Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re hoping to lower the level of distress around the proposed HIPAA Security Rule changes for therapy practice owners. 

We discuss:

• What the some of the proposed changes to the Security Rule are, including penetration testing
• The timeframe for these changes if they are implemented, and the likelihood they actually will be implemented
• The rationale behind the proposed changes, and why they’re necessary in our current threat landscape
• How following the PCT Way can minimize the changes you need to make as HIPAA regulations evolve
• Centering client care and safeguarding client info as a motivating factor, rather than fear

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• JD Supra article summarizing proposed HIPAA Security Rule Changes and context: New Year, New HIPAA Security Rule: OCR Adds to Health Care Entities’ New Year’s Resolutions
• HHS Fact Sheet on proposed changes: HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information
• Full text of the Notice of Proposed Rulemaking (NPRM) in the Federal Register: HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information
• Comments on the NPRM (Note, you can also search the public comments by keyword; ability make comments closed on 3/7/25)

• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
• For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health  practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
• Group Practice Care Premium
• weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
• + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
• + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we have an update for you on the BOI registration requirements for business owners.

We discuss:

• The recent court decision which reinstated the requirement, and when it goes into effect
• What our current guidance is on this requirement (and why)
• Where to file
• Upcoming regulatory changes that will be more consequential for group practice owners, including changes to Medicare

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we break down some important action items for group practice owners as a result of last year’s Change Healthcare breach.

We discuss:

• What happened with Change Healthcare
• What a ransomware attack is and how the hackers gained access
• Foundational security awareness training, and creating an overall security culture in your practice
• How to improve training for your workforce
• Having the right security configurations in place in your systems
• The importance of risk analysis and risk mitigation planning
• Codifying everything into comprehensive security policies and procedures

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we’re providing a quick update on the Beneficial Ownership Information Report, or BOIR, for group practice owners. 

We discuss:

• What the BOIR is and who would have to file
• The current status of the BOIR requirement, and where to check for updates
• What we currently recommend for practice owners regarding BOIR
• How scammers capitalize on confusion and social engineering red flags to watch out for

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• FinCen Beneficial Ownership Information page
• BOI Small Entity Compliance Guide
• JD Supra Corporate Transparency Act: It’s Still Paused (For Now) -- Published 2/13/25

• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
  • For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we explain what you need to know about non-compete clauses in your group practice.

We discuss:

• The different ways non-compete clauses can function in a healthcare context
• Client rights and autonomy
• The enforceability of non-compete clauses for mental health providers
• Considerations for using templates for legal documents
• Which states have income thresholds for non-compete clauses
• What to expect on the state and federal level going forward

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Noncompete Agreements: Updated Income Thresholds for 2025 | JD Supra
• Drafting Non-Competes in a Shifting Regulatory Landscape | JD Supra
• Non-Competes: What the FTC’s Rule May Mean for Health Care & Life Sciences Providers | JD Supra

• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
  • For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share recent updates from Google Workspace that you may have questions about. 

We discuss:

• The price changes to Google Workspace tiers
• Considerations for choosing the appropriate Google Workspace tier for your needs
• How client side encryption works using Google
• Gemini, Google’s AI
• HIPAA appropriateness and ethical standards regarding AI use
• Communicating these standards to your team
• Cases where using AI would be appropriate 
• Google’s updated appointment scheduler 
• Calendar sync as a contingency plan

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Google Workspace Plan Tiers
• Google Workspace HIPAA Included Functionality (covered by BAA)
• Google Workspace HIPAA Implementation Guide
• About client-side encryption - Google Workspace Admin Help
• Learn about Gmail Client-side encryption - Gmail Help
• Generative AI in Google Workspace Privacy Hub
• Manage access to Gemini features in Workspace services

• Making Practice Life Easier and More Efficient With Google Workspace
  • *Free* On-Demand seminar on utilizing Google Workspace to create more effective and secure systems
  • includes PCT's Google Workspace Configuration Center & Checklist
• Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health
  • Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.
• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
  • For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we discuss the implications of the Section 1557 final rule on nondiscrimination for mental health practices. 

