Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

Our latest episode is a public service announcement about the Texting Campaign Registry and what therapists need to know. 

We discuss why the Texting Campaign Registry (TCR) exists; who the TCR applies to (all businesses that send texts in any form); how to register through your phone carrier or service provider; what happens when you don’t register your business; and some of the information you’ll need to provide to register; and when you should register. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Texting Campaign Registry

iPlum FAQ on the TCR

RingRX FAQ on the TCR

RingRX description of the different campaign registration use cases

RingCentral FAQ on the TCR

SpruceHealth FAQ on the TCR

Zoom FAQ on the TCR

Pro Tip for our solo practitioner listeners who don't have a practice website or practice social media presence (required items for "brand verification" as part of the registry process): We suggested to one such PCT client that they use their NPI profile link, which worked successfully.

PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders, plus:

• Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members

• Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

• Assignable staff HIPAA Security Awareness: Bring Your Own Device training

• Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we explain why clients cannot waive the need for HIPAA compliance. 

We discuss misconceptions that stem from non-enforcement for parts of the HIPAA Security Rule during the federal Public Health Emergency; who needs a BAA; the protections BAAs provide for the HIPAA Covered Entity; client’s rights to request non-secure communications; client’s rights to access their health information; and why clients cannot waive the Business Associate requirement.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

PCT article: What's a HIPAA Business Associate?

PCT article: Clients Have the Right to Receive Unencrypted Emails (and Texts) Under HIPAA

PCT's Sample Request for Non-Secure Communications Form

PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way)

• support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality needs

PCT's Group Practice Care Premium service with direct support & consultation service, Group Practice Office Hours, for group practice leaders, plus: 

• assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members

• access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

• assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we cover a common area of confusion for group practice owners – contractor clinicians. 

We discuss covered entities; HIPAA policies and procedures; IRS factors of control for contractors vs employees; the ABC test to determine classification; contracting as a business to business relationship; acting as a Managed Services Organization (MSO); Business Associate Agreements (BAAs); risk exposure and risk analysis; consequences of misclassifying contractors; and our HIPAA compliance manual service that can help with setup and implementation.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• ABC test for contractors

• • Under the ABC test, a worker is considered an employee and not an independent contractor, unless the hiring entity satisfies all three of the following conditions:

  • • A: The worker is free from the control and direction of the hiring entity in connection with the performance of the work, both under the contract for the performance of the work and in fact;

    • B: The worker performs work that is outside the usual course of the hiring entity’s business; and

    • C: The worker is customarily engaged in an independently established trade, occupation, or business of the same nature as that involved in the work performed.

• JD Supra article: Independent Contractors Under U.S. Law: Knowing Your ABCs

• Independent Contractor Laws by State (with map and key!)

• CMS - Covered Entities and Business Associates 

• • See Business Associates section, particularly: "If a covered entity engages a business associate to help carry out its health care activities and functions, the covered entity must have a written business associate contract or other arrangement with the business associate" and "Also, a covered health care provider, health plan, or health care clearinghouse can be a business associate of another covered entity."

• Free on-demand webinar (with Maureen Werrbach of the Group Practice Exchange, too!): Structuring Your Group Practice for Success -- Considerations for Contractors VS Employees

• PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials

• • Includes the Terms of Service template for practice as Managed Services Organization and HIPAA Business Associate to contractor clinicians as HIPAA covered entities, template BAAs for executing between practice and contractor clinicians, and comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity and Business Associate/MSO.

  • Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members plus:

• • Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

  • Assignable staff HIPAA Security Awareness: Bring Your Own Device training

  • Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • Direct support & consultation service, Group Practice Office Hours

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re talking about HIPAA compliance with phone services in group practice. 

We discuss VoIP, cellular, and landline services; what is subject to the HIPAA Security Rule; how to get a BAA with your phone service provider; phone service providers we recommend; porting phone numbers; managing phone service for a team; and implications for the end of the Public Health Emergency. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• HHS Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth

• PCT's Group Practice Service Selection Workbook & Worksheets 

• • Free!! Step 1 of the PCT Way

  • Support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!

• PCT's 2023 Practice Primer CE training: Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice 

• • (2 legal-ethical CEs!)

• PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members 

• • Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

  • Assignable staff HIPAA Security Awareness: Bring Your Own Device training

  • Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • Direct support & consultation service, Group Practice Office Hours

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we take a look at WiFi in group practice settings and what group practice owners should know to keep their practices safe. 

