or supervising physician, which simplifies staffing for asynchronous and protocol-driven verticals.

Two Colorado-specific points apply. First, the C.R.S. 12-30-124 registration covers nursing licensees among the professions DORA lists as eligible from January 1, 2026, so an NP licensed in another state may be able to register rather than obtain a Colorado license, subject to the same conditions and the same bar on prescribing controlled substances. Second, the Colorado Medical Board's position that a provider-patient relationship may be formed by telehealth, with identity and location verification, credential disclosure and informed consent, and that questionnaire-only prescribing is below the standard of care, sets the floor for any asynchronous workflow. Our dataset records no transition-to-practice hours for Colorado; confirm current requirements with the Colorado State Board of Nursing.

## How Colorado compares with its neighbors

| State | IMLC | Out-of-state telehealth | NP practice | CPOM |
| --- | --- | --- | --- | --- |
| Colorado | Member | Registration available (C.R.S. 12-30-124, effective January 1, 2026) | Full practice | Strong |
| [Utah](https://myorbithealth.com/compliance/utah) | Member | Limited exceptions only | Full practice | No general prohibition |
| [New Mexico](https://myorbithealth.com/compliance/new-mexico) | Member | Registration available | Full practice | No general prohibition |
| [Wyoming](https://myorbithealth.com/compliance/wyoming) | Member | Full license required | Full practice | No general prohibition |

## Federal rules that apply to every virtual clinic

### DEA telemedicine prescribing

On December 31, 2025, DEA and HHS published the fourth temporary extension of the telemedicine flexibilities, effective January 1, 2026 through December 31, 2026. Under it a DEA-registered practitioner may prescribe Schedule II through V controlled substances by audio-video telemedicine without a prior in-person evaluation, subject to state law. DEA's special registration final rule was sent to the White House Office of Information and Regulatory Affairs on August 25, 2026 and was not published as of this review. Plan for the flexibilities to change on January 1, 2027 and confirm status on dea.gov.

### HIPAA and breach notification

A telehealth brand that creates, receives or stores protected health information needs a business associate agreement with every vendor that touches it, and the HIPAA Breach Notification Rule (45 CFR 164.400 through 164.414) requires notice to affected individuals without unreasonable delay and no later than 60 days after discovery, with HHS notified within 60 days for breaches affecting 500 or more people. MyOrbitHealth includes a BAA in every contract.

### FTC Health Breach Notification Rule

Health apps and connected services that are not HIPAA covered entities fall under the FTC's Health Breach Notification Rule (16 CFR Part 318), amended in 2024 to cover most consumer health apps. A storefront that collects health information outside the clinical record may be covered even where HIPAA is not.

### LegitScript certification for advertising

Google, Meta and Microsoft rely on LegitScript healthcare merchant certification before serving telehealth ads that can result in a prescription. Certification is national, not per state, but the file includes the licensure and corporate-structure evidence described on this page. MyOrbitHealth prepares, files and manages the application through approval; LegitScript decides, and certification is not guaranteed.

## How MyOrbitHealth launches a compliant virtual clinic in Colorado

### Providers already licensed in Colorado

The MyOrbitHealth provider network covers all 50 states with 2,400+ board-certified MD, DO, NP and PA providers across 38+ specialties, credentialed to the NCQA standard with monthly OIG-LEIE and SAM.gov exclusion screening and continuous license monitoring. A Colorado patient is routed to a provider licensed in Colorado, at an average response under six minutes during business hours.

### Structure held inside the network

Care is delivered by the network's physician-owned professional entity under a management services structure, so a brand contracts with the platform and never owns a medical practice. That is how a non-clinician brand serves Colorado patients without taking on corporate practice of medicine exposure directly. Your own counsel should still review the arrangement for Colorado.

### Modality and prescribing rules enforced at routing

Orbit Intake and OrbitRx encode state modality and prescribing rules, so an intake that Colorado requires to be synchronous never reaches a provider as an asynchronous case, and OrbitRx delivers EPCS with two-factor identity proofing through Surescripts for any controlled substance a provider decides to prescribe.

### Pharmacy, labs and LegitScript

Prescriptions route to a LegitScript-certified network of 503A compounding and retail pharmacies licensed to ship into Colorado, with cold-chain delivery and 0% medication markup. Orbit Labs draws samples three ways through Quest Diagnostics or Labcorp walk-in, Tasso at-home kits or mobile phlebotomy. Managed LegitScript certification typically takes days once filed, not months; LegitScript decides. Brands go live in days on a flat scoped platform fee with no revenue share, and the brand owns its patients and data.

