EPPP: PART 1, KNOWLEDGE • DOMAIN 8: ETHICAL LEGAL PROFESSIONAL ISSUES

Technology Ethics — Apply ethical standards to telepsychology and digital practice

Navigating the ethical landscape of technology-mediated psychological services in an increasingly digital profession.

Historical Context & Motivation

The intersection of psychology and technology is not as recent as one might assume. Even before the internet became ubiquitous, psychologists explored telephone-based counseling, radio call-in therapy, and video consultations in rural health networks. However, the rapid proliferation of broadband internet, smartphones, and cloud computing in the early 2000s fundamentally transformed how clinicians could deliver services, creating both unprecedented opportunities for access and a thicket of novel ethical dilemmas. The profession's ethical infrastructure—built around the assumption of in-person, office-based encounters—had to evolve quickly or risk leaving practitioners without meaningful guidance as they ventured into digital spaces.

The concept of telepsychology refers broadly to the provision of psychological services using telecommunication technologies, including videoconferencing, telephone, text-based platforms, and asynchronous messaging. As the field matured, organizations such as the American Psychological Association (APA), state licensing boards, and federal regulators recognized that existing ethical codes required supplementary guidance. The challenge was not merely technical—it was fundamentally about preserving the core ethical principles of beneficence, nonmaleficence, autonomy, and justice in a medium where geographic boundaries blur, data can be intercepted, and the therapeutic frame itself is redefined.

1997
APA Statement on Telephone Therapy
The APA issued early position statements acknowledging telephone-based services, reflecting growing awareness that technology-mediated care required ethical attention beyond existing face-to-face guidelines.
2010
Rapid Growth of Online Therapy Platforms
Commercial platforms such as BetterHelp and Talkspace emerged, offering text and video therapy at scale. This raised urgent questions about informed consent, privacy, data ownership, and the adequacy of clinical assessment through digital means.
2013
APA Telepsychology Guidelines Published
The APA released the Guidelines for the Practice of Telepsychology, providing a comprehensive framework addressing competence, informed consent, confidentiality, security, and interjurisdictional practice.
2017
APA Ethics Code Revised to Address Technology
Updates to the APA Ethical Principles and Code of Conduct incorporated more explicit references to electronic records, social media boundaries, and digital communication, reflecting the profession's ongoing adaptation.
2020
COVID-19 Pandemic Accelerates Adoption
The global pandemic forced a near-overnight shift to telepsychology. Emergency regulatory waivers, HIPAA enforcement discretion, and interstate practice compacts underscored both the necessity and the ethical complexity of digital practice at scale.

The central question that this historical trajectory illuminates is deceptively simple: How do psychologists uphold their fundamental ethical obligations when the medium of service delivery fundamentally changes? Answering this question requires an understanding of both the enduring ethical principles of the profession and the novel challenges that digital technologies introduce.

Core Ethical Principles in Digital Practice

The ethical standards governing telepsychology are not a separate body of ethics; rather, they represent the application and extension of existing principles to a novel context. The APA's 2013 Guidelines for the Practice of Telepsychology are organized around the same foundational principles found in the broader APA Ethics Code, but they emphasize specific considerations that arise when technology mediates the therapeutic relationship. Understanding these principles as adaptive extensions—rather than wholly new constructs—is essential for EPPP preparation and for ethical practice.

1

Competence in Telepsychology

Psychologists must acquire competence in the technologies they use, understanding their capabilities, limitations, and risks. This includes proficiency with the platform, knowledge of its security features, and awareness of how the medium may alter clinical processes such as rapport building or behavioral observation.
2

Informed Consent & Technology-Specific Disclosure

Informed consent in telepsychology must address technology-specific risks, including potential breaches of confidentiality, limitations of the modality, emergency procedures when the client is remote, and how electronic records will be stored, transmitted, and disposed of.
3

Confidentiality & Data Security

Practitioners must use reasonable measures to protect data, including HIPAA-compliant platforms, encryption, secure storage, and policies for data breaches. The duty extends to ensuring that the client's environment is also considered for privacy risks.
4

Interjurisdictional Practice

Telepsychology often crosses state or national boundaries. Psychologists must be aware of jurisdictional regulations governing where they may legally practice, including licensure requirements in the client's location, not merely the provider's.
5

Emergency Management & Safety Planning

When clients are remote, crisis intervention planning requires identifying the client's physical location, local emergency resources, and backup communication methods in case of technology failure during a crisis.
KEY TAKEAWAY
Think of telepsychology ethics as driving the same car on a different road. The vehicle—your core ethical principles of competence, consent, confidentiality, and client welfare—stays the same. But digital practice is like driving on a highway with unfamiliar traffic laws, new weather conditions, and different road hazards. You don't learn a new set of driving skills from scratch; you adapt your existing skills to the new terrain, while also learning the specific rules that apply to this route.