We cover:

• The Section 1557 final rule, what it means, and when it takes effect

• How the Office of Civil Rights (OCR) disseminated this information

• Ways in which AI can be discriminatory

• What to consider when utilizing AI with patient care support tools as a mental health provider

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• The OCR/HHS "Dear Colleague Letter": Re: Ensuring Nondiscrimination Through the Use of Artificial Intelligence and Other Emerging Technologies

• OCR Notice: Ensuring Nondiscrimination in the Use of AI is Good Medicine

• HHS: HHS Artificial Intelligence Strategic Plan

• HHS: Artificial Intelligence Strategic Plan -- Slide Summary

• Federal Register: Section 1557 Final Rule

• Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health

• Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.

• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:

• For Group Practices

• For Solo Practitioners

• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

• Group Practice Care Premium

• weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC

• + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)

• + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share an overview of the big stories, developments, and regulatory changes that will impact group practices in 2025.

We discuss:

• A proposed change to the HIPAA Security Rule, and how it will impact group practices

• OCR resuming their HIPAA Compliance Audit program

• Updates on telehealth provisions and exceptions for Medicare and important dates to know

• Updates on the Counseling Compact and the Social Work Licensure Compact

• Upcoming regulatory changes for AI use and our current recommendations

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Resources:

• Proposed New Rule From HHS: HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information
• Resumption of OCR's (the HIPAA Regulators) HIPAA Audit Program
• New Rule: HIPAA Privacy Rule Final Rule to Support Reproductive Health Care Privacy: Fact Sheet
• Model Attestation for a Requested Use or Disclosure of Protected Health Information Potentially Related to Reproductive Health Care
• New Rule: Fact Sheet 42 CFR Part 2 Final Rule
• Telehealth Update: DEA/HHS Temporary Rule, Medicare Coverage of Telehealth Services, and What to Watch For in 2025
• Medicare Telehealth Flexibilities Get a Three-Month Lifeline
• JPM2025: Regulation of artificial intelligence: Navigating a new frontier in health care | JD Supra

PCT Resources:

• Relevant on-demand, legal-ethical CE training: Law & Ethics of Clinical Documentation for a post Roe world
• Addresses the practical applications of the US Supreme Court’s ruling in Dobbs v. Jackson Women’s Health Organization, with particular focus on the impacts this decision has on client confidentiality and documentation of clinical services
• Relevant on-demand, legal-ethical CE training: The Evolving Legal-Ethical Standard of Care for the Clinical Use of Artificial Intelligence in Mental Health
• Gain insights into the benefits and challenges of incorporating AI technologies into their practice, understand the clinical implications, and learn how to navigate legal and ethical guidelines while maintaining compliance with HIPAA regulations.
• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
• For Group Practices
• For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
• Group Practice Care Premium
• weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
• + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
• + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share information about Google’s new Appointment Scheduler feature.  

We discuss:

• How the feature works and pros and cons compared to similar software
• Whether this new feature is HIPAA compliance compatible
• What Google Workspace tiers include this new functionality
• Usage guidance for this new feature
• Our free Google Workspace Resource Center where you can get more support

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Google Help Center: Set up your appointments & booking page

• Related on-demand workshop (non-CE) *free*: Making Practice Life Easier and More Efficient With Google Workspace
  • this seminar presents systems run by Google Workspace that will make your practice life easier and help you meet or exceed your security and HIPAA compliance requirements.
• PCT's Google Workspace Configuration Center (*free*)
  • Includes a handy checklist!
• PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs
  • optional accompanying on-demand CE training: Designing a Group Practice’s Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour)
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we cover the culprit of the latest HIPAA penalty, how it happened, and how you can take action to stop it from happening to you. 

We discuss:

• Instances of monetary HIPAA penalties
• Sharing login credentials between workforce members vs with unauthorized third parties
• The importance of multi factor authentication
• Using the Google Authenticator app for MFA 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• About the violations & penalty: HHS Office for Civil Rights Imposes a $548,265 Penalty Against Children’s Hospital Colorado for HIPAA Privacy and Security Rules Violations

• Related Training (non-CE): Security Awareness Grab-Bag
  • A collection of three short courses helping you and your staff maintain your security awareness through better handling of PHI in public, avoiding inappropriate disclosures, and preventing phishing and social engineering attacks.
• Referenced podcast: Episode 440: MFA Made Easy with Google Authenticator
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • +  assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.