Group Practice Tech: Recent Episodes
Person Centered Tech
Group Practice Tech by Person Centered Tech: a podcast where we help mental health group practice owners ethically and effectively leverage tech to improve their practices.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an exciting update about how to make your Google Workspace email HIPAA-secure.
We discuss:
- The encryption mechanism, TLS, and how it fits into HIPAA Security Rule standards
- Ways that behavioral health practices typically manage email security
- Escrow style email
- The transmission security standard under HIPAA
- Google's transparency report about safer email
- HIPAA-friendly conventional email vs. HIPAA secure email
- Two limitations to be aware of and a risk management and ethics perspective
- How to set up this configuration in Google Workspace
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * Article: A Practical Way to Secure Outbound Email in Google Workspace: What Mental Health Practices Need to Know + Read PCT's complete explanation of the global routing rule, what enforced TLS changes for mental health practices, what it does and does not protect, and the steps practices should take before relying on it for email containing protected health information. * PCT's Free Google Workspace Configuration Help Center + Access PCT's video tutorial demonstrating how to configure the global outbound routing rule, along with additional step-by-step guidance for configuring Google Workspace for HIPAA-compatible use. * Office Hours for Solo Practitioners + Get direct consultation and ongoing support for applying HIPAA requirements to the particular needs of your practice—including email, client communication, technology selection, policies, and implementation. * Group Practice Office Hours + Practice leaders can receive direct support with developing communication systems and workflows that are HIPAA-compatible, effective, efficient, and workable for the practice, its team, and its clients. * Article: 3 Kinds of Email Security: How to Make an Informed and HIPAA-Aware Choice + Learn about PCT's framework for distinguishing among conventional email, TLS-secured email, and escrow or portal-style secure messaging—and choosing the option that fits the information, workflow, and client circumstances involved.
Resources: * Google Workspace Admin Help: Send Email Over a Secure TLS Connection + Google's instructions for requiring TLS when sending email to specified recipients and preventing delivery when a secure connection cannot be established. * Google Transparency Report: Email Encryption in Transit + View Google's current data on the percentage of email sent and received by Gmail that is encrypted while traveling between email providers. * HHS: Does the Security Rule Allow for Sending Electronic PHI in an Email? + HHS guidance explaining how the HIPAA Security Rule applies when electronic protected health information is transmitted by email. * HHS: Does the HIPAA Privacy Rule Permit Providers to Use Email With Patients? + HHS guidance addressing email communication with patients, reasonable safeguards, and patients' requests to communicate through alternative means.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we debunk myths around documentation and fraud with Dr. Maelisa McCaffrey.
We discuss:
- A recent article that is causing concern about whether submitting insurance claims before notes are complete constitutes fraud
- Fraud vs. mistakes, and consequences for mistakes in billing
- What constitutes fraud under the False Claims Act, with context from Eric Ström, HIPAA and mental health law attorney and practicing clinician
- Whether there are rules about when notes are supposed to be completed
- Maelisa's research on whether "late" notes can impact audits or a fraud case
- Claims vs. superbills and what provider obligations are with superbills
- PCT's training with Maelisa on How Auditors Think
- Changing or amending notes, and what that looks like in practice
- Doing notes on paper if you struggle with overthinking your notes
- Just doing the documentation, and how you can always amend them later if needed
- Why private practice isn't for everyone, and that's okay
- How effective policies and procedures around documentation (and more) can help with hiring and retention for group practices
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * PCT CE Course (on-demand) Dealing with Insurance: How Auditors Think and Why + 3 CE credit hour training (including 1 legal-ethical CE hour) taught by Dr. Maelisa McCaffrey (QA Prep). This updated-and-expanded 2026 training demystifies medical necessity, clarifies what auditors and payers are actually looking for (and why), and helps clinicians document with more confidence and less stress. Includes real examples, sample note review, and practical tools you can use immediately — covering informed consent language for clients using insurance, treatment planning that supports insurance requirements without sacrificing clinical judgment, and self-auditing techniques to spot red flags before anyone else does. Includes handouts/resources such as diagnosis justification statements, common treatment goals, progress statement formulas and examples, sample progress notes, and a client file review tool. * Special Office Hours & Group Practice Office Hours direct support and consultation session with guest expert and co-facilitator Dr. McCaffrey: August 6th, 2026. Accessible to Practice Care Premium members/subscribers.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Dr. Maelisa McCaffrey about how to properly document your therapy sessions.
We discuss:
- Normalizing why documentation is such a struggle for clinicians
- Dispelling the myth that it is necessary to translate what you're doing into CBT language for insurance reimbursement and why
- The danger of only considering insurance when documenting
- Documenting what actually happened in session
- Acknowledging that progress notes are never going to fully capture the depth of therapeutic transformation
- AI documentation: is it better?
- What fundamentals need to be in place for AI to be clinically useful
- Mistakes Maelisa has seen AI make in clinical documentation
- Maelisa's upcoming CE training on documentation, featuring live coaching demos to help with skill-building
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- New CE Training: Beyond CBT: Documenting Somatic, Creative, and Culturally-Informed Interventions Presented by Dr. Maelisa McCaffrey | 3 CE Credit Hours | Live (7/hours 27) and On-Demand
- This workshop is designed for therapists who want their documentation to reflect the work they're actually doing. Participants will learn a practical framework for connecting contemporary therapeutic interventions to medical necessity, develop personalized intervention language for treatment plans and progress notes, and watch live documentation coaching sessions that demonstrate the documentation process in real time. Includes downloadable worksheets, intervention templates, and on-demand self-study CE course access following the live event.
- Explore Dr. McCaffrey's PCT CE course collection on Documentation & Clinical Use of AI
- Dr. Maelisa McCaffrey is one of the leading educators on ethical, clinically meaningful documentation for mental health professionals. Explore her complete collection of PCT continuing education courses on progress notes, treatment plans, medical necessity, insurance audits, contemporary documentation practices, and the ethical use of AI in clinical work.
Resources:
- Dr. McCaffrey's book: Stress Free Documentation for Mental Health Therapists
- Dr. McCaffrey's company: QA Prep
- Want to continue learning from Dr. Maelisa McCaffrey? Visit QA Prep, her educational platform dedicated to helping mental health professionals create documentation that is clinically meaningful, ethical, efficient, and far less stressful. Explore free resources, self-paced courses, consultation, practical tools, and her Stress-Free Documentation book covering progress notes, treatment planning, medical necessity, AI, supervision, and more.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we interview attorney Dan Pepitone about how to choose the right business entity for your group practice.
We discuss:
- Building a strong business foundation to reduce risk and exposure to liability
- The distinctions between different business entities, and tax implications for each
- Why some states like New York and California require behavioral health care providers to practice under a professional entity like a PC or PLLC
- When you need to register your business in other states where you plan to practice, and what to consider before expanding into other states
- Considerations when choosing a business entity for your practice
- When to revisit the entity you've chosen for your practice
- What ongoing legal maintenance is required for preserving your business entity
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Attorney Dan Pepitone's website and collection of highly useful legal guides
PCT Resources:
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
- Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a mitigation checklist to help you reduce your risks.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
- For Group Practices
- For Solo Practitioners
- Comprehensive HIPAA Security Policies & Procedures
- Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
- Device & Workspace Security Suites
- Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
- Includes the Risk Analysis & Risk Mitigation Planning service + tool
- HIPAA Security & Privacy Ethics training
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what you need to know about public wi-fi networks & the security risks they pose to your devices and information.
We discuss:
- The difference between privacy and security
- How the risks posed by public wi-fi networks have changed over time
- What security risks public wi-fi networks actually pose to your device
- How to use a risk analysis lens to put simple, accessible safeguards in place
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Reader's Digest Article: There's a New Danger When Connecting to Public Wi-Fi—Here's What You Need to Know
- Security Magazine Article: 5M Public, Unsecured Wi-Fi Networks Found Exposed
- Forbes Article: Stop Using Public Wi-Fi, Google Warns—Change Your Phone Settings
- AP News: One Tech Tip: Logging on at a cafe? Privacy and security guidelines for remote workers
- Zimperium Article: Travel Is Up and So Are the Risks 5 Million Public Unsecured Wi-Fi Networks Exposed
PCT Resources:
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
- Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a mitigation checklist to help you reduce your risks.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
- For Group Practices
- For Solo Practitioners
- Comprehensive HIPAA Security Policies & Procedures
- Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
- Device & Workspace Security Suites
- Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
- Includes the Risk Analysis & Risk Mitigation Planning service + tool
- HIPAA Security & Privacy Ethics training
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what we know about the proposed HIPAA Security Rule and steps to take to safeguard your practice in the meantime until we know more.
We discuss:
- The current status of the proposed HIPAA Security Rule
- How regulatory uncertainty does not equal security uncertainty
- Takeaways from OCR Director Paula Stannard's comments at the National HIPAA Summit that give insight into the rationale behind the proposed rule
- Risk analysis, encryption, reasonable and appropriate safeguards, and meaningful protection of client information
- Our recommendation for building your compliance strategy
- Four steps practice owners should take right now to safeguard your practice
- PCT resources that can help you take those steps
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources: * Article: Feds Are Still Assessing Proposed HIPAA Security Rule Update
PCT Resources: * PCT's Free Mini-Risk Assessment Tool + Wondering whether your practice's safeguards are reasonable and appropriate for today's threat landscape? Our free Mini Risk Analysis Tool provides a quick, practical way to evaluate your security circle, identify potential gaps, and determine where to focus your attention next. While not a substitute for a full HIPAA Security Risk Analysis, it's an excellent place to begin. * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a mitigation checklist to help you reduce your risks. * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + - For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an important update for practice owners who bill insurance.
We discuss:
- Why the change from CAQH to DataSpring is not just an administrative rebrand, as DataSpring is trying to position it
- Why this change is a big deal for practice owners who bill insurance
- The action steps recommended by The Group Practice Exchange
- Additional PCT-recommended action steps
- Who owns the infrastructure that healthcare depends on?
- Looking at this change from a risk management perspective
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources: * PR Newswire article: Leading Health Plans Become CAQH Owners to Shape the Future of Healthcare Data * The Group Practice Exchange's informational post & action items * More context & takeaways from the Group Practice Exchange * Mental Health Insurance Reform Task Force's post
PCT Resources for practice optimization & fortification: * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + - For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool - HIPAA Security & Privacy Ethics training * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have exciting updates for cross-jursidictional and multi-jurisdictional practice.
We discuss:
- The Counseling Compact, and the states in which it is live
- The ETA for the Social Work Licensure Compact going live
- Access MFT's licensure portability effort
- Portability-friendly laws and how they differ from rights for temporary practice
- PSYPACT updates
- Physical location restrictions and requirements for providers under compacts
- Details of our upcoming CE training: Legal-Ethical Cross-Jurisdictional Telemental Health in 2026: Interstate, International, and Complex Practice Considerations
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * New on-demand CE training: Legal-Ethical Cross-Jurisdictional Telemental Health in 2026: Interstate, International, and Complex Practice Considerations Presented by Eric Ström, JD, PhD, LMHC and Liath DaltonA 3-hour legal-ethical CE training for clinicians navigating the realities of modern telemental health practice, where clients travel, relocate, attend college out of state, split time between households, or receive care while physically located somewhere other than the clinician's primary licensing jurisdiction. This updated training moves beyond a basic "am I allowed to practice there?" analysis into advanced practical application. Participants examine practice-authority pathways, temporary practice allowances, PSYPACT, the Counseling Compact, the Social Work Licensure Compact, MFT portability developments, clinician-location versus client-location issues, international practice considerations, payer and malpractice concerns, emergency planning, confidentiality and mandatory reporting conflicts, minor consent and parent/guardian access issues, and documentation of due diligence.
Participants also receive practical worksheets to support jurisdictional verification, international due diligence, and mapping applicable laws, risks, and practice implications — helping clinicians move from identifying a possible permission pathway to evaluating the conditions, conflicts, capacity, documentation, and risk-management steps needed to make a grounded practice decision.
Recommended for any clinician providing teletherapy, as well as practice owners, supervisors, clinical directors, compliance leads, and other practice leadership responsible for supporting cross-jurisdictional care decisions. This training can also be assigned to team members through PCT's free team training management system (Group Practice Care basic.)
As one participant shared: "Thank you for an absolutely excellent presentation! The presentation is a home run, and I will recommend it to my colleagues… I have a somewhat unique perspective on teletherapy and licensure mobility from working on these issues at the state, national, and international regulatory levels. The information that you provided is clear, direct, easy to follow, and accurate." * PCT's free (!) Teletherapy Practice Rules by State Tool Whenever teletherapy sessions occur when the client -- or therapist -- are physically located outside the state of the clinician's licensure at the time of session, cross-jurisdictional practice is occurring. It is necessary to answer the question of whether it is permissible for you to work with that client in that state, regardless of whether the presence in another jurisdiction is temporary or not.In addition to the fundamental question of whether practice is permitted, and the particulars of how it is permitted, it is important to identify rules of practice, and training requirements, in order to be equipped with the information you need to follow for navigating legal-ethical cross-jurisdictional practice.This tool is a supportive resource to help you identify that information, link you to the authoritative source, and document your performance of due diligence when conducting cross-jurisdictional practice within the United States. * PCT's Clinical Staff Teletherapy Training * PCT's Teletherapy Director and Supervisor Training for Group Practices * PCT's Teletherapy Manuals and Forms for Group Practices * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a mitigation checklist to help you reduce your risks. * If you're navigating filing a breach report and you haven't completed a documented "thorough and accurate" HIPAA Security Risk Analysis that meets the foundational Security Rule requirements, this is something you want/need to do so it can be reflected in your breach report to the OCR (HIPAA regulators) * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training
Resources: * PSYPACT * Counseling Compact * Social Work Licensure Compact * Access MFTs
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a cautionary tale about a Talkspace client whose healthcare information was weaponized against them.
We discuss:
- Venture capital firms buying therapy practices, monetizing, and weaponizing client data to make more money
- A recent case where a Talkspace client's data was read aloud in court
- Platforms using client communication to train LLMs and AI platforms
- How these platforms are profoundly detrimental to clients, therapists, and the profession
- Why when something seems too easy and convenient, you are often the product (and your clients are the product)
- How these companies operate outside of HIPAA Security Rule standards
- The importance of vetting platforms and having BAAs for safeguarding client information
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Story referenced in episode re: employee termination and litigation using all their session data/content from Talkspace chatbot * Story regarding AI models failing ethics standards and standards of care
PCT Resources * Live (and recorded) PCT CE Course: Beyond Hype and Anxiety: A Practical Framework for Ethical AI Use in Clinical Practice is a 4-hour legal-ethical CE training co-presented by Dr. Maelisa McCaffrey and Liath Dalton, designed to help clinicians move beyond fear and guesswork into confident, responsible AI use. The course provides a structured, real-world framework for integrating AI into clinical workflows while upholding HIPAA requirements, ethical standards, and clinical standards of care. Participants will learn how to evaluate AI tools, understand what constitutes PHI (and the limits of de-identification), implement appropriate policies and safeguards, and maintain documentation quality and clinical integrity. With practical tools, decision-making frameworks, and implementation strategies, this training supports clinicians in making informed, defensible decisions about AI use in practice. + Live Webinar Presentation on May 8th, 2026 + Registration for live training includes receiving ownership of and perpetual access to the on-demand self-study CE training produced from recording of live presentation. Get both the content and the CE, even if you can't join live. * PCT's recommended/curated collection of role-based foundational and topical needs-based staff trainings, including HIPAA and Privacy Ethics for clinical staff, admins; leadership trainings; clinical staff teletherapy training; director/supervisor training; and topical trainings on documentation, rights of access, suicidality, accessibility, countertransference, and much more. + Nationally respected, role-based HIPAA and privacy ethics and teletherapy training built for mental health staff + On-demand trainings are accessible in perpetuity and do not expire. + APA, NBCC, and multiple state licensing board CE provider approvals mean that CE courses count towards licensure renewal requirements for your clinical team. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + - For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk about the importance of proficiency and competency with any tool or modality used in your practice.
We discuss:
- Why training is necessary with any tool or modality used in your practice, not just AI
- What the professional ethics codes say about competence and proficiency for tools and modalities used
- How PCT evolved to help clinicians manage the advent of new technology
- Our upcoming CE training on how to evaluate AI and incorporate it into your practice and workflow ethically and effectively
- How training can set you apart and strengthen the therapeutic alliance
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * Live (and recorded) PCT CE Course: Beyond Hype and Anxiety: A Practical Framework for Ethical AI Use in Clinical Practice is a 4-hour legal-ethical CE training co-presented by Dr. Maelisa McCaffrey and Liath Dalton, designed to help clinicians move beyond fear and guesswork into confident, responsible AI use. The course provides a structured, real-world framework for integrating AI into clinical workflows while upholding HIPAA requirements, ethical standards, and clinical standards of care. Participants will learn how to evaluate AI tools, understand what constitutes PHI (and the limits of de-identification), implement appropriate policies and safeguards, and maintain documentation quality and clinical integrity. With practical tools, decision-making frameworks, and implementation strategies, this training supports clinicians in making informed, defensible decisions about AI use in practice. + Live Webinar Presentation on May 8th, 2026 + Registration for live training includes receiving ownership of and perpetual access to the on-demand self-study CE training produced from recording of live presentation. Get both the content and the CE, even if you can't join live. * PCT's recommended/curated collection of role-based foundational and topical needs-based staff trainings, including HIPAA and Privacy Ethics for clinical staff, admins; leadership trainings; clinical staff teletherapy training; director/supervisor training; and topical trainings on documentation, rights of access, suicidality, accessibility, countertransference, and much more. + Nationally respected, role-based HIPAA and privacy ethics and teletherapy training built for mental health staff + On-demand trainings are accessible in perpetuity and do not expire. + APA, NBCC, and multiple state licensing board CE provider approvals mean that CE courses count towards licensure renewal requirements for your clinical team. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + - For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share concrete steps to take if you've discovered staff members using non-approved AI platforms in your practice.
We discuss:
- The misconceptions around what constitutes PHI (and why information used to write a progress note absolutely is PHI)
- Why this is a reportable HIPAA breach
- Why reporting a HIPAA breach is nowhere near as scary or impactful as you may fear
- The difference between a large breach and a small breach, and reporting deadlines for each
- Client notification deadlines for breaches
- How state law can impact or add to reporting deadlines
- Steps to take after discovering non-compliant AI use in your practice
- What to investigate, how to document, how to mitigate, how to notify clients, and when to consult an attorney
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * PCT CE Course (on-demand): If you're navigating exactly what we're talking about in this episode, our on-demand CE training, HIPAA Security Incidents & Breaches: Investigation, Documentation, and Reporting, provides a clear, structured walkthrough of what to do when something goes wrong. It covers how to determine whether an incident is a breach, how to investigate and document appropriately, and how to handle client notification and reporting requirements—along with strategies to reduce risk going forward. This is a practical, real-world roadmap designed specifically for mental health practices, so you're not left guessing about next steps when a breach situation arises. * Breach Report Questions: If you want to understand what breach reporting actually looks like in practice, this resource walks you through the exact information required when submitting a report to the Office for Civil Rights (OCR). It outlines the specific details you'll need to gather — such as the type and scope of the breach, the number of individuals affected, what kind of PHI was involved, and what actions you've taken in response — so you can approach reporting with clarity and confidence rather than guesswork. Reviewing these questions ahead of time can also help guide your investigation and documentation process, ensuring you're collecting the right information from the start. * Live (and recorded) PCT CE Course: Beyond Hype and Anxiety: A Practical Framework for Ethical AI Use in Clinical Practice is a 4-hour legal-ethical CE training co-presented by Dr. Maelisa McCaffrey and Liath Dalton, designed to help clinicians move beyond fear and guesswork into confident, responsible AI use. The course provides a structured, real-world framework for integrating AI into clinical workflows while upholding HIPAA requirements, ethical standards, and clinical standards of care. Participants will learn how to evaluate AI tools, understand what constitutes PHI (and the limits of de-identification), implement appropriate policies and safeguards, and maintain documentation quality and clinical integrity. With practical tools, decision-making frameworks, and implementation strategies, this training supports clinicians in making informed, defensible decisions about AI use in practice. + Live Webinar Presentation on May 8th, 2026 + Registration for live training includes receiving ownership of and perpetual access to the on-demand self-study CE training produced from recording of live presentation. Get both the content and the CE, even if you can't join live. * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a mitigation checklist to help you reduce your risks. * If you're navigating filing a breach report and you haven't completed a documented "thorough and accurate" HIPAA Security Risk Analysis that meets the foundational Security Rule requirements, this is something you want/need to do so it can be reflected in your breach report to the OCR (HIPAA regulators) * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training * Article + 18 Identifier List: De-Identified or Not? The Truth About HIPAA, AI, and Client Data + In this article, Person Centered Tech breaks down one of the most misunderstood concepts in HIPAA compliance: de-identification. It clarifies the difference between simply "removing identifiers" and meeting HIPAA's strict legal standards for de-identification (Safe Harbor or Expert Determination). The piece explains why narrative clinical information is often inherently identifying, why a session transcript cannot realistically be considered de-identified, and how AI systems introduce heightened risks of re-identification. It reinforces a critical takeaway for practice leaders: HIPAA sets the floor — not the ceiling — for protecting client information, and governance must keep pace with emerging technologies. * PCT CE Course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice + If you're wanting a deeper, structured framework for evaluating AI in clinical practice, this 3-credit legal-ethical on-demand training with Eric Ström, JD, PhD, LMHC, walks through the evolving legal standards, HIPAA considerations, and ethics code guidance that apply to AI use in behavioral health. You'll gain practical strategies for assessing new technologies, understanding emerging standards of care, and implementing AI tools in a way that is legally defensible and ethically sound. * Podcast: Episode 608: AI Isn't the Problem, Lack of Governance Is – A PSA for Group Practice Leadership * Podcast: Episode 611: The Real Risks of Using Non-Vetted AI Platforms with Client Information * Group Practice Care Premium * weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC * Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) * Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Additional Resources: * Mintz-Matrix: The Mintz Matrix is a comprehensive, regularly updated overview of U.S. state data breach notification laws, providing a state-by-state breakdown of requirements such as definitions of personal information, what constitutes a breach, and timelines for notification. This is especially relevant in the context of this episode because HIPAA is only part of the picture—state laws often impose additional requirements, including shorter notification timeframes and broader definitions of protected information. Reviewing the Mintz Matrix can help you understand your specific state obligations and ensure that your response to a breach is not only HIPAA-compliant, but also aligned with applicable state laws. * The HHS Office for Civil Rights (OCR) Breach Portal provides essential guidance on what constitutes a reportable breach and what happens after a report is submitted. It explains that a breach involves the unauthorized acquisition, access, use, or disclosure of protected health information that compromises its security or privacy, and outlines how OCR reviews, investigates, and resolves reported incidents. This is particularly relevant to this episode because it helps demystify what occurs after you file a breach report—reinforcing that reporting does not automatically trigger penalties, but instead initiates a review process that may include technical assistance, investigation, or closure without further action. Understanding this process can reduce fear and support more confident, compliant decision-making when responding to a breach.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain why free email providers are inherently not HIPAA compliance compatible.
We discuss:
- Why it's necessary to have a Business Associate Agreement with your email service provider
- Why clients can't opt out of HIPAA
- What requests for alternative or non-secure communication actually mean under the HIPAA Privacy Rule
- What counts as Protected Health Information (PHI)
- Why a free email address might be a red flag for prospective clients
- How to get a BAA protected email, with a domain name or without
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * PCT Article: 3 Kinds of Email Security: How to Make an Informed and HIPAA-Aware Choice * PCT CE Training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations + Learn about the legal-ethical considerations of modern communication channels in the context of real world practice and client needs. 3 Legal-Ethical CE credit hours. On-demand. * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool + HIPAA Security & Privacy Ethics training * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we continue our series on AI use within therapy practices by sharing how to explain to your team members why using non-vetted AI platforms is not permissible.
We discuss:
- What counts as Protected Health Information and a breakdown of the often misunderstood 18th identifier under HIPAA
- How therapy progress notes and clinical notes are inherently identifying
- AI re-identification risk and why this is possible
- Why AI use involving client information must be vetted and HIPAA compliance-compatible
- What happens when you input data into personal AI platforms
- What we mean by AI governance, and why personal AI platforms can't be governed
- Why lack of AI governance is a significant liability
- Impermissible disclosures under HIPAA
- Why proving low probability of compromise is difficult after the fact, and what this means for your ability to mitigate risk
- Managing the emotional pieces of identifying risk and risk mitigation in your practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- Live (and recorded) PCT CE Course: Beyond Hype and Anxiety: A Practical Framework for Ethical AI Use in Clinical Practice is a 4-hour legal-ethical CE training co-presented by Dr. Maelisa McCaffrey and Liath Dalton, designed to help clinicians move beyond fear and guesswork into confident, responsible AI use. The course provides a structured, real-world framework for integrating AI into clinical workflows while upholding HIPAA requirements, ethical standards, and clinical standards of care. Participants will learn how to evaluate AI tools, understand what constitutes PHI (and the limits of de-identification), implement appropriate policies and safeguards, and maintain documentation quality and clinical integrity. With practical tools, decision-making frameworks, and implementation strategies, this training supports clinicians in making informed, defensible decisions about AI use in practice.
- Live Webinar Presentation on May 8th, 2026
- Registration for live training includes receiving ownership of and perpetual access to the on-demand self-study CE training produced from recording of live presentation. Get both the content and the CE, even if you can't join live.
- Article + 18 Identifier List: De-Identified or Not? The Truth About HIPAA, AI, and Client Data
- In this article, Person Centered Tech breaks down one of the most misunderstood concepts in HIPAA compliance: de-identification. It clarifies the difference between simply "removing identifiers" and meeting HIPAA's strict legal standards for de-identification (Safe Harbor or Expert Determination). The piece explains why narrative clinical information is often inherently identifying, why a session transcript cannot realistically be considered de-identified, and how AI systems introduce heightened risks of re-identification. It reinforces a critical takeaway for practice leaders: HIPAA sets the floor—not the ceiling—for protecting client information, and governance must keep pace with emerging technologies.
- PCT CE Course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice
- If you're wanting a deeper, structured framework for evaluating AI in clinical practice, this 3-credit legal-ethical on-demand training with Eric Ström, JD, PhD, LMHC, walks through the evolving legal standards, HIPAA considerations, and ethics code guidance that apply to AI use in behavioral health. You'll gain practical strategies for assessing new technologies, understanding emerging standards of care, and implementing AI tools in a way that is legally defensible and ethically sound.
- Podcast: Episode 608: AI Isn't the Problem, Lack of Governance Is – A PSA for Group Practice Leadership
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
- Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share information about the recent Darksword iPhone exploit, and what that means for therapy practice owners regarding device security.
