Group Practice Tech

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share what you need to know about syncing your EHR calendar with HIPAA in mind.

We cover:

• Managing confidentiality and availability of data
• Having redundancies for worst case scenarios
• Types of calendar syncs and their benefits and drawbacks
• How to sync your calendars in a HIPAA-appropriate way

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• PCT's free Group Practice Service Selection Workbook & Worksheets -- support for selecting HIPAA-secure, effective, and economical services to meet your practice's functionality and operational needs
  • optional accompanying on-demand CE training: Designing a Group Practice's Tech Setup for Success: Effectiveness, HIPAA Compliance, Client Safety, and Efficiency (1 legal-ethical CE credit hour)
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we discuss using Google Vids in a group therapy practice context.

We cover:

• Popular screen recording software, Loom, and why it's not HIPAA compliance compatible
• Google Vids being covered by the Google Workspace BAA
• Use cases for screen recording software for group practices
• Key reminders and usage notes for Google Vids

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• Google Workspace Help Center: Get started with Vids in Google Workspace: What you can do with Google Vids

• Free on-demand workshop: Onboarding and Offboarding with Compliance and Ease in Mind
• Free on-demand workshop: Making Practice Life Easier and More Efficient With Google Workspace
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share steps to take to protect client information from being accessed at the US border.

We discuss:

• Devices being searched by Customs and Border Patrol at the US border
• Why border agents can search devices without a warrant
• HIPAA being the minimum security standard, not the ceiling
• When HIPAA permits disclosure of PHI
• How clients can be impacted when PHI is accessed by law enforcement
• How to conduct a risk analysis of the potential impact of client PHI being accessed by law enforcement
• What to remove from devices before traveling
• Upcoming resources we will be providing on this topic

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• the Verge article: Is it safe to travel with your phone right now?

• Travel Device Security Checklist -- coming soon as a free resource! This link will be updated as soon as we publish it. Thanks for your patience while we finish it up!
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• For Solo Practitioners: PCT's Telemental Health Certificate Program

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we debunk two common but dangerous myths about cross jurisdictional practice for therapists.

We discuss:

• Common myths we hear about practicing telehealth across jurisdictions
• The risks of unpermitted practice
• The threshold of client risk (and the only instances where cross-jurisdictional practice is permitted for clients in crisis)
• What constitutes client abandonment and what doesn't
• Requesting temporary practice permission from a different jurisdiction
• Our recent training on navigating legal-ethical cross-jurisdictional teletherapy practice for therapists

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• New CE Training: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals -- on-demand legal-ethical CE training. *Ideal for both leadership and any and all clinicians that provide client care via teletherapy*
  • the must-know information on the current considerations for how to legally and ethically navigate cross-jurisdictional teletherapy practice. In particular, we will address licensure compacts, recent legal developments, state-specific rules, risk management strategies, custodian of record obligations, and working with minors across state lines.
• PCT's Clinical Staff Teletherapy Training
• PCT's Teletherapy Director and Supervisor Training for Group Practices
• PCT's Teletherapy Manuals and Forms for Group Practices
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• For Solo Practitioners: PCT's Telemental Health Certificate Program

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we dive into what group practice owners need to know about encrypted messaging apps.

We discuss:

• Encrypted messaging apps in the news
• What end to end encryption means
• What to look for in an encrypted messaging service
• Why a Business Associate Agreement is necessary
• The difference in risk landscape for mental health therapists and government officials
• Safeguards, like device security measures, to take when using secure messaging apps

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations
• Article: Even Though They Have a Right Under HIPAA To Unencrypted Emails: A Case For Only Using Secure Email and Texting With Clients
• Article: Texting and HIPAA Compliant Practice
• Article: How Do You Document Emails and Text Messages Received From Clients?
• HIPAA-Appropriateness Review of Signal
• HIPAA-Appropriateness Reviews of Secure Messaging platforms
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're sharing recent developments related to teletherapy and Medicare, HIPAA's proposed Security Rule changes, and cross-jurisdictional Compacts.

We discuss:

• Expanded telehealth flexibilities and waivers for Medicare and where things currently stand
• Reactions to the proposed Security Rule updates
• Making updates even when they aren't required to safeguard client info and your practice
• Timelines for applications opening for the Counseling Compact and the Social Work Licensing Compact
• Our upcoming CE training on Cross-Jurisdictional Teletherapy Practice in 2025

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• American Telehealth Association: No Shutdown For Telehealth As Congress Passes Spending Bill To Keep The Government Open, Including Critical Telehealth Extensions, ATA Action Celebrates Vote
• Health IT Security News Article: MGMA, CHIME ask Trump to rescind proposed HIPAA Security Rule
• Counseling Compact: "Applications for Counseling Compact privileges to practice are expected to open in late summer or early fall 2025."
• Social Work Licensure Compact: "Multistate License Applications Open – Target Date of Fall 2025
  • Once the data system is operational in states and the commission has finalized all necessary rulemaking, applications will be made available for social workers to apply for a multistate license. Once eligibility is confirmed by the home state, all fees are paid, and a social worker is granted a multistate license, they will be able to practice in all other member states of the compact without any further steps necessary."