The Telepsychology Ethical Decision-Making Framework

The following diagram illustrates the decision-making process a psychologist should follow when initiating or continuing telepsychology services. This framework integrates the APA Telepsychology Guidelines with the general ethical decision-making models commonly tested on the EPPP. Notice how each decision point connects back to a core ethical principle, reinforcing the idea that telepsychology ethics are extensions—not replacements—of foundational standards.

Each step in this flowchart maps to a core ethical principle (shown in italics along the left and right margins). Step 1 involves self-assessment of competence with the technology. Steps 2–3 address clinical suitability and jurisdictional compliance. Steps 4–6 ensure informed consent, data security, and emergency planning are in place before services begin.

This framework should not be conceptualized as a one-time checklist completed at the start of treatment. Rather, it represents an ongoing ethical process that clinicians revisit throughout the course of care—particularly when client circumstances change, new technologies are adopted, regulatory environments shift, or clinical presentations evolve in ways that may challenge the appropriateness of continued digital service delivery. The iterative nature of this process reflects the broader ethical obligation to continually evaluate the welfare of the client within the specific context of the treatment modality being used.

How It Works: Regulatory & Ethical Mechanisms

Understanding the mechanisms through which telepsychology ethics are operationalized requires familiarity with the interplay between professional ethical codes, federal law (notably HIPAA), state regulations, and organizational policies. These layers do not operate independently; they create a multi-tiered system of accountability that practitioners must navigate simultaneously. The following breakdown explains each regulatory layer and its ethical implications.

HIPAA and the Security Rule

The Health Insurance Portability and Accountability Act (HIPAA) establishes the floor—not the ceiling—for data security in healthcare. Its Security Rule requires covered entities to implement administrative, physical, and technical safeguards to protect electronic Protected Health Information (ePHI). For telepsychology practitioners, this means using platforms that provide end-to-end encryption, executing Business Associate Agreements (BAAs) with technology vendors, and maintaining audit trails for electronic communications. HIPAA does not specify which platforms to use, but it places the responsibility on the practitioner to ensure that whatever technology is selected meets the required standards. A critical distinction is between HIPAA-compliant platforms (those capable of compliance) and HIPAA-compliant use (the practitioner's actual implementation of required safeguards).

APA Ethics Code: Key Standards

Several standards within the APA Ethical Principles of Psychologists and Code of Conduct are particularly relevant to digital practice. Standard 2.01 (Boundaries of Competence) requires that psychologists provide services only within the boundaries of their competence, which in the telepsychology context extends to technological proficiency. Standard 3.10 (Informed Consent) requires that consent processes address the specific modality of service, meaning generic consent forms are insufficient. Standard 4.01 (Maintaining Confidentiality) and Standard 4.02 (Discussing the Limits of Confidentiality) impose heightened obligations in digital contexts where data interception, hacking, and inadvertent disclosure are realistic threats.

Interjurisdictional Complexity

One of the most practically challenging aspects of telepsychology ethics involves interjurisdictional practice. Psychology licensure is state-based in the United States, and the general rule is that the psychologist must be licensed in the state where the client is physically located at the time of service. The Psychology Interjurisdictional Compact (PSYPACT), enacted in 2019 and now adopted by the majority of U.S. states, provides a mechanism for licensed psychologists to practice telepsychology across state lines without obtaining individual state licenses. PSYPACT requires an Authority to Practice Interjurisdictional Telepsychology (APIT) credential. Practitioners must verify whether their state and their client's state participate in PSYPACT, or whether other temporary practice provisions apply.