We discuss:
- What you need to know about this exploit
- Device hardening within your security circle
- Device security gaps we see in everyday practice
- Pairing technical security measures with behavioral security measures
- PCT's resources around risk management and device security
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool - HIPAA Security & Privacy Ethics training * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Resources * Wired Article: Apple Will Push Out Rare 'Backported' Patches to Protect iOS 18 Users From DarkSword Hacking Tool * PC Mag Article: 'DarkSword' Attack Is Now Targeting Vulnerable iPhones Via Phishing Emails * Malwarebytes Labs Article: [updated] A DarkSword hangs over unpatched iPhones
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss HHS's new model Notice of Privacy Practice for Part 2 programs, what has changed, and what that means for your practice.
We cover:
- The Part 2 Final Rule from 2024
- Why the Feb. 16th enforcement deadline has been so confusing
- The model Part 2 NPP and Patient Notice from HHS, and the function of each document
- Who is considered a lawful holder and what that means
- Whether you need to switch to the HHS templates
- What to do if you already used our decision guide and resources ahead of the deadline
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Updated HHS Model Notice of Privacy Practices * Model Part 2 Patient Notice * HHS Part 2 Final Rule Fact Sheet * PCT decision guide and sample language resource
Additional PCT Resources * Episode 605: 42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a PSA for group practice owners to address unauthorized AI use within your practice.
We discuss:
- What we mean by governance
- What counts as Protected Health Information (PHI)
- The standard we use at PCT to determine if something is PHI
- Why AI tools like ChatGPT are inappropriate for PHI
- De-identification standards under HIPAA
- Ethical standards and informed consent for clinical use of AI
- Concrete next steps to take as a practice leader to address AI use in your practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- Article + 18 Identifier List: De-Identified or Not? The Truth About HIPAA, AI, and Client Data
- In this article, Person Centered Tech breaks down one of the most misunderstood concepts in HIPAA compliance: de-identification. It clarifies the difference between simply "removing identifiers" and meeting HIPAA's strict legal standards for de-identification (Safe Harbor or Expert Determination). The piece explains why narrative clinical information is often inherently identifying, why a session transcript cannot realistically be considered de-identified, and how AI systems introduce heightened risks of re-identification. It reinforces a critical takeaway for practice leaders: HIPAA sets the floor—not the ceiling—for protecting client information, and governance must keep pace with emerging technologies.
- PCT CE Course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice
- If you're wanting a deeper, structured framework for evaluating AI in clinical practice, this 3-credit legal-ethical on-demand training with Eric Ström, JD, PhD, LMHC, walks through the evolving legal standards, HIPAA considerations, and ethics code guidance that apply to AI use in behavioral health. You'll gain practical strategies for assessing new technologies, understanding emerging standards of care, and implementing AI tools in a way that is legally defensible and ethically sound.
- PCT CE Course: Modern Progress Notes: Considerations for Teletherapy, Insurance Audits, and Artificial Intelligence (AI)
- If your clinicians are feeling the pull to use AI for documentation, this 1.5-credit legal-ethical training with Dr. Maelisa McCaffrey (Hall) provides a grounded, practical framework for evaluating that decision. The course addresses how AI is currently being used in progress notes and introduces a clear thought rubric for determining the ethical risks, compliance implications, and appropriateness of integrating AI into documentation workflows. It also reinforces core documentation principles—like medical necessity and audit risk reduction—so that efficiency never comes at the expense of defensibility. A strong next step for practice leaders who want to move from reactive prohibition to thoughtful, structured governance. (Useful for all clinicians)
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss the HIPAA responsibilities for therapy practice owners when closing their practice or retiring.
We cover:
- Common assumptions about responsibilities after retirement
- What determines your record retention length
- How long you must remain contactable after closing your practice and why
- The key functionalities you need to maintain, and the most economical ways to DIY them
- Outsourcing to an executor service as an alternative to the DIY approach
- Common mistakes that are made when shutting down a practice and how to avoid them
- Practice closure planning as part of client care planning
- Action steps to take if retirement is on the horizon
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Retirement Record Retention Checklist + a clear, practical guide to HIPAA compliance after retirement or practice closure. Learn what record retention laws require, how to honor clients' Right of Access, and which secure systems you need to maintain for the full retention period — so you can close your practice with confidence and integrity. * PCT CE Course: Preparing For The Worst – A Professional Will Is Not Enough: Ensuring Continuity of Care In Event of Retirement, Death, or Disability * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Resources * TheraClosure (Professional Executor Services) — A therapist-founded service offering retirement and executor support for clinicians, including options for ongoing record retention and practice closure management. We mention them as one available option for outsourcing post-retirement HIPAA responsibilities. PCT has no affiliate relationship with TheraClosure and does not specifically endorse their services; clinicians should perform their own due diligence when evaluating vendors.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we offer actionable tips for practice owners regarding the rapidly changing landscape of online referral sources.
We discuss:
- How online referral sources have changed over the last year
- Why Psychology Today is no longer the dominant referral pathway
- Emphasizing community based referrals
- How clients are using AI to find therapists
- How AI tools prioritize results
- Practical do's and don'ts for being findable via AI
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Free companion resource: Being Findable in an AI-Shaped Referral World: A Therapist's Do's & Don'ts Guide + We've created a practical, no-hype Do's & Don'ts checklist to help you strengthen your discoverability without chasing trends or gaming AI. It walks you through exactly what to focus on — and what to ignore — so your practice stays clear, ethical, and resilient in a changing referral landscape. * On-Demand CE Course: Marketing in Mental Health: The Legal and Ethical Do's and Don'ts You Need to Know + Join AMHCA ethics committee member, therapist and HIPAA lawyer, Eric Ström, JD PhD LMHC, as he unpacks what it means to do marketing as a mental health clinician. With so much advice being shared online and between colleagues about how to grow your mental health practice and business, he's here to set clear boundaries around what is appropriate ethically and legally when trying to bring in new clients. + 3 Legal-Ethical CE Credit Hours * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Resources * Article from Clear Health Costs: Therapist forums buzzing over drop in Psychology Today referrals * Article from Clear Health Costs: Therapists say Psychology Today referrals have dried up, and express concern
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what's actually necessary when updating your Notice of Privacy Practices due to Part 2.
We discuss:
- The confusion around updating NPPs without an updated model from HHS
- A quick refresher on Part 2
- Who is considered a lawful holder under Part 2
- Next steps for updating your NPP if you are a Part 2 program or lawful holder
- Our free resource on updating your NPP before the 2/16 enforcement deadline
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT Free Resource: 42 CFR Part 2 & HIPAA Notices of Privacy Practices: A Decision Guide and Sample Language for Covered Entities + a practical resource designed to help HIPAA-covered practices determine whether the updated 42 CFR Part 2 rules apply to them — and, if so, what belongs in their Notice of Privacy Practices. The guide includes a clear decision flow, plain-language explanations of Part 2 program vs. lawful holder obligations, and sample NPP language tailored to each category. It was created to fill the gap left by the absence of an updated HHS model NPP following the 2024 Part 2 Final Rule.
Resources * HHS Fact Sheet on the 42 CFR Part 2 Final Rule + this HHS Fact Sheet summarizes the 2024 Final Rule updating 42 CFR Part 2, including new consent provisions, redisclosure alignment with HIPAA, enforcement changes, and the February 16, 2026 compliance deadline. It provides high-level regulatory context for healthcare organizations handling substance use disorder records. * JD Supra Article: 42 CFR Part 2 and Privacy Rule Compliance: Action Required by February 16, 2026 + This JD Supra article from Snell & Wilmer outlines the compliance steps healthcare organizations must take in response to the 2024 Final Rule updating 42 CFR Part 2. It explains which entities are required to update their Notices of Privacy Practices by February 16, 2026, including both Part 2 programs and HIPAA-covered entities that receive or maintain Part 2-protected records. The article highlights required NPP updates, enforcement risks, and the importance of aligning privacy notices with the amended regulations.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share advice on how to avoid phishing scams.
We discuss:
- Phishing scams in text messages and email
- Common scams you might encounter
- What not to do when you get a suspicious text message
- PCT resources for how to identify scams and social engineering
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an update (and are once again offering reassurance) around the proposed HIPAA Security Rule changes.
We discuss:
- The proposed Security Rule update on the OCR's spring regulatory agenda
- Why you're already in good hands if you're following PCT's advice
- Some of the proposed changes that will impact therapy practices
- Reassurance about these proposed changes
- Effective dates versus compliance date
- Forecasting scenarios for these changes to take effect
- Steps to take now (and important things to not do now) to be proactive rather than reactive
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- Article: HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know
- Explore our in-depth article unpacking the proposed HIPAA Security Rule updates — what's really happening, why it matters, and why this is a runway, not a cliff. You can also use our free Mini Risk Tool(download link in article) for a gentle check-in to see where your practice stands and what would most meaningfully support your security and compliance foundation.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
-
- For Group Practices
- For Solo Practitioners
- Comprehensive HIPAA Security Policies & Procedures
- Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
- Device & Workspace Security Suites
- Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
- Includes the Risk Analysis & Risk Mitigation Planning service + tool
- HIPAA Security & Privacy Ethics training
-
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Dr. Maelisa McCaffrey of QA Prep about how the landscape of insurance and documentation has shifted over the last decade.
We discuss:
- Risk adjustment audits and how they impact providers
- Billing codes and audit red flags
- AI documentation and how insurance companies are using AI
- Considerations when using AI for documentation
- Pressuring professional associations to advocate for clinicians and clients
- Our upcoming CE event on January 30th with Maelisa on how auditors think and why
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- PCT CE course: Dealing with Insurance: How Auditors Think and Why
- a 3 CE credit hour training (including 1 legal-ethical CE hour) taught by Dr. Maelisa McCaffrey (QA Prep). This updated-and-expanded 2026 session demystifies medical necessity, clarifies what auditors and payers are actually looking for (and why), and helps clinicians document with more confidence and less stress. Expect real examples, sample notes reviewed together, and practical tools you can use immediately—covering informed consent language for clients using insurance, treatment planning that supports insurance requirements without sacrificing clinical judgment, and self-auditing techniques to spot red flags before anyone else does. Includes handouts/resources such as diagnosis justification statements, common treatment goals, progress statement formulas and examples, sample progress notes, and a client file review tool.
- Live webinar presentation on January 30th, 2026
- Registration for live training includes ownership of the on-demand self-study CE course produced from recording of live presentation — so you can get all the content and the CE, whether or not you can join live.
- a 3 CE credit hour training (including 1 legal-ethical CE hour) taught by Dr. Maelisa McCaffrey (QA Prep). This updated-and-expanded 2026 session demystifies medical necessity, clarifies what auditors and payers are actually looking for (and why), and helps clinicians document with more confidence and less stress. Expect real examples, sample notes reviewed together, and practical tools you can use immediately—covering informed consent language for clients using insurance, treatment planning that supports insurance requirements without sacrificing clinical judgment, and self-auditing techniques to spot red flags before anyone else does. Includes handouts/resources such as diagnosis justification statements, common treatment goals, progress statement formulas and examples, sample progress notes, and a client file review tool.
- Special Documentation, Insurance, and AI focused Office Hours and Group Practice Office Hours session with Dr. McCaffrey
- In February, Dr. Maelisa McCaffrey will be hosting a Documentation-Focused Office Hours + Group Practice Office Hours session exclusively for PCT's Practice Care Premium subscribers. This live (and recorded) Q&A is your opportunity to bring your real-world questions about progress notes, documentation challenges, and insurance audits directly to one of the field's leading documentation experts. Submit your questions in advance through your dashboard and get practical, case-specific guidance in a supportive, clinician-centered space.
-
Take a look at all the courses in our Dr. Maelisa McCaffrey, PsyD collection:
- Client-Centered Documentation: How To Write Ethical, Effective, And Efficient Progress Notes
- Foundations Of Documentation: Intake, Diagnosis, And Treatment Plans
- Modern Progress Notes: Considerations For Teletherapy, Insurance Audits, And Artificial Intelligence (AI)
- Rethinking Notes: Strategies For Making Documentation Simple And Meaningful
-
Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what to do as a practice owner to prevent email hacks, and how to respond if one occurs.
We discuss:
- Technical and behavioral measures to take to prevent email hacks
- Mandating two-factor authentication system-wide
- Education and staff training for prevention
- Creating a shame-free security culture in your practice
- Steps to take if you receive an email that looks suspicious
- Steps to take if you find out your email has been hacked
- Breach reporting timelines to be aware of
- PCT resources that guide you through security training and awareness; risk analysis and mitigation planning; and breach investigation, documentation, and reporting
- Ongoing training and security reminders for your team
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
- CE Training: PCT's HIPAA Breaches and Investigation course, including a security investigation documentation form.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we're highlighting the stories that impacted your practices this year, and the main takeaways from each story.
We discuss:
- The proposed changes to the HIPAA Security Rule
- Common sense security updates to incorporate into your practice
- The proliferation of AI and ways therapists can differentiate themselves from AI
- The proliferation of platforms offering practice management as a service
- How group practices can stand out from these practice management platforms
- Clinician burnout and clinicians returning to their clinical roots
- Progression of cross-jurisdictional practice mobility
- The uncertainty around the Medicare telehealth cliff
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * The relevant episodes of our podcast as mentioned: + On Practice Management companies + On the Medicare cliff + On proposed HIPAA changes * Free handout resource: Clinician Conversation Starters: Bringing Client AI Use Into the Therapy Room + Practical prompts and responses to help clinicians talk with clients about AI use in ways that are safe, constructive, and clinically grounded. * Free handout resource: Clinical Leadership Checklist: Guiding Teams in Addressing Client AI Use + A step-by-step guide for clinical supervisors and directors to make client AI use considerations an intentional part of practice culture, including team awareness, policy updates, and supervision strategies. * On-Demand CE course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice + This 3 CE credit training with attorney and mental health counselor Eric Ström, JD, PhD, LMHC explores the rapidly evolving world of artificial intelligence in behavioral health. Learn how AI tools are being applied in clinical practice, what legal and ethical standards apply, and how to confidently evaluate whether and how to integrate new technologies. Participants gain practical strategies for aligning AI use with HIPAA, professional ethics codes, and client care standards—empowering you to implement AI tools responsibly and effectively in your practice. + Useful for all clinicians and practice leadership * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Ben Cutler, CEO of Hushmail, about how a secure email service can be a crucial part of your practice's tech stack.
We discuss:
- How secure email can complement the communication features of your EHR
- Communication gaps in EHRs that can impact your security circle
- Pairing secure forms with secure email to optimize the intake process
- Secure communications as a marketing asset
- Creating more efficient streamlined services for clients and providers
- Addressing burnout via efficient business systems
- Using Hushmail to customize forms and coordinate care
- Misconceptions around non-secure communications
- The difference between HIPAA friendly and HIPAA secure
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Free Trial of Hushmail! + Hushmail provides HIPAA-compliant secure email and encrypted online forms designed specifically for behavioral health professionals. It fills the critical gaps your EHR can't cover—especially during first contact, referrals, and communication with people outside your EHR's closed messaging system. + With encrypted email, customizable secure forms, legally binding e-signatures, and ready-to-use templates, Hushmail helps therapists protect client information from the very first inquiry through the entire clinical journey. Clinicians can securely manage intake, collect sensitive documents, send referrals, and maintain compliant records—even during practice transitions or retirement. + Hushmail's behavioral-health-specific plans include a signed BAA, automatic archiving to support HIPAA compliance, and access to a customer care team deeply familiar with the needs of therapy practices. + Exclusive for listeners: Try Hushmail for Healthcare free for 14 days and explore secure email and forms tailored for your practice.
PCT Resources * PCT CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours) * PCT Podcast Episode: Episode 317: [Compliance] Can Clients Waive the Need for HIPAA Compliance? * PCT's Sample Request for Non-Secure Communications Form
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we answer a frequently asked question: whether therapy practices actually need cybersecurity insurance.
We discuss:
- The benefits and considerations of obtaining a cybersecurity insurance policy
- PCT's stance on cybersecurity insurance for solo and group practices
- How cyber insurance relates to your full HIPAA compliance program
- Common reasons for claim denials
- The six major areas where cyber policies differ, and how to choose your policy
- How a PCT risk analysis can help you determine what level of insurance makes sense for your practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Handout: Cybersecurity Insurance for Your Practice — What to Consider (and How to Talk With Your Agent) + This episode's companion handout breaks down the six key areas to evaluate when reviewing or selecting a cybersecurity insurance policy for your mental health practice. * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a prioritized mitigation checklist to help you reduce your risks. (*Currently on sale!!*) * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners - Comprehensive HIPAA Security Policies & Procedures - Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice - Device & Workspace Security Suites - Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) - Includes the Risk Analysis & Risk Mitigation Planning service + tool - HIPAA Security & Privacy Ethics training
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share some positive stories to bring you some peace of mind at this time of year.
We discuss:
- Increasing transparency requirements for AI service providers
- Cross-jurisdictional licensure portability/practice permissions expansion
- No telehealth cliff for Medicare clients, and the in-person visit requirement
- How security standards are becoming easier to adopt
- Practice culture becoming easier due to supportive systems
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Gabrielle Juliano-Villani of Medicare Consulting for Therapists about recent updates regarding Medicare and telehealth.
We discuss:
- The extension of in-person visit requirement
- What that means for new and established clients
- Coping skills for the ups and downs of business
- Main takeaways for practice owners with the recent extension
- Where to get updates on this topic
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we unpack what Practice Management Companies (PMCs) are, and the legal and ethical considerations for therapists when using these platforms.
We discuss:
- The proliferation of Practice Management Companies
- The difference between PMCs and EHRs
- Why the benefits of PMCs are so tempting to new clinicians in particular
- How these companies are marketed vs. what clinicians can actually expect
- Who owns PMCs, and the implications of that
- How group practice owners can use this information when hiring new clinicians
- How solo practitioners can weigh this information when deciding what platforms to use
- Our recent webinar that dives deeper into this topic with Kelly and Miranda from Zynnyme and Eric Strom, therapist attorney
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an update for you on what's changed with teletherapy coverage for Medicare clients.
We discuss:
- Our free 90 minute webinar that goes deeper into this topic
- What is still covered for behavioral/mental health services
- What has changed for behavioral/mental health services
- Who is considered an established client or a new client
- Exceptions to the in-person visit requirement
- Next steps to take to prepare for this change in your practice
- Medicare Advantage plans and Medicaid
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we're sharing a PSA about how Apple Note sharing works, so therapy practices can avoid a breach.
We discuss:
- The context that precipitated this episode
- What constitutes a breach
- How sharing works for Apple Notes and Google Keep
- Only using services you have a BAA with
- Compliance as a process, not a product
- Steps solo and group practitioners can take to address this
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an important update for therapists regarding the reproductive health Final Rule.
We discuss:
- The Final Rule requirements that would have impacted therapists
- Why the Final Rule isn’t applicable now
- Being aware of any state laws that are applicable regarding reproductive health information
- Intentionality and care around sensitive info within PHI
- Our CE training on Law and Ethics of Clinical Documentation in a Post-Roe World
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Relevant on-demand, legal-ethical CE training: Law & Ethics of Clinical Documentation for a post Roe world + Addresses the practical applications of the US Supreme Court’s ruling in Dobbs v. Jackson Women’s Health Organization, with particular focus on the impacts this decision has on client confidentiality and documentation of clinical services * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
Resources & References * HHS OCR Fact Sheet – HIPAA Privacy Rule to Support Reproductive Health Care Privacy (Final Rule Overview) * JD SUPRA Article: Federal Court Strikes Down HIPAA Reproductive Health Privacy Rule Lifting Compliance Requirements for Regulated Entities * Court Case – Purl v. U.S. Department of Health and Human Services, No. 2:24-cv-228-Z (N.D. Tex. June 18, 2025) (decision vacating most of the Final Rule) * Legal Analysis – Holland & Knight: HIPAA’s Reproductive Health Rule is Vacated Nationally * Law Firm Compliance Guidance – Ropes & Gray: U.S. District Court Ruling Vacates HIPAA Final Rule on Reproductive Health Privacy
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what therapists should know about using passkeys in their practice.
We discuss:
- Why we recommend password managers
- How passkeys differ from passwords
- Why passkeys are simpler and safer than passwords
- Which password manager we recommend
- Where you can use passkeys
- Things to consider when adopting passkeys
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Article: How Passkeys Work—and How to Use Them
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what’s actually changing for therapists regarding the Medicare telehealth “cliff” after October 1st 2025, so you can prepare without panic.
We discuss:
- Why telehealth coverage is changing for Medicare providers after 10/1
- Which changes do not apply to therapists
- The in-person visit requirement that does apply to therapists
- When you would need to see both established and not established Medicare clients in-person
- Exceptions to the in-person visit requirement
- The time frame you have to make a plan for these changes in your practice
- Steps you can take now to prepare for these changes
- Dual eligibility clients
- Our upcoming free Q+A on these changes with Medicare expert Gabrielle Juliano Villani
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * Free Info Session + Q&A: Medicare & Teletherapy After October 1st: What Therapists Need to Know (Whatever Happens in Congress) Join Liath Dalton and Gabrielle Juliano-Villani, LCSW on October 17th for a live (and recorded) session clarifying what’s changing, what isn’t, and how to stay compliant and confident at the intersections of Medicare, Teletherapy, and HIPAA in practice. * On-demand Trainings (not designated as CE) presented by Gabrielle: Introduction To Medicare And Medicare Credentialing and Medicare Billing * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Resources: * APA Services article: The Telehealth Waiver: What Psychologists Need to Know * National Consortium of Telehealth Resource Centers: The Telehealth Policy Cliff: Preparing for October 1, 2025 * ATA Action statement: Urging Congress to Dodge the Telehealth Cliff * Medicare Consulting for Therapists
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what you should know if you’ve been asked to provide “Telehealth Care Coordination Policy & Procedures” to insurance companies.
We discuss:
- What this policy is and why they’re needed
- What core elements should be included
- Saving lives by following these practices and procedures
- Secure communication standards for continuity of care
- What you should do to comply, for solo and group practices
- ROIs for coordination of care
- Our upcoming customizable templates and support resources around this topic
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's Clinical Staff Teletherapy Training * PCT's Teletherapy Director and Supervisor Training for Group Practices * PCT's Teletherapy Manuals and Forms for Group Practices * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * For Solo Practitioners: PCT's Telemental Health Certificate Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we clarify who is impacted by the Part 2 Final Rule.
We discuss:
- What’s included in the Part 2 Final Rule and why it’s necessary
- How to evaluate if you’re subject to Part 2 rules
- What compliance looks like under the new Part 2 rules
- Redisclosure under Part 2
- Steps to take ahead of the February 2026 deadline for enforcement
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- Handout resource: A quick-reference tool to determine if you’re a Part 2 program, lawful holder, or not subject—and a concise summary of the new redisclosure rules under the 2024 Final Rule. Helps you prep for the Feb 16, 2026 compliance deadline with clarity and confidence.
- Part 2 Decision Tree Checklist + Redisclosure Rules (docx version)
- Part 2 Decision Tree Checklist + Redisclosure Rules (PDF version)
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Resources:
- JD Supra article: HHS Signals Enforcement Regarding Patients' Substance Use Disorder Treatment Records
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we walk you through a quick win for your practice security - how to secure your Wi-Fi network.
We discuss:
- The role of Wi-Fi in a practice's security picture
- The tangible risks of weak Wi-Fi security
- Steps to take to improve your Wi-Fi security
- Our free Wi-Fi security checklist, included in the show notes
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: * Wi-Fi Security Checklist for Mental Health Practices (PDF version) * Wi-Fi Security Checklist for Mental Health Practices (.docx version) + a one-page guide with simple, high-impact steps to secure your Wi-Fi, to help protect client confidentiality and strengthen HIPAA compliance * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Resources: * Tom's Hardware: Best Wi-Fi Routers 2025
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat about what you should know when clients use AI for therapy.
We discuss:
- the risks and benefits of clients using AI in a therapeutic manner
- how clinicians can approach conversations about AI practices with clients
- why clients are turning to AI for therapeutic purposes, and what clinicians can do to support them safely
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * APA article: Using generic AI chatbots for mental health support: A dangerous trend * Article: Illinois’ ban on AI therapy won’t stop people from asking chatbots for help * Article: Using Generative AI for therapy might feel like a lifeline – but there’s danger in seeking certainty in a chatbot * Article: AI chatbots are becoming popular alternatives to therapy. But they may worsen mental health crises, experts warn * NPR story: He said, she said, it said: I used ChatGPT as a couple's counselor. How did we fare? * Article: AI Therapist Goes Haywire, Urges User to Go on Killing Spree * Psychiatric Times: Preliminary Report on Chatbot Iatrogenic Dangers * Stanford University article: Exploring the Dangers of AI in Mental Health Care
PCT Resources * Free handout resource: Clinician Conversation Starters: Bringing Client AI Use Into the Therapy Room + Practical prompts and responses to help clinicians talk with clients about AI use in ways that are safe, constructive, and clinically grounded. * Free handout resource: Clinical Leadership Checklist: Guiding Teams in Addressing Client AI Use + A step-by-step guide for clinical supervisors and directors to make client AI use considerations an intentional part of practice culture, including team awareness, policy updates, and supervision strategies. * On-Demand CE course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice + This 3 CE credit training with attorney and mental health counselor Eric Ström, JD, PhD, LMHC explores the rapidly evolving world of artificial intelligence in behavioral health. Learn how AI tools are being applied in clinical practice, what legal and ethical standards apply, and how to confidently evaluate whether and how to integrate new technologies. Participants gain practical strategies for aligning AI use with HIPAA, professional ethics codes, and client care standards—empowering you to implement AI tools responsibly and effectively in your practice. + Useful for all clinicians and practice leadership * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Francis Harvey from Therapist Headquarters about her new resource for therapists.
We discuss:
- The origin of Therapist Headquarters
- What resource collections are available on therapistheadquarters.com
- Learning what you weren’t taught in grad school about running a business
- The process for vetting therapist resources
- Common HIPAA security and compliance misconceptions for therapists
- The importance of HIPAA compliance and safeguarding information in our current political climate
- The future vision for Therapist Headquarters as a living resource
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * TherapistHeadquarters.com * MySolutionServices.com
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re ...
We discuss:
- understanding burnout as a cultural problem
- perfectionism, dopamine addiction, addiction to accomplishment, and sense of duty as contributing factors to burnout
- the roles curiousity, compassion and community play in addressing burnout
- showing up imperfectly, well
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
The below resources are not specifically oriented to addressing burnout -- but they are focused on providing wholistic practice and leadership support, which can be one really useful component of helping to prevent having a practice dynamic that fosters or perpetuates burnout.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re clearing up misconceptions and sharing best practices about testimonials for your therapy practice.
