Group Practice Tech

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re talking about HIPAA compliance with phone services in group practice. 

We discuss VoIP, cellular, and landline services; what is subject to the HIPAA Security Rule; how to get a BAA with your phone service provider; phone service providers we recommend; porting phone numbers; managing phone service for a team; and implications for the end of the Public Health Emergency. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• HHS Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth

• PCT's Group Practice Service Selection Workbook & Worksheets 

• • Free!! Step 1 of the PCT Way

  • Support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!

• PCT's 2023 Practice Primer CE training: Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice 

• • (2 legal-ethical CEs!)

• PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members 

• • Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

  • Assignable staff HIPAA Security Awareness: Bring Your Own Device training

  • Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • Direct support & consultation service, Group Practice Office Hours

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we take a look at WiFi in group practice settings and what group practice owners should know to keep their practices safe. 

We discuss risks, both classic and new, around WiFi and network security; whether it’s ever okay to connect to unsecured networks on a device that handles PHI; ways to mitigate risk and to be proactive; good cyber hygiene; setting up a trusted network; VPNs; what to do when you don’t have access to the router; and what to use as a last resort. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Forbes article "The Real Risks Of Public Wi-Fi: Key Statistics And Usage Data" 

• The Dangers of Using Public Wi-Fi (and How To Stay Safe) 

• Health Sector Cybersecurity Coordination Center's Mobile Device Security Checklist

• • see 'Limit Connectivity': "Device owners should be cautious about which networks they connect to, especially public or other untrusted networks. Connection to residential wireless networks should leverage the use of a VPN, should be through access points and modems that are of reputable brands, and have adequate security features properly configured and updated with the latest firmware/operating system software. Devices should ideally only be used to connect to corporate enterprise infrastructure via an approved and properly encrypted wireless network."

  • (The "hardening" items in the checklist are provided for and supported in PCT's Device Security & Remote Workspace Security process for group practices through Group Practice Care Premium)

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members plus 

• • access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces

  • assignable staff HIPAA Security Awareness: Bring Your Own Device training 

  • access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • direct support & consultation service, Group Practice Office Hours

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we take a look at how to keep established and potential client info safe and secure on your website. 

We discuss the BetterHelp debacle and lessons we can learn from it; contact forms on websites; what qualifies as PHI; where PHI gets collected through websites; how to set up a secure contact form; HIPAA friendly vs. secure email communication; requests for non secure communication; secure form options; what to include in HIPAA Notice of Privacy Practices; Good Faith Estimates; whether tracking technologies and Google Analytics are permissible; and what is and isn’t included in Google’s BAA.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• JD Supra article on the issues with Better Help & HIPAA lessons learned -- Better Keep Health Data Private, FTC Signals to On-Line Health Care Providers

• HHS Model Notice of Privacy Practices

• JD Supra's excellent explanation of Psychotherapy Notes

• HHS Office of Civil Rights  bulletin on Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates

• Google on HIPAA & Google Analytics

• Easy Opt Out of Google Analytics (on Google Analytics 4)

• PCT's Google Workspace Configuration Learning Center 

• • Free access! Including a free training, Making Practice Life Easier & More Efficient with Google Workspace, and checklist) 

  • *see the tutorial in the Miscellaneous Tips section: Misc Tip: How to Create a Contact Form (and put it on your website too!)

• Need to select a secure form (or secure email) service? Use PCT's free Service Selection Workbook & Worksheet for Group Practices

• PCT's Sample Contact Form Conventional Non-Secure Communications Acknowledgement/Opt-In Language

• PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service + support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share a potpourri of updates on inter-state compacts, parity laws, the end of the PHE, and positive developments in the fight against VC backed mental healthcare companies.