We discuss risks, both classic and new, around WiFi and network security; whether it’s ever okay to connect to unsecured networks on a device that handles PHI; ways to mitigate risk and to be proactive; good cyber hygiene; setting up a trusted network; VPNs; what to do when you don’t have access to the router; and what to use as a last resort. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Forbes article "The Real Risks Of Public Wi-Fi: Key Statistics And Usage Data" 

• The Dangers of Using Public Wi-Fi (and How To Stay Safe) 

• Health Sector Cybersecurity Coordination Center's Mobile Device Security Checklist

• • see 'Limit Connectivity': "Device owners should be cautious about which networks they connect to, especially public or other untrusted networks. Connection to residential wireless networks should leverage the use of a VPN, should be through access points and modems that are of reputable brands, and have adequate security features properly configured and updated with the latest firmware/operating system software. Devices should ideally only be used to connect to corporate enterprise infrastructure via an approved and properly encrypted wireless network."

  • (The "hardening" items in the checklist are provided for and supported in PCT's Device Security & Remote Workspace Security process for group practices through Group Practice Care Premium)

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members plus 

• • access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

  • assignable staff HIPAA Security Awareness: Bring Your Own Device training 

  • access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • direct support & consultation service, Group Practice Office Hours

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we take a look at how to keep established and potential client info safe and secure on your website. 

We discuss the BetterHelp debacle and lessons we can learn from it; contact forms on websites; what qualifies as PHI; where PHI gets collected through websites; how to set up a secure contact form; HIPAA friendly vs. secure email communication; requests for non secure communication; secure form options; what to include in HIPAA Notice of Privacy Practices; Good Faith Estimates; whether tracking technologies and Google Analytics are permissible; and what is and isn’t included in Google’s BAA.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• JD Supra article on the issues with Better Help & HIPAA lessons learned -- Better Keep Health Data Private, FTC Signals to On-Line Health Care Providers

• HHS Model Notice of Privacy Practices

• JD Supra's excellent explanation of Psychotherapy Notes

• HHS Office of Civil Rights  bulletin on Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates

• Google on HIPAA & Google Analytics

• Easy Opt Out of Google Analytics (on Google Analytics 4)

• PCT's Google Workspace Configuration Learning Center 

• • Free access! Including a free training, Making Practice Life Easier & More Efficient with Google Workspace, and checklist) 

  • *see the tutorial in the Miscellaneous Tips section: Misc Tip: How to Create a Contact Form (and put it on your website too!)

• Need to select a secure form (or secure email) service? Use PCT's free Service Selection Workbook & Worksheet for Group Practices

• PCT's Sample Contact Form Conventional Non-Secure Communications Acknowledgement/Opt-In Language

• PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service + support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share a potpourri of updates on inter-state compacts, parity laws, the end of the PHE, and positive developments in the fight against VC backed mental healthcare companies.

We discuss:

• where the current Social Work Compact legislation stands
• the status of additional inter-state compacts
• implications for multi-state practices
• advocacy for additional compacts
• updated data on teletherapy
• how the end of the federal Public Health Emergency (PHE) will impact teletherapy
• temporary practice provisions in states
• practice permission due diligence and documentation
• coverage parity and payment parity after the PHE ends
• how to advocate for parity
• FTC fines for BetterHelp

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Public Health Emergency Set to End May 11, 2023: What It Means for the Provision of Telehealth and Related Services

• JD Supra Executive Summary: Tracking Telehealth Changes State-by-State in Response to COVID-19 (UPDATED)

• COVID-19 Public Health Emergency – Compliance Considerations as We Prepare for the End of the PHE

• Telehealth Maintained Behavioral Healthcare Quality During Pandemic

• Virtual Behavioral Health Use Increases 45-Fold During Pandemic

• Social Work Compact 

• NASW press release - Social Work Profession One Step Closer to Interstate Licensure Compact 

• Counseling Compact

• Counseling Compact FAQ for counselors 

• PSYPACT

• PSYPACT application/practice FAQ

• PCT's Clinical Staff Teletherapy Training (5 CE credit hours, 3 of which are legal-ethical CE)

• PCT's Group Telemental Health Director/Supervisor Training (18.5+ CE credit hours, 12.5+ of which are legal-ethical CE)

• PCT's Group Practice Teletherapy Policy & Procedure Manual and Practice Forms Pack

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness

• • Remote Workspaces training for all team members

  • Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces 

  • Assignable staff HIPAA Security Awareness: Bring Your Own Device training 

  • Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • Direct support & consultation service, Group Practice Office Hours

• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices 

• • Care for your practice using our supportive, shame-free risk analysis and mitigation planning service. 