We discuss:
- Why marketing is becoming more important in our current practice context
- Guidance from marketing professionals who don’t understand the scope of HIPAA
- What the professional ethics codes for therapists specifically say about soliciting testimonials, anonymous or otherwise
- Suggested best practices around testimonials as a therapist
- Example language to use on review sites from Dr. Keely Kolmes
- Ethical alternatives to client testimonials
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources:
- CE Course: Marketing in Mental Health: The Legal and Ethical Do’s and Don’ts You Need to Know
- Join AMHCA ethics committee member, therapist and HIPAA lawyer , Eric Ström, JD PhD LMHC, as he unpacks what it means to do marketing as a mental health clinician. With so much advice being shared online and between colleagues about how to grow your mental health practice and business, he’s here to set clear boundaries around what is appropriate ethically and legally when trying to bring in new clients.
- Article: Testimonials & Reviews in Mental Health Practice: Ethics, HIPAA, and the Post‑COVID Marketing Landscape
- Testimonials can build trust — or break it. For therapists, using them without careful attention to ethics, HIPAA, and client boundaries can harm your practice and your reputation. This article reveals the rules, the myths, and the safest path forward for ethical, compliant marketing.
- CE Course: Protecting Clinical Boundaries and Your Practice on Social Media, an Ethical Approach
- Highly lauded social media ethics expert, Dr. Keely Kolmes, teaches about maintaining ethical professional boundaries in the highly porous world of social media.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we clear up misconceptions about what it means to de-identify information under HIPAA.
We discuss:
- What de-identifying actually means under HIPAA
- The two methods under which PHI can be de-identified
- The 18 HIPAA identifiers that indicate if information is PHI
- The difference between de-identified and anonymized data
- How to spot red flags from EHR vendors to protect PHI, and what questions to ask
- Opting in or out of AI note services in your EHR
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Article + 18 Identifier List: De-Identified or Not? The Truth About HIPAA, AI, and Client Data * PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs + optional accompanying on-demand CE training: Designing a Group Practice’s Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, Patrick Casale joins us for a difficult but necessary conversation on the implications of diagnosing neurodivergence in our current social and political context.
We discuss:
- The current social and political context that is causing concern for neurodivergent people and their loved ones
- Client self-determination in determining if diagnosis goes into their medical record
- The benefits of having a diagnosis on the record
- The risks of having a diagnosis on the record
- How to educate and support clients making decisions around diagnosis
- Co-occurring disorders that may apply to help secure accommodations for clients
- Ethical considerations around diagnoses
- Patrick’s two upcoming trainings with PCT on creating a neurodivergent private practice and creating a neurodivergent affirming group practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * CE Training, presented by Patrick: Creating a Neurodivergent-Affirming Group Practice Live (August 1st) and Recorded + Creating an environment where everyone thrives is important to so many group practice leaders. But the current social context has shifted, and keeping your environment affirming for neurodivergent clinicians, staff, and clients has become more complex. Join Patrick Casale LCMHC NCC, as he discusses neurodivergent-affirming leadership and strategies that promote equity, agency, and neurodivergent representation. * CE Training, presented by Patrick: Creating a Neurodivergent-Affirming Private Practice Live (July 25th) and Recorded + Join Patrick Casale LCMHC NCC, as he equips mental-health clinicians with the knowledge and practical tools to build and run a truly neurodivergent-affirming private practice. * On-Demand CE Training, presented by Emily Decker, MS, LPC, NCC: Can You Hear Me? The Legal and Ethical Role of Accessibility in Anti-Oppressive and Neurodivergent-Affirming Teletherapy + This training aims to create familiarity and comfort for therapists providing teletherapy and combat stigma and inaccessibility in teletherapy. The conversation is situated within an anti-oppressive and neurodivergent-affirming framework, connecting concepts of accessibility and disability justice with mental health care, and provides an overview of legal and ethical issues pertaining to accessibility within teletherapy, including identifying and dispelling common myths about accessibility and disability, and identifying specific, concrete resources for therapists to use to enhance the accessibility of their services.
Connect with Patrick's Work * Patrick's podcast: Divergent Conversations * Patrick's podcast: All Things Private Practice * Empowered Escapes: intentionally curated destination retreats & summits for mental health entrepreneurs
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share HIPAA savvy and practical options to securely record and share sessions for supervision.
We discuss:
- Why session recordings need to be so secure
- Common non-secure recording storage methods we see at PCT
- The PCT-preferred solution for storing session recordings (and why we recommend doing it this way)
- How to securely record and share online sessions or in-person sessions
- Google Workspace best practices
- Another (less tech-friendly) option for storage
- Teaching the next generation of therapists practical ways to safeguard client info
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have a realistic, high impact action for you to take today to boost your practice security: set up two-factor authentication (2FA).
We discuss:
- What 2FA is and why it’s so useful
- Where we recommend having 2FA set up
- How Google Authenticator works for 2FA and why we love it
- How to set up and use Google Authenticator
- Action steps to take today to boost practice security with 2FA
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we answer a question we’re getting a lot recently, about what’s permitted when supervising pre-licensed therapists.
We discuss:
- How compact privileges work for therapists
- PSYPACT and the upcoming Counseling Compact and Social Work Licensure Compact
- AAMFT and the push for licensure portability
- How to manage supervision for pre-licensed folks
- Liability and ethical implications for unauthorized practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Article: Can My Supervisees Practice Across State Lines Under My Compact Privileges? * Supervision & Compacts: Quick Reference Guide * CE Training: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals (2 legal-ethical CE credit hours, on-demand) * CE Training: Telesupervision Nuts & Bolts: Best Practices and Ethical Considerations (3 legal-ethical CE credit hours, on-demand) * CE Training Bundle: Incorporation of Interns and Supervisees in Mental Health Private Practice: Legal-Ethical, Training, and System Resource Management Considerations (2.5 legal-ethical CE credit hours, on-demand) * CE Training Bundle & Certificate Program: Teletherapy Program Director/Supervisor Training (18.5+ CE Credit hours, on-demand) * PCT's Teletherapy Practice Rules by State Tool * PCT's Group Practice Teletherapy Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a how-to guide for managing role-based access and shared accounts with HIPAA in mind.
We discuss:
- How to audit system access in your practice
- Defining roles and responsibilities to determine access
- Managing shared email accounts with email delegation
- The difference between email aliases and delegated accounts
- Steps to take when systems don’t allow for multiple logins
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * HHS FAQ: Does the Security Rule permit a covered entity to assign the same log-on ID or user ID to multiple employees?
PCT Resources * PCT Article: The Risk No One Talks [Enough] About: Shared Admin Accounts… And What To Do About It (with action items list) * Free CE course for group practice leaders: Introduction to HIPAA Security for Group Practice Leaders (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain why shared admin accounts are a security concern under HIPAA and what you can do about it.
We discuss:
- Why shared accounts are a no-no, and why it’s such a common practice
- The HIPAA standards that are impacted by this practice
- The internal and external risks of sharing admin accounts
- The why and what of role-based access control
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * HHS FAQ: Does the Security Rule permit a covered entity to assign the same log-on ID or user ID to multiple employees?
PCT Resources * Free CE course for group practice leaders: Introduction to HIPAA Security for Group Practice Leaders (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
- For Group Practices
- For Solo Practitioners
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a quick update to your smartphone settings to increase device security.
We discuss:
- Overwhelm as a barrier to HIPAA compliance and the key to success
- Two security settings to update on your smartphone
- Risk exposure + device security
- How to get step-by-step guidance for your specific device
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we unpack what mental health providers need to know about the recently announced non-enforcement of the 2024 Final Rule of the Mental Health Parity and Addiction Equity Act.
We discuss:
- The history and purpose of the Parity Act
- What has not changed with the Parity Act
- Key provisions of the 2024 Final Rule
- The implications of the non-enforcement of this rule
- State laws and states with stronger parity protections
- What you can do as a provider to advocate for parity
- Resources on parity we recommend
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * U.S. Department of Labor MHPAEA page * The Kennedy Forum Parity Resource Guide * Parity Track (state-specific info) * APA Mental Health Parity Efforts * NASW Parity Policy Efforts * ACA 2025 Policy Agenda * AAMFT Federal Advocacy Efforts
PCT Resources * Parity Checklist for Providers + PDF version of Parity Checklist + Docx version of Parity Checklist * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss managing documentation for intakes and assessments with Dr. Maelisa McCaffrey of QA Prep.
We cover:
- Top misconceptions about documenting intakes and assessments
- Time management and logistics for intakes and assessments
- Balancing ethics, legal obligations, and customer service
- What Maelisa recommends covering in an intake session
- Layering informed consent
- How to minimize writing the same things over and over in assessments
- Our upcoming CE training with Maelisa on documentation for new clients
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * CE Training: Foundations of Documentation: Intake, Diagnosis, and Treatment Plans + Join Dr. Maelisa McCaffrey as she gives you practical tools for managing all the documentation related to new clients – informed consent, intake paperwork, assessment and diagnosis, and creating treatment plans. You’ll also learn how to incorporate client feedback, build rapport, and connect with clients throughout these paperwork heavy tasks. + Plus: Dr. McCaffrey’s documentation packet to help you improve your notes including: - Diagnosis Justification Examples - Treatment Plan Template - Sample Treatment Goals List + 2 legal-ethical CE credit hours + Live (June 9th, 2025) and Recorded On-Demand Self-Study CE Training + Ideal for clinical leadership + all clinicians * Special Office Hours with Dr. Maelisa McCaffrey: Join Dr. Maelisa McCaffrey as she and the PCT team tackle your specific questions regarding documentation on May 23rd + This is special access to top experts in our industry available only to Practice Care Premium members. Register to attend these special sessions through Practice Care Premium + You can get Office Hours through Practice Care, or get 3 months of complimentary access through our Telemental Health Certificate Program. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Dr. Maelisa McCaffrey of QA Prep about common documentation issues that come up in group practice.
We discuss:
- Maelisa’s background and business, QA Prep
- Why there aren’t black and white guidelines for documentation
- How to determine what to include in documentation
- The most common people who will read your notes
- Informed consent and documentation, especially for vulnerable populations
- Progress note templates and policies
- Collaborative documentation in group practice
- Why clinicians find documentation so stressful
- Our upcoming CE training with Maelisa on Client Centered Documentation
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * CE Training: Client-Centered Documentation: How to Write Ethical, Effective, and Efficient Progress Notes + Join Dr. Maelisa McCaffery as she offers a practical and principled guide to mastering progress notes that meet medical necessity standards, support continuity of care, and respect client rights and confidentiality. Plus: Dr. McCaffery’s documentation packet to help you improve your notes including: - Sample progress note - Progress statement formula and examples - Phrases to use for sensitive and politically charged topics + 3 legal-ethical CE credit hours + Live (May 9th, 2025) and Recorded On-Demand Self-Study CE Training + Ideal for clinical leadership + all clinicians * Special Office Hours with Dr. Maelisa McCaffrey: Join Dr. Maelisa McCaffrey as she and the PCT team tackle your specific questions regarding documentation. + This is special access to top experts in our industry available only to Practice Care Premium members. Register to attend these special sessions through Practice Care Premium. + You can get Office Hours through Practice Care, or get 3 months of complimentary access through our Telemental Health Certificate Program. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share what you need to know about syncing your EHR calendar with HIPAA in mind.
We cover:
- Managing confidentiality and availability of data
- Having redundancies for worst case scenarios
- Types of calendar syncs and their benefits and drawbacks
- How to sync your calendars in a HIPAA-appropriate way
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs + optional accompanying on-demand CE training: Designing a Group Practice’s Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss using Google Vids in a group therapy practice context.
We cover:
- Popular screen recording software, Loom, and why it’s not HIPAA compliance compatible
- Google Vids being covered by the Google Workspace BAA
- Use cases for screen recording software for group practices
- Key reminders and usage notes for Google Vids
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Google Workspace Help Center: Get started with Vids in Google Workspace: What you can do with Google Vids
PCT Resources * Free on-demand workshop: Onboarding and Offboarding with Compliance and Ease in Mind * Free on-demand workshop: Making Practice Life Easier and More Efficient With Google Workspace * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share steps to take to protect client information from being accessed at the US border.
We discuss:
- Devices being searched by Customs and Border Patrol at the US border
- Why border agents can search devices without a warrant
- HIPAA being the minimum security standard, not the ceiling
- When HIPAA permits disclosure of PHI
- How clients can be impacted when PHI is accessed by law enforcement
- How to conduct a risk analysis of the potential impact of client PHI being accessed by law enforcement
- What to remove from devices before traveling
- Upcoming resources we will be providing on this topic
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * the Verge article: Is it safe to travel with your phone right now?
PCT Resources * Travel Device Security Checklist -- coming soon as a free resource! This link will be updated as soon as we publish it. Thanks for your patience while we finish it up! * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * For Solo Practitioners: PCT's Telemental Health Certificate Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we debunk two common but dangerous myths about cross jurisdictional practice for therapists.
We discuss:
- Common myths we hear about practicing telehealth across jurisdictions
- The risks of unpermitted practice
- The threshold of client risk (and the only instances where cross-jurisdictional practice is permitted for clients in crisis)
- What constitutes client abandonment and what doesn’t
- Requesting temporary practice permission from a different jurisdiction
- Our recent training on navigating legal-ethical cross-jurisdictional teletherapy practice for therapists
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * New CE Training: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals -- on-demand legal-ethical CE training. Ideal for both leadership and any and all clinicians that provide client care via teletherapy + the must-know information on the current considerations for how to legally and ethically navigate cross-jurisdictional teletherapy practice. In particular, we will address licensure compacts, recent legal developments, state-specific rules, risk management strategies, custodian of record obligations, and working with minors across state lines. * PCT's Clinical Staff Teletherapy Training * PCT's Teletherapy Director and Supervisor Training for Group Practices * PCT's Teletherapy Manuals and Forms for Group Practices * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * For Solo Practitioners: PCT's Telemental Health Certificate Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we dive into what group practice owners need to know about encrypted messaging apps.
We discuss:
- Encrypted messaging apps in the news
- What end to end encryption means
- What to look for in an encrypted messaging service
- Why a Business Associate Agreement is necessary
- The difference in risk landscape for mental health therapists and government officials
- Safeguards, like device security measures, to take when using secure messaging apps
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations * Article: Even Though They Have a Right Under HIPAA To Unencrypted Emails: A Case For Only Using Secure Email and Texting With Clients * Article: Texting and HIPAA Compliant Practice * Article: How Do You Document Emails and Text Messages Received From Clients? * HIPAA-Appropriateness Review of Signal * HIPAA-Appropriateness Reviews of Secure Messaging platforms * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re sharing recent developments related to teletherapy and Medicare, HIPAA’s proposed Security Rule changes, and cross-jurisdictional Compacts.
We discuss:
- Expanded telehealth flexibilities and waivers for Medicare and where things currently stand
- Reactions to the proposed Security Rule updates
- Making updates even when they aren’t required to safeguard client info and your practice
- Timelines for applications opening for the Counseling Compact and the Social Work Licensing Compact
- Our upcoming CE training on Cross-Jurisdictional Teletherapy Practice in 2025
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * American Telehealth Association: No Shutdown For Telehealth As Congress Passes Spending Bill To Keep The Government Open, Including Critical Telehealth Extensions, ATA Action Celebrates Vote * Health IT Security News Article: MGMA, CHIME ask Trump to rescind proposed HIPAA Security Rule * Counseling Compact: "Applications for Counseling Compact privileges to practice are expected to open in late summer or early fall 2025." * Social Work Licensure Compact: "Multistate License Applications Open – Target Date of Fall 2025 + Once the data system is operational in states and the commission has finalized all necessary rulemaking, applications will be made available for social workers to apply for a multistate license. Once eligibility is confirmed by the home state, all fees are paid, and a social worker is granted a multistate license, they will be able to practice in all other member states of the compact without any further steps necessary."
PCT Resources * New PCT Live & Recorded Legal-Ethical CE training: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals + the must-know information on the current considerations for how to legally and ethically navigate cross-jurisdictional teletherapy practice. In particular, we will address licensure compacts, recent legal developments, state-specific rules, risk management strategies, custodian of record obligations, and working with minors across state lines. + Presented by Eric Ström, JD PhD LMHC; and PCT Director, Liath Dalton + Live presentation on Friday, March 28th * PCT's Clinical Staff Teletherapy Training * PCT's Teletherapy Director and Supervisor Training for Group Practices * PCT's Teletherapy Manuals and Forms for Group Practices * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * For Solo Practitioners: PCT's Telemental Health Certificate Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re dispelling myths about the upcoming in-person visit requirements for Medicare clients.
We discuss:
- The uncertainty in our current regulatory landscape
- What the in-person visit requirements mean for Medicare clients (and what they don’t mean)
- Exceptions to the requirements for in-person visits
- Compliance and documentation for these requirements, in the event of a Medicare audit
- Steps to take as a therapy practice owner to be prepared for these requirements and communicate them to staff and clients
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * NB: After recording this podcast episode, the House voted to pass the government funding bill, which includes the extension of the in-person requirement waiver through to September 30, 2025 -- now, we wait to see if the bill passes in the Senate, and if the final version includes the extension * From the American Psychological Association: The telehealth waiver: What psychologists need to know * From JD SUPRA: Important Updates on Telehealth Coverage for Medicare Providers
PCT Resources * Relevant CE Training. New Live & Recorded: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals -- 2 Legal-Ethical CE credit hours. Live webinar presentation on March 28th. + This 2-hour law & ethics seminar presents an updated review of how to legally and ethically navigate cross-jurisdictional teletherapy practice in 2025. * PCT's Clinical Staff Teletherapy Training * PCT's Teletherapy Director and Supervisor Training for Group Practices * PCT's Teletherapy Manuals and Forms for Group Practices * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * For Solo Practitioners: PCT's Telemental Health Certificate Program
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re hoping to lower the level of distress around the proposed HIPAA Security Rule changes for therapy practice owners.
We discuss:
- What the some of the proposed changes to the Security Rule are, including penetration testing
- The timeframe for these changes if they are implemented, and the likelihood they actually will be implemented
- The rationale behind the proposed changes, and why they’re necessary in our current threat landscape
- How following the PCT Way can minimize the changes you need to make as HIPAA regulations evolve
- Centering client care and safeguarding client info as a motivating factor, rather than fear
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * JD Supra article summarizing proposed HIPAA Security Rule Changes and context: New Year, New HIPAA Security Rule: OCR Adds to Health Care Entities’ New Year’s Resolutions * HHS Fact Sheet on proposed changes: HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information * Full text of the Notice of Proposed Rulemaking (NPRM) in the Federal Register: HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information * Comments on the NPRM (Note, you can also search the public comments by keyword; ability make comments closed on 3/7/25)
PCT Resources * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices * For Solo Practitioners * PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium * weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC * + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) * + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an update for you on the BOI registration requirements for business owners.
We discuss:
- The recent court decision which reinstated the requirement, and when it goes into effect
- What our current guidance is on this requirement (and why)
- Where to file
- Upcoming regulatory changes that will be more consequential for group practice owners, including changes to Medicare
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we break down some important action items for group practice owners as a result of last year’s Change Healthcare breach.
We discuss:
- What happened with Change Healthcare
- What a ransomware attack is and how the hackers gained access
- Foundational security awareness training, and creating an overall security culture in your practice
- How to improve training for your workforce
- Having the right security configurations in place in your systems
- The importance of risk analysis and risk mitigation planning
- Codifying everything into comprehensive security policies and procedures
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re providing a quick update on the Beneficial Ownership Information Report, or BOIR, for group practice owners.
We discuss:
- What the BOIR is and who would have to file
- The current status of the BOIR requirement, and where to check for updates
- What we currently recommend for practice owners regarding BOIR
- How scammers capitalize on confusion and social engineering red flags to watch out for
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * FinCen Beneficial Ownership Information page * BOI Small Entity Compliance Guide * JD Supra Corporate Transparency Act: It’s Still Paused (For Now) -- Published 2/13/25
PCT Practice Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners * PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what you need to know about non-compete clauses in your group practice.
We discuss:
- The different ways non-compete clauses can function in a healthcare context
- Client rights and autonomy
- The enforceability of non-compete clauses for mental health providers
- Considerations for using templates for legal documents
- Which states have income thresholds for non-compete clauses
- What to expect on the state and federal level going forward
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Noncompete Agreements: Updated Income Thresholds for 2025 | JD Supra * Drafting Non-Competes in a Shifting Regulatory Landscape | JD Supra * Non-Competes: What the FTC’s Rule May Mean for Health Care & Life Sciences Providers | JD Supra
PCT Practice Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners * PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share recent updates from Google Workspace that you may have questions about.
We discuss:
- The price changes to Google Workspace tiers
- Considerations for choosing the appropriate Google Workspace tier for your needs
- How client side encryption works using Google
- Gemini, Google’s AI
- HIPAA appropriateness and ethical standards regarding AI use
- Communicating these standards to your team
- Cases where using AI would be appropriate
- Google’s updated appointment scheduler
- Calendar sync as a contingency plan
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Google Workspace Plan Tiers * Google Workspace HIPAA Included Functionality (covered by BAA) * Google Workspace HIPAA Implementation Guide * About client-side encryption - Google Workspace Admin Help * Learn about Gmail Client-side encryption - Gmail Help * Generative AI in Google Workspace Privacy Hub * Manage access to Gemini features in Workspace services
PCT Resources * Making Practice Life Easier and More Efficient With Google Workspace + Free On-Demand seminar on utilizing Google Workspace to create more effective and secure systems + includes PCT's Google Workspace Configuration Center & Checklist * Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health + Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations. * PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: + For Group Practices + For Solo Practitioners * PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss the implications of the Section 1557 final rule on nondiscrimination for mental health practices.
We cover:
- The Section 1557 final rule, what it means, and when it takes effect
- How the Office of Civil Rights (OCR) disseminated this information
- Ways in which AI can be discriminatory
- What to consider when utilizing AI with patient care support tools as a mental health provider
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * The OCR/HHS "Dear Colleague Letter": Re: Ensuring Nondiscrimination Through the Use of Artificial Intelligence and Other Emerging Technologies * OCR Notice: Ensuring Nondiscrimination in the Use of AI is Good Medicine * HHS: HHS Artificial Intelligence Strategic Plan * HHS: Artificial Intelligence Strategic Plan -- Slide Summary * Federal Register: Section 1557 Final Rule
PCT Resources * Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health + Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
- For Group Practices
-
For Solo Practitioners
-
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share an overview of the big stories, developments, and regulatory changes that will impact group practices in 2025.
We discuss:
- A proposed change to the HIPAA Security Rule, and how it will impact group practices
- OCR resuming their HIPAA Compliance Audit program
- Updates on telehealth provisions and exceptions for Medicare and important dates to know
- Updates on the Counseling Compact and the Social Work Licensure Compact
- Upcoming regulatory changes for AI use and our current recommendations
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Proposed New Rule From HHS: HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information
- Resumption of OCR's (the HIPAA Regulators) HIPAA Audit Program
- New Rule: HIPAA Privacy Rule Final Rule to Support Reproductive Health Care Privacy: Fact Sheet
- Model Attestation for a Requested Use or Disclosure of Protected Health Information Potentially Related to Reproductive Health Care
- New Rule: Fact Sheet 42 CFR Part 2 Final Rule
- Telehealth Update: DEA/HHS Temporary Rule, Medicare Coverage of Telehealth Services, and What to Watch For in 2025
- Medicare Telehealth Flexibilities Get a Three-Month Lifeline
- JPM2025: Regulation of artificial intelligence: Navigating a new frontier in health care | JD Supra
PCT Resources:
- Relevant on-demand, legal-ethical CE training: Law & Ethics of Clinical Documentation for a post Roe world
- Addresses the practical applications of the US Supreme Court’s ruling in Dobbs v. Jackson Women’s Health Organization, with particular focus on the impacts this decision has on client confidentiality and documentation of clinical services
- Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health
- Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.
- PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
- For Group Practices
- For Solo Practitioners
- PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share information about Google’s new Appointment Scheduler feature.
We discuss:
- How the feature works and pros and cons compared to similar software
- Whether this new feature is HIPAA compliance compatible
- What Google Workspace tiers include this new functionality
- Usage guidance for this new feature
- Our free Google Workspace Resource Center where you can get more support
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Google Help Center: Set up your appointments & booking page
PCT Resources * Related on-demand workshop (non-CE) free: Making Practice Life Easier and More Efficient With Google Workspace + this seminar presents systems run by Google Workspace that will make your practice life easier and help you meet or exceed your security and HIPAA compliance requirements. * PCT's Google Workspace Configuration Center (free) + Includes a handy checklist! * PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs + optional accompanying on-demand CE training: Designing a Group Practice’s Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we cover the culprit of the latest HIPAA penalty, how it happened, and how you can take action to stop it from happening to you.
We discuss:
- Instances of monetary HIPAA penalties
- Sharing login credentials between workforce members vs with unauthorized third parties
- The importance of multi factor authentication
- Using the Google Authenticator app for MFA
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources: * About the violations & penalty: HHS Office for Civil Rights Imposes a $548,265 Penalty Against Children’s Hospital Colorado for HIPAA Privacy and Security Rules Violations
PCT Resources: * Related Training (non-CE): Security Awareness Grab-Bag + A collection of three short courses helping you and your staff maintain your security awareness through better handling of PHI in public, avoiding inappropriate disclosures, and preventing phishing and social engineering attacks. * Referenced podcast: Episode 440: MFA Made Easy with Google Authenticator * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we dive into the importance of secure phone communications for therapy providers.
We discuss:
- The recently revealed hack of major global telecom providers
- The difference between secure communications and non-secure communications
- The difference between HIPAA secure and HIPAA friendly
- How clients can opt out of secure communications
- Which VoIP services are HIPAA secure (and which major one isn’t)
- Reframing HIPAA security as client care
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Article: Chinese hack of global telecom providers is ‘ongoing,’ officials warn Officials from the FBI and the Cybersecurity and Infrastructure Security Agency say the major Chinese hack began in late spring, and they are strongly urging Americans to use encrypted communications.
PCT Resources * Related on-demand CE Training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours) + Learn about the legal-ethical considerations of modern communication channels in the context of real world practice and client needs. ideal for leadership * PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs + optional accompanying on-demand CE training: Designing a Group Practice’s Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss Apple's Private Relay function and whether it can be used in a group practice context.
We discuss:
- Security policies around network security and device security, particularly BYOD policies
- How Private Relay works, and its limitations
- How Private Relay is similar to a VPN (and how it is different)
- What functionality is required for network and device security
- Private Relay alternatives and their limitations
- Our recommended VPN service
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explore the impact of the recent rate cuts for Headway and Alma clinicians.
We discuss:
- The common anxieties around corporate/VC owned telehealth companies
- The incentives these companies use to lure clinicians
- The cracks starting to appear in these companies
- How the rate cuts will impact clinicians
- How the rate cuts will impact group practices and solo practices
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Clear Health Costs article: UnitedHealth-Optum pay cut makes clinicians reassess value of tech mental health platforms * Clear Health Costs article: 2 digital mental health platforms cut pay rates for therapists with UnitedHealth’s Optum, stirring anger
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re chatting about multi-factor authentication for group practices.