We discuss:

• where the current Social Work Compact legislation stands
• the status of additional inter-state compacts
• implications for multi-state practices
• advocacy for additional compacts
• updated data on teletherapy
• how the end of the federal Public Health Emergency (PHE) will impact teletherapy
• temporary practice provisions in states
• practice permission due diligence and documentation
• coverage parity and payment parity after the PHE ends
• how to advocate for parity
• FTC fines for BetterHelp

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Public Health Emergency Set to End May 11, 2023: What It Means for the Provision of Telehealth and Related Services

• JD Supra Executive Summary: Tracking Telehealth Changes State-by-State in Response to COVID-19 (UPDATED)

• COVID-19 Public Health Emergency – Compliance Considerations as We Prepare for the End of the PHE

• Telehealth Maintained Behavioral Healthcare Quality During Pandemic

• Virtual Behavioral Health Use Increases 45-Fold During Pandemic

• Social Work Compact 

• NASW press release - Social Work Profession One Step Closer to Interstate Licensure Compact 

• Counseling Compact

• Counseling Compact FAQ for counselors 

• PSYPACT

• PSYPACT application/practice FAQ

• PCT's Clinical Staff Teletherapy Training (5 CE credit hours, 3 of which are legal-ethical CE)

• PCT's Group Telemental Health Director/Supervisor Training (18.5+ CE credit hours, 12.5+ of which are legal-ethical CE)

• PCT's Group Practice Teletherapy Policy & Procedure Manual and Practice Forms Pack

• PCT's Group Practice Care Premium service with assignable staff HIPAA Security Awareness

• • Remote Workspaces training for all team members

  • Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces 

  • Assignable staff HIPAA Security Awareness: Bring Your Own Device training 

  • Access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices

  • Direct support & consultation service, Group Practice Office Hours

• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices 

• • Care for your practice using our supportive, shame-free risk analysis and mitigation planning service. 

  • You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. 

  • **Spring Clean Your Practice sale on our RAMP service now through 3/31/23, save $50**

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re busting myths about HIPAA training requirements for group practices.

We discuss training requirements in terms of the Privacy Rule and Security Rule (and the distinctions between them); when training is required; suggestions to keep training uniform; what resources are available for you and your teams; utilizing tools that are already in your tech stack; compliance documentation; preventing burnout; and having a strong security culture in your practice.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• PCT’s HIPAA Security Reminder Memes
• Step Two of the PCT Way: Training -- role-based, foundational and needs-based topical trainings on HIPAA, mental health ethics, and teletherapy designed specifically for mental health group practices
• PCT’s Group Practice Care: Assign, remind, and track staff training completion with a few clicks in your PCT Dashboard. Set it and forget it. *GPC basic is FREE! **GPC Premium includes HIPAA Security Awareness: Bring Your Own Device + HIPAA Security Awareness: Remote Workspaces training for ALL staff at no per-person cost
• Additional Security Reminder sources: HealthITSecurity newsletter (select HIPAA, Cybersecurity and Ransomware option) + the Office of Civil Rights (the HIPAA administrators) Security & Privacy Listservs

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we offer some helpful tips for Good Faith Estimates, or GFEs. 

We discuss the No Surprises Act; where to provide a Good Faith Estimate; who gets a GFE; when to provide a GFE to clients; notices vs. contracts; how to list your rates and estimated costs; GFE dispute processes; documenting GFEs; how often to update GFEs; client education; what to do about listing a diagnosis; and getting your GFE reviewed. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Resources:

• Model Disclosure Notice Regarding Patient Protections Against Surprise Billing from CMS for providers 
• CMS Overview of Rules & Fact Sheets related to the No Surprises Act and Good Faith Estimates 
• Some helpful tips from the folks at Hushmail related to GFE's: No Surprises Act Summary: what your small healthcare practice must do  
• on-demand CE training (2 legal-ethical CE credit hours): Regulatory Changes & Their Implications: What You Need to Know to be in Compliance for a Legal-Ethical Mental Health Practice PCT's 2023 Practice Primer course, presented by therapist attorney Eric Ström, JD PhD LMHC and PCT director Liath Dalton -- includes discussion of No Surprises Act and GFE notices and provision
• The PCT Way System for optimizing and fortifying your mental health group practice
• Group Practice Care Premium with PCT’s direct support and consultation service for mental health group practice owners, Group Practice Office Hours with the PCT consulting team and Eric Ström, JD PhD LMHC

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re talking about the end of the public health emergency in the US as well as what you need to know and do for your practice to be ready. 

We discuss when the public health emergency will end (May 11th); which video conferencing platforms can be used going forward; getting clients comfortable with new software; updated considerations for phone service; communicating the importance of these changes to your team; how to select HIPAA appropriate services; prescribing controlled substances through telehealth; securing and hardening remote workspaces; audio only telehealth coverage; and telehealth payment parity and reimbursement rates.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• PCT's Group Practice Service Selection Workbook & Worksheets

• • free!! 