Dataset (CSV): https://myorbithealth.com/data/state-compliance-2026.csv · 2026 report: https://myorbithealth.com/blog/state-telehealth-compliance-report-2026

## FAQ

### What are the requirements to start a virtual clinic in Colorado?

Each provider needs a Colorado license (directly, through the IMLC or the Nurse Licensure Compact) or, from January 1, 2026, an out-of-state telehealth registration with the applicable Colorado regulator under C.R.S. 12-30-124. Registered providers cannot prescribe controlled substances, so controlled programs need Colorado-licensed prescribers. The clinical entity must be a physician-owned professional corporation, LLC or LLP supported by a management company under a fair-market-value agreement, and the fulfillment pharmacy must be licensed to ship into Colorado.

### Do I need a Colorado medical license to provide telehealth?

Not necessarily, as of January 1, 2026. A provider with an out-of-state credential can register with the applicable Colorado regulator under C.R.S. 12-30-124 and deliver telehealth to Colorado patients within Colorado's scope of practice, provided they meet Colorado's professional standards, disclose their location, keep an emergency protocol, and do not open a Colorado office or prescribe controlled substances. A Colorado license is still required for in-person care and for controlled substance prescribing.

### Is Colorado in the Interstate Medical Licensure Compact?

Yes. CCHP lists Colorado as a member of the Interstate Medical Licensure Compact, alongside the Nurse Licensure Compact and the Physician Assistant Licensure Compact, and Colorado appears on the IMLCC participating-states list. Qualifying physicians can obtain a full Colorado license through the compact's expedited process.

### Is Colorado a corporate practice of medicine state?

Yes, and a strict one. Both guides in our dataset classify Colorado's doctrine as statutory under the Medical Practice Act and stricter than most states, with an active medical board. Medicine may be practiced through a professional corporation, LLC or LLP whose shares are held only by physicians, although lay directors and officers are permitted, so a brand works through an MSO plus a physician-owned professional entity.

### Can nurse practitioners practice independently in Colorado?

Yes. AANP classifies Colorado as a full practice state, so NPs can evaluate, diagnose, order tests and prescribe under the board of nursing's authority without a physician agreement. Nursing licensees are also among the professions eligible for the out-of-state telehealth registration from January 1, 2026.

### Can controlled substances be prescribed by telehealth in Colorado in 2026?

Federally, the DEA/HHS fourth temporary extension of telemedicine flexibilities runs through December 31, 2026; confirm status on dea.gov. In Colorado, a provider practicing under the out-of-state telehealth registration may not prescribe controlled substances at all under C.R.S. 12-30-124, so those prescriptions must come from Colorado-licensed prescribers. The Colorado Medical Board also treats prescribing based solely on an online questionnaire as below the standard of care. Confirm with the Colorado Medical Board.

### How fast can a telehealth brand launch in Colorado?

MyOrbitHealth's network of 2,400+ board-certified providers across 38+ specialties already includes clinicians licensed in Colorado, with an average response under six minutes during business hours. EPCS with two-factor identity proofing and a LegitScript-certified pharmacy network are built in, and MyOrbitHealth prepares, files and manages the brand's LegitScript certification, which is typically approved in days once filed but is never guaranteed. Brands go live in days.

_This is general information, not legal advice._

## Sources

- [CCHP: Colorado cross-state licensing](https://www.cchpca.org/colorado/?category=professional-requirements&topic=cross-state-licensing)
- [Colorado General Assembly: SB 24-141 (signed act)](https://leg.colorado.gov/sites/default/files/2024a_141_signed.pdf)
- [IMLCC participating states](https://www.imlcc.com/participating-states/)
- [AANP state practice environment](https://www.aanp.org/advocacy/state/state-practice-environment)
- [FSMB: telemedicine policies by state](https://www.fsmb.org/siteassets/advocacy/key-issues/telemedicine_policies_by_state.pdf)
- [MedPath Compliance: CPOM 50-state guide](https://www.medpathcompliance.com/post/corporate-practice-of-medicine-cpom-50-state-guide)
- [Permit Health: CPOM 50-state guide](https://www.permithealth.com/post/the-corporate-practice-of-medicine-50-state-guide)

_Source: https://myorbithealth.com/compliance/colorado · facts reviewed 2026-10-18_