We discuss:
- What multi-factor authentication is and why it’s important
- Different types of factors for authentication
- What Google Authenticator is and how it works
- What accounts you can use Google Authenticator for
- HIPAA considerations for using Google Authenticator
- Using Google Authenticator appropriately in a group practice context
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
- Google Help: Get Verification Codes with Google Authenticator
- Tech Target: What is Google Authenticator
- TherapyNotes: Setting Up & Using 2 Factor Authentication (Including Google Authenticator)
PCT Resources
- Related Training (non-CE): Security Awareness Grab-Bag
- A collection of three short courses helping you and your staff maintain your security awareness through better handling of PHI in public, avoiding inappropriate disclosures, and preventing phishing and social engineering attacks.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what makes up a client’s record.
We discuss:
- HIPAA regulations vs. state laws
- What communications are included in a client’s record and why
- The distinction between progress notes and psychotherapy notes
- Resources for training your staff on rethinking notes
- The Open Notes Rule
- Managing documentation compliance in your practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Designated Record Set (under HIPAA) * HIPAA, Psychotherapy Notes, and Other Mental Health Records (JD Supra article)
PCT Resources * CE courses: How We Need to Give Clients Access to Their Records, Now and in the Future (2 legal-ethical CE credit hours) and/or Rethinking Notes: Strategies for Making Documentation Simple and Meaningful (2 legal-ethical CE credit hours * Group Practice Tech podcast, Episode 418: Four Things You Need to Know About Psychotherapy Notes * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we look at Google’s Gemini AI tool through a HIPAA lens.
We discuss:
- Common use cases for Gemini in a group practice context
- What’s covered under the Google Workspace BAA (and what isn’t)
- Ethical and legal considerations for using PHI with AI tools
- Informed consent for clients when AI tools are used for clinical documentation
- Establishing a Gemini usage policy for your practice
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Google's Gemini AI for Google Workspace * Google's HIPAA Included Functionality * Google's HIPAA Implementation Guide (see Gemini section)
PCT Resources * CE courses: Using Artificial Intelligence (AI) as a Mental Health Clinician: Managing risk, ethics, and clinical benefits (2 legal-ethical CE credit hours) and/or The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health (1.5 legal-ethical CE credit hours) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re chatting about what to do if your practice experiences a natural disaster, like a hurricane.
We discuss:
- The recent hurricanes impacting the southeast US
- Prioritizing access to care
- Limited HIPAA waivers for disasters and emergencies
- And situations where the waivers would apply
- Resources for group practices in and out of the affected areas
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources & Support * HHS Declarations of a Public Health Emergency (PHE) * For information about how the HIPAA Privacy Rule applies in a public health emergency, visit the OCR’S HIPAA Emergency Preparedness, Planning, and Response page (www.hhs.gov/hipaa/for-professionals/special-topics/emergency-preparedness/index.html) or you may use the HIPAA Disclosures for Emergency Preparedness Decision Tool (www.hhs.gov/hipaa/for-professionals/special-topics/emergency-preparedness/decision-tool-overview/index.html). * Limited Waiver of HIPAA Sanctions and Penalties During a Declared Emergency: 2024 Public Health Emergency for Florida in Response to Hurricane Milton * Limited Waiver of HIPAA Sanctions and Penalties During a Declared Emergency: 2024 Public Health Emergency for North Carolina in Response to Hurricane Helene * Direct Resources for WNC community members curated by Patrick Casale of All Things Private Practice * Urgent Aid for WNC Communities Affected by Helene GoFundMe organized by Patrick Casale
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re joined by Patrick Casale from All Things Private Practice to talk about how to create a neuro-affirming therapy practice.
We discuss:
- Understanding your own neurotype as a leader
- Considerations for developing a neuro-affirming workplace
- Creating an environment where staff can ask for the accommodations they need
- Resources for practice owners to improve accessibility
- Therapist directories that prioritize accessibility and identity
- Soliciting feedback from staff
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Join Liath and Patrick for the 2025 Leadership Retreat for group practice owners and leaders in Chania, Greece! * About Patrick * Neurodivergent Entrepreneur Coaching with Patrick * Divergent Conversations podcast with Patrick and Dr. Megan Neff * Empowered Escapes upcoming retreats and summits * Doubt Yourself, Do It Anyway Virtual Online Summit * All Things Private Practice --> Helping Mental Health & Neurodivergent Business Owners Doubt Themselves & Do It Anyway * All Things Private Practice Podcast
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re joined by Patrick Casale from All Things Private Practice to talk about leadership and authenticity.
We discuss:
- What “doubt yourself, do it anyway” means
- The fear and power of vulnerability
- Patrick’s retreats and summits for mental health professionals
- Expanding beyond private practice
- Using fear as a gas pedal, not a brake
- Next year’s retreat for leaders in Greece, hosted by Patrick, where Liath is speaking
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Join Liath and Patrick for the 2025 Leadership Retreat for group practice owners and leaders in Chania, Greece! * About Patrick * Empowered Escapes upcoming retreats and summits * Doubt Yourself, Do It Anyway Virtual Online Summit * All Things Private Practice --> Helping Mental Health & Neurodivergent Business Owners Doubt Themselves & Do It Anyway * All Things Private Practice Podcast * Check out Liath's guest episode on the podcast: Episode 92: Optimize & Fortify Your Private Practice Using HIPAA [featuring Liath Dalton]
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re explaining how to securely record in person and teletherapy client sessions.
We discuss:
- Why sessions may need to be recorded
- The risks around different ways to record sessions
- The easiest way to record sessions securely (for most practices, without adding a new service to your tech stack)
- Exactly how to record sessions in Google Meet
- For sessions using Google Meet, another teletherapy platform, and meeting in person
- Usage notes with tips to make the process run smoothly for clinicians and clients
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with therapist Emily Decker about how to make group practice more accessible, both for clients and staff.
We discuss:
- The number of mental health clinicians who are disabled
- Navigating identity as a disabled person and as a helping professional, especially where those identities intersect
- Practice culture and neurodivergence
- Ways to create a disability affirming culture within group practice (for clients and staff)
- Unpacking what professionalism means
- What accessibility means
- What disability means
- Internalized ableism
- Unpacking what’s actually needed for therapy and what isn’t
- Universal Design, and how to apply it for therapy practices
- Our upcoming CE training with Emily on this topic
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * 2 legal-ethical CE credit hour training (live and recorded), presented by Emily Decker, MS, LPC, NCC, Can You Hear Me? The Legal and Ethical Role of Accessibility in Anti-Oppressive and Neurodivergent-Affirming Teletherapy + This training aims to create familiarity and comfort for therapists providing teletherapy and combat stigma and inaccessibility in teletherapy. The conversation is situated within an anti-oppressive and neurodivergent-affirming framework, connecting concepts of accessibility and disability justice with mental health care, and provides an overview of legal and ethical issues pertaining to accessibility within teletherapy, including identifying and dispelling common myths about accessibility and disability, and identifying specific, concrete resources for therapists to use to enhance the accessibility of their services.
Resources Recommended by Emily * Book: Demystifying Disability: What to Know, What to Say, and How to Be an Ally by Emily Ladau * DARN Disability 2023 conference recordings (free! and geared towards educators and supervisors) * Web Accessibility and the ADA * Textbook: Disability-Affirmative Therapy by Rhoda Olkin * This author also has a webinar on this topic: https://www.youtube.com/watch?v=vEJ46Rfz2kc * Textbook: Disability As Diversity by Erin E. Andrews * Book: Disability Visibiltiy by Alice Wong (also has a great website and podcast by the same name)
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss what to consider when designating your security officer in a mental health group practice.
We discuss:
- What a security officer is
- The difference between a security officer and a privacy officer and what each is responsible for
- Who can be a security officer, and whether the role can be outsourced
- The qualities to look for when appointing a security officer or deputy security officer
- The time commitment required to be a security officer
- How PCT’s resources can help your practice’s security officer
Listen here: https://personcenteredtech.com/group/podcast/
PCT Resources:
- PCT's Security Officer Endorsement Training Program (10 legal-ethical CE credit hours)
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation with the PCT team + Eric Ström, JD PhD LMHC (monthly) Group Practice Office Hours
- Device Security: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
- Remote Workspace Security: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks and implement required safeguards.
- HIPAA compliance, risk management, and practice optimization resources and support from PCT for mental health group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re chatting again with Gabrielle Juliano-Villani, this time about what to consider when accepting Medicaid as a group practice.
We discuss:
- The main differences between Medicare and Medicaid
- What makes a practice a good fit as a Medicaid provider
- Reimbursement rates and to find what they are in your state
- Things to keep in mind when considering accepting Medicaid
- Being prepared for an audit
- The process to become a Medicaid provider
- Credentialing timeframes
- What the application looks like
- Provider restrictions under Medicaid
- HIPAA responsibilities for providers who accept Medicaid
- Our upcoming panel discussion on the intersection of Medicare, Medicaid, and HIPAA
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Connect with Gabrielle for resources, consulting and support around Medicaid [and Medicare] at Medicare Consulting for Therapists
PCT Resources:
- HIPAA, Medicaid, and Medicare Intersections: Free Info and Q&A Session with Gabrielle and Liath (live session on 10/11/24)
- On-demand trainings (not designated as CE) presented by Gabrielle: Introduction To Medicare And Medicare Credentialing and Medicare Billing
- Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly)
- HIPAA compliance, risk management, and practice optimization resources and support from PCT for mental health group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Gabrielle Juliano-Villani, LCSW of Medicare Consulting for Therapists about what to consider if you’re thinking of selling your group therapy practice.
We discuss Gabrielle’s personal experience selling her practice; how the market for selling a practice has changed since 2021; what types of practices are getting a lot of interest currently; who is buying group practices right now; what the process of selling looks like and where to start; valuing your group practice; working with a broker and an attorney; staying on during the transition; costs to keep in mind when selling; and questions to ask yourself if you’re considering selling your practice.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Connect with Gabrielle Juliano-Villani for consulting and support around scaling & selling a group practice
PCT Resources:
- On-demand trainings (not designated as CE) presented by Gabrielle: Introduction To Medicare And Medicare Credentialing and Medicare Billing
- Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly)
- HIPAA compliance, risk management, and practice optimization resources and support from PCT for mental health group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re discussing the scope of responsibility and liability for device security in group practice.
We cover what handling PHI means; device security measures for devices that touch PHI; a multi-prong approach to device security; Safe Harbor requirements; the benefits of having Safe Harbor in place; Safe Harbor and state data breach laws; the cost of implementing Safe Harbor on all devices.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources
- PCT article: Easy Steps to Ensure Safe Harbor: Implementing Technical Security Measures
- PCT podcast episode: Episode 332: To BYOD or Not to BYOD
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
- Device Security: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
- Remote Workspace Security: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks and implement required safeguards.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what goes into HIPAA security reminders, which are required under the HIPAA Security Rule.
We discuss our favorite resources for security reminders; our PCT security reminder memes for group or solo practice; documenting security reminders; why security reminders are more useful than annual training; and using current events to inform your security reminders.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources:
- Sign up for the OCR's listserv here
- Sign up for HealthIT Security's newsletter as well, which you can do here (the signup is in a box on the righthand of the screen)
- Sign up for Bruce Schneier of Schneier on Security's newsletter here
PCT Resources:
- PCT's free digital Security Reminder Posters
- Sign up for PCT's free Security Reminder Memes
- Assignable staff training: HIPAA Security Awareness Grab Bag
- A collection of three short courses helping you maintain your security awareness through better handling of PHI in public, avoiding inappropriate disclosures, and preventing phishing and social engineering attacks.
- PCT podcast episode: Episode 412: Staff HIPAA Training in Year 2, and Beyond
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re covering the recent CrowdStrike update that impacted over 8.5 million Windows computers and what group practice owners can learn from this experience.
We discuss what happened with CrowdStrike; being proactive instead of reactive in regard to technology failures; critical operations; managing critical data backups; creating contingency plans for operational continuity; and the importance of practicing your contingency plans.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re chatting with Melissa Wesner about how to build community as a group practice.
We discuss Melissa’s clinician community membership in Baltimore; a different approach to networking; dealing with isolation and burnout as clinicians; community and wellness needs; how to replicate this community group for clinicians in your area; self care as a business strategy; balancing life and business success; taking self-care off the back burner; and how to take action when you’re feeling burned out.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
About Melissa Melissa Wesner is a Licensed Clinical Professional Counselor, Brainspotting Consultant, and Founder of LifeSpring Counseling Services, a group counseling practice in Maryland. She's also the host of the Dreaming and Doing podcast, a podcast for big dreamers and action takers.
Connect with Melissa * @lifespring_md (IG LifeSpring page) * @melissa_wesner_ (Dreaming and Doing podcast IG page) * @lifespringcounselingservices (FB page) * lifespringcounseling.net * dreaminganddoing.net * Greater Baltimore area Clinician Community Membership (in-person) -- If people sign up by 9/15/24 using the code EARLYBIRD, their first month in the membership will be free.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about VPNs, or Virtual Private Networks.
We discuss when to use a VPN in a group practice context; how VPNs work; the VPN that we recommend, and why it’s our go-to; and which plan we recommend for group practice (and when you need a higher level of functionality).
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * NordVPN * NordLayer * NordLayer VS NordVPN: how are they different * Tom's Guide: the best VPN of 2024
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * PCT's free Group Practice Service Selection Workbook & Worksheets Step 1 of the PCT Way -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have updates to share about licensure compacts!
We discuss the Counseling Compact and the Social Work Licensure Compact; timelines to be aware of; the benefits of Compacts for group practice; which Compact will open up next; PSYPACT; options for LMFTs; and advocating to make your voice heard.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re sharing information about updated HIPAA rules regarding privacy around discussions regarding reproductive health.
We discuss important dates to be aware of; the main bullet points of the Final Rule; the impact Notice of Privacy Practices; what is and is not acceptable to disclose, and when; understanding the implications of this rule; and related resources on this topic from PCT.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * HIPAA Privacy Rule Final Rule to Support Reproductive Health Care Privacy: Fact Sheet * HIPAA Privacy Rule to Support Reproductive Health Care Privacy [Final Rule]
PCT Resources * PCT CE training: Law & Ethics Of Clinical Documentation For A Post Roe World (1 legal-ethical CE credit hour, on-demand training) * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- includes monthly session with therapist attorney, Eric Ström, JD PhD LMHC + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain when group practice owners should consider managed IT services.
We discuss practices that don’t need managed IT services; what hands-on or managed IT services can look like; when managed IT services are a good fit for group practice; 3 ways to find an IT service that meets your needs as a group practice; how to vet a managed IT service; and added on services that aren’t usually needed for group practice owners.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's free Group Practice Service Selection Workbook & Worksheets Step 1 of the PCT Way -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re updating group practice owners on the Change Healthcare breach.
We discuss recent guidance from the OCR (the Office of Civil Rights); how Change Healthcare is failing to meet their obligations as a HIPAA Business Associate and as a HIPAA Covered Entity; breach reporting requirements; 3 important pieces of good new for practice owners; how you can talk to clients about this; and whether we recommend preemptively reporting this breach on your own.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Direct Resources * from HHS and the OCR: "Change Healthcare Cybersecurity Incident Frequently Asked Questions" -- see FAQ #6 in particular
PCT Resources * PCT CE Training: HIPAA Security Incidents & Breaches: Investigation, Documentation, and Reporting (1.5 legal-ethical CE credit hour on-demand, self-study video course) * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Other Related & Relevant Resources * JD Supra Article & Podcast from healthcare attorneys: "What to Do When Your Business Associate Suffers a Ransomware Attack" + Also see the Ransomware Breach Decision Tree
- Wired Article: Medical-Targeted Ransomware Is Breaking Records After Change Healthcare $22M Payout
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what you can and can’t use a notes app for in a group practice.
We discuss what’s permissible under HIPAA; different notes app options for iPhone and Android; notes and PHI; getting BAAs; cloud syncing; policies and procedures around scratch notes; and what the Office of Civil Rights (the HIPAA regulators) say about this topic.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * PCT's free Group Practice Service Selection Workbook & Worksheets Step 1 of the PCT Way -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re clearing up common misconceptions about Protected Health Information (PHI) in group practice.
We discuss what constitutes PHI and why it matters; why this topic is often confusing; common situations where we see this cause issues in group practice; 18 identifiers of PHI; consequences of misunderstanding what PHI is and is not; identifier codes; and information being reidentified, especially in the age of AI.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * PCT Article: How to Deidentify (or not) Client Info Under HIPAA -- list of 18 Identifiers * PCT CE Course: How to Identify HIPAA Protected Health Information: Finding Your Clients' Sensitive Information Wherever it Goes * HHS: De-identification methods under HIPAA * HHS FAQ: May Parts or derivatives of any of the listed identifiers be disclosed consistent with the Safe Harbor Method? * JD Supra article: HIPAA De-Identification Guidance * PCT's Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share 4 important considerations for psychotherapy notes in a group practice context.
We discuss what notes are protected from release; how to quickly find out what your state’s rules are; what to include in your Notice of Privacy Practices about psychotherapy notes; what psychotherapy notes are and are not; having policies in place for documentation; where misconceptions about documentation come from; and how to support your team with documentation.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * JD Supra Article: HIPAA. Psychotherapy Notes, and Other Mental Health Records * HHS' Model Notice of Privacy Practices (NBB, see the customization instructions for state specific components & psychotherapy notes)
PCT Resources * PCT CE course: Rethinking Notes, Strategies for Making Documentation Simple & Meaningful (2 legal-ethical CE) -- great training for both leadership & all clinical staff * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain the ins and outs of who is considered a covered entity in a group practice context.
We discuss covered transactions; common reasons why practice owners believe they’re not a covered entity; how long covered entity status lasts; why it matters to follow HIPAA, regardless of covered entity status; Safe Harbor; and a reframe for thinking about HIPAA in group practice.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * CMS: Are You A Covered Entity * CMS: Covered Entity Decision Tool
PCT Resources * From our article archives: Am I a HIPAA Covered Entity? (How Much Does it Matter If I Am Not) * Group Practice Care Premium
+ weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
+ + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
+ + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re answering a question we frequently get: What are the HIPAA considerations when you have an outside biller for your group practice?
We discuss the threat landscape scenario of outside billing; whether you need a BAA with your biller; who should provide the BAA; what should and shouldn’t be in a BAA; and the difference between a Service Level Agreement and a BAA, and when to use each.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share HIPAA considerations regarding VPNs and password managers for group practice owners.
We discuss if you need a BAA with your VPN service or your password management program; the conduit exception; how VPNs work; practice provided services vs personal services; and our specific product recommendations for VPNs and password managers (as well as why we like them).
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * NordVPN * 1Password
PCT Resources * PCT Blog post: With a VPN, Your Staff Can Work Just About Anywhere * PCT's free Group Practice Service Selection Workbook & Worksheets Step 1 of the PCT Way -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational need * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re joined by Maureen Werrbach from The Group Practice Exchange to continue our conversation about staff accountability.
We discuss how to set your practice apart for new hires; the cyclical nature of group practice ownership; diversifying services; teletherapy vs. in person practice; community marketing; salary vs. commission based pay; dealing with staff attrition when implementing accountabilities; the exact formula Maureen uses to negotiate rate increases with insurance companies; and where you can find more information about working with Maureen and the Accountability Equation.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Learn more about the Accountability Equation and the option to join Maureen's next digital cohort here * Hear more about the Accountability Equation and what implementation in practice looks like on the Group Practice Exchange podcast here (use the search feature for keyword 'accountability' and the results will be all the great episodes on the Accountability Equation)
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours, for group practice leaders - Group Practice Office Hours also includes special guest sessions with experts including Maureen Werrbach of the Group Practice Exchange, Kelly & Miranda from ZynnyMe Business School for Therapists, Maelisa McCaffrey of QA Prep, and monthly sessions co-facilitated by therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re joined by Maureen Werrbach from The Group Practice Exchange to talk about accountability in group practice.
We discuss how Maureen’s Accountability Equation and how it helps group practices grow; accountability as an ongoing process; effective coaching as a leader; the five A’s of the Accountability Equation; understanding the roles in your practice; making sure the right people are in the right roles; how to communicate when someone isn’t in the right role; determining the accountabilities for each role; how this framework can be applied to new group practices and established group practices; how to keep track of everyone’s accountabilities; and how to set actionable goals and microgoals.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Learn more about the Accountability Equation and the option to join Maureen's next digital cohort here * Hear more about the Accountability Equation and what implementation in practice looks like on the Group Practice Exchange podcast here (use the search feature for keyword 'accountability' and the results will be all the great episodes on the Accountability Equation)
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours, for group practice leaders - Group Practice Office Hours also includes special guest sessions with experts including Maureen Werrbach of the Group Practice Exchange, Kelly & Miranda from ZynnyMe Business School for Therapists, Maelisa McCaffrey of QA Prep, and monthly sessions co-facilitated by therapist attorney Eric Ström, JD PhD LMHC
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat about how to approach staff HIPAA training after the first year.
We discuss why we don’t recommend using the same training year after year (and why our system doesn’t allow it); the trainings we typically recommend for year one and why; the trainings we recommend for year two and after and why; and why now is a particularly good time to get started.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Training Resources * PCT's Role-Based Staff Trainings -- see PCT's role-based HIPAA & ethics, teletherapy, and topical needs-based trainings * Foundational HIPAA Trainings -- recommended for year 1; if not done in year 1, use for year 2: + Clinical Staff: Privacy Ethics And HIPAA Fundamentals For Mental Health Professionals In The Agency Or Group Practice Context (2 legal-ethical CE) + Admin Staff: Practical Application Of HIPAA And Mental Health Ethics For Admin Staff + Security Officer: Security Officer Endorsement Program (10 legal-ethical CE) + Leadership: Introduction to HIPAA Security for Group Practice Leaders (2 legal-ethical CE)
- Practical Application Focused Trainings -- available only through Group Practice Care Premium, included for all team members at no per-person cost -- recommended for year 2, if not done in year 1:
- HIPAA Security Awareness: Bring Your Own Device (BYOD)
-
HIPAA Security Awareness: Remote Workspaces
-
Select Topical Needs-Based Trainings -- recommended for year 2 and beyond if foundational HIPAA trainings & practical application focused trainings have been completed -- **see our full curated collection of topical needs-based training section in our marketplace:
- HIPAA Security Awareness Grab-Bag
- Rethinking Notes: Strategies For Making Documentation Simple And Meaningful (2 legal-ethical CE)
- The Evolving Legal-Ethical Standard Of Care For The Clinical Use Of Artificial Intelligence In Mental Health (2 legal-ethical CE)
-
Clinical Staff Teletherapy Training (5 CE, 3 of which is legal-ethical CE)
-
Use PCT's team training management system, provided through Group Practice Care Basic (free!) OR Premium to assign trainings to team members, see progress/completion status, and let PCT take care of assignment notifications and reminders!
Additional PCT Resources * Group Practice Care Premium + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours, for leadership
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain the cybersecurity goals as outlined by Health and Human Services (HHS) in light of the upcoming HIPAA Security Rule changes.
We discuss the different categories of goals that are outlined; being proactive so your practice is ready when changes come; the essential goals HHS has outlined and what they mean; the encouraged goals HHS has outlined and what they mean; why these goals make sense; and how the PCT Way can help you meet these cybersecurity goals.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * HHS Announces Next Steps in Ongoing Work to Enhance Cybersecurity for Health Care and Public Health Sectors * Healthcare Sector Cybersecurity Concept Paper * HealthIT Security article: CISA Issues Revised Cybersecurity Performance Goals * HealthIT Security article: HHS Unveils Healthcare Cybersecurity Performance Goals * HHS' Healthcare & Public Health Cybersecurity Performance Goals
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently **includes policy prohibition on use of BCC and CC; workforce forwarding emails from their practice email account to personal email account; data entry checking/not using autofill suggestions for recipients -- the P&P components that address the email gone awry situations we discussed in the podcast episode
- Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
-
Access Log Review Policy
-
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
-
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we give group practice owners a heads up about upcoming changes to the HIPAA Security Rule.
We discuss what the focus of these rule changes will be; why the changes are happening; steps you can take to be proactive about HIPAA changes; and PCT’s practical tools to help you get on top of things in a manageable way.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources & Further Information * Vital Signs: Digital Health Law Update | Winter 2024 | JD Supra * 2024 Update: Regulators Use “Carrots and Sticks” to Incentivize Healthcare Sector Cybersecurity Compliance * 3 ways to prepare for impending HIPAA Security Rule updates * HHS Unveils Healthcare Cybersecurity Strategy
PCT Resources * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium * weekly (live & recorded) direct support & consultation service, Group Practice Office Hours * + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) * + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more * PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently **includes policy prohibition on use of BCC and CC; workforce forwarding emails from their practice email account to personal email account; data entry checking/not using autofill suggestions for recipients -- the P&P components that address the email gone awry situations we discussed in the podcast episode + Policies & Procedures include: - Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application. - Computing Devices and Electronic Media Technical Security Policy - Bring Your Own Device (BYOD) Policy - Communications Security Policy - Information Systems Secure Use Policy - Risk Management Policy - Contingency Planning Policy - Device and Document Transport and Storage Policy - Device and Document Disposal Policy - Security Training and Awareness Policy - Passwords and Other Digital Authentication Policy - Software and Hardware Selection Policy - Security Incident Response and Breach Notification Policy - Security Onboarding and Exit Policy - Sanction Policy Policy - Release of Information Security Policy - Remote Access Policy - Data Backup Policy - Facility/Office Access and Physical Security Policy - Facility Network Security Policy - Computing Device Acceptable Use Policy - Business Associate Policy - Access Log Review Policy
- Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
-
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share ways to be proactive in light of the news that random HIPAA audits are returning.
We discuss why there’s still no HIPAA police; the function of these random audits; where the gaps in compliance have been historically; what auditors will likely be looking for; the importance of risk analyses, risk mitigation plans, and policies & procedures; how many HIPAA covered entities were audited the last time the program was active; and PCT’s resources to help you get started with formal compliance in a shame-free way.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources & further information: * Results of prior audit period * HHS Notice in the Federal Register * JD Supra article: Never Say Never Again: HHS Signals the Return of HIPAA Audit Program
PCT Resources * HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently **includes policy prohibition on use of BCC and CC; workforce forwarding emails from their practice email account to personal email account; data entry checking/not using autofill suggestions for recipients -- the P&P components that address the email gone awry situations we discussed in the podcast episode
- Policies & Procedures include
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
-
Access Log Review Policy
-
Forms & Logs include:
-
Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
-
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain why smart notebooks cannot be used in therapy practices.