⚠️ EPPP Exam Note
EPPP questions often test the principle that the client's location—not the provider's location—determines which jurisdiction's laws apply. Even if a psychologist is licensed and sitting in their home state, they may be violating the law if the client is in a state where the psychologist is not licensed or covered by PSYPACT.

Digital Boundaries, Social Media, & Electronic Communication

Beyond the formal delivery of telepsychology services, clinicians must navigate an increasingly complex landscape of digital boundaries. The proliferation of social media, search engines, email, and text messaging creates opportunities for boundary crossings and violations that have no direct analog in traditional practice. The APA Ethics Code and telepsychology guidelines address these issues both explicitly and through the broader application of standards governing multiple relationships (Standard 3.05) and boundaries of competence.

This diagram maps common digital interactions on a risk spectrum from low-risk professional behaviors (left, green) to high-risk ethical violations (right, red). The key considerations box at the bottom summarizes best practices for maintaining digital boundaries.

The issue of patient-targeted Googling warrants special attention, as it represents a genuinely novel ethical challenge without a clear analog in pre-digital practice. Some clinicians argue that searching for a client's online presence can provide clinically relevant information—for instance, when there are concerns about suicidality or substance use evidenced on social media. Others contend that such searches violate the spirit of the therapeutic relationship and introduce information that the client did not voluntarily disclose. The emerging consensus, reflected in the APA guidelines and the ethics literature, is that patient-targeted Googling should generally be avoided unless there is a compelling clinical justification, and any such search should be documented in the clinical record, ideally discussed with the client, and reviewed through the lens of potential harm to the therapeutic alliance.

Similarly, clinicians must establish clear policies regarding electronic communication with clients. These policies should be incorporated into the informed consent process and should specify which forms of communication are acceptable (e.g., encrypted email for scheduling), which are not (e.g., social media messaging for clinical content), response time expectations, and procedures for managing communications received outside of normal business hours, particularly those that suggest clinical urgency.

Worked Example: Ethical Decision-Making in Telepsychology

The following scenario illustrates how a psychologist might apply the ethical decision-making framework to a realistic clinical situation involving telepsychology. This type of multi-layered ethical analysis is characteristic of EPPP questions in Domain 8.

📋 Scenario
Dr. Patel is a licensed psychologist in Virginia who has been providing in-person cognitive-behavioral therapy to Marcus, a 32-year-old client being treated for major depressive disorder and social anxiety. Marcus informs Dr. Patel that he is relocating to North Carolina for a new job and asks whether they can continue therapy via videoconference. Dr. Patel has experience with videoconference therapy and uses a HIPAA-compliant platform. North Carolina is a PSYPACT member state, and Virginia is Dr. Patel's home state of licensure, which is also a PSYPACT member. During their first video session, Marcus mentions that he has been posting on a public depression support forum under his real name, describing details of his therapy. Dr. Patel also notices that Marcus's home environment during the session appears to lack privacy—a roommate can be heard in the background.
Ethical Analysis: Dr. Patel's Decision Process
1
Step 1 — Assess Competence (Standard 2.01)Dr. Patel first evaluates her own competence with telepsychology technology. She has prior experience with the platform, has completed training in telepsychology best practices, and understands the platform's security features. She also assesses whether CBT for depression and social anxiety can be delivered effectively via videoconference—research supports the efficacy of video-based CBT for these conditions.
Competence criterion met. Proceed to next step.
2
Step 2 — Verify Jurisdictional ComplianceDr. Patel checks whether both Virginia (her home state) and North Carolina (Marcus's new state) participate in PSYPACT. Both states are PSYPACT members. She verifies that she holds or can obtain an APIT credential through the PSYPACT Commission. This allows her to legally provide telepsychology services to Marcus in North Carolina without obtaining a separate North Carolina license.
Interjurisdictional compliance confirmed via PSYPACT/APIT.
3
Step 3 — Obtain Updated Informed Consent (Standard 3.10)Because the modality of service is changing from in-person to telepsychology, Dr. Patel must obtain new informed consent. This consent must address the specific risks and limitations of videoconference therapy, including potential technology failures, limits of confidentiality in electronic communication, the need for Marcus to ensure a private environment during sessions, emergency procedures (identifying local crisis resources in Marcus's North Carolina location), and how electronic records will be stored and protected.
New technology-specific informed consent required and documented.
4
Step 4 — Address the Privacy Concern (Client's Environment)During the session, Dr. Patel observes that Marcus's roommate can be overheard, suggesting that the session is not fully private from Marcus's end. Dr. Patel is ethically obligated to raise this concern with Marcus and discuss strategies for ensuring privacy—such as using a private room, noise machine, or headphones. She documents this discussion and Marcus's response in the clinical record. If adequate privacy cannot be established, Dr. Patel must consider whether continuing telepsychology services is appropriate.
Environmental privacy risk identified. Discussed with client; documented. Ongoing monitoring needed.
5
Step 5 — Address the Online Disclosure Issue (Standard 4.01)Marcus is publicly posting details of his therapy on a depression forum under his real name. This is Marcus's autonomous choice regarding his own information—Dr. Patel has not breached confidentiality. However, ethically, Dr. Patel should explore this behavior clinically. She should help Marcus understand the potential risks of self-disclosure (e.g., future employers finding the posts, loss of privacy), discuss it within the therapeutic framework (is it a coping strategy? social connection? potential risk behavior?), and document the conversation. Dr. Patel should not search for Marcus's forum posts or monitor his online activity without clinical justification and explicit discussion.
Client's self-disclosure addressed therapeutically; Dr. Patel refrains from patient-targeted Googling; boundary maintained.
KEY TAKEAWAY
Notice how this example required Dr. Patel to apply multiple ethical standards simultaneously—competence, informed consent, confidentiality, jurisdictional compliance, and boundary management. EPPP questions in this domain rarely test a single standard in isolation; they present layered scenarios that require you to identify and prioritize the most relevant ethical obligation. The best answer is typically the one that addresses the most immediate client welfare concern while remaining within the practitioner's scope of competence and legal authority.

