In order to provide teletherapy services to a client, a CRNP/PMH or PMH/APRN shall have: Established a client-therapist relationship; Performed a mental status assessment; Established a diagnosis; Developed a treatment plan; and Obtained an informed consent from the client to provide teletherapy. Before providing teletherapy services, the CRNP/PMH or PMH/APRN shall develop a procedure to: Verify the identity of the client receiving teletherapy services; Ensure that all medical records are protected from unauthorized access through encryption or other means; Ensure that the CRNP/PMH or PMH/APRN provides a secure and private teletherapy connection and complies with federal and state privacy laws; Notify a client in the event of a data breach in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and the Maryland Confidentiality of Medical Records Act; and Establish safety protocols to be used in the case of an emergency. At the outset of each teletherapy session, the CRNP/PMH or PMH/APRN shall: Identify all individuals present at each location and confirm that they are permitted to hear or access personal health information; Obtain or confirm an alternative method of contacting the client in case of a technological failure; and Determine whether the client is in Maryland.