We discuss why smart notebooks are popular; how smart notebooks work and why they’re in HIPAA’s scope; risk exposure; device security and hardening; communicating to clinicians that these devices are not HIPAA compatible; ways to support documentation processes that are HIPAA compatible; and what to do if you find out a clinician has been using a smart notebook.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss the recent Change Healthcare cyber attack and its impact for group practices.
We cover what we know and what we don’t know yet; resources to help you take practical steps; how many people are impacted by this breach; the ongoing investigations; ransomware attacks; who is liable for this incident; maintaining operational continuity; and the importance of being proactive in your security practices.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Change Healthcare Status Update Page * HHS Statement Regarding Cyberattack on Change Healthcare * TherapyNotes Change Healthcare Incident FAQ * HealthIT Security article: Understanding the Impact of the Change Healthcare Cyberattack on Providers
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we summarize what group practice owners should know about the Office of Civil Rights Annual Reports to Congress and explain how understanding them can inform risk management.
We discuss the compliance report from the Office of Civil Rights (OCR); how complaints filed were resolved; compliance reviews vs. audits; reframing the (very common) fear of HIPAA complaints; the unsecured PHI report from the OCR; risk management for avoiding large breaches; the importance of reporting breaches; and the primary sources of breaches and ways to minimize them.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
References * Annual Report to Congress on Breaches of Unsecured Protected Health Information * Annual Report to Congress on HIPAA Privacy, Security, and Breach Notification Rule Compliance
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently **includes policy prohibition on use of BCC and CC; workforce forwarding emails from their practice email account to personal email account; data entry checking/not using autofill suggestions for recipients -- the P&P components that address the email gone awry situations we discussed in the podcast episode
- Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
-
Access Log Review Policy
-
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
-
Practice Equipment Catalog
-
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re exploring what group practice owners should know about cross-jurisdictional practice in the age of teletherapy.
We discuss the shifting landscape of cross-jurisdictional practice; different licensure compacts to be aware of; applying for privileges to practice under licensure compacts; telehealth training requirements; service and payment parity; payment parity advocacy; states that restrict teletherapy based on provider location; temporary practice provisions; and our upcoming CE training event on March 1 that will dive deeper into this topic.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources & References Psychology Interjurisdictional Compact (PSYPACT) Map
Apply for Authority to Practice Interjurisdictional Telepsychology (APIT)
Counseling Compact Map
Counseling Compact FAQs
Social Work Licensure Compact Map
Center for Connected Health Policy -- Parity
California Temporary Practice Permission
PCT Resources * CE course: Legal-Ethical Cross-Jurisdictional Practice in the Age of Teletherapy & Licensure Compacts, 2024 Edition (2 legal-ethical CE hours) * PCT's Group Practice Telemental Health Program * PCT's Telemental Health Certificate Program (for individual clinicians) * PCT's Teletherapy Practice Rules by State Tool
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re covering the fundamentals of texting in group practice.
We discuss HIPAA compliance as a process, not a product; secure and non-secure text messaging; client requested alternative communications; how to use SMS texting in a compliance compatible way; what to have in place with your phone service provider; what to do about personal phone services; phone service providers we recommend (and don’t recommend) for teams; and how to document text messages.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's Free Sample Forms: + Request for Non-Secure Communications + Communication Policy (Client Facing) + Email & Texting Risk Questionnaire
- PCT's free Group Practice Service Selection Workbook & Worksheets Step 1 of the PCT Way -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs, including phone and texting (SMS and secure texting)
- CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours)
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost)
-
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain how and why to get Safe Harbor in place on your group practice devices.
We discuss what Safe Harbor means; the HIPAA Breach Notification Rule; the security measures that are the cornerstones of Safe Harbor; different ways PHI can end up on devices, even when using cloud based services; and the PCT resources available to help secure your practice devices.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * Group Practice Care Premium + weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for all team members at no per-person cost) + + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for all team members at no per-person cost) + more
- PCT article: Easy Safe Harbor from HIPAA Breach Notification: Now on Your Computer and Smartphone
- HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re covering what you need to know about HIPAA and your smartwatch.
We discuss common questions we get from group practice leaders about smartwatches; the limitations of smartwatch security; whether smartwatches should be included as BYOD registered devices; potential issues with smartwatch notifications; and security measures to put in place for Apple Watches and Android smartwatches.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources From Apple: Apple Watch System Security
From Apple: Apple Watch Notification Settings -- See "Customize Your Apple Watch Notification Settings" and "Keeping Notifications Private" sections in particular
Google Pixel Watch: How to Enable/Modify/Disable Screen Lock
Google Pixel Watch: Notification Settings
From Samsung: Set a Security Lock on Your Samsung Smart Watch
From Samsung: Manage Notifications on Your Samsung Smart Watch
PCT Resources Group Practice Care Premium
weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost) + more
HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk about ways to prevent HIPAA email breaches in a group practice setting.
We discuss common email-related breaches we see for group practices; email and PHI; large vs. small breaches; the implications of having a HIPAA breach; policies and procedures to mitigate email errors; how to send mass client notifications securely; settings to have in place in your email service; and what makes an email service HIPAA compliant.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's Google Workspace Configuration Learning Center (see part 9, 'the sharing and the forwarding', for tutorial on managing forwarding settings) * Free CE course: Introduction to HIPAA Security for Group Practice Leaders (1 legal-ethical CE course) * OCR Breach Report Questions -- know the contents of what is asked/what you need to provide before starting the breach report in the OCR's online portal for breach reporting * CE course: HIPAA Security Incidents & Breaches: Investigation, Documentation, And Reporting (1.5 legal-ethical CE credit hours) * Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly) * PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently **includes policy prohibition on use of BCC and CC; workforce forwarding emails from their practice email account to personal email account; data entry checking/not using autofill suggestions for recipients -- the P&P components that address the email gone awry situations we discussed in the podcast episode + Policies & Procedures include: - Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application. - Computing Devices and Electronic Media Technical Security Policy - Bring Your Own Device (BYOD) Policy - Communications Security Policy - Information Systems Secure Use Policy - Risk Management Policy - Contingency Planning Policy - Device and Document Transport and Storage Policy - Device and Document Disposal Policy - Security Training and Awareness Policy - Passwords and Other Digital Authentication Policy - Software and Hardware Selection Policy - Security Incident Response and Breach Notification Policy - Security Onboarding and Exit Policy - Sanction Policy Policy - Release of Information Security Policy - Remote Access Policy - Data Backup Policy - Facility/Office Access and Physical Security Policy - Facility Network Security Policy - Computing Device Acceptable Use Policy - Business Associate Policy - Access Log Review Policy
- Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
-
Practice Equipment Catalog
-
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Gabrielle Juliano-Villani, LCSW about navigating Medicare considerations as a mental health provider.
We discuss fears and misconceptions around being a Medicare provider; upsides to being a Medicare provider; how opting in and out of Medicare works with multiple providers; what the enrollment process entails and where people get tripped up; what documents you need to have ready to enroll; how long the process takes; reimbursement timeframes; auditing and documentation; and our upcoming Q+A session with Gabrielle on this topic.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources from guest Gabrielle Juliano-Villani, LCSW of Medicare Consulting for Therapists Map of MAC's, links to enrollment app, checklist and more helpful links
How to check Medicare rates (with a video)
Common Credentialing problems (and how to avoid them)
Medicare Opt in or Opt out
Facebook Group, Medicare Consulting for Therapists
Etsy store with more checklists for billing and credentialing and my note template
PCT Resources On-demand trainings (not designated as CE) presented by Gabrielle: Introduction To Medicare And Medicare Credentialing and Medicare Billing
Special Q&A Medicare focused Q&A Group Practice Office Hours session (live & recorded) for Practice Care Premium members
Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly)
HIPAA compliance, risk management, and practice optimization resources and support from PCT for mental health group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re looking back on some of the major developments that impacted the group practice landscape this year.
We discuss artificial intelligence and how it’s impacting providers; ethical and clinical considerations for AI use; LPC and MFT eligibility as Medicare providers in 2024, and opting out if that’s applicable; third party tracking on practice websites and HIPAA; a recent study looking at the efficacy equivalencies between telehealth and in person care; and the upcoming Compacts going live.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources AI Podcast: Episode 322: [Tech Tips] Considerations for AI Use in Your Group Practice
CE course: The Evolving Legal-Ethical Standard Of Care For The Clinical Use Of Artificial Intelligence In Mental Health (2 legal-ethical CE credit hours)
PCT Blog: Artificial Intelligence Utilization & Implications in Mental Health Care: How Person Centered Tech is Helping the Helpers
Medicare PCT Blog: Big News on the Medicare Front — Attention Counselors and Marriage & Family Therapists! (including a link to ZynnyMe's great tutorial on how to opt out, if that's the determination your practice makes is right for you)
Training (non-CE): Introduction to Medicare and Medicare Credentialing
Training (non-CE): Medicare Billing
Teletherapy * Podcast: Episode 312: [Teletherapy News] Updates on Inter-State Compacts, Parity Laws, and the PHE Ending * Trainings & Materials: PCT's Teletherapy Certified Practice program and program components
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain steps to take if your therapy practice had a HIPAA breach this year.
We discuss normalizing breaches emotionally; what constitutes a breach; the breach reporting timeframe; what the breach reporting process consists of; what to expect in terms of a response for a breach report; things regulators love to see in a breach report; the importance of preventing a breach from reoccurring; and resources we have available to support you during breach reporting.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources OCR Breach Report Questions -- know the contents of what is asked/what you need to provide before starting the breach report in the OCR's online portal for breach reporting
CE course: HIPAA Security Incidents & Breaches: Investigation, Documentation, And Reporting (1.5 legal-ethical CE credit hours)
Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly)
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently
Policies & Procedures include: Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
Computing Devices and Electronic Media Technical Security Policy
Bring Your Own Device (BYOD) Policy
Communications Security Policy
Information Systems Secure Use Policy
Risk Management Policy
Contingency Planning Policy
Device and Document Transport and Storage Policy
Device and Document Disposal Policy
Security Training and Awareness Policy
Passwords and Other Digital Authentication Policy
Software and Hardware Selection Policy
Security Incident Response and Breach Notification Policy
Security Onboarding and Exit Policy
Sanction Policy Policy
Release of Information Security Policy
Remote Access Policy
Data Backup Policy
Facility/Office Access and Physical Security Policy
Facility Network Security Policy
Computing Device Acceptable Use Policy
Business Associate Policy
Access Log Review Policy
Forms & Logs include: Workforce Security Policies Agreement
Security Incident Report
PHI Access Determination
Password Policy Compliance
BYOD Registration & Termination
Data Backup & Confirmation
Access Log Review
Key & Access Code Issue and Loss
Third-Party Service Vendors
Building Security Plan
Security Schedule
Equipment Security Check
Computing System Access Granting & Revocation
Training Completion
Mini Risk Analysis
Security Incident Response
Security Reminder
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss what you need to get your annual Good Faith Estimates (GFEs) ready for clients.
We discuss best practices for providing Good Faith Estimates for long term recurring care including: whether clients need to sign their GFEs; dissemination of information vs creating a contractual bond; how to provide GFEs to clients; how to document GFEs; what you should include in a Good Faith Estimate; who should get a GFE and why; and when to provide GFEs for clients.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources Model Disclosure Notice Regarding Patient Protections Against Surprise Billing from CMS for providers
CMS Overview of Rules & Fact Sheets related to the No Surprises Act and Good Faith Estimates
PCT Resources On-demand CE training (2 legal-ethical CE credit hours): Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice - PCT’s 2023 Practice Primer course, presented by therapist attorney Eric Ström, JD PhD LMHC and PCT director Liath Dalton — includes discussion of No Surprises Act and GFE notices, provision, content, and documentation
Episode 310: [Practice Management] Helpful and Important Tips for Good Faith Estimates
Group Practice Care Premium for weekly (live & recorded) direct support & consultation, Group Practice Office Hours, with the PCT team + Eric Ström, JD PhD LMHC (monthly)
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about ways to start 2024 off with an optimized and fortified group practice.
We discuss starting the new year on a solid foundation; reviewing current group practice systems and tech stacks; ensuring your team has the training they need; checking devices and device security; risk analysis and mitigation; reviewing policies and procedures as well as HIPAA manuals; and the PCT resources that can help you with each of these tips.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Article: 5 Practical Tips for Tidying Things up in Your Practice at the End of the Year
Comprehensive PCT Way HIPAA Compliance Bundle for Group Practices
Service Review Resources: PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way) -- support for reviewing (and selecting) HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs
Training resources: PCT's HIPAA, mental health privacy ethics, and teletherapy role-based foundational trainings for mental group practices + topical needs-based trainings
Device security resources:
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
Computer and Smartphone HIPAA Security Checklist for Therapists
Risk Analysis & Mitigation Resources:
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. Will identify both your 'in-practice' risks and your 'formal compliance' (what required written P&Ps are implemented) needs, while also documenting all the good things your practice is already doing!
PCT's Mini Risk Analysis/Needs Identification 'Circle' Tool (free!)
PCT Article: Why Risk Analysis is a Fundamental Requirement: Highlights Through the Person Centered Tech Lens from the OCR’s Recent Presentation on the HIPAA Security Rule Risk Analysis Requirement
Policy & Procedure and HIPAA Manual Resources:
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently
Policies & Procedures include:
Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
Computing Devices and Electronic Media Technical Security Policy
Bring Your Own Device (BYOD) Policy
Communications Security Policy
Information Systems Secure Use Policy
Risk Management Policy
Contingency Planning Policy
Device and Document Transport and Storage Policy
Device and Document Disposal Policy
Security Training and Awareness Policy
Passwords and Other Digital Authentication Policy
Software and Hardware Selection Policy
Security Incident Response and Breach Notification Policy
Security Onboarding and Exit Policy
Sanction Policy Policy
Release of Information Security Policy
Remote Access Policy
Data Backup Policy
Facility/Office Access and Physical Security Policy
Facility Network Security Policy
Computing Device Acceptable Use Policy
Business Associate Policy
Access Log Review Policy
Forms & Logs include:
Workforce Security Policies Agreement
Security Incident Report
PHI Access Determination
Password Policy Compliance
BYOD Registration & Termination
Data Backup & Confirmation
Access Log Review
Key & Access Code Issue and Loss
Third-Party Service Vendors
Building Security Plan
Security Schedule
Equipment Security Check
Computing System Access Granting & Revocation
Training Completion
Mini Risk Analysis
Security Incident Response
Security Reminder
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re answering frequently asked questions about Business Associate Agreements, or BAAs.
We discuss who should be providing the BAA; evaluating whether a service provider can meet group practice needs; performing due diligence as the HIPAA responsible party; red flags to watch out for; templates we recommend; and when you need a confidentiality agreement instead of a BAA.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re diving into Business Associate Agreements (BAAs) for group practice owners.
We discuss what a BAA is; who is considered a business associate; how to execute and enforce a BAA; documenting BAAs; evaluating if a BAA is sufficient; why a HIPAA statement is not a replacement for a BAA; precedent for enforcement action from the Office of Civil Rights; and what qualifies under the conduit exception.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources HHS Model Business Associate Agreement
HHS SAMPLE BUSINESS ASSOCIATE AGREEMENT PROVISIONS
PCT Resources PCT article: What Is a HIPAA Business Associate?
PCT free CE course: Introduction to HIPAA Security for Group Practice Leaders
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently
Policies & Procedures include:
Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
Computing Devices and Electronic Media Technical Security Policy
Bring Your Own Device (BYOD) Policy
Communications Security Policy
Information Systems Secure Use Policy
Risk Management Policy
Contingency Planning Policy
Device and Document Transport and Storage Policy
Device and Document Disposal Policy
Security Training and Awareness Policy
Passwords and Other Digital Authentication Policy
Software and Hardware Selection Policy
Security Incident Response and Breach Notification Policy
Security Onboarding and Exit Policy
Sanction Policy Policy
Release of Information Security Policy
Remote Access Policy
Data Backup Policy
Facility/Office Access and Physical Security Policy
Facility Network Security Policy
Computing Device Acceptable Use Policy
Business Associate Policy
Access Log Review Policy
Forms & Logs include:
Workforce Security Policies Agreement
Security Incident Report
PHI Access Determination
Password Policy Compliance
BYOD Registration & Termination
Data Backup & Confirmation
Access Log Review
Key & Access Code Issue and Loss
Third-Party Service Vendors
Building Security Plan
Security Schedule
Equipment Security Check
Computing System Access Granting & Revocation
Training Completion
Mini Risk Analysis
Security Incident Response
Security Reminder
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re sharing why risk analysis is essential for mental health providers, inspired by a recent webinar from the Office of Civil Rights (OCR).
We discuss the core mandate of the HIPAA Security Rule; how risk analysis is essential to safeguarding PHI; conceptualizing the lifecycle of PHI in your practice; how often to do a risk analysis; written policy vs. implemented policy; security measures degrading over time; and HIPAA as a useful tool for client care.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. Will identify both your 'in-practice' risks and your 'formal compliance' (what required written P&Ps are implemented) needs, while also documenting all the good things your practice is already doing!
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently
Policies & Procedures include:
Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
Computing Devices and Electronic Media Technical Security Policy
Bring Your Own Device (BYOD) Policy
Communications Security Policy
Information Systems Secure Use Policy
Risk Management Policy
Contingency Planning Policy
Device and Document Transport and Storage Policy
Device and Document Disposal Policy
Security Training and Awareness Policy
Passwords and Other Digital Authentication Policy
Software and Hardware Selection Policy
Security Incident Response and Breach Notification Policy
Security Onboarding and Exit Policy
Sanction Policy Policy
Release of Information Security Policy
Remote Access Policy
Data Backup Policy
Facility/Office Access and Physical Security Policy
Facility Network Security Policy
Computing Device Acceptable Use Policy
Business Associate Policy
Access Log Review Policy
Forms & Logs include:
Workforce Security Policies Agreement
Security Incident Report
PHI Access Determination
Password Policy Compliance
BYOD Registration & Termination
Data Backup & Confirmation
Access Log Review
Key & Access Code Issue and Loss
Third-Party Service Vendors
Building Security Plan
Security Schedule
Equipment Security Check
Computing System Access Granting & Revocation
Training Completion
Mini Risk Analysis
Security Incident Response
Security Reminder
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re answering a question we get asked frequently: can we trust the cloud?
We discuss the benefits of using a HIPAA appropriate cloud service; what we mean when we talk about the cloud; outsourcing expertise, as well as liability and responsibility; how to trust something when you don’t know how it works; and how to educate yourself about data security.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way) -- support for selecting HIPAA-secure, effective, and economical cloud services to meet your practice's functionality and operational needs
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. Will identify both your 'in-practice' risks and your 'formal compliance' (what required written P&Ps are implemented) needs, while also documenting all the good things your practice is already doing!
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk about what policies and procedures you need in group practice.
We discuss why this process is confusing; the difference between a HIPAA clause in an employment contract and specific security policies and procedures; why having policies is helpful (and pitfalls when policies aren’t in place); our customizable templates to help you develop HIPAA security policies and procedures for your practice; the importance of practical application; and taking your time with implementation.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive customizable HIPAA Security Policies & Procedure and materials templates specifically for mental health group practices. with a detailed step-by-step project plan and guided instructions for adopting & implementing efficiently
Policies & Procedures include:
Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
Computing Devices and Electronic Media Technical Security Policy
Bring Your Own Device (BYOD) Policy
Communications Security Policy
Information Systems Secure Use Policy
Risk Management Policy
Contingency Planning Policy
Device and Document Transport and Storage Policy
Device and Document Disposal Policy
Security Training and Awareness Policy
Passwords and Other Digital Authentication Policy
Software and Hardware Selection Policy
Security Incident Response and Breach Notification Policy
Security Onboarding and Exit Policy
Sanction Policy Policy
Release of Information Security Policy
Remote Access Policy
Data Backup Policy
Facility/Office Access and Physical Security Policy
Facility Network Security Policy
Computing Device Acceptable Use Policy
Business Associate Policy
Access Log Review Policy
Forms & Logs include:
Workforce Security Policies Agreement
Security Incident Report
PHI Access Determination
Password Policy Compliance
BYOD Registration & Termination
Data Backup & Confirmation
Access Log Review
Key & Access Code Issue and Loss
Third-Party Service Vendors
Building Security Plan
Security Schedule
Equipment Security Check
Computing System Access Granting & Revocation
Training Completion
Mini Risk Analysis
Security Incident Response
Security Reminder
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. Will identify both your 'in-practice' risks and your 'formal compliance' (what required written P&Ps are implemented) needs, while also documenting all the good things your practice is already doing!
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about the security standards that go along with accepting credit cards in your therapy practice.
We discuss PCI DSS (Payment Card Industry Data Security Standard) compliance and where it is applicable; what payment processors handle; documentation; not handling or storing the full payment information for clients; the different types of security required for HIPAA compliance vs PCI compliance; why you don’t need a BAA with your payment processor; and the intersection of compliance components for PCI and for HIPAA.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Article: What is PCI DSS and Why Do I Care?
CE course: Teletherapy and Remote Payment Methods, Legal-Ethical and Practical Considerations
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
-
more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re offering up a refresher on teletherapy skills.
We discuss the American Telemedicine Association (ATA) standards; our clinical staff teletherapy training (which includes a video presentation skills section); teletherapy considerations for home workspaces; our Remote Workspace Center which has step by step tutorials for a secure home office; troubleshooting telehealth sessions; and staying on top of current best practices with training.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT's Clinical Staff Teletherapy Training (5 CE credit hours, 3 of which are designated as legal-ethical CE)
PCT's Teletherapy Program Director/Supervisor Training (18.5 CE credit hours, plus 6+ CE credit hours of included topical bonus courses)
PCT's Video Presentation Skills In Telemental Health, Both Basic And Intermediate (2 CE credit hours)
PCT's video teletherapy skills coaching service, "Lights, Camera, Therapy"
Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for all team members at no per-person cost)
-
more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain what group practice owners need to know about antivirus protection.
We discuss what implementing antivirus software actually entails; who needs antivirus software; resources for free antivirus software for Windows and Mac; the importance of regularly updating security software; what is the responsibility of the group practice; whether a BAA is necessary with an antivirus and antimalware provider; and our Device Security Center, where you can find more information on the other technical security steps required for any devices touching PHI.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
PCT's Computer & Smartphone HIPAA Security Checklist for Therapists
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and/or Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.
Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
- Access Log Review Policy
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
Plus:
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services are allowable.)
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about Bring Your Own Device policies for group practices.
We discuss pros and cons of BYOD for group practice; allowing team members to use their preferred operating system to increase efficiency and reduce errors; standards for device security; endpoint management software; personal smartphone use; BYOD in the context of client care; device security training as a staff benefit; and Group Practice Care, which includes our system for easily managing personal device security and documentation.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
PCT's Computer & Smartphone HIPAA Security Checklist for Therapists
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and/or Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.
Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
- Access Log Review Policy
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
Plus:
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services are allowable.)
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
PCT's free "mini risk" tool, for needs identification related to what's within and what's outside your practice's Security Circle (including personal device use)
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we dive into the HIPAA Conduit Exception Rule to explore what personal services are okay for group practice staff to use.
We discuss security circles; which services are generally prohibited; the HIPAA Conduit Exception Rule; what qualifies as a HIPAA conduit; email services; phone services; home internet services; VPNs; and mobile hotspots.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and/or Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.
Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
- Access Log Review Policy
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
Plus:
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services are allowable.)
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
PCT's free "mini risk" tool, for needs identification related to what's within and what's outside your practice's Security Circle (including personal service use)
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
Our latest episode is an audio replay of our recent panel with ZynnyMe and Ström Consulting on what therapists need to be aware of regarding terms and conditions.
We discuss the red flags from Simple Practice’s new T&Cs Zoom’s updated T&Cs the differences in these two situations; the impacts of certain T&Cs steps to evaluate services for meeting needs as well as trust and transparency; the difference between HIPAA compliance and HIPAA consistency; healthcare companies using customer data to train AI models; Simple Practice providing untrue information about what is and isn’t PHI; liability after agreeing to new T&Cs BetterHelp’s fines from the FTC; how professional organizations are responding; green and red flags to consider for service providers; informed consent for clients; short and long term EHR considerations for practice owners; voting with your dollars; recommended EHRs; Open Notes and client access to records; and backing up data.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources EHR/Practice Management Reviews by Rob Rienhardt LPCS, M.Ed., NCC at Tame Your Practice
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service with PCT consulting team + monthly session co-facilitated by Eric Ström, JD PhD LMHC
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost) + more
PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way) -- support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT CE Training: The “Open Notes” Rule and Your EHR Choice: Legal Compliance and Client Safety Now and in The Future presented by Rob Rienhardt, LPCS M.Ed., NCC, Eric Ström, JD PhD LMHC, and Roy Huggins, LPC NCC
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we address questions regarding migrating from one EHR to a new EHR and the HIPAA security considerations that need to be taken into account when doing so.
We discuss the process of migrating and importing demographic data from one EHR to another; device encryption and the importance of a secure device while migrating highly sensitive data; how to use Google Drive to safely backup and safeguard your information; and risk management practices to avoid.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours plus:
- Step 5 (Manual & Materials) Support Forums
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
Google Workspace Configuration Help Center (free!)
For Solo Practitioners, Solo Practice Care Premium for weekly (live & recorded) direct support & consultation service, Office Hours, with the PCT team
Plus: Device Security Center access and Home & Mobile Office Security Center access
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss due diligence with Terms & Conditions and Business Associate Agreements, particularly with the recent updates to Simple Practice and Zoom.
We cover common pitfalls we see around accepting Terms & Conditions (T&Cs); what’s required for a HIPAA compliant Business Associate Agreement (BAA); how to evaluate a BAA; Simple Practice’s revamped T&Cs Zoom’s updated T&Cs considerations for switching systems; and when to get an attorney’s opinion.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources Simple Practice Issue * ZynnyMe Blog on the SimplePractice T&C changes * SimplePractice's new T&C * SimplePractice Response Blog Post and FAQ about T&C changes
Zoom Issue * StackDiary article: Zoom's Updated Terms of Service Permit Training AI on User Content Without Opt-Out * Zoom Blog: How Zoom’s terms of service and practices apply to AI features * Zoom's new TOS/T&C * AP News Fact Check article * How to not opt in: Zoom AI Training: How to Turn Off New Permissions (TLDR; never accept the “Zoom IQ Meeting Summary” prompt) * HHS' model BAA
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service with PCT consulting team + monthly session co-facilitated by Eric Ström, JD PhD LMHC; also includes:
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share tips on how to demystify what HIPAA compliance means for you and your practice.
We discuss making compliance accessible and manageable instead of overwhelming; compliance as an ongoing process and set of behaviors; distributing the HIPAA workload; focusing on what you’re doing well already; tips for engaging with HIPAA compliance on an ongoing basis; resources we offer that can help lessen HIPAA overwhelm; how much time to actually set aside for these tasks; and acknowledging the vulnerability required in the HIPAA process.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours plus:
- Step 5 (Manual & Materials) Support Forums
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
- Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
- And more!
