Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we take a look at how to keep established and potential client info safe and secure on your website.
We discuss the BetterHelp debacle and lessons we can learn from it; contact forms on websites; what qualifies as PHI; where PHI gets collected through websites; how to set up a secure contact form; HIPAA friendly vs. secure email communication; requests for non secure communication; secure form options; what to include in HIPAA Notice of Privacy Practices; Good Faith Estimates; whether tracking technologies and Google Analytics are permissible; and what is and isn’t included in Google’s BAA.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Relevant Resources & Info From Other Sources * JD Supra article on the issues with Better Help & HIPAA lessons learned -- Better Keep Health Data Private, FTC Signals to On-Line Health Care Providers * HHS Model Notice of Privacy Practices * JD Supra's excellent explanation of Psychotherapy Notes * HHS Office of Civil Rights bulletin on Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates * Google on HIPAA & Google Analytics * Easy Opt Out of Google Analytics (on Google Analytics 4)
PCT Resources * PCT's Google Workspace Configuration Learning Center * + Free access! Including a free training, Making Practice Life Easier & More Efficient with Google Workspace, and checklist) + *see the tutorial in the Miscellaneous Tips section: Misc Tip: How to Create a Contact Form (and put it on your website too!) * Need to select a secure form (or secure email) service? Use PCT's free Service Selection Workbook & Worksheet for Group Practices * PCT's Sample Contact Form Conventional Non-Secure Communications Acknowledgement/Opt-In Language * PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service + support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices