Group Practice Tech

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share what to do as a practice owner to prevent email hacks, and how to respond if one occurs.

We discuss:

• Technical and behavioral measures to take to prevent email hacks
• Mandating two-factor authentication system-wide
• Education and staff training for prevention
• Creating a shame-free security culture in your practice
• Steps to take if you receive an email that looks suspicious
• Steps to take if you find out your email has been hacked
• Breach reporting timelines to be aware of
• PCT resources that guide you through security training and awareness; risk analysis and mitigation planning; and breach investigation, documentation, and reporting
• Ongoing training and security reminders for your team

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• CE Training: PCT's HIPAA Breaches and Investigation course, including a security investigation documentation form.
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're highlighting the stories that impacted your practices this year, and the main takeaways from each story.

We discuss:

• The proposed changes to the HIPAA Security Rule
• Common sense security updates to incorporate into your practice
• The proliferation of AI and ways therapists can differentiate themselves from AI
• The proliferation of platforms offering practice management as a service
• How group practices can stand out from these practice management platforms
• Clinician burnout and clinicians returning to their clinical roots
• Progression of cross-jurisdictional practice mobility
• The uncertainty around the Medicare telehealth cliff

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• The relevant episodes of our podcast as mentioned:
  • On Practice Management companies
  • On the Medicare cliff
  • On proposed HIPAA changes
• Free handout resource: Clinician Conversation Starters: Bringing Client AI Use Into the Therapy Room
  • Practical prompts and responses to help clinicians talk with clients about AI use in ways that are safe, constructive, and clinically grounded.
• Free handout resource: Clinical Leadership Checklist: Guiding Teams in Addressing Client AI Use
  • A step-by-step guide for clinical supervisors and directors to make client AI use considerations an intentional part of practice culture, including team awareness, policy updates, and supervision strategies.
• On-Demand CE course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice
  • This 3 CE credit training with attorney and mental health counselor Eric Ström, JD, PhD, LMHC explores the rapidly evolving world of artificial intelligence in behavioral health. Learn how AI tools are being applied in clinical practice, what legal and ethical standards apply, and how to confidently evaluate whether and how to integrate new technologies. Participants gain practical strategies for aligning AI use with HIPAA, professional ethics codes, and client care standards—empowering you to implement AI tools responsibly and effectively in your practice.
  • **Useful for all clinicians and practice leadership**
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we chat with Ben Cutler, CEO of Hushmail, about how a secure email service can be a crucial part of your practice's tech stack.

We discuss:

• How secure email can complement the communication features of your EHR
• Communication gaps in EHRs that can impact your security circle
• Pairing secure forms with secure email to optimize the intake process
• Secure communications as a marketing asset
• Creating more efficient streamlined services for clients and providers
• Addressing burnout via efficient business systems
• Using Hushmail to customize forms and coordinate care
• Misconceptions around non-secure communications
• The difference between HIPAA friendly and HIPAA secure

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Free Trial of Hushmail!
  • Hushmail provides HIPAA-compliant secure email and encrypted online forms designed specifically for behavioral health professionals. It fills the critical gaps your EHR can't cover—especially during first contact, referrals, and communication with people outside your EHR's closed messaging system.
  • With encrypted email, customizable secure forms, legally binding e-signatures, and ready-to-use templates, Hushmail helps therapists protect client information from the very first inquiry through the entire clinical journey. Clinicians can securely manage intake, collect sensitive documents, send referrals, and maintain compliant records—even during practice transitions or retirement.
  • Hushmail's behavioral-health-specific plans include a signed BAA, automatic archiving to support HIPAA compliance, and access to a customer care team deeply familiar with the needs of therapy practices.
  • Exclusive for listeners: Try Hushmail for Healthcare free for 14 days and explore secure email and forms tailored for your practice.

• PCT CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours)
• PCT Podcast Episode: Episode 317: [Compliance] Can Clients Waive the Need for HIPAA Compliance?
• PCT's Sample Request for Non-Secure Communications Form

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we answer a frequently asked question: whether therapy practices actually need cybersecurity insurance.