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and/or Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.
Policies & Procedures include:
- Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
- Access Log Review Policy
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
- Practice Equipment Catalog
Also included:
- Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
- 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
- PCT Staff Trainings -- fundamental + topical, needs-based training for HIPAA, Privacy Ethics, Teletherapy, and more!
PCT'S HIPAA-Security Awareness Meme-Minders (free!)
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we take a shame-free look at policies and procedures and why they’re beneficial to have in place.
We discuss using in practice behavior to inform policies & procedures; risk analysis; the benefits of having everything written down; how to decide where to start; reducing cognitive overhead and burnout; being prepared for security incidents; HIPAA compliance as a set of behaviors, not a product or a checklist; and the resources PCT offers around policies & procedures.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and/or Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.
Policies & Procedures include: Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
- Computing Devices and Electronic Media Technical Security Policy
- Bring Your Own Device (BYOD) Policy
- Communications Security Policy
- Information Systems Secure Use Policy
- Risk Management Policy
- Contingency Planning Policy
- Device and Document Transport and Storage Policy
- Device and Document Disposal Policy
- Security Training and Awareness Policy
- Passwords and Other Digital Authentication Policy
- Software and Hardware Selection Policy
- Security Incident Response and Breach Notification Policy
- Security Onboarding and Exit Policy
- Sanction Policy Policy
- Release of Information Security Policy
- Remote Access Policy
- Data Backup Policy
- Facility/Office Access and Physical Security Policy
- Facility Network Security Policy
- Computing Device Acceptable Use Policy
- Business Associate Policy
- Access Log Review Policy
Forms & Logs include:
- Workforce Security Policies Agreement
- Security Incident Report
- PHI Access Determination
- Password Policy Compliance
- BYOD Registration & Termination
- Data Backup & Confirmation
- Access Log Review
- Key & Access Code Issue and Loss
- Third-Party Service Vendors
- Building Security Plan
- Security Schedule
- Equipment Security Check
- Computing System Access Granting & Revocation
- Training Completion
- Mini Risk Analysis
- Security Incident Response
- Security Reminder
-
Practice Equipment Catalog
-
Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures
-
2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.
Pair with Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours
-
Step 5 (Manual & Materials) Support Forums
-
assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for all team members at no per-person cost)
-
assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for all team members at no per-person cost)
-
more
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss whether Google’s mail merge feature is appropriate for therapists to send mass communications.
We discuss our advice on using the BCC field (don’t do it!); how Google’s mail merge function works; what’s covered under Google’s BAA; calculating risk; the impacts of a HIPAA breach; and behavioral measures vs. technical measures for reducing risk of error.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources Google (free!) Workspace Configuration Center
PCT's Group Practice Service Selection Workbook & Worksheets - free!! Step 1 of the PCT Way. Support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)
PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + direct support & consultation service, Group Practice Office Hours
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk with Patrick Casale from All Things Private Practice about leading with intentionality in group practice.
We discuss intentions behind starting a group practice; skills that going into being a good leader and practice owner; moving forward from mistakes; making values-based decisions; encouraging job satisfaction and preventing burnout; having hard conversations; being open to healthy conflict and constructive criticism; being willing to delegate; adding administrative support; and what systems, policies, and procedures to have in place when starting a group.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Guest Bio Patrick Casale is a Licensed Clinical Mental Health and Addictions Therapist in Asheville, NC.. He is the owner of All Things Private Practice and Resilient Mind Counseling. Patrick works as a Private Practice Coach and Strategist, and is also a Group Practice Owner, Motivational Speaker, Retreat Planner, and the host of All Things Private Practice Podcast. He has been featured on Private Practice Startup, Abundance Practice Building, Therapy Reimagined, Not Your Typical Psychotherapist, Selling The Couch, and Modern Therapists. Patrick is a passionate advocate, reducing shame and stigma of mental health, as well as impostor syndrome. Patrick helps mental health entrepreneurs break the mold, work through their fears and insecurities, and to embrace their Authenticity. He loves good coffee, craft beer, playing soccer, and traveling the world.
Resources and how to connect with Patrick * All Things Private Practice Podcast * Private Practice Retreats for Therapist Entrepreneurs * Patrick's Facebook Group on Private Practice Building * All Things Private Practice Instagram * All Things Private Practice website
PCT Resources * PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders plus + Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
- PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk about the challenges of utilizing Google Ads in group practice from a HIPAA perspective.
We discuss maintaining steady referrals post-pandemic; guidance from the Office of Civil Rights (OCR); balancing keeping care accessible with ethical marketing; our recommendation for Google Ads support for therapists; normalizing the discomfort of normalcy after years of crisis; using your values to inform your marketing; and finding resources when you need them.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources: * Mental Health Group Practice Google Ad specialist, Joe Bavonese PhD at Uncommon Practices * OCR/HHS: Guidance: Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates
PCT Resources: * PCT training, presented by Joe Bavonese, PhD: Effective and Ethical Marketing for your Therapy Practice * Episode 313: [HIPAA] Compliance Considerations for Your Practice Website * Thriving and Making Comfort Conference Self-Study and Replays including: + Navigating Collective Trauma As A Mental Health Professional + How To Survive Burnout + Internet Marketing During COVID-19 + Legal Considerations For Practice Needs During COVID-19: HIPAA And Marketing, Cross-Jurisdiction Practice
- PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders plus:
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces
- Assignable staff HIPAA Security Awareness: Bring Your Own Device training
-
Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
-
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices
- Care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we're talking about AI use in a group practice setting.
We discuss the ways that AI can impact group practices; risk analysis considerations; ways that AI is already utilized that you may not be aware of; setting explicit policies around AI; vetting whether AI services have access to PHI; steps to take when implementing HIPAA appropriate AI services; and our upcoming training with Eric Ström on navigating the legal and ethical guidelines of AI use for mental health practitioners.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: PCT CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health Live on June 15th, On-Demand Self Study thereafter
-
Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.
-
Presenter Eric Ström, JD PhD LMHC, brings a unique voice to the discourse around AI. He is an AMHCA ethics committee member, and the ethics advisor for the Washington Mental Health Counselors Association. Eric has taught a range of courses in counseling and professional ethics at a variety of graduate and undergraduate programs.
PCT On-Demand CE training: Modern Progress Notes: Considerations for Teletherapy, Insurance Audits, and Artificial Intelligence (AI)
- Modern documentation requires adaptivity and new strategies to manage things like electronic records, insurance audits, teletherapy sessions, and even artificial intelligence (AI). But what is ethical, safe and wise to implement in your practice? Join Dr. Maelisa McCaffrey (Hall) of QA Prep to address common considerations and learn new strategies for coping with notes in our modern era.
PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders plus:
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces Assignable staff HIPAA Security Awareness: Bring Your Own Device training
- Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
PCT's HIPAA Manual for Group Practices -- soon to include a Policy insert on the legal-ethical and appropriate utilization of AI in your mental health group practice.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat about record retention requirements, both under HIPAA and under state law.
We discuss the record retention requirement for HIPAA; the actual client medical record requirements under state law; the difference between documentation of HIPAA compliance activities and maintaining client records; considerations for destroying records, (paper and electronic); how to document destroyed records; where to find record retention requirements for your state; and what should be in a client’s record.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources: PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders plus:
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces
- assignable staff HIPAA Security Awareness: Bring Your Own Device training
- access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we have an insightful conversation with group practice owner + supervisor extraordinaire, Dr. Tara Sanderson, about supervision, artificial intelligence, and leadership.
We discuss leveraging technology and systems for supervision; seeking supervision or consultation throughout your career; features of good supervision; supervision as risk analysis; taking reasonable steps to ensure competence with new technology; considerations for AI use for therapists; current ways therapists utilize AI; balancing legality, ethics, and humanity; being open to other perspectives, continual learning, and vulnerability as a leader; the art form of supervision; trainings that Tara has found helpful; Tara’s podcast and training course; receiving supervision to become a better supervisor; and what’s in Tara’s tech stack.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Show Notes & Additional Information: Dr. Sanderson's Supervision Smörgåsbord Podcast
Dr. Sanderson's How to Have Interns in Your Practice course
PCT Resources Dr. Sanderson's CE training series at PCT: Incorporation of Interns and Supervisees in Mental Health Private Practice: Legal-Ethical, Training, and System Resource Management Considerations
The PCT Way System for optimizing and fortifying your mental health group practice
PCT's Group Practice Care Premium: one of the key resource, support and team management systems Dr. Sanderson utilizes to manage device security, remote workspace security, HIPAA and ethics trainings for her team of interns and supervisees
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we talk about the proposed new rule from the FTC that would ban non-compete clauses in contracts for workers.
We discuss how non-competes tend to operate in group practice; considerations if you have a non-compete in place; how clients experience non-competes; client autonomy and care outcomes; the enforceability of non-compete clauses; non-competes as a deterrent; and shifting mindsets about non-competes.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Show Notes & Additional Information: APA article: Practitioner pointer: How to handle non-compete and non-solicitation clauses
CAMFT attorney article on non-competes and "thoughtful transitions"
JD Supra article: FTC Proposes Ban on Noncompetes
NBC news article on Non-Competes in Healthcare
Non-competition Agreements under Scrutiny at State and Federal Level
PCT Resources PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders plus:
• Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
• Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces
• Assignable staff HIPAA Security Awareness: Bring Your Own Device training
• Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
Our latest episode is a public service announcement about the Texting Campaign Registry and what therapists need to know.
We discuss why the Texting Campaign Registry (TCR) exists; who the TCR applies to (all businesses that send texts in any form); how to register through your phone carrier or service provider; what happens when you don’t register your business; and some of the information you’ll need to provide to register; and when you should register.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Show Notes & Additional Information: Texting Campaign Registry
iPlum FAQ on the TCR
RingRX FAQ on the TCR
RingRX description of the different campaign registration use cases
RingCentral FAQ on the TCR
SpruceHealth FAQ on the TCR
Zoom FAQ on the TCR
Pro Tip for our solo practitioner listeners who don't have a practice website or practice social media presence (required items for "brand verification" as part of the registry process): We suggested to one such PCT client that they use their NPI profile link, which worked successfully.
PCT Resources PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders, plus:
- Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces
- Assignable staff HIPAA Security Awareness: Bring Your Own Device training
- Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we explain why clients cannot waive the need for HIPAA compliance.
We discuss misconceptions that stem from non-enforcement for parts of the HIPAA Security Rule during the federal Public Health Emergency; who needs a BAA; the protections BAAs provide for the HIPAA Covered Entity; client’s rights to request non-secure communications; client’s rights to access their health information; and why clients cannot waive the Business Associate requirement.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources PCT article: What's a HIPAA Business Associate?
PCT article: Clients Have the Right to Receive Unencrypted Emails (and Texts) Under HIPAA
PCT's Sample Request for Non-Secure Communications Form
PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way)
- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality needs
PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders, plus:
- assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members
- access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces
- assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we cover a common area of confusion for group practice owners – contractor clinicians.
We discuss covered entities; HIPAA policies and procedures; IRS factors of control for contractors vs employees; the ABC test to determine classification; contracting as a business to business relationship; acting as a Managed Services Organization (MSO); Business Associate Agreements (BAAs); risk exposure and risk analysis; consequences of misclassifying contractors; and our HIPAA compliance manual service that can help with setup and implementation.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Show Notes & Additional Information: * ABC test for contractors * + Under the ABC test, a worker is considered an employee and not an independent contractor, unless the hiring entity satisfies all three of the following conditions: + - A: The worker is free from the control and direction of the hiring entity in connection with the performance of the work, both under the contract for the performance of the work and in fact; - B: The worker performs work that is outside the usual course of the hiring entity’s business; and - C: The worker is customarily engaged in an independently established trade, occupation, or business of the same nature as that involved in the work performed. * JD Supra article: Independent Contractors Under U.S. Law: Knowing Your ABCs * Independent Contractor Laws by State (with map and key!) * CMS - Covered Entities and Business Associates * + See Business Associates section, particularly: "If a covered entity engages a business associate to help carry out its health care activities and functions, the covered entity must have a written business associate contract or other arrangement with the business associate" and "Also, a covered health care provider, health plan, or health care clearinghouse can be a business associate of another covered entity."
PCT Resources * Free on-demand webinar (with Maureen Werrbach of the Group Practice Exchange, too!): Structuring Your Group Practice for Success -- Considerations for Contractors VS Employees * PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials * + Includes the Terms of Service template for practice as Managed Services Organization and HIPAA Business Associate to contractor clinicians as HIPAA covered entities, template BAAs for executing between practice and contractor clinicians, and comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and Business Associate/MSO. + Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid. * PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members plus: * + Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + Assignable staff HIPAA Security Awareness: Bring Your Own Device training + Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + Direct support & consultation service, Group Practice Office Hours
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about HIPAA compliance with phone services in group practice.
We discuss VoIP, cellular, and landline services; what is subject to the HIPAA Security Rule; how to get a BAA with your phone service provider; phone service providers we recommend; porting phone numbers; managing phone service for a team; and implications for the end of the Public Health Emergency.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
More Information * HHS Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth
PCT Resources * PCT's Group Practice Service Selection Workbook & Worksheets * + Free!! Step 1 of the PCT Way + Support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too! * PCT's 2023 Practice Primer CE training: Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice * + (2 legal-ethical CEs!) * PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations * PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members * + Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + Assignable staff HIPAA Security Awareness: Bring Your Own Device training + Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + Direct support & consultation service, Group Practice Office Hours
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we take a look at WiFi in group practice settings and what group practice owners should know to keep their practices safe.
We discuss risks, both classic and new, around WiFi and network security; whether it’s ever okay to connect to unsecured networks on a device that handles PHI; ways to mitigate risk and to be proactive; good cyber hygiene; setting up a trusted network; VPNs; what to do when you don’t have access to the router; and what to use as a last resort.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
More Information * Forbes article "The Real Risks Of Public Wi-Fi: Key Statistics And Usage Data" * The Dangers of Using Public Wi-Fi (and How To Stay Safe) * Health Sector Cybersecurity Coordination Center's Mobile Device Security Checklist * + see 'Limit Connectivity': "Device owners should be cautious about which networks they connect to, especially public or other untrusted networks. Connection to residential wireless networks should leverage the use of a VPN, should be through access points and modems that are of reputable brands, and have adequate security features properly configured and updated with the latest firmware/operating system software. Devices should ideally only be used to connect to corporate enterprise infrastructure via an approved and properly encrypted wireless network." + (The "hardening" items in the checklist are provided for and supported in PCT's Device Security & Remote Workspace Security process for group practices through Group Practice Care Premium)
PCT Resources * PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members plus * + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + direct support & consultation service, Group Practice Office Hours
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we take a look at how to keep established and potential client info safe and secure on your website.
We discuss the BetterHelp debacle and lessons we can learn from it; contact forms on websites; what qualifies as PHI; where PHI gets collected through websites; how to set up a secure contact form; HIPAA friendly vs. secure email communication; requests for non secure communication; secure form options; what to include in HIPAA Notice of Privacy Practices; Good Faith Estimates; whether tracking technologies and Google Analytics are permissible; and what is and isn’t included in Google’s BAA.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Relevant Resources & Info From Other Sources * JD Supra article on the issues with Better Help & HIPAA lessons learned -- Better Keep Health Data Private, FTC Signals to On-Line Health Care Providers * HHS Model Notice of Privacy Practices * JD Supra's excellent explanation of Psychotherapy Notes * HHS Office of Civil Rights bulletin on Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates * Google on HIPAA & Google Analytics * Easy Opt Out of Google Analytics (on Google Analytics 4)
PCT Resources * PCT's Google Workspace Configuration Learning Center * + Free access! Including a free training, Making Practice Life Easier & More Efficient with Google Workspace, and checklist) + *see the tutorial in the Miscellaneous Tips section: Misc Tip: How to Create a Contact Form (and put it on your website too!) * Need to select a secure form (or secure email) service? Use PCT's free Service Selection Workbook & Worksheet for Group Practices * PCT's Sample Contact Form Conventional Non-Secure Communications Acknowledgement/Opt-In Language * PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service + support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a potpourri of updates on inter-state compacts, parity laws, the end of the PHE, and positive developments in the fight against VC backed mental healthcare companies.
We discuss:
- where the current Social Work Compact legislation stands
- the status of additional inter-state compacts
- implications for multi-state practices
- advocacy for additional compacts
- updated data on teletherapy
- how the end of the federal Public Health Emergency (PHE) will impact teletherapy
- temporary practice provisions in states
- practice permission due diligence and documentation
- coverage parity and payment parity after the PHE ends
- how to advocate for parity
- FTC fines for BetterHelp
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * Public Health Emergency Set to End May 11, 2023: What It Means for the Provision of Telehealth and Related Services * JD Supra Executive Summary: Tracking Telehealth Changes State-by-State in Response to COVID-19 (UPDATED) * COVID-19 Public Health Emergency – Compliance Considerations as We Prepare for the End of the PHE * Telehealth Maintained Behavioral Healthcare Quality During Pandemic * Virtual Behavioral Health Use Increases 45-Fold During Pandemic * Social Work Compact * NASW press release - Social Work Profession One Step Closer to Interstate Licensure Compact * Counseling Compact * Counseling Compact FAQ for counselors * PSYPACT * PSYPACT application/practice FAQ
PCT Resources * PCT's Clinical Staff Teletherapy Training (5 CE credit hours, 3 of which are legal-ethical CE) * PCT's Group Telemental Health Director/Supervisor Training (18.5+ CE credit hours, 12.5+ of which are legal-ethical CE) * PCT's Group Practice Teletherapy Policy & Procedure Manual and Practice Forms Pack * PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness * + Remote Workspaces training for all team members + Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + Assignable staff HIPAA Security Awareness: Bring Your Own Device training + Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + Direct support & consultation service, Group Practice Office Hours
- PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices
-
- Care for your practice using our supportive, shame-free risk analysis and mitigation planning service.
- You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Spring Clean Your Practice sale on our RAMP service now through 3/31/23, save $50
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re busting myths about HIPAA training requirements for group practices.
We discuss training requirements in terms of the Privacy Rule and Security Rule (and the distinctions between them); when training is required; suggestions to keep training uniform; what resources are available for you and your teams; utilizing tools that are already in your tech stack; compliance documentation; preventing burnout; and having a strong security culture in your practice.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources * PCT’s HIPAA Security Reminder Memes * Step Two of the PCT Way: Training -- role-based, foundational and needs-based topical trainings on HIPAA, mental health ethics, and teletherapy designed specifically for mental health group practices * PCT’s Group Practice Care: Assign, remind, and track staff training completion with a few clicks in your PCT Dashboard. Set it and forget it. GPC basic is FREE! *GPC Premium includes HIPAA Security Awareness: Bring Your Own Device + HIPAA Security Awareness: Remote Workspaces training for ALL staff at no per-person cost * Additional Security Reminder sources: HealthITSecurity newsletter (select HIPAA, Cybersecurity and Ransomware option) + the Office of Civil Rights (the HIPAA administrators) Security & Privacy Listservs
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we offer some helpful tips for Good Faith Estimates, or GFEs.
We discuss the No Surprises Act; where to provide a Good Faith Estimate; who gets a GFE; when to provide a GFE to clients; notices vs. contracts; how to list your rates and estimated costs; GFE dispute processes; documenting GFEs; how often to update GFEs; client education; what to do about listing a diagnosis; and getting your GFE reviewed.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we’re talking about the end of the public health emergency in the US as well as what you need to know and do for your practice to be ready.
We discuss when the public health emergency will end (May 11th); which video conferencing platforms can be used going forward; getting clients comfortable with new software; updated considerations for phone service; communicating the importance of these changes to your team; how to select HIPAA appropriate services; prescribing controlled substances through telehealth; securing and hardening remote workspaces; audio only telehealth coverage; and telehealth payment parity and reimbursement rates.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
PCT Resources * PCT's Group Practice Service Selection Workbook & Worksheets * + free!! + Step 1 of the PCT Way + support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)
-
PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
-
PCT's Group Practice Care Premium
-
- service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members +
- access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces +
- assignable staff HIPAA Security Awareness: Bring Your Own Device training +
- access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices +
- direct support & consultation service, Group Practice Office Hours
- PCT's HIPAA Risk Analysis & Risk Mitigation Planning
-
- service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service.
- You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
- Spring Clean Your Practice sale on our RAMP service now through 3/17/23, save $50
Further Resources & References * HHS Fact Sheet: COVID-19 Public Health Emergency Transition Roadmap * From HHS: Telehealth policy changes after the COVID-19 public health emergency * From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE And The End Of HIPAA Enforcement Discretion * From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE – Provider Communication * From the National Consortium of Telehealth Resource Centers: Telehealth In A Post-PHE World * From HHS: Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth * DEA Proposes Limits on Telehealth Prescriptions of Controlled Substances
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we dive deep on the process of HIPAA security risk analysis in a group practice context.
We discuss why risk analysis is overwhelming; reframing the way you consider risk analysis; remembering what you are doing right; the recent annual report to Congress from HHS and the Office of Civil Rights (OCR); general requirements for a risk analysis; how PCT approaches risk analysis (in 2 hours!); categories of risk; the tangible benefits of risk analysis in group practice; risk mitigation plans; and approaching risk analysis without burning out.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources PCT's HIPAA Risk Analysis & Risk Mitigation Service for mental health group practices -- have us perform your risk analysis and do all the heavy lifting of this foundational HIPAA requirement
HHS' Guidance on Risk Analysis
HHS Office of Civil Rights emphasized the need for increased compliance with the Risk Analysis requirement in the recently (2/17/2023) released Annual Report to Congress on Breaches of Unsecured Protected Health Information:
"Risk Analysis. The Security Rule requires regulated entities to conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI held by the covered entity or business associate. Failures to conduct a risk analysis leave regulated entities vulnerable to breaches of unsecured ePHI as cybersecurity attacks are increasing."
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, Liath chats with group practice consultant Gabrielle Juliano-Villani about burnout prevention for group practice leaders.
We discuss Gabrielle’s background in group practice; the importance of a holistic approach; whether burnout is inevitable; building a balanced life; managing burnout for group practice leaders; getting clear on boundaries and expectations; aligning values; nervous system mapping; delegating; slowing down and being mindful as leaders; doing your own work; believing in yourself as the antidote to imposter syndrome; and the tech resources Gabrielle uses in her work.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
Gabrielle's next training for PCT: Teletherapy with Older Adults: Clinical Effectiveness, Legal-Ethical Considerations, and Strategies of Support (2 legal-ethical CE)
All the ways to connect with Gabrielle, her resources and support:
Gabrielle’s Website
Gabrielle’s Create An Abundant Group Practice FB Group
Medicare Consulting for Therapists Website
Medicare Consulting for Therapists FB Group
Gabrielle’s Instagram
Gabrielle’s TikTok
Gabrielle’s LinkedIn
The PCT Way System for optimizing and fortifying your mental health group practice
PCT's Group Practice Care Premium: one of the key resource, support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss the recent LastPass password manager data breach and what impacted users can do.
We discuss the extent of the breach; options for LastPass users (changing all of your passwords, switching to a different service); being wary of phishing attacks after data breaches; security reminders; spotting social engineering attacks; creating strong passwords; changing default security settings; how to approach changing years’ worth of passwords; our recommendations for password managers; whether BAAs are necessary with password managers; and contingency planning.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources Change password strength requirement rules on Last Pass, to 310,000, how-to article [recommended for ALL Last Pass users]
Article on the LastPass breach
Security Awareness assignable staff training: HIPAA Security Topical Trainings Grab-Bag
PCT'S HIPAA-Security Awareness Meme-Minders (free!)
PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we dig into Google’s new email feature, client side encryption within Google Workspace.
We discuss what client side encryption really is; who will have access to this new feature; whether it meets the application needs for mental health group practices; TLS, or transport layer security; what to have in place with clients before sending email; and email best practices to keep everything HIPAA hunky dory.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources Google brings client-side encryption to Gmail for Workspace
Google's "about client side encryption"
Google's Transparency Report on Email Encryption in Transit
PCT's Request for Non-Secure Communications Form (free!)
PCT's free Service Selection Workbook for Group Practices
PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service
CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Eric Ström, JD PhD LMHC to give you a preview on what regulatory changes to expect in 2023 and how to confidently navigate your practice through them.
We discuss shocking HHS guidance on remote communication technologies and BAAs; phone companies that offer BAAs; traditional phone services vs. VOIP services; enforcement policies; providing Good Faith Estimates to 3rd party payers; providing GFEs for all clients; proposed HIPAA privacy rule changes; new timeframes for releasing records; telehealth reimbursement and provider location; cross jurisdictional practice examples from Alaska and Maryland; requesting temporary permission to practice in another state; and how to do jurisdictional due diligence; and our upcoming training with Eric on 1/13/23.
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources PCT CE legal-ethical training (2 CE, live and recorded) for your 2023 practice primer: Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice
HHS Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth
PCT's free Service Selection Workbook for Group Practices
The PCT Way System for optimizing and fortifying your mental health group practice
Group Practice Care Premium with PCT's direct support and consultation service for mental health group practice owners, Group Practice Office Hours with the PCT consulting team and Eric Ström, JD PhD LMHC
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, Liath and Evan offer both security and practical considerations for remote workspaces.
We discuss working remotely during holidays; work life balance; network security considerations; untrusted networks as a public health issue; how to beef up network security; guest networks; VPN pros and cons; mobile hotspots; balancing security and connectivity for clinical effectiveness; and our Remote Workspace Center through Group Practice Care Premium.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for our next episode with guest Eric Ström, JD, PhD, LMHC, who gives us a legal-ethical practice primer for 2023.
For more, visit our website.
Resources JD Supra article on HIPAA Compliance Guidelines for Remote Workers
PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for documenting Remote Workspaces
PCT's HIPAA Risk Analysis & Risk Mitigation service for mental health group practices
PCT's HIPAA Manual for Group Practices
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, Liath chats with Dr. Tara Sanderson about overcoming hiring challenges by bringing on interns and supervisees (legally and ethically) to your group practice.
We discuss training the next generation of practitioners; meeting the present demand for care; cohort style group practice model vs longer term models; getting paid by insurance for supervisees and interns; differences between trainees in the medical field and the mental health field; keeping track of supervisory billing for each insurance company; negotiating insurance contracts and how rates are impacted; how to structure compensation; pros of this model vs hiring fully licensed clinicians; the software and systems to use to keep things running efficiently; considerations for keeping clinicians around post-licensure; and how you can work with Tara to bring interns and supervisees to your group practice.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources Dr. Sanderson's website for her full training on How to Have Interns in Your Practice, which includes an Intern Manual + forms; plus additional resources, and consultation with Dr. Sanderson.