• New PCT *Live & Recorded* Legal-Ethical CE training: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals
  • the must-know information on the current considerations for how to legally and ethically navigate cross-jurisdictional teletherapy practice. In particular, we will address licensure compacts, recent legal developments, state-specific rules, risk management strategies, custodian of record obligations, and working with minors across state lines.
  • Presented by Eric Ström, JD PhD LMHC; and PCT Director, Liath Dalton
  • Live presentation on Friday, March 28th
• PCT's Clinical Staff Teletherapy Training
• PCT's Teletherapy Director and Supervisor Training for Group Practices
• PCT's Teletherapy Manuals and Forms for Group Practices
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• For Solo Practitioners: PCT's Telemental Health Certificate Program

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're dispelling myths about the upcoming in-person visit requirements for Medicare clients.

We discuss:

• The uncertainty in our current regulatory landscape
• What the in-person visit requirements mean for Medicare clients (and what they don't mean)
• Exceptions to the requirements for in-person visits
• Compliance and documentation for these requirements, in the event of a Medicare audit
• Steps to take as a therapy practice owner to be prepared for these requirements and communicate them to staff and clients

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• NB: After recording this podcast episode, the House voted to pass the government funding bill, which includes the extension of the in-person requirement waiver through to September 30, 2025 -- now, we wait to see if the bill passes in the Senate, and if the final version includes the extension
• From the American Psychological Association: The telehealth waiver: What psychologists need to know
• From JD SUPRA: Important Updates on Telehealth Coverage for Medicare Providers

• Relevant CE Training. **New** Live & Recorded: Navigating Legal-Ethical Cross-Jurisdictional Teletherapy Practice in 2025: A Guide for Mental Health Professionals -- 2 Legal-Ethical CE credit hours. Live webinar presentation on March 28th.
  • This 2-hour law & ethics seminar presents an updated review of how to legally and ethically navigate cross-jurisdictional teletherapy practice in 2025.
• PCT's Clinical Staff Teletherapy Training
• PCT's Teletherapy Director and Supervisor Training for Group Practices
• PCT's Teletherapy Manuals and Forms for Group Practices
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
• For Solo Practitioners: PCT's Telemental Health Certificate Program

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're hoping to lower the level of distress around the proposed HIPAA Security Rule changes for therapy practice owners.

We discuss:

• What the some of the proposed changes to the Security Rule are, including penetration testing
• The timeframe for these changes if they are implemented, and the likelihood they actually will be implemented
• The rationale behind the proposed changes, and why they're necessary in our current threat landscape
• How following the PCT Way can minimize the changes you need to make as HIPAA regulations evolve
• Centering client care and safeguarding client info as a motivating factor, rather than fear

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• JD Supra article summarizing proposed HIPAA Security Rule Changes and context: New Year, New HIPAA Security Rule: OCR Adds to Health Care Entities' New Year's Resolutions
• HHS Fact Sheet on proposed changes: HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information
• Full text of the Notice of Proposed Rulemaking (NPRM) in the Federal Register: HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information
• Comments on the NPRM (Note, you can also search the public comments by keyword; ability make comments closed on 3/7/25)

• PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • For Group Practices
• For Solo Practitioners
• PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
• Group Practice Care Premium
• weekly (live & recorded) direct support & consultation service, Group Practice Office Hours -- including monthly session with therapist attorney Eric Ström, JD PhD LMHC
• + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
• + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we have an update for you on the BOI registration requirements for business owners.

We discuss:

• The recent court decision which reinstated the requirement, and when it goes into effect
• What our current guidance is on this requirement (and why)
• Where to file
• Upcoming regulatory changes that will be more consequential for group practice owners, including changes to Medicare

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we break down some important action items for group practice owners as a result of last year's Change Healthcare breach.

We discuss:

• What happened with Change Healthcare
• What a ransomware attack is and how the hackers gained access
• Foundational security awareness training, and creating an overall security culture in your practice
• How to improve training for your workforce
• Having the right security configurations in place in your systems
• The importance of risk analysis and risk mitigation planning
• Codifying everything into comprehensive security policies and procedures

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.