Providing therapy to someone in another country is not automatically illegal, and it is not automatically legal either. Whether you can do it depends on two sets of rules working at the same time: the rules governing your U.S. license, and the rules of the country where your client is physically sitting during the session. In most cases your state license does not bar you from treating a client abroad, because U.S. licensing boards regulate practice inside U.S. borders. The harder question is whether the client’s country restricts its residents from receiving mental health care from a foreign provider, and whether your malpractice insurance, privacy obligations, and emergency plan hold up once the client is on the other side of a border.
Two Jurisdictions Apply at Once
A license issued by a U.S. state authorizes you to practice within that state. It says nothing about practicing in France, Brazil, or Japan. The working principle across the mental health professions is that therapy happens in two places at once: where you are sitting and where your client is sitting. The laws of both locations can apply simultaneously.
Start with your own board. Some state licensing boards have issued guidance on international teletherapy; many have not. Where no specific guidance exists, the default position is that you remain bound by your state’s scope-of-practice rules and ethical obligations regardless of where the client is located. Violating the client’s country’s laws can also trigger a complaint back home, because most licensing codes require compliance with all applicable laws in both jurisdictions.
What the Client’s Country May Require
This is the part most therapists skip, and it is where the real legal risk lives. Some countries require any provider delivering health services to their residents to hold a local license or registration. Others have no regulations addressing cross-border teletherapy at all, which creates ambiguity rather than permission. A handful actively restrict their residents from receiving certain forms of care from abroad.
Most European and many Asian countries do not currently block their residents from receiving mental health care from a foreign-licensed provider, but the regulatory picture is uneven and changing. Research each country individually. Practical steps include contacting the U.S. embassy or consulate in the client’s country, reaching out to an English-speaking therapist practicing there, and checking professional networks for colleagues with experience in that jurisdiction. Document what you find. If regulations are unclear, that documentation shows a good-faith effort to comply.
American Clients Living Abroad
A U.S. citizen sitting in Berlin is still sitting in Germany. The client’s passport does not change the analysis; what matters is physical location during the session. German rules on receiving cross-border care apply to your American expat client the same way they apply to a German national. In practice this scenario rarely creates enforcement problems, because most countries focus licensing enforcement on providers physically operating within their borders rather than on residents voluntarily seeking a foreign provider. That is a description of enforcement patterns, not a legal safe harbor.
Clients who move frequently, such as digital nomads, are harder. In most U.S. states the client’s location at the time of the session is what counts, not where they claim to live. If your client hops between countries, you are technically responsible for knowing whether the rules in their current location create a problem.
Malpractice Insurance Gaps
This is where therapists routinely get blindsided. Most professional liability policies in the United States contain exclusions for treatment provided without proper licensure in the jurisdiction where care was delivered. If a claim arises from therapy you provided to a client in a country where you were not authorized to practice, your insurer may deny the claim entirely.
Before taking on any international client, call your malpractice carrier and ask specifically whether your policy covers services provided to clients located outside the United States. Get the answer in writing. Some carriers offer endorsements or riders for international practice; others exclude it categorically. If your carrier does not cover international work, every cross-border session is uninsured risk.
Privacy Law Follows the Client
If you are a HIPAA-covered entity, your HIPAA obligations follow you regardless of where the client is located. Encrypted, HIPAA-compliant platforms, secure records, and breach notification procedures all still apply.
A client in the European Union adds a second layer. The General Data Protection Regulation applies to any organization offering services to individuals in the EU, even without a physical presence there. A therapist in Chicago treating a client in Berlin must comply with both HIPAA and the GDPR. The GDPR classifies health data as a special category requiring additional protections, including explicit consent for processing and safeguards for cross-border data transfers.
The EU-US Data Privacy Framework, which took effect through an adequacy decision in July 2023, provides one legal mechanism for transferring personal data from the EU to certified U.S. organizations. Providers who are not certified may need to rely on Standard Contractual Clauses approved by the European Commission, which require a documented assessment of whether U.S. laws could prevent you from meeting GDPR obligations, plus supplementary safeguards such as end-to-end encryption if the assessment raises concerns.