Dr. Sanderson's CE training series at PCT: Incorporation of Interns and Supervisees in Mental Health Private Practice: Legal-Ethical, Training, and System Resource Management Considerations
The PCT Way System for optimizing and fortifying your mental health group practice
PCT's Group Practice Care Premium: one of the key resource, support and team management systems Dr. Sanderson utilizes to manage device security, remote workspace security, HIPAA and ethics trainings for her team of interns and supervisees
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share memories of our beloved Roy Huggins, founder of PCT, whom we unexpectedly lost in November 2021.
The Person Centered Tech team wanted to take the time to share our fond remembrance of him, and to hear from folks in our community, as Roy enriched so many of our lives. Please join us as we remember and celebrate Roy.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
See more memories of Roy, and to add your own if you wish.
Learn more about the offerings Roy and his team at PCT created specifically for you as a mental health group practice owner.
Listen to Roy talk about the PCT Way system in his last Group Practice Tech podcast episode: Episode 223 [Practice Management] The PCT Way, What It Is and Why It Works.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about The PCT Way.
We discuss how we developed The PCT Way; simplifying HIPAA compliance needs; minimizing financial cost as well as time, energy, anxiety, and cognitive overhead; meeting your practice needs and client needs in a way that’s efficient and reliably HIPAA compliant; systems vs. frameworks; solo vs. group practice needs; system bloat; the five primary steps of The PCT Way (service selection, HIPAA training, device security, risk analysis, and building your HIPAA security compliance manual); new features on the Person Centered Tech website; why HIPAA compliance is optional; and being proactive with the PCT Way.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
The PCT Way for Group Practices - a system for making your whole practice work. Learn more, and start for free.
Group Practice Care: PCT Way is the system. Practice care is the service that supports you through it.
Celebratory Launch + Black Friday + Cyber Monday Sale. Save up to 25% on Group Practice Care (annual) and role-based staff HIPAA, ethics, and teletherapy trainings (CE for clinical staff trainings).
Build Your Team -- add your team and assign and track their HIPAA Security Tasks, including:
- Our nationally respected, role-based HIPAA and privacy ethics training built for mental health staff (CE for clinical staff)
- Vital, relevant security awareness training
- Personal device securing (BYOD) and registration
- Automate kind reminders when needed
- Track your team’s progress and completion status
- Manage your team with separate, revocable logins, assigned content, and detailed training logs so you can stay on top of your team’s HIPAA compliance tasks — without the drama.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking with Uriah Guilford of The Productive Therapist about helping therapists find the tools they need to be successful.
We discuss Uriah’s business directory for therapists and its origins, how to pick the right service for your needs, common mistakes therapists make when choosing service providers, how good support is life-changing, focusing on what we’re good at, tips on how and when to delegate, how to afford help when you’re starting out, the toll of holding onto all the hats as a leader, spending your energy on your vision, intake coordinator as a sales position, learning from negative experiences with delegating, trusting people to fulfill their roles, and some of Uriah’s personal favorite services for group practice.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
The Productive Therapist
The Productive Therapist Business Directory for Therapists
PCT's Free Service Selection for Mental Health Group Practices Workbook
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
Free Distress Less Series (Therapy for Therapists)
PCT's Group Practice HIPAA Security Programs (that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about payment processors like Zelle, Paypal, and Venmo.
We discuss the term “HIPAA compliant”; compliance as a process; using “compliant” products in a noncompliant way; our favorite example, Google Workspace; unencrypted email; special HIPAA exceptions, like the conduit exception; the exception for payment processing; making informed choices from a risk management perspective; apps selling user information; collecting payments through your practice management system and Stripe; Square for solo practice; and payment processing fees.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
CE Training: Teletherapy and Remote Payment Methods, Legal-Ethical and Practical Considerations
Article: Banks and HIPAA: Checks & Credit Cards vs. Receipts & Invoices
More details on the HIPAA exemption for financial institutions
Article: Clients Have the Right to Receive Unencrypted Emails (and Texts) Under HIPAA
PCT's Free, Editable Electronic Communication Consent Form
PCT's Free Service Selection for Mental Health Group Practices Workbook
Free Distress Less Series (Therapy for Therapists)
PCT's Group Practice HIPAA Security Programs (that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we discuss the fight for the future of mental health private practice.
We chat about the Amazons of mental health, qualitative differences in care for group practices and mental health platforms, whether group practice is less viable right now, minute mental health, the therapeutic relationship, consumer choice, differentiating your practice from what these services can offer, payment parity for teletherapy, coverage parity, meeting the current demand for therapy, getting paid as a legislative issue, bipartisan support for telehealth coverage and payment parity, and ways to advocate for payment parity.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Parity Laws by State
Will Telehealth Payment Parity Be Permanent or a Passing Fancy?
Previous Episode of Group Practice Tech - Episode 126: [The Teletherapy Lawyer] How Are We Going to Get Teletherapy Payment Parity After COVID?
Free Distress Less Series (Therapy for Therapists)
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
PCT's Group Practice Teletherapy Programs, including PCT's Teletherapy Certified Practice Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about fear-mongering around HIPAA compliance.
We discuss the HIPAA police and why people think they’re real, the consequences of noncompliance, the Office of Civil Rights (OCR), approaching security from a fear-based perspective vs a practical perspective, what to do when there’s a breach of information, how disclosures frequently happen, notifying the OCR and clients, managing client trust, taking remedial action, not letting stress escalate, that notification doesn’t equal punishment, reducing the likelihood of a breach, real risk scenarios for group practice, not acting out of fear, and our upcoming Distress Less series.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Free Distress Less Series (Therapy for Therapists)
Article: What is HIPAA Breach Notification?
PCT's Risk Analysis and Risk Mitigation Planning HIPAA Security Module (done for you)
PCT's Group Practice HIPAA Security Programs (that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about ways to manage the onboarding and offboarding processes in group practice.
We discuss why therapists + practice leaders in particular are burned out right now, why so many folks are going out on their own, how HIPAA is involved in onboarding and offboarding, the HIPAA Security Rule, access to PHI, background checks, due diligence, identifying roles within your practice, ways to optimize onboarding for efficiency and user friendliness, checklists, revoking access to PHI, documentation, access to records, dealing with contentious offboarding, and our upcoming free seminar on onboarding and offboarding with compliance and ease in mind.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Onboarding and Offboarding with Compliance and Ease in Mind -- Live Seminar on growth management and onboarding/offboarding clinicians for group practice leadership
Free Distress Less Series (Therapy for Therapists)
PCT's Free Service Selection for Mental Health Group Practices Workbook
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about stress management and money with Julie Herres from GreenOak Accounting.
We discuss overwhelm, stress cycles, why things are so stressful for group practice owners right now, private practice trends, time vs. money, ways to manage increased stresses, business health and money from a holistic perspective, hiring challenges, managing fear and scarcity, investing in support, delegating tips, practical steps to manage finances effectively, service selection and setting up systems, and HIPAA considerations with accounting software.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Green Oak Accounting, specialized accounting for mental health professionals and group practices
Julie and Green Oak Accounting’s podcast, Therapy for Your Money
Julie's EHRs and QuickBooks articl
PCT's Free Service Selection for Mental Health Group Practices Workbook
Group Practice Office Hours (direct support and consultation service from PCT team and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about using the internet securely wherever you are.
We discuss what an internet connection actually is, vulnerabilities in network connections, network security, guest networks, physical security of network hardware, Virtual Private Networks (VPNs), avoiding lag time with a VPN, using personal devices, cellular hotspots, and our course on security and home offices.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Remote Workplace HIPAA Security Module (document pack + training)
On-demand training: Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues (1 CE credit hour, legal-ethical)
Article: With a VPN, Your Staff Can Work Just About Anywhere
Article: The Traveling Telemental Health Therapist’s Best Friend: VPNs
Free Service Selection PCT Workbook
Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about internal systems that can help optimize and streamline your group practice.
We discuss our new Facebook group (which is full of resources), Loom as a tool to share information, uniformity in training and resourcing, replicating and delegating, Google Workspace, intra sites to organize resources, creating practice culture virtually, Bring Your Own Device and remote device management, and Gusto to streamline payroll and HR.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Group Practice Care with PCT Facebook Group
Group Practice Care with Person Centered Tech is an open space for mental health group practice leaders to come together for support (and responsive, curated resources) around what it takes to build an effective, secure, and ethical group practice where tech and client care go hand-in-hand.
Free Service Selection PCT Workbook
CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
Group Practice Office Hours
(direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about software options for video sessions.
We discuss Roy’s current stance on Zoom, security + legal concerns with Zoom, positives to the increased scrutiny of regulators, improvements that have been made, alternatives to Zoom for group practice owners, important features to consider when choosing video software, Google Meet, Microsoft Teams, and our upcoming presentation on smooth and secure communications with clients.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
Free Service Selection PCT Workbook
Article: Alternatives to Zoom for Groups and Family Therapy
Article: Zoom Might Be Bad For Therapy
PCT's Group Practice Teletherapy Programs, including PCT's Teletherapy Certified Practice Program
Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about communication challenges that come up in group practice.
We discuss meeting the modern client where they are; the evolution of services to help client communication; client portals; functionality, affordability, and efficiency; the security circle; common security challenges with phone, text, and email services; confidentiality issues vs. availability issues; our free service selection workbook; recommendations for phone service + messaging providers; recommendations for secure email providers; escrow email; and our upcoming presentation that goes more in depth on solutions to communication needs in group practice.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Pay-What-You-Can Live Legal-Ethical CE event: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
Free Service Selection PCT Workbook
Free Live Event — 1 Legal-Ethical CE Credit Hours on Risk Management for Group Practices
Introduction to HIPAA Security for Group Practice Leaders
Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about some confusing new legislation out of Connecticut, and why it matters to group practices everywhere.
We discuss new telehealth legislation passed in Connecticut, difficulties with getting clarification from Connecticut officials about what the new law means, miscommunication about new laws, what’s reasonable vs. what’s correct, legal gray areas, taking reasonable action, and documenting due diligence.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Article: Confusion in Connecticut For Out of State Teletherapy Providers and Clients
CE training: Cross-Border Practice in the Age of Telehealth: Interstate and International Mental Health Practice, 2021 Edition
Teletherapy Practice Rules by State For Counselors, MFTs, Psychologists, and Clinical Social Workers
FREE worksheet: "Legality and Permissibility to Practice Across Jurisdictions in the United States for Mental Health Clinicians" Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about HB 3308, new legislation out of Illinois, and why it matters for group practice owners everywhere.
We discuss payment parity, telehealth justice, mass scaling of telehealth through companies like Talkspace and BetterHelp, the cheapening of telehealth, clinicians making up the difference, client choice, the nuances of HB 3308, and how we can work together to effect change.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
"Illinois permanently expands access to telehealth"
HB 3308, full text
Why payment parity is so vital! Episode 205: [Getting Paid] Fight the Cheapening of Telehealth
Episode 206: [Getting Paid] Navigating Teletherapy Insurance Billing in a Post-COVID Future, with Barbara Griswold LMFT
CE training, Telehealth Coverage and Billing in a Post-COVID Future with Barbara Griswold, LMFT
CE training, "Cross-Border Practice in the Age of Telehealth: Interstate and International Mental Health Practice, 2021 Edition"
FREE worksheet "Legality and Permissibility to Practice Across Jurisdictions in the United States for Mental Health Clinicians"
Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Teletherapy Practice Rules by State For Counselors, MFTs, Psychologists, and Clinical Social Workers
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about therapist directories and HIPAA.
We discuss the benefits of directories, improving access to care, measuring success, tracking referrals in directories, facilitating connections through directories themselves, directories collecting + storing PHI, business associate agreements (BAAs), who has to comply with HIPAA, misconceptions about PHI, what constitutes PHI, scope of responsibility, and workarounds to safeguard PHI on directory sites.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
PCT video help tutorial on disabling the email me Psychology Today feature
Group Practice Office Hours
direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC
Person Centered Tech's second annual Thriving & Making Comfort Conference
A virtual, pay-what-you-can, on-demand conference focused on practice-care needs as we transition from a peak pandemic practice context, including a discussion of how to utilize directories in a HIPAA-friendly way.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about some positive developments we’ve seen in state rules about cross-jurisdictional practice.
We discuss grace periods; not making assumptions; the quickly changing rules of cross-state practice; incentives to make sure clinicians are practicing legally; insurance repercussions; practice wide procedures and protocols; specific state examples; improving access to care; time limits to provisions; privacy standards; our upcoming training on this topic; our free 50 state practice rules tool; and we make some predictions for the future of cross-state practice.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
2 CE hour training, live and recorded, Cross-Border Practice in the Age of Telehealth: Interstate and International Mental Health Practice, 2021 Edition (Live on 7/23/21)
PCT's 50-State Teletherapy Practice Rules Survey for Counselors, MFTs, Psychologists, and Clinical Social Workers
PCT's Group Practice Teletherapy Programs, including PCT's Teletherapy Certified Practice Program
Group Practice Office Hours (direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Person Centered Tech's second annual Thriving & Making Comfort Conference
a virtual, pay-what-you-can, on-demand conference focused on practice-care needs as we transition from a peak pandemic practice context, with a keynote from insurance expert Barbara Griswold, LMFT, on Telehealth Coding and Billing in a Post-COVID Future.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about what’s new with cross-state practice provisions as states end their public health emergencies.
We discuss temporary cross-state practice provisions during covid, pandemic mobility, ending temporary provisions, the future of workplace culture, continuity of care, what it means when public health emergencies end, what group practice owners can do to protect their practice, informing clients, keeping track of cross-jurisdictional practice, and expanding access to care.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
2 CE hour training, live and recorded, Cross-Border Practice in the Age of Telehealth: Interstate and International Mental Health Practice, 2021 Edition (Live on 7/23/21)
PCT's 50-State Teletherapy Practice Rules Survey for Counselors, MFTs, Psychologists, and Clinical Social Workers
PCT's Group Practice Teletherapy Programs, including PCT's Teletherapy Certified Practice Program
Group Practice Office Hours
(direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Person Centered Tech's second annual Thriving & Making Comfort Conference
a virtual, pay-what-you-can, on-demand conference focused on practice-care needs as we transition from a peak pandemic practice context, with a keynote from insurance expert Barbara Griswold, LMFT, on Telehealth Coding and Billing in a Post-COVID Future.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about teletherapy certification.
We discuss getting paid for teletherapy, what state licensing boards say about teletherapy certification or training, certification vs competence, teletherapy policies and procedure manuals, insurance company trends, training and competence as values of the therapy profession, why we have a teletherapy certification program, the future of teletherapy certification, telehealth as a medium, separating medium from modality, how words have power, and communicating competence.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
PCT's Group Practice Teletherapy Programs, including PCT's Teletherapy Certified Practice Program
PCT Article: "To Practice Telemental Health, Am I Required to Receive Training?"
Group Practice Office Hours
(direct support and consultation service from PCT consulting team and teletherapy & HIPAA attorney Eric Strom, JD PhD LMHC)
Person Centered Tech's second annual Thriving & Making Comfort Conference
A virtual, pay-what-you-can, live (and recorded!) conference focused on practice-care needs as we transition to a peak pandemic practice context, with a keynote from insurance expert Barbara Griswold, LMFT, on Telehealth Coding and Billing in a Post-COVID Future.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking with Barbara Griswold of Navigating the Insurance Maze about teletherapy billing in the post-COVID future.
We discuss what’s new with insurance billing, getting services covered during the pandemic, the struggle with getting up to date info on client benefits, talking to clients about losing telehealth coverage, single case agreements, resisting the bureaucratic parts of the job, managing expectations, making assumptions, how telehealth coverage may change, third party platforms, parity, advocating at the state level, telehealth coverage and billing, coding, audits, effective progress notes, and our 2nd annual Thriving & Making Comfort Conference.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Person Centered Tech's second annual Thriving & Making Comfort Conference
A virtual, pay-what-you-can, live (and recorded!) conference focused on practice-care needs as we transition to a peak pandemic practice context, with a keynote from insurance expert Barbara Griswold, LMFT, on Telehealth Coding and Billing in a Post-COVID Future.
Essential, timely and topical articles from Barbara at Navigating the Insurance Maze
Group Practice Office Hours (direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re ready to fight against the cheapening of telehealth, and we’re asking you to join us.
We discuss companies like Talkspace and BetterHelp, insurance providers, why group practice owners are concerned about these platforms, the shortage of therapists, making therapy cheap, impacts to quality of care, companies trying to scale mental health treatment, constructive ways to take action, reasons why therapists choose to work with these platforms, the need for accessible clinically effective teletherapy, celebrity spokespeople, business models vs evidence-based practice, how group practices can compete, telehealth parity, and advocating as a group.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
"New Senate Bill Seeks To Continue COVID-19 Telehealth Coverage" from Healthcare IT News
"A new bill before Congress would make permanent several emergency telehealth measures put in place to expand access and coverage during the COVID-19 public health emergency"
"Providers face a magnetic pull toward in-person care, says ATA board chair" from Healthcare IT News
"American Telemedicine Association Board Chair Dr. Joseph Kvedar called on clinicians, suppliers, payers and patients to play their part in fighting for long-term telehealth access."
"House reps seek to permanently safeguard audio-only telehealth coverage" from Healthcare IT News
"A bipartisan bill introduced this week would allow providers to offer audio-only telemedicine services to Medicare enrollees."
"Texas Lawmakers OK Telehealth Expansion for Medicaid, Public Health Plans"
"The bill is one of dozens across the country – including several in Texas – that aim to expand telehealth access and coverage past the pandemic. A few states have chosen to extend emergency provisions for a while in hopes of seeing Congress set federal telehealth policy, but others are pushing ahead with their own laws, creating pockets of permanence around the country."
Group Practice Office Hours (direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about protecting your practice with Daniel Mayer and Melissa Wesner.
We discuss the lack of legal resources for group practice owners, how Dan and Melissa started their podcast, what they don’t teach you in grad school, the importance of knowing what you don’t know, getting solid sources of information, spending money where it’s important, asking for help when you don’t understand something, knowing yourself, going from therapist to CEO, private practice mindset, protecting your clients and peace of mind when you protect your practice, delegating risk management, the responsibility of compliance, returning after covid, technological progress, masking + vaccination status, and the future of telehealth.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Roy and Liath are joined by the hosts of the Protecting Your Practice podcast, group practice owner Melissa Wessner, LCPC LCMHC, and mental health attorney Daniel Mayer, Esquire, to discuss risk management, the things you didn't learn in grad school, and how to know what you don't know about protecting your practice.
After working in the same Greater Baltimore community for some time, Dan, an attorney, and Melissa, a counselor, decided to join forces in order to offer mental health providers the information they need to protect their practices. Coming from two different backgrounds, Dan and Melissa, bring a wealth of knowledge for listeners who want to learn all about the legal and clinical aspects of running a practice.
Protecting Your Practice Podcast
Social Media Accounts: FB & IG @protectingyourpractice
Dan's Law Firm: Mayer Law
Melissa's Consultation Practice: Intentional Practice
Group Practice Office Hours
(direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
PCT's Group Practice HIPAA Security Programs
(that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
Person Centered Tech's second annual Thriving & Making Comfort Conference:
a virtual, pay-what-you-can, conference focused on practice-care needs as we transition to a post-COVID future, with a keynote from insurance expert Barbara Griswold, LMFT, on Telehealth Coding and Billing in a Post-COVID Future.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about the future of telemental health for group therapy practices.
We discuss solidifying growth and looking toward the future, trying to find stability, making decisions that work for your specific practice, insurance coverage for telemental health, new federal legislation, phone sessions, tools and systems for functionality and security, the professional and public pressure for shifts in coverage, some positive signs we’re seeing, telehealth parity laws, the expansion of therapy apps like Talkspace and BetterHelp, cross-state practice, staff preferences for in-person vs telehealth, hybrid practice models, telehealth divisions in groups, and how to use office space going forward.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
- PCT's Group Practice Teletherapy Programs
- "Need for virtual mental health services skyrockets during COVID-19 pandemic" from Healthcare IT News
-
- "Providers learn valuable lessons that can help them deliver effective digital care in the future."
- "Providers face a magnetic pull toward in-person care, says ATA board chair" from Healthcare IT News
-
- "American Telemedicine Association Board Chair Dr. Joseph Kvedar called on clinicians, suppliers, payers and patients to play their part in fighting for long-term telehealth access."
- "House reps seek to permanently safeguard audio-only telehealth coverage" from Healthcare IT News
-
- "A bipartisan bill introduced this week would allow providers to offer audio-only telemedicine services to Medicare enrollees."
- "FCC Is Ready to Move Forward With Connected Care Pilot Program" by mHealth Intelligence
-
- "The agency hopes to get the OK at its June commission meeting to post a second Report and Order on the program, which aims to boost telehealth adoption by funding broadband expansion projects."
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about returning to the office post-Covid and whether or not you can require vaccines and masks.
We discuss the recently updated CDC guidelines, effectively communicating with clinicians and clients, the intensity of emotion related to vaccination status and masking, local regulations for healthcare clinics, managing pushback from clients, guidance from licensing boards, predicating care on vaccination status, reasonable alternative accommodations, requiring masks in waiting rooms, managing risk, uniformly applying rules, access to care, and citing sources.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- APA article: "COVID-19: When is it OK to provide more in-person services?"
- Example Referenced from Oregon Board of Psychology
- Group Practice Office Hours (direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
- PCT's Group Practice HIPAA Security Programs (that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
- PCT's Group Practice Teletherapy Programs
- APA: "Practice Resources In Response to COVID-19"
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about choosing an EHR system and the information blocking (“Open Notes”) rule.
We discuss how information blocking and HIPAA are different, which systems are covered by the new rule, how to know if switching systems makes sense, what the new rule enforces and what it doesn’t, coming cultural shifts in the way we use healthcare services, the different types of EHRs, training + supporting your team’s documentation, worldwide shifts in healthcare privacy, the nuances of psychotherapy notes vs. other healthcare notes, the future of personal health records, charging for releasing records, getting info from your current practice management system on their plans for the future, implications for prescribers, and our free CE event on this topic where you can learn more.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- CE Training: The “Open Notes” Rule and Your EHR Choice: Legal Compliance and Client Safety Now and in The Future with Eric Ström JD PhD LMHC; Rob Reinhardt, LCHMCS, M.Ed., NCC; and Roy Huggins, LPC NCC
- CE Training: How We Need to Give Clients Access to Their Records, Now and in the Future with Eric Ström, JD PhD LMHC, and Roy Huggins, LPC NCC
- Free Presentation: Federal “Open Notes Rule” explained by Eric Ström, JD PhD LMHC, and Roy Huggins, LPC NCC
- Group Practice Office Hours (direct support and consultation service from PCT consulting team and Eric Strom, JD PhD LMHC)
- PCT's Group Practice HIPAA Security Programs (that also help you leverage your practice tech tools to optimize functionality, efficiency, and cost-effectiveness!)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, Liath is joined by Liz Knutsen, one of our PCT Consultants, to talk about why we care about HIPAA security and risk management.
We discuss the sacredness of keeping information private; we compare security practices to inoculation; the likelihood and impact of a breach; having a “why” that keeps us going; breaking down the compliance process into bite sized pieces; the guilt, anxiety, and vulnerability that come up when you’re not compliant; mindfulness during risk analysis; privacy regulations as human rights; the benefits of becoming HIPAA secure; being proactive vs reactive; the comfort and vulnerability of technology; client success stories; and some of the pain points of HIPAA security.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT's Group Practice HIPAA Security Programs
- Risk Analysis & Risk Mitigation Planning done for you
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, Liath is joined once again by Evan Dumas, a consulting team member at PCT, to chat about burnout.
We discuss how the pandemic has accelerated burnout, myths about burnout, systemic burnout, creating a culture of well-being for your team as care providers, other-serving vs self-serving, practical ways to address burnout, vulnerability, creating collaborative solutions with your team, and leveraging tech to address burnout.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
Self-Care Track from PCT's Thriving and Making Comfort Conference (a pay-what-you-want on-demand event) includes "How to Survive Burnout" presentation and "Navigating Collective Trauma as a Mental Health Professional" presentation
Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, Liath talks with Evan Dumas, one of our consulting team members at PCT, about risk analysis.
We discuss HIPAA security risk analysis, the practical utility of risk analysis, taking the judgment out of risk analysis, taking the fear out of HIPAA, the pandemic increasing feelings of vulnerability from a security perspective, reducing anxiety and overwhelm, how risk analysis can be empowering, in practice risk and compliance risk, preparedness, penguin metaphors, work/life boundaries, risk analysis as supporting wellness, ways to get started with this process, and Evan walks us through a sneak peek into a risk analysis with PCT.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Risk Analysis & Risk Mitigation Planning done for you
- PCT's Group Practice HIPAA Security Programs
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, Liath talks with Evan Dumas, one of the consulting team members at PCT, about utilizing the cloud in HIPAA appropriate and functionally impactful ways to reduce risk in group practice.
We discuss local storage, cloud storage and maintaining availability of PHI, why you can trust cloud services and other third parties, the practical benefits of cloud storage over local storage, how using cloud services can reduce risk, digitizing PHI, backups + contingency plans, operational continuity, and Evan demystifies what the cloud really is.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
4 Recipes for HIPAA-Secure, Practice-Efficient Service Selection
Risk Analysis & Risk Mitigation Planning done for you
Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, Liath talks with Evan Dumas, one of the consulting team members at PCT, about establishing a more positive relationship with tech as a practice tool.
We discuss developing comfort with technology, sitting with tech discomfort, where tech discomfort comes from, how tech can meet functionality needs while not being a security problem, approaching technology from a place of curiosity, providing a clear and supportive structure where questions are encouraged, ways to foster a safe space for questions, and Evan busts some myths about being a tech comfortable person.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT's Staff Training
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about bringing in outside helpers to your group practice.
We discuss different types of outside help you can get (biller, VA, intake coordinator, etc.), Business Associate Agreements, establishing boundaries, service level agreements, access credentials, device security, scenarios where this agreement could come in handy, and we go through our own service level agreement form section by section to demonstrate what you could cover.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT's Group Practice HIPAA Security Programs
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about clients’ rights of access to records.
We discuss catching up to rights of access norms as mental health clinicians, mainstream awareness of clients’ rights, GDPR (European privacy law), privacy as a human right, psychotherapy notes/process notes, how things vary state to state, your right to withhold records, records in couples and family therapy cases, implications for the therapeutic alliance, and our upcoming live training and workshop with Eric Strom on this topic.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT CE Presentation + Practical Application Workshop: How We Need to Give Clients Access to Their Records, Now and in the Future
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about choosing services that are holistically beneficial for group practice + support HIPAA compliance.
We discuss facilitating and supporting HIPAA compliance, selecting tech that meets the needs of you + your team, how having systems that meet the needs of your practice can support HIPAA compliance, security circles, Business Associate Agreements, device management, choosing services based on your priorities, and we share group practice tech ‘recipes’ so you can mix and match the services you need.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT Article: 4 Recipes for HIPAA-Secure, Practice-Efficient Service Selection
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about new record-keeping regulations that will be impactful for group practice owners.
