Telehealth and AI Ethics on the 2027 NCMHCE: What the New Outline Expects

NBCC’s 2027 NCMHCE content outline, effective July 1, 2027, keeps six domains but splits the first three into subdomains, raises Legal and Ethical Compliance to 20% of items, and, by NBCC’s published description, adds attention to technology-mediated practice, artificial intelligence, and license portability^[1]. None of that requires new theory; it requires applying rules you already know, from ACA Section H^[2], the NBCC Code of Ethics^[3], and HIPAA^[4], to a screen. This post covers the four scenario types you should expect and gives you six items to work. Our 2027 changes overview covers the outline itself.

1. Telehealth informed consent and emergency protocols

Standard informed consent gets four additions online: the limits and risks of the technology (interception, connection failure, recording), verification of client identity and physical location at each session, an emergency plan with a local contact and local resources, and a backup plan when the connection drops. The exam’s favorite trap is the client who logs in from an unknown location; the keyed answer establishes where they are before the clinical work starts.

2. Jurisdiction and license portability

Licensure is state-based and generally governed by where the client is located during the session. A client who crosses state lines, even temporarily, is a licensing question first and a clinical question second. The Counseling Compact^[5] creates a privilege to practice across member states for eligible licensed professional counselors; states that have not joined require their own license or a temporary permit. Expect items in which the counselor must verify authority to practice before continuing, and items that treat a waiver or client consent as a substitute for licensure (it is not).

3. AI tools in the counselor’s hands

Note-writing assistants, transcription, and scheduling bots all touch protected health information. The exam tests the same due diligence HIPAA has always required^[4]: a business associate agreement with any vendor that stores or processes PHI, a security review of where data goes and who can see it, informed consent that names the tool and the recording, and the minimum-necessary rule. It also tests professional responsibility: the counselor, not the tool, is accountable for the accuracy of the note.

4. AI tools in the client’s hands

Clients arrive with chatbot-generated thought records, self-diagnoses from social media, and medication advice from an app. The keyed response pattern is consistent: validate the effort, correct the clinical content, keep medical decisions with the prescriber, and provide psychoeducation about what the tool can and cannot do. Banning the tool and adopting its output uncritically are both distractors. When the AI content reveals risk, such as a chatbot “supporting” a taper or normalizing self-harm, assess and act on the risk as you would for any disclosure.

Social media and boundaries

ACA H.6^[2] asks counselors to keep personal and professional virtual presences separate, to address social media in informed consent, and to avoid viewing a client’s profiles without consent. Friend requests, public reviews, and clients who message through a personal account are all boundary items.

Work the scenarios

Study notes

• Read ACA Section H once, slowly^[2]; every telehealth item paraphrases it.
• Learn the three HIPAA words that decide AI-tool items: business associate, minimum necessary, authorization^[4].
• For jurisdiction, the client’s location controls; check whether both states are Compact members before assuming portability^[5].
• Related: Domain 2A intake questions (telehealth consent) and Domain 6 questions (AI note tools).