  • You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. 

  • **Spring Clean Your Practice sale on our RAMP service now through 3/31/23, save $50**

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re busting myths about HIPAA training requirements for group practices.

We discuss training requirements in terms of the Privacy Rule and Security Rule (and the distinctions between them); when training is required; suggestions to keep training uniform; what resources are available for you and your teams; utilizing tools that are already in your tech stack; compliance documentation; preventing burnout; and having a strong security culture in your practice.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• PCT’s HIPAA Security Reminder Memes
• Step Two of the PCT Way: Training -- role-based, foundational and needs-based topical trainings on HIPAA, mental health ethics, and teletherapy designed specifically for mental health group practices
• PCT’s Group Practice Care: Assign, remind, and track staff training completion with a few clicks in your PCT Dashboard. Set it and forget it. *GPC basic is FREE! **GPC Premium includes HIPAA Security Awareness: Bring Your Own Device + HIPAA Security Awareness: Remote Workspaces training for ALL staff at no per-person cost
• Additional Security Reminder sources: HealthITSecurity newsletter (select HIPAA, Cybersecurity and Ransomware option) + the Office of Civil Rights (the HIPAA administrators) Security & Privacy Listservs

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we offer some helpful tips for Good Faith Estimates, or GFEs. 

We discuss the No Surprises Act; where to provide a Good Faith Estimate; who gets a GFE; when to provide a GFE to clients; notices vs. contracts; how to list your rates and estimated costs; GFE dispute processes; documenting GFEs; how often to update GFEs; client education; what to do about listing a diagnosis; and getting your GFE reviewed. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Resources:

• Model Disclosure Notice Regarding Patient Protections Against Surprise Billing from CMS for providers 
• CMS Overview of Rules & Fact Sheets related to the No Surprises Act and Good Faith Estimates 
• Some helpful tips from the folks at Hushmail related to GFE's: No Surprises Act Summary: what your small healthcare practice must do  
• on-demand CE training (2 legal-ethical CE credit hours): Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice PCT's 2023 Practice Primer course, presented by therapist attorney Eric Ström, JD PhD LMHC and PCT director Liath Dalton -- includes discussion of No Surprises Act and GFE notices and provision
• The PCT Way System for optimizing and fortifying your mental health group practice
• Group Practice Care Premium with PCT’s direct support and consultation service for mental health group practice owners, Group Practice Office Hours with the PCT consulting team and Eric Ström, JD PhD LMHC

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re talking about the end of the public health emergency in the US as well as what you need to know and do for your practice to be ready. 

We discuss when the public health emergency will end (May 11th); which video conferencing platforms can be used going forward; getting clients comfortable with new software; updated considerations for phone service; communicating the importance of these changes to your team; how to select HIPAA appropriate services; prescribing controlled substances through telehealth; securing and hardening remote workspaces; audio only telehealth coverage; and telehealth payment parity and reimbursement rates.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• PCT's Group Practice Service Selection Workbook & Worksheets

• • free!! 

  • Step 1 of the PCT Way

  • support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)

• PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations

• PCT's Group Practice Care Premium 

• • service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + 

  • access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + 

  • assignable staff HIPAA Security Awareness: Bring Your Own Device training + 

  • access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + 

  • direct support & consultation service, Group Practice Office Hours

• PCT's HIPAA Risk Analysis & Risk Mitigation Planning 

• • service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. 

  • You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. 

  • **Spring Clean Your Practice sale on our RAMP service now through 3/17/23, save $50**

• HHS Fact Sheet: COVID-19 Public Health Emergency Transition Roadmap

• From HHS: Telehealth policy changes after the COVID-19 public health emergency

• From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE And The End Of HIPAA Enforcement Discretion

• From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE – Provider Communication

• From the National Consortium of Telehealth Resource Centers: Telehealth In A Post-PHE World 

• From HHS: Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth

• DEA Proposes Limits on Telehealth Prescriptions of Controlled Substances