The EU is not the only jurisdiction with reach. Brazil’s LGPD, Canada’s PIPEDA, and Australia’s Privacy Act all impose obligations that can reach foreign service providers. Understand where your records are physically stored as well, because the laws of that storage location may also apply.
Reporting and Emergencies Across Borders
Mandatory reporting obligations do not disappear when your client is in another country, but they become harder to carry out. If a client discloses child abuse, elder abuse, or imminent danger, your home state’s mandated reporting laws still apply to you. You may have no practical way to report to local authorities in a foreign country, and those authorities may have no mechanism to receive a report from a foreign therapist. The dual-jurisdiction principle points toward attempting to comply with the reporting laws of both your location and the client’s, which means knowing the local emergency numbers and any English-speaking crisis resources in the client’s area before a crisis happens.
You cannot dial the client’s local 911 equivalent from abroad on their behalf reliably, so advance planning is essential. Before the first session, collect the client’s exact physical address, local emergency service numbers (police, crisis unit, nearest emergency room), and the name and phone number of a local emergency contact who could physically reach the client. Get written authorization to release information to that contact if a crisis occurs. Plan for time zone gaps and for technology failures mid-session, including a backup communication method and clear instructions for the client if the connection drops during a difficult moment.
If a client contacts you in acute crisis from a location where you are not licensed, the prevailing professional standard is to respond to the immediate need and document your reasoning. Refusing to help someone in acute danger over a licensing technicality is not the ethical answer. Document everything.
Informed Consent Built for Cross-Border Work
Standard informed consent forms are not sufficient for international therapy. The document should be in language the client can understand, ideally their preferred language, and should address at minimum:
- Governing jurisdiction: which country’s laws will primarily govern the therapeutic relationship, and what that means for the client’s rights.
- Confidentiality limits: an honest explanation that different legal systems may require disclosure under different circumstances, and that you may be subject to mandated reporting the client is not expecting.
- Emergency procedures: the specific plan for crises, including local emergency numbers, the designated emergency contact, and what happens if technology fails.
- Data privacy practices: where records are stored, what laws protect them, and how data crosses borders.
- Fees and payment: currency, exchange rate handling, accepted payment methods, and who bears conversion costs.
- Service limitations: a clear statement that you cannot provide local emergency intervention and that electronic communication should not be used for emergencies.
- Dispute resolution: how disagreements will be handled, including whether arbitration or mediation will be used and in which jurisdiction.
Choice-of-law clauses in international agreements are generally recognized as valid across legal systems, including in therapy agreements. A client’s home country can still override such a clause if applying the chosen law would violate its fundamental public policy, so the clause gives useful clarity without being bulletproof.
When the Clinical Issue Itself Is Risky in the Client’s Country
Some ethical situations only arise across borders. Providing therapy related to LGBTQ+ identity, reproductive health, or certain religious practices can put your client at genuine physical risk in countries where these topics are criminalized. Data interception, government surveillance, and mandatory disclosure laws in some jurisdictions could expose the client to prosecution. The obligation to do no harm means honestly evaluating whether providing cross-border therapy on certain topics could endanger the client more than it helps.
Scope of practice can also collide. Treatments within your scope at home may not be recognized or permitted in the client’s country. Some countries restrict who can provide certain interventions, limit the types of therapy that can be delivered remotely, or require specific modalities to be delivered only in person. The prevailing ethical guidance when rules conflict is to name the dilemma, apply critical thinking about what a reasonable and prudent colleague would do, and document your reasoning.
Tax and Business Obligations You May Not Expect
Providing paid services to someone in another country can trigger tax obligations you would never encounter with domestic clients. The OECD recommends that foreign business-to-consumer service providers register and remit Value Added Tax in the jurisdiction where the customer is located, often through a simplified registration process. Whether this reaches you depends on the specific country, your revenue volume, and how that country classifies mental health services; some countries exempt health services from VAT, others do not. Income from international clients can also create foreign tax reporting questions at home, and cross-currency payment processing can add compliance requirements of its own. A tax professional with international experience is worth consulting before building an international caseload.