  • Step 1 of the PCT Way

  • support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)

• PCT's CE training: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations

• PCT's Group Practice Care Premium 

• • service with assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + 

  • access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces + 

  • assignable staff HIPAA Security Awareness: Bring Your Own Device training + 

  • access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices + 

  • direct support & consultation service, Group Practice Office Hours

• PCT's HIPAA Risk Analysis & Risk Mitigation Planning 

• • service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. 

  • You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. 

  • **Spring Clean Your Practice sale on our RAMP service now through 3/17/23, save $50**

• HHS Fact Sheet: COVID-19 Public Health Emergency Transition Roadmap

• From HHS: Telehealth policy changes after the COVID-19 public health emergency

• From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE And The End Of HIPAA Enforcement Discretion

• From the National Consortium of Telehealth Resource Centers: Preparing For The End Of The PHE – Provider Communication

• From the National Consortium of Telehealth Resource Centers: Telehealth In A Post-PHE World 

• From HHS: Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth

• DEA Proposes Limits on Telehealth Prescriptions of Controlled Substances

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we dive deep on the process of HIPAA security risk analysis in a group practice context.

We discuss why risk analysis is overwhelming; reframing the way you consider risk analysis; remembering what you are doing right; the recent annual report to Congress from HHS and the Office of Civil Rights (OCR); general requirements for a risk analysis; how PCT approaches risk analysis (in 2 hours!); categories of risk; the tangible benefits of risk analysis in group practice; risk mitigation plans; and approaching risk analysis without burning out.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

PCT's HIPAA Risk Analysis & Risk Mitigation Service for mental health group practices -- have us perform your risk analysis and do all the heavy lifting of this foundational HIPAA requirement

HHS' Guidance on Risk Analysis

HHS Office of Civil Rights emphasized the need for increased compliance with the Risk Analysis requirement in the recently (2/17/2023) released Annual Report to Congress on Breaches of Unsecured Protected Health Information:

"Risk Analysis. The Security Rule requires regulated entities to conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI held by the covered entity or business associate. Failures to conduct a risk analysis leave regulated entities vulnerable to breaches of unsecured ePHI as cybersecurity attacks are increasing."

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, Liath chats with group practice consultant Gabrielle Juliano-Villani about burnout prevention for group practice leaders.

We discuss Gabrielle’s background in group practice; the importance of a holistic approach; whether burnout is inevitable; building a balanced life; managing burnout for group practice leaders; getting clear on boundaries and expectations; aligning values; nervous system mapping; delegating; slowing down and being mindful as leaders; doing your own work; believing in yourself as the antidote to imposter syndrome; and the tech resources Gabrielle uses in her work. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Resources

Gabrielle's next training for PCT:  Teletherapy with Older Adults: Clinical Effectiveness, Legal-Ethical Considerations, and Strategies of Support  (2 legal-ethical CE)

All the ways to connect with Gabrielle, her resources and support:

Gabrielle’s Website  

Gabrielle’s Create An Abundant Group Practice FB Group 

Medicare Consulting for Therapists Website  

Medicare Consulting for Therapists FB Group

Gabrielle’s Instagram

Gabrielle’s TikTok

Gabrielle’s LinkedIn

The PCT Way System for optimizing and fortifying your mental health group practice

PCT's Group Practice Care Premium: one of the key resource, support and team management systems to manage device security, remote workspace security, HIPAA and ethics trainings for group practices

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we discuss the recent LastPass password manager data breach and what impacted users can do. 

We discuss the extent of the breach; options for LastPass users (changing all of your passwords, switching to a different service); being wary of phishing attacks after data breaches; security reminders; spotting social engineering attacks; creating strong passwords; changing default security settings; how to approach changing years’ worth of passwords; our recommendations for password managers; whether BAAs are necessary with password managers; and contingency planning.  

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Change password strength requirement rules on Last Pass, to 310,000, how-to article [recommended for ALL Last Pass users]

Article on the LastPass breach 

Security Awareness assignable staff training: HIPAA Security Topical Trainings Grab-Bag 

PCT'S HIPAA-Security Awareness Meme-Minders (free!)

PCT's Group Practice Care Premium service with Group Practice Office Hours direct support and consultation service