The expat strategy's single biggest dependency. A senior healthcare/cross-border lawyer's review rated it SEVERE: serving a client physically located abroad with a UK-registered therapist may be unlicensed practice in the client's country — civil in some, criminal in others (UAE). This gate must clear per corridor, before any spend on supply, SEO, community or ads in that corridor. Not legal advice — this is the checklist to take to local counsel. Last updated: [PLACEHOLDER: date]
The binding question (answer this first, per corridor)
"Is it lawful for a therapist licensed ONLY in the UK to provide ongoing remote therapy to a client physically located in [corridor]?"
If the answer is "no — the client's location requires a locally-licensed provider," then the core supply advantage of the whole strategy (existing UK therapists serving expats abroad) collapses for that corridor, and you'd need locally-licensed therapists there — a different, slower, harder business. This answer is currently assumed, not known. Get it in writing before anything else.
Why "we're just a marketplace" is a weaker shield abroad
Faresay sets the price, holds the money, controls booking, runs clinical governance and safeguarding. Several regimes regulate the arrangement of care, not just the clinician — so the platform that introduces and takes a fee can itself face intermediary/operating-an-unlicensed-facility exposure. Don't assume the UK "marketplace not provider" line travels.
What local counsel must confirm BEFORE a corridor opens
- Practice legality: does remote talk-therapy to a resident require a local licence? Is unlicensed practice criminal? Does liability reach the platform (aiding/abetting, unlicensed health facility, intermediary liability)?
- Mandatory local law overrides: a UK governing-law clause does not displace the client's country's mandatory consumer-protection, health and data law. Localise terms, refunds, cancellation rights, crisis resources per corridor (all six policy docs are currently UK-only scoped).
- Data: the client's country's health-data law (Japan APPI, Singapore PDPA, UAE data law) on top of UK GDPR — consent for foreign transfer, any in-country residency requirement, and the UK→US sub-processor leg (Clerk/Daily/Resend) layered on the client→UK leg.
- Crisis & safeguarding abroad: local emergency number, local crisis services, local involuntary- treatment regime, and a lawful basis to share location with foreign authorities. ("Call 999" does not work in Tokyo.)
- Therapist insurance/indemnity: does the therapist's UK PII cover clients located overseas? Is the therapist permitted by their UK body (BACP/UKCP/HCPC) to practise across borders?
- Fee characterisation: does a % platform fee breach the corridor's fee-splitting / anti-touting rules for the regulated profession?
- Tax/establishment: does serving clients in-corridor create a taxable presence / withholding / local VAT on the 15% fee?
- Advertising: does advertising therapy into a corridor where the provider isn't locally licensed constitute unlawful solicitation? Are "verified/licensed" claims literally true there (licensed where)?
Corridor risk-ranking (directional — confirm with local counsel)
| Corridor | First-look risk | Stance |
|---|---|---|
| UAE (Dubai) | Severe — strict practitioner licensing, enforced telehealth rules, criminal + immigration exposure for unlicensed practice; mental-health content near morality law | Avoid until expressly cleared. Do NOT pilot here. |
| Japan (Tokyo) | High / unsettled — conservative posture, unclear status of remote treatment of residents, APPI cross-border health-data limits | Do NOT make it corridor #1 despite founder presence — convenience ≠ permission |
| Singapore / Hong Kong | High — sophisticated, enforced licensing + telemedicine/PDPA regimes; "cash-pay expat" is not a carve-out | Defer pending clearance |
| Thailand / Vietnam | Medium-High / opaque — variable enforcement; opacity is risk, not safety | Defer |
| Ireland / English-speaking EEA hubs | Lower — closer to UK/EU data + consumer regime, no third-country data leg, more analysable telehealth rules | Strong candidate for corridor #1 — prove the model in a low-legal-risk market first |
The first mistake to undo: the GTM originally named Tokyo as corridor #1 because the founder lives there. Pick the legally cleanest corridor first (likely Ireland / English-speaking EEA), prove the model, then tackle the harder, higher-value hubs with the playbook + budget to clear them.
The gate rule
No spend (supply recruitment, SEO, community, ads, build) in a corridor until a local-counsel memo answers the binding question "yes" (or "yes, under these conditions"). Treat each corridor as a go/no-go that can return NO. Owner: founder + local counsel per corridor. Track here:
| Corridor | Counsel engaged? | Binding-Q answer | Conditions | Decision |
|---|---|---|---|---|
| [PLACEHOLDER] | GO / NO-GO / HOLD |
Turn the liability into the moat
The competitor review's sharpest point: this per-corridor legal work is slow, expensive and
jurisdiction-specific — which is exactly why a lawyer-blessed "compliance rail" for cross-border
English-language therapy would be the one asset incumbents can't copy in a quarter. Go narrow and
deep on a few corridors and own the compliant-cross-border playbook. See business-plan.md §12.
Linked documents
business-plan.md§13 ·uk-legal-regulatory-brief.md·uk-crisis-safeguarding-policy.mdvalidation-experiment.md(demand test — runs first) ·gtm-strategy.md(corridor sequencing)risk-register.mdR-29 (corridor-choice)