We discuss client rights of access to records, mental health privacy/confidentiality vs medical privacy/confidentiality, contexts for writing notes, open notes, ONC certified EHRs, information blocking, how to think about records going forward, the future of practice management systems, examples of what having open notes might look like, and our upcoming (Feb 12th) CE event on this very topic.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- FREE live CE event: Vital Group Practice Update on Upcoming HIPAA Changes, Open Notes, and Recent HIPAA Enforcement, 2021 Edition
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- Staff HIPAA & Teletherapy Training
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking with Maureen Werrbach from The Group Practice Exchange about expanding to meet the increased need for mental health services right now.
We discuss the increase in demand for help during COVID-19, clinicians starting their own solo practice, what sets your practice apart, defining and building practice culture, supervision, building your therapist base, aligning with your business goals, rockstar vs. superstar employees, compensation structures, breakeven analyses, community engagement, making decisions based on your mission and values, and COVID-19 silver linings.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- The Group Practice Exchange
- Group Practice Owner's Summit
- Remote Workplace HIPAA Security Module (document pack + training)
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- Staff HIPAA & Teletherapy Training
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about how to manage remote offices in your group practice in a way that's HIPAA-friendly.
We discuss why we’re talking about remote offices again, being proactive vs. being reactive, developing up a standardized process for setting up a remote office, registering remote offices, accountability, team culture, boundaries, restricted areas, phishing scams, managing sensitive data at home, planning for the long term and the short term, firewalls, and our new Remote Workplace HIPAA Security Module, which makes all of this easy peasy.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Remote Workplace HIPAA Security Module (document pack + training)
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC)
- Staff HIPAA & Teletherapy Training
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about the information blocking rule that will go into effect on April 5, 2021.
We discuss how the rule applies to clinicians, the open notes rule (aka information blocking), psychotherapy notes, practice management systems, certified EHR systems, switching systems, client’s rights of access, harm exceptions, buffer time, cost-benefit analysis, being proactive vs. reactive, and an excellent analogy courtesy of a friend of the pod, Eric Strom.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) -- with special celebratory launch offer.
- Free presentation: Federal “Open Notes Rule”, Active Next Week, Explained by Eric Ström, JD PhD LMHC and Roy Huggins, LPC NCC
- Group Practice Tech Podcast: Episode 130: [Practice Management] Implications of the Federal "Open Notes" Rule
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about wassails and holiday carols. Kidding! We’re talking about how to manage your team remotely.
We discuss managing standard of care in different environments, key components to have in place in environments where there’s client info, home and mobile offices, restricted areas and escort-only areas, enforcing privacy at home, locking up devices, ethical standard vs HIPAA standard, double lock rules, risk management, full disk encryption, shredding documents, Bring Your Own Device policies, secure connections, WiFi guidelines, VPNs, viruses and phishing attacks, how to spot phishing scams, and security reminders.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) -- with special celebratory launch offer.
- On-demand training: Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues (1 CE credit hour, legal-ethical) from PCT's Staff HIPAA Trainings
- PCT's Group Practice Teletherapy Programs
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about recording teletherapy sessions.
We discuss whether clients can record on their end, keeping recordings secure, adding recordings to client files, consents to have in place, informed consent for recording, recording in-person vs. recording teletherapy, supervision via teletherapy, screen capture software, documentation, the availability standard and destroying recordings, Google Workspace, storage on a device vs in the cloud, device security, and do’s and don’ts for recording sessions.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) - with special celebratory launch offer.
- PCT's Group Practice Teletherapy Programs
- PCT's Group Practice HIPAA Security Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking with Dr. Tara Sanderson about supervision and leadership in a group practice context.
We discuss reasons to become a supervisor, supervision as a business model, skills to equip interns with, developing ethical critical thinkers, using values to guide decision making, the clinician side vs. the business owner side, the three hats of practice ownership (boss hat, clinician hat, and employee hat), using the hats to make decisions, specific resources that Tara has found useful, note writing, Google sites, Google Workspace, and planning enough time for supervision.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) -- with special celebratory launch offer.
- PCT's Group Practice HIPAA Security Programs (including contingency planning policy, worksheets and example plans)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about contingency planning.
We discuss how 2020 is the poster year for contingency planning, short term vs long term plans, HIPAA standards, risk management, backups, performative HIPAA compliance, emergency mode operation plans, business continuity, being proactive vs. reactive, learning things the hard way (2020!), criticality analysis, risk analysis, and normal operations vs contingency plans for emergencies.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) -- with special celebratory launch offer.
- PCT's Group Practice HIPAA Security Programs (including contingency planning policy, worksheets and example plans)
- PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about managing and leveraging online forms in your group practice.
We discuss form functionality, online forms for telehealth, ease of use + convenience, form security, HIPAA identifiers, when PHI becomes your responsibility, Google Forms, what to ask in contact forms, what kind of information can go on secure forms, specific software options to use, and as always, security, optimization, and privacy.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) -- with special celebratory launch offer.
- PCT's Group Practice HIPAA Security Programs
- PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about constructive things that you can do to positively impact the future, especially in terms of access to behavioral health care.
We discuss why we decided to record this week, the increased need for therapy services right now, advocating with insurance companies for telehealth, clarity and parity around telehealth payment, toxic positivity, legislative advocacy, direct to client care, getting the attention of your representatives, and group practice office hours.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- H.R.7663 - Protecting Access to Post-COVID-19 Telehealth Act of 2020
- Help Protect Telehealth Access for Our Seniors - Urge your Representatives to Cosponsor H.R. 7663!
- Episode 126: [The Teletherapy Lawyer] How Are We Going to Get Teletherapy Payment Parity After COVID?
- Group Practice Office Hours (direct support and consultation service from PCT and Eric Strom, JD PhD LMHC) (with special celebratory launch offer)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about the upcoming federal Open Notes Rule, which goes into effect on November 2, 2020.
We discuss who needs to know about this new rule, the short term and long term effects of this rule, the electronic health records initiative, quality and coordination of care, the 21st Century Cures Act (and how it is not HIPAA), information blocking, opennotes.org, exceptions to the rule, certified EHR systems, rights of access, the difference between psychotherapy notes and progress notes, and our upcoming webinar with Eric Strom on this topic.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Free presentation: Federal “Open Notes Rule”, Active Next Week, Explained by Eric Ström, JD PhD LMHC and Roy Huggins, LPC NCC
- New PCT Support Service for Group Practice Leaders: Group Practice Office Hours Consultation Service (with Eric Strom too!) -- special introductory offer.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about why internet phone, or VoIP (which stands for Voice over Internet Protocol), is such a useful tool to have in your toolbox.
We discuss client communication between sessions, the circle of control of the practice over personal devices, keeping client data discoverable to the practice, board complaints, separating personal systems from clinical systems, preventing liability, business associate agreements, specific VoIP options that we recommend (and why!), requests for non-secure communications, why VoIP is particularly helpful for remote teams, and our upcoming CE course on working from home.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues PCT CE Training (live and recorded, 1 legal-ethical CE credit hour)
- PCT's Group Practice HIPAA Security Programs
- PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In our latest episode, we’re talking about the increasing demand for teletherapy and hiring clinicians for teletherapy only in your group practice.
We discuss how to increase capacity to meet growing client need, hybrid providers, the pros and cons of teletherapy only providers, office space concerns, insurance coverage for telehealth, culture change for your providers, developing workplace culture remotely, using supervision to expand your provider base, the future of insurance reimbursement for teletherapy, payment parity, contingency plans, ethical and legal standards of care, what to think about when hiring right now, and some tools we recommend.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues PCT CE Training (live and recorded, 1 legal-ethical CE credit hour)
- PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking to Dr. Jeremy Sharp from The Testing Psychologist about remote assessments.
We chat with Jeremy about the background of tele-assessment, the efficacy of tele-assessment, how to re-norm instruments for tele-assessment, equivalency studies, proctors, at-home testing, remote/in-office hybrid models, AI based assessments, best practices, insurance coverage for tele-assessments, navigating the technology, and our upcoming webinar with Jeremy on this topic.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- PCT's CE Training with Dr. Jeremy Sharp (live and on-demand): Tele-Assessment: The Research & Practice of Remote Testing
- The Testing Psychologist
- PCT's Group Practice Teletherapy Programs
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking to Eric Strom, JD, PhD, LMHC, about telehealth payment parity laws and how they have changed in the wake of COVID-19.
We chat with Eric about what payment parity means, shady shenanigans by insurance companies, loopholes, variations state by state, advocacy, specific ways to get involved in advocacy, and removing barriers to care.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- Eric Strom, JD, PhD, LMHC, at Strom Consulting
- PCT CE training: Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues course (live presentation on 10/30/2020!)
- Person Centered Tech's Group Practice Teletherapy Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about how to manage the security of information that your practice is responsible for when you no longer have physical control over the space in which sessions are taking place.
We discuss office security policies, how to do remote work in a HIPAA compliant way, restricted spaces vs public spaces, securing equipment in a home office, devices + internet connections, standard of care for effective teletherapy sessions, Virtual Private Networks (VPNs), Bring Your Own Device (BYOD) policies, devices being compromised, digital hygiene, technical solutions vs behavioral solutions, leveraging your existing resources, and some future training opportunities from PCT that can help you navigate this topic.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- Teletherapy From the Home or Mobile Office: HIPAA, Ethical, and Standard of Care Issues course
- Person Centered Tech's Group Practice Staff HIPAA Training
- Person Centered Tech's HIPAA Security Program (includes Policies & Procedures and BYOD resources)
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about hackers + we have a spooky story for you!
We discuss how scams are getting increasingly sophisticated, social engineering, preying on a lack of knowledge, security reminders, phishing + phone scams, how to be aware of social engineering scams, password strength, and meme-ing security reminders.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Security Reminder Resources:
- TherapyNotes video "How to Protect Your Electronic Records Against Phishing"
- Last Week Tonight with John Oliver "Edward Snowden on Passwords: Last Week Tonight with John Oliver (HBO)"
- Person Centered Tech's Group Practice Staff HIPAA Training
- Person Centered Tech's HIPAA Security Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about managing HIPAA compliance with employees vs. independent contractors.
We discuss Business Associate Agreements, organizing things for HIPAA compliance, the IRS 20 factor test vs the ABC threshold, risk analysis, practice management systems, mail cubbies, behavioral controls vs. technical controls, technical measure solutions, and scope of responsibility.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Structuring Your Group Practice for Success- Considerations for Contractors VS Employees: A free webinar from PCT, with the marvelous Maureen Werrbach of the Group Practice Exchange
- Group Practice HIPAA Security Compliance programs (for both the contractor and employee model) from Person Centered Tech
- “1099 or Employee?" A free informational resource from the Group Practice Exchange
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about onboarding new clinicians to your group practice quickly, easily, and most importantly, correctly.
We discuss lists, policy + procedure manuals, employee manuals, automation, infrastructure to put in place so you can automate successfully, BYOD, software that is helpful in onboarding, documentation, onboarding virtually, letting your practice’s personality and values influence onboarding, and of course, HIPAA.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Role-based Staff HIPAA trainings by Person Centered Tech
- Group practice programs with Person Centered Tech:
-
- Includes Workforce Manual, role-based HIPAA training (CE for clinical staff,) training assigning, reminding and tracking, Bring Your Own Device Policy, BYOD registration form, step-by-step device-specific tutorials for configuring required technical security measures, and much, much more!
Group Practice Teletherapy Program and a la carte components that include Teletherapy Policy & Procedure Manual and 4 CE credit hour Clinical Staff Teletherapy training
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about risk analysis and how it fits into the compliance process, especially as group practices.
We discuss the what makes up risk analysis, what the purpose of it is, how it fits into the compliance HIPAA compliance picture, what complicates risk analysis, how to ensure your risk analysis is thorough and accurate, and how we manage risk analysis with groups.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources:
- Group practice programs with Person Centered Tech; include the PCT Risk Analysis Tool, and the comprehensive program includes PCT performing the risk analysis for your practice!
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking with Barbara Griswold of Navigating the Insurance Maze about billing for teletherapy during COVID-19. Barbara has done hundreds of presentations around getting paid by insurance and navigating insurance, and is a fantastic resource on insurance in group practice.
We discuss the changes COVID-19 brought to billing for telehealth, single case agreements, calling to verify benefits vs. checking online, not making assumptions, timeframes for credentialing during COVID-19, ‘selling’ your practice to insurance panels, training requirements for telehealth, keeping track of when telehealth coverage expires, where to find updated information, CPT codes including place of service codes and modifiers, office locations + home offices, and negotiating contracts.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Person Centered Tech Training (live and recorded): Telehealth Billing in the Age of COVID-19 with Barbara Griswold, LMFT of Navigating the Insurance Maze
- Barbara's Plan-by-plan Insurance Coverage of Telehealth in Response to COVID-19
- Barbara's article "Thinking of Giving Up Your Office? Read this First…"
- Barbara's list of 10 Telehealth Billing Myths
- Have followup questions or want to schedule a consultation with Barbara? Click here.
- Group practice programs with Person Centered Tech
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about how to provide supervision via teletherapy during COVID-19.
We discuss how to exchange videos, whether supervisees can do teletherapy, board rules regarding supervision + teletherapy, best practices for recording teletherapy sessions, consent for recording, developing a process for recording, security for devices, where to store recordings, tech-assisted supervision, teletherapy sessions counting toward clinical hours, and how COVID-19 has changed the way we think about supervision.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT's review of Dreamaker as a tech-assisted supervision tool
- PCT's group practice offerings
- PCT's group practice teletherapy program and role-based trainings
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re giving you an update on some tech tools we recommend for group practices.
We discuss changes to popular video software (specifically Google Meet and VidHealth, having a backup telehealth plan in place, how the updates to video software can benefit your group practice, comparing features of major telehealth software options, security circles, using personal devices versus business devices, phone services (particularly iPlum), secure text messaging, and how these updates can potentially save your practice some money.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Person Centered Tech's Group Practice Programs
- Person Centered Tech's Product Reviews
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Group Practice Tech.
This time, we’re talking with Dr. Keely Kolmes about setting up social media policies in group practice. In 2010, Dr. Kolmes wrote a social media policy that was widely adopted in the field, and now they're back with updates to make it more relevant for the internet in 2020.
We discuss how Dr. Kolmes developed their policy, what a social media policy is and what it should cover, what’s new in the updated policy, how to adapt your policy to different ethical guidelines, personal virtual presence vs. professional virtual presence, concerns about searching for client information online, patients requesting that their records are kept offline, and more.
Listen here: https://personcenteredtech.com/group/podcast/
Stay tuned for future episodes!
For more, visit our website.
Resources
- Dr. Kolmes's 2020 Updated Private Practice Social Media Policy and Dr. Kolmes's Annotated Private Practice Social Media Policy
-
- 15% discount code = Huggins (valid through end of September 2020)
- Dr. Kolmes's original Social Media Policy
- Social Media and Website Ethics CE training from Person Centered Tech
- Group practice programs with Person Centered Tech
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about different chat services you can use in your group practice both for logistical reasons and to promote team cohesion.
We discuss different software options, what to keep in mind HIPAA wise, chat options for discussing client information, using a VOIP service for messaging in your team, and the difference between messaging clients and messaging your team.
Stay tuned for future episodes!
For more, visit our website.
Resources
"HIPAA-propriateness" vendor/product reviews from Person Centered Tech
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about teletherapy again, but with a twist: how to make teletherapy more comfortable, both for the clinician and for the client. When your clients and your clinicians are comfortable with teletherapy, that will directly translate to effectiveness and satisfaction for both parties.
We discuss teletherapy fatigue, ways to resource + equip your team, practical ways to make things easier on your clinicians, moving past the bare minimum to optimizing things, tech comfort + retention, how creating a comfortable environment for your clinicians translates into money for your practice, how to talk to clients about technology, tech recommendations, how to figure out what to invest in, and more.
Stay tuned for future episodes!
For more, visit our website.
Resources
- Roy's presentation "Reducing Fatigue and Improving Satisfaction (Yours and the Client’s) In Teletherapy" from PCT's (recorded) pay-what-you-can on-demand conference Thriving and Making Comfort Conference
- PCT's Group Practice Telemental Health Program
- 2 CE hour course "Video Presentation Skills in Telemental Health, Both Basic and Intermediate
free video "Avoiding Teletherapy Strains and Fatigue"
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking about the big news: as of July 1, 2020, PSYPACT (Psychology Interjurisdictional Compact) is now live! PSYPACT is now taking applications to get the APIT - Authority to Practice Interjurisdictional Telepsychology. PSYPACT is currently enacted in 13 states, but 16 other states have introduced legislation to join, so it could soon be in as many as 31 states.
We discuss the different type of approvals you can apply for with PSYPACT, PSYPACT in the context of COVID, national-level teletherapy, the impact on other types of mental health professionals, where to find state-specific PSYPACT information, the complexities of inter-jurisdictional practice, licensure standards vs. continuity and access to care, steps other mental health professionals can take to support legislation like this, and more.
Stay tuned for future episodes!
For more, visit our website.
Resources
- PCT article: PSYPACT: True Interstate Psychology Starts Today!
- PCT's 50-State Emergency Teletherapy Practice Rules Survey Updated to include PSYPACT!
- PCT's Group Practice Telemental Health Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking with Eric Strom, owner of Strom Consulting. We talk with Eric about marketing a group practice and about cross-jurisdictional practice.
We discuss ways to conceptualize marketing for a group therapy practice, marketing under HIPAA, ways to make your email marketing HIPAA friendly, how having a well thought out email security plan makes your clients feel cared for + secure, how PHI is defined, the need to treat both current client and prospective client info securely, tech notes to keep in mind while marketing, practicing telehealth in multiple states, how different state regulations interact, the importance of doing due diligence, and more.
Stay tuned for future episodes!
For more, visit our website.
Resources
- Strom Consulting
- PCT's 50-State Emergency Teletherapy Practice Rules Survey
- Virtual (Recorded + On-Demand) Thriving and Making Comfort Conference
- Group Practice Telemental Health Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking with Joe Bavonese, owner of Uncommon Practices. We talk with Joe about finding next steps for marketing during COVID.
We’re going deep into group practice marketing strategies this week and talking with Joe all about how he’s adapted his marketing strategy during COVID times.
We discuss shifting your practice to teletherapy, email marketing, community networking, google ads, facebook ads, and what got Joe through the major shift for his practice in the midst of the COVID-19 pandemic; as well as tips for other group practice owners, and silver linings that come with the shift to teletherapy.
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Success
- Uncommon Practices
- Virtual (Live + Recorded) Thriving and Making Comfort Conference
- Group Practice Telemental Health Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re talking with Maureen Werrbach, owner of Urban Wellness Counseling and the founder of The Group Practice Exchange. We talk with Maureen about how she supports fellow group practice leaders, resources she provides and curates for them, and the hands-on and lived experience of being a group practice leader herself.
We’re going deep remote leadership this week and talking with Maureen about how she’s approaching leading from a distance.
We discuss maintaining team culture virtually, Google Meet, finding ways to thrive during the pandemic, coaching clinicians when pivoting gets hard, marketing for telehealth, becoming a continuing education provider, delegating, how she determined her 3 phases for reopening in-person sessions, and silver linings.
Stay tuned for future episodes!
For more, visit our website.
Resources
- Group Practice Exchange Membership
- Group Practice Exchange Facebook Group
- Group Practice Owners Summit
- Virtual (Live + Recorded) Thriving and Making Comfort Conference
- Group Practice Telemental Health Program
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re chatting about some of the most effective ways to build up new clients and get past clients to return for teletherapy. We have suggestions for what to put on your website and best practices for content to sell clients on teletherapy. We also spend some time talking about how our attitudes toward teletherapy can go a long way toward shaping our clients’ thoughts about it.
We also discuss updating Psychology Today and other directory profiles, email marketing + HIPAA, and figuring out what terms to use on your website so people can search for you.
Stay tuned for future episodes!
For more, visit our website.
Resources
- Our upcoming virtual (and recorded!) Thriving and Making Comfort Conference
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
First of all, we want you to know that Person Centered Tech acknowledges that therapy as a field is very white. As group practice leaders, there's both an opportunity and a responsibility to develop and spread anti-racist practices in our own businesses as well as our professions. We can foster diversity and inclusivity within our teams and create a safe and affirming space for black and indigenous people of color and people of color, and Black Lives Matter.
This time, we’re discussing what's happened during this rapid and emerging time of transitioning to telehealth and the context of COVID-19. We also look toward what comes next and how we can grow and strengthen our practices, despite the challenges of the time period that we’re currently in.
We’re going deep on strategies to not just survive this time period, but to thrive during it.
We also discuss the changing regulations for cross-state practice, the difference between offering online therapy and being a fully online therapy practice, PSYPACT, insurance reimbursement, and transitioning from emergency regulations back to normal practice.
Stay tuned for future episodes!
For more, visit our website.
Resources
- 50-State Emergency Teletherapy Practice Rules Survey for Counselors, MFTs, Psychologists, and Clinical Social Workers
- Our upcoming virtual (and recorded!) Thriving and Making Comfort Conference
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
Today’s episode is a conversation with the Documentation Diva herself, Dr. Maelisa Hall. Maelisa is the brains behind QAPrep.com, where she shares her endless wisdom on all things documentation for therapy practices. She offers resources on EHRs, HIPAA, supervision, consultation, and time management on her website.
In today’s chat with Maelisa, we’re talking about making sure you get paid by completing your documentation properly in your practice. We discuss documentation (particularly in the context of the COVID-19 pandemic), quality assurance, telehealth, and telehealth reimbursement. We also talk about barriers to completing notes (including stress and burnout), strategies you can use to avoid clinicians getting behind in notes, reviewing notes for quality assurance, ways to measure progress, audits vs. case reviews, what you should be documenting right now, and communicating policies to clients.
Above all, we look at how proper documentation helps you bring in the money for your practice, provide clinically effective care, and provide professional development for your staff.
Stay tuned for future episodes!
Resources
QA Prep Website
Visit us on our website!
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
On today’s episode, (our first interview!) we’re chatting with Beth Sertell, the owner of Holistic Consultation in Columbus, Ohio. We’ve been talking a lot about Telemental Health recently (if you missed it, check out episodes 105 + 106), so today we’re talking about what Telemental Health looks like in practice in the real world!
Beth completed our Group Certified Practice Program for Telemental Health, and she’s a total rockstar. We chat with Beth to see how she implemented this program in her practice, the lessons she’s learned during the process, and intentional business ownership.
As we’ve mentioned before, Telemental Health is an Opportunity Zone, and we’re taking a look at the opportunities this can open up in a group practice. This episode is PACKED full of tips - if you’re curious about offering telemental health, bookmark this episode! Beth has so much wisdom to share, like the reasons she decided to go with telemental health, the considerations she took into account, the research she gathered, how she rolled out the program with her staff, the benefits of offering telemental health to the practice, how she has informed clients of this new offering, the transition to online sessions with clients, how this works with insurance, and the specific programs she uses to make this offering work.
As always, we look at how technology and telemental health, in particular, can help you expand your group practice, meet the needs of your clients, and help you run your business smoothly.
Stay tuned for future episodes!
Visit us on our website!
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
Today’s episode is focused on Telemental Health. You’ve probably heard of the benefits of telemental health (if you haven’t, listen to episode 105!), but how do you actually go about implementing it in your practice?
Telemental Health is an Opportunity Zone - it can open up opportunities for therapy practices, especially group practices, but it is a bit more complicated than just picking a video conferencing software. Our focus this week is on creating a proactive and intentional telemental health program in our group practice. We discuss the basic needs of a telemental health program, the tools you’ll need to use, and steps to take to get a program up and running. Perhaps more importantly, we talk about the real key to a successful telemental health program - competence in whatever program you are going to use.
As always, we take a deep dive into how to incorporate technology into your therapy practice, while still paying careful attention to the legal and ethical requirements that therapists are bound by.
Stay tuned for future episodes!
Visit us on: https://personcenteredtech.com/
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
Today’s episode is focused on Telemental Health. We’re trying to answer the big question: Is telemental health worth it?
Spoiler alert: We think it is absolutely worth it, especially for group practices.
Telemental Health is an Opportunity Zone - it can open up opportunities for therapy practices, especially group practices. We will walk you through various considerations you should make when preparing a telemental health program for your practice. We talk about what telemental health is in the first place, reasons for choosing to offer it, outside the box things to consider, and preparing your practice to offer this, on both the clinician and client ends.
As always, we’re talking about being proactive instead of reactive when it comes to technology and how you can take advantage of opportunities to grow your practice via telemental health.
Stay tuned for future episodes!
Visit us on: https://personcenteredtech.com/
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
Today’s episode is all about recipes for true G Suite magic! How can you use G Suite’s most popular tools efficiently and effectively for your group practice?
We’ll talk about third party integration of CRM and marketing systems, synchronizing appointments from your record system with Google calendar, sharing schedules with your colleagues, and how to best use Google sheets. Last but not least we’ll tell you how powerful it can be for practices to use single sign-on and access control that G Suite offers.
As always, we question data security, HIPAA friendliness, and of course business associate agreements. Get ready for some true magic!
Stay tuned for future episodes!
Visit us on: https://personcenteredtech.com/
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
This time, we’re discussing device management and device security using GSuite.
- Why should we as group practice owners care about it?
- Where is the difference between managing private vs practice owned devices?
We talk about different GSuite settings for different organizational units, bring your own device policies, and the arguable importance of software updates. We conclude that we need to keep devices secure for good ethical reasons beyond just HIPAA compliance!
Stay tuned for future episodes!
For more, visit our website.
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
Today we’re going to talk about G Suite again, this time about how to best implement it in your practice. We’re tackling security today, including encryption, the security of Gmail, and Business Association Agreements - and have you heard of G Suite’s confidential mode already?
Also, we’re giving a sneak peek at upcoming episodes on online therapy and device management.
Stay tuned for the next episodes!
Visit us on: https://personcenteredtech.com/
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In this episode, we discuss how you as a practice owner can benefit from using G Suite! Whether it’s for collaboration and communication with your team, scheduling appointments, or organizing client information - G Suite can help you be more productive and better organized.
Despite being stoked by all the benefits of the tool, we do not fail to discuss security. We also talk about how can you use G Suite in a way that provides data security and protection for your clients and practice.
Stay tuned for the next episodes!
Visit us on: https://personcenteredtech.com/
Welcome solo and group practice owners! We are Liath Dalton and Roy Huggins, your co-hosts of Person Centered Tech.
In this very first podcast episode we’re giving you a quick overview of how Person Centred Tech helps mental health group practice owners leverage tech to improve their practices.
We’re telling you what to expect from this podcast and give you an outlook on future episodes that will help you get the best out of your tech practices.
Stay tuned for the next episodes!
Visit us on: https://personcenteredtech.com/