Strengths and Limitations of Telepsychology

An ethically informed evaluation of telepsychology requires acknowledging both its considerable strengths and its genuine limitations. The EPPP may test your ability to weigh these factors when determining whether telepsychology is appropriate for a given client or clinical situation. The table below organizes these considerations across several domains.

Strengths and Limitations of Telepsychology Across Key Ethical Domains
DomainStrengthsLimitations / Ethical Risks
Access & EquityReaches underserved populations in rural areas; reduces transportation, childcare, and mobility barriers; supports homebound or immunocompromised clients.Assumes reliable internet access and digital literacy; may deepen the digital divide for low-income, elderly, or marginalized populations.
Clinical EfficacyStrong evidence base for CBT, exposure therapy, and other structured modalities delivered via video; comparable outcomes to in-person for many conditions.Limited evidence for complex trauma, severe psychosis, or populations requiring intensive observation; reduced capacity for nonverbal assessment.
ConfidentialityHIPAA-compliant platforms offer strong encryption; eliminates risk of being seen in a therapist's waiting room.Data breaches, hacking, client's environment may lack privacy; risk of unauthorized recording by client or third party.
Therapeutic RelationshipConvenience may increase attendance and reduce no-shows; some clients disclose more freely in the comfort of home.Technology may interfere with rapport; connection issues disrupt therapeutic flow; "screen fatigue" can affect engagement.
Crisis ManagementCan maintain continuity of care during emergencies (e.g., pandemics, natural disasters).Remote crisis intervention is significantly more challenging; difficulty verifying client's location; limited ability to involve emergency services directly.
KEY TAKEAWAY
The ethical psychologist does not adopt or reject telepsychology categorically. Rather, the decision is always client-specific and context-dependent. Think of it like prescribing a medication: the same drug may be indicated for one patient and contraindicated for another, depending on their specific clinical profile, comorbidities, and social circumstances. The ethical obligation is to conduct a thoughtful, individualized assessment for each client, rather than applying a blanket policy.

Connection to Emerging Technologies & Advanced Ethical Theory

The ethical landscape of digital practice is not static; it continues to evolve as new technologies emerge. While the EPPP primarily tests established guidelines and principles, an understanding of emerging issues demonstrates the kind of forward-thinking ethical reasoning that distinguishes competent practitioners. The table below contrasts current telepsychology considerations with emerging technological challenges.