We discuss:

• The benefits and considerations of obtaining a cybersecurity insurance policy
• PCT's stance on cybersecurity insurance for solo and group practices
• How cyber insurance relates to your full HIPAA compliance program
• Common reasons for claim denials
• The six major areas where cyber policies differ, and how to choose your policy
• How a PCT risk analysis can help you determine what level of insurance makes sense for your practice

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Handout: Cybersecurity Insurance for Your Practice — What to Consider (and How to Talk With Your Agent)
  • This episode's companion handout breaks down the six key areas to evaluate when reviewing or selecting a cybersecurity insurance policy for your mental health practice.
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a prioritized mitigation checklist to help you reduce your risks. (**Currently on sale!!**)
• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
  • For Solo Practitioners
    • Comprehensive HIPAA Security Policies & Procedures
    • Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
    • Device & Workspace Security Suites
    • Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
    • Includes the Risk Analysis & Risk Mitigation Planning service + tool
    • HIPAA Security & Privacy Ethics training

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share some positive stories to bring you some peace of mind at this time of year.

We discuss:

• Increasing transparency requirements for AI service providers
• Cross-jurisdictional licensure portability/practice permissions expansion
• No telehealth cliff for Medicare clients, and the in-person visit requirement
• How security standards are becoming easier to adopt
• Practice culture becoming easier due to supportive systems

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we chat with Gabrielle Juliano-Villani of Medicare Consulting for Therapists about recent updates regarding Medicare and telehealth.

We discuss:

• The extension of in-person visit requirement
• What that means for new and established clients
• Coping skills for the ups and downs of business
• Main takeaways for practice owners with the recent extension
• Where to get updates on this topic

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we unpack what Practice Management Companies (PMCs) are, and the legal and ethical considerations for therapists when using these platforms.

We discuss:

• The proliferation of Practice Management Companies
• The difference between PMCs and EHRs
• Why the benefits of PMCs are so tempting to new clinicians in particular
• How these companies are marketed vs. what clinicians can actually expect
• Who owns PMCs, and the implications of that
• How group practice owners can use this information when hiring new clinicians
• How solo practitioners can weigh this information when deciding what platforms to use
• Our recent webinar that dives deeper into this topic with Kelly and Miranda from Zynnyme and Eric Strom, therapist attorney

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we have an update for you on what's changed with teletherapy coverage for Medicare clients.

We discuss:

• Our free 90 minute webinar that goes deeper into this topic
• What is still covered for behavioral/mental health services
• What has changed for behavioral/mental health services
• Who is considered an established client or a new client
• Exceptions to the in-person visit requirement
• Next steps to take to prepare for this change in your practice
• Medicare Advantage plans and Medicaid

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're sharing a PSA about how Apple Note sharing works, so therapy practices can avoid a breach.

We discuss:

• The context that precipitated this episode
• What constitutes a breach
• How sharing works for Apple Notes and Google Keep
• Only using services you have a BAA with
• Compliance as a process, not a product
• Steps solo and group practitioners can take to address this

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we have an important update for therapists regarding the reproductive health Final Rule.

We discuss:

• The Final Rule requirements that would have impacted therapists
• Why the Final Rule isn't applicable now
• Being aware of any state laws that are applicable regarding reproductive health information
• Intentionality and care around sensitive info within PHI
• Our CE training on Law and Ethics of Clinical Documentation in a Post-Roe World

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Relevant on-demand, legal-ethical CE training: Law & Ethics of Clinical Documentation for a post Roe world
  • Addresses the practical applications of the US Supreme Court's ruling in Dobbs v. Jackson Women's Health Organization, with particular focus on the impacts this decision has on client confidentiality and documentation of clinical services
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC

• HHS OCR Fact Sheet – HIPAA Privacy Rule to Support Reproductive Health Care Privacy (Final Rule Overview)
• JD SUPRA Article: Federal Court Strikes Down HIPAA Reproductive Health Privacy Rule Lifting Compliance Requirements for Regulated Entities
• Court Case – Purl v. U.S. Department of Health and Human Services, No. 2:24-cv-228-Z (N.D. Tex. June 18, 2025) (decision vacating most of the Final Rule)
• Legal Analysis – Holland & Knight: HIPAA's Reproductive Health Rule is Vacated Nationally
• Law Firm Compliance Guidance – Ropes & Gray: U.S. District Court Ruling Vacates HIPAA Final Rule on Reproductive Health Privacy