Current vs. Emerging Ethical Challenges in Digital Practice
Current Telepsychology ConsiderationsEmerging Technological Challenges
Videoconference and telephone-based therapy with known security protocolsAI-powered chatbots and virtual therapists that provide automated psychological interventions without human oversight
Client uses a single device (computer or phone) in a known locationWearable devices, biometric monitoring, and IoT-connected mental health apps that collect continuous data streams
Informed consent for specific platforms and communication channelsAlgorithmic decision-making in treatment planning; questions about informed consent for AI-assisted diagnosis or predictive analytics
HIPAA compliance and encryption for data at rest and in transitData aggregation, de-identification risks, and the use of client data for commercial purposes by platform companies
Interjurisdictional practice within the United States (PSYPACT)International telepsychology with clients in countries with different privacy laws (e.g., GDPR in Europe vs. HIPAA in the U.S.)

The emergence of artificial intelligence in mental health raises particularly thorny ethical questions. AI-powered applications can screen for depression, provide psychoeducation, and even deliver structured CBT modules—but they raise fundamental questions about the therapeutic relationship, informed consent, liability, and the potential for algorithmic bias. If an AI system trained predominantly on data from one demographic group provides less accurate assessments for another, this constitutes a justice and equity concern that connects directly to the APA's principle of justice.

The duty of ongoing ethical vigilance is perhaps the most important principle to carry forward. Ethical codes and guidelines will always lag behind technological innovation. The psychologist's obligation is not simply to follow existing rules but to apply foundational ethical principles—beneficence, nonmaleficence, autonomy, justice, fidelity—to novel situations through careful reasoning, consultation, and documentation. This capacity for principled ethical analysis, rather than mere rule-following, is precisely what the EPPP assesses.

Practice Problems

PROBLEM 1CONCEPTUAL
A psychologist is transitioning a long-term client from in-person therapy to telepsychology due to the client's relocation. According to the APA Guidelines for the Practice of Telepsychology, what is the most important first step the psychologist should take before providing services via videoconference?
PROBLEM 2BASIC APPLICATION
Dr. Rivera, licensed in Texas, receives a request from a former client who is now living in Oregon. The former client wants to resume therapy via video. Both Texas and Oregon are PSYPACT member states. What credential must Dr. Rivera obtain to legally provide telepsychology services to this client?
PROBLEM 3INTERMEDIATE
During a telepsychology session, a psychologist notices that the client's teenage child walks through the room and appears to overhear part of the session. The client dismisses the concern, saying, 'She knows I'm in therapy.' What is the most ethically appropriate course of action?
PROBLEM 4APPLIED
A psychologist who uses a popular video platform for telepsychology discovers that the platform's parent company recently changed its terms of service to allow the use of aggregated, de-identified user data for product improvement purposes. The psychologist has a signed Business Associate Agreement (BAA) with the platform. What ethical and legal concerns does this situation raise, and what steps should the psychologist take?
PROBLEM 5CRITICAL THINKING
A psychology trainee argues that the ethical principle of justice requires psychologists to embrace telepsychology as broadly as possible because it increases access to underserved populations. Another trainee counters that the principle of nonmaleficence requires caution, particularly for clients who may not benefit from or may be harmed by technology-mediated services. Evaluate both positions and articulate a framework for resolving this ethical tension.

Summary

The ethical practice of telepsychology is not a departure from traditional ethics but an adaptive extension of them. The APA Guidelines for the Practice of Telepsychology (2013) and relevant standards of the APA Ethics Code establish that psychologists must demonstrate competence with technology, obtain technology-specific informed consent, ensure HIPAA-compliant data security, verify interjurisdictional compliance (with tools like PSYPACT and the APIT credential), and develop remote emergency management plans. The ethical psychologist also navigates digital boundaries—including social media policies, electronic communication protocols, and the avoidance of patient-targeted Googling without clinical justification.

Key principles for EPPP preparation: the client's location determines jurisdiction; informed consent must be modality-specific and updated when modalities change; the decision to use telepsychology is always client-specific and context-dependent; and the practitioner's ethical obligations include monitoring the technological environment for emerging risks. The overarching framework is one of principled ethical reasoning—applying foundational values of beneficence, nonmaleficence, autonomy, justice, and fidelity to the evolving digital landscape.

Varsity Tutors • EPPP: Part 1, Knowledge • Technology Ethics — Apply ethical standards to telepsychology and digital practice