1d ago

Episode 114 | For the Love of HIPAA, Stop Clicking That!

Spam emails used to be easy to spot. Bad grammar. Weird sender. A Nigerian prince with an unusually urgent financial situation that was going to make you an overnight millionaire. Those were simpler times. In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood dig into the increasingly sophisticated phishing and spear-phishing attacks hitting dental and healthcare practices, including fake encrypted messages, DocuSign-style links, retirement party invitations, and emails convincing enough to fool people who absolutely know better. And that’s the problem... cybercriminals have gotten better at this. Amy explains how attackers are using compromised email accounts, publicly available information, social engineering, and AI to create highly targeted attacks. One wrong click can give them access to an inbox full of patient information, passwords, insurance portals, cloud practice management systems, financial accounts, vendor relationships, and plenty of other information they can monetize. Kara and Amy also tackle the uncomfortable reality that cybersecurity isn’t just an IT problem. It’s a people, process, access, and leadership problem. Also in this episode: Why phishing emails are getting much harder to recognize How hackers turn one compromised inbox into attacks on patients, vendors, and other practices What social engineering has to do with your pets, kids, birthdays, and everything else you post online Why cybersecurity training should actually test whether employees recognize phishing attempts The problem with giving employees, managers, and even owners access they don't actually need Why shared passwords and excessive system permissions create unnecessary exposure What practices should be doing now while proposed HIPAA Security Rule changes continue to be delayed How AI is making cybercriminals faster and more sophisticated Why changing the password after an email compromise may be nowhere near enough And yes, even cybersecurity experts click things they shouldn’t sometimes. Amy shares how a highly targeted OneDrive phishing attack caught her using the name of a project she was actively working on. Because the goal isn’t pretending humans will never make mistakes. It’s building enough layers of protection that one human mistake doesn’t become a catastrophe. Bottom line: You don't have to make yourself impossible to hack. But you also don't have to make it so d*mn easy. Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Have a Compliance Question? Email compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, medical, HR, cybersecurity, or regulatory advice. Listening does not create a client relationship with the hosts or their companies. Consult qualified professionals regarding your specific circumstances.

Jul 23

Episode 113 | The Dental Dystopia: What If Assistants Stop Waiting for Raises?

What if dentistry's biggest workforce problem isn't here yet? What if more dental assistants decide temping is a better career path than waiting around for raises? Or, what if someone actually succeeds in organizing unions in dentistry? In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood are joined by labor relations expert Katie Tanner to explore the "dental dystopia" many practice owners hope never becomes reality - and what leaders should be doing now to keep it that way. In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood are joined by labor relations expert Katie Tanner to unpack the growing workforce shifts that could fundamentally change dentistry. From union organizing and collective bargaining to skyrocketing temp rates and the long-term sustainability of private practice, this conversation explores the "what if" scenarios many practice owners are quietly wondering about - but few understand. Katie breaks down how unions actually form, what employers can (and absolutely cannot) do when employees begin organizing, why collective bargaining isn't the magic solution many people assume it is, and how union dues, contracts, and labor law work in the real world. Kara brings the HR perspective, connecting these trends to compensation, retention, wage and hour compliance, employee classification, and the growing temptation for practices to cut compliance corners when margins get tight. Amy rounds out the conversation with practical questions about leadership, technology, and where the profession may be headed next. Also in this episode: What it actually takes to form a union in healthcare Why unions are far more complicated than social media makes them sound The hidden costs of collective bargaining agreements and union dues What employers can and cannot say when employees discuss unionizing When labor attorneys should get involved Why temp work is becoming increasingly attractive for hygienists and dental assistants How skyrocketing temp wages affect practice profitability Independent contractor myths in dentistry The growing disconnect between reimbursement rates and labor costs Practical ways leaders can reduce turnover before employees look elsewhere Why workforce pressures often lead to compliance shortcuts—and why that's a dangerous tradeoff Bottom line: Whether unions ever become common in dentistry or not, the pressures driving these conversations already exist. Practice owners who understand compensation, culture, compliance, and workforce strategy will be far better positioned than those who simply hope these trends pass them by. Featured Expert Katie Tanner President & Owner, KTHR Innovations Katie Tanner is an HR and labor relations consultant specializing in union strategy, collective bargaining, employee relations, and compliance within healthcare organizations. With more than 15 years of HR leadership experience - including extensive work in skilled nursing, home health, and multi-state healthcare operations - Katie helps employers navigate complex labor issues before they become business crises. Learn more: https://www.kthrinnovations.com Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Have a Compliance Question? compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, medical, or HR advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by jurisdiction, so consult qualified professionals regarding your specific situation.

May 31

Episode 112 | Cover Your Assets: Bad Advice, Billing Risks & Compliance Training to Keep You Out of Jail

“We’ve always done it this way” sounds harmless… until the audit letter arrives, the employee turns whistleblower, or the wrong provider name on a claim form becomes a much bigger problem than anyone expected. In this episode of Compliant AF, Amy Wood and Kara Kelley are joined again by Rick Garofolo of The Dental Practice Mechanics for Part 2 of their conversation on the dental compliance myths that simply refuse to die. We’re breaking down the compliance landmines that show up when practices rely on outdated habits, bad advice, or the always reliable legal defense of “somebody in a Facebook group said it was fine”... ignoring team members who raise billing or compliance concerns assuming “we’ve always done it this way” means “we’ve always done it correctly” uploading bulk EOBs into patient records without considering HIPAA exposure billing under the wrong provider after a practice purchase, maternity leave, or temp coverage trusting AI-generated answers without reading the actual source treating canned HIPAA and OSHA videos like site-specific training giving temps or fill-ins full software access without proper training or controls assuming compliance training is optional, generic, or someone else’s problem ...and more! Learn why practice owners need to stop treating compliance as an administrative nuisance and start treating it as patient protection, license protection, and business survival. Rick also shares why provider misrepresentation on claim forms can create serious criminal exposure, why audits are increasingly likely, and why one angry former employee can turn a “small shortcut” into a very large problem. Because apparently “do it right the first time” is still controversial. Featured Expert Rick Garofolo Rick Garofolo is the founder and CEO/President of The Dental Practice Mechanics, which he launched in 2001 after marrying a dentist and seeing firsthand how much support dental practices needed with business management, practice growth, and operational systems. Over the years, Rick and his team have helped dental practices strengthen the business side of dentistry through proper accounting techniques, recall and follow-up systems, treatment plan presentation, billing systems, and more than 20 other practice management systems. Rick takes pride in leading a close-knit, full-time, in-house team with no overseas or work-from-home outsourcing. Through The Dental Practice Mechanics, Rick helps practices understand what is expected and required of them so they can improve profitability, create safer environments for patients and team members, and maybe even let the dentist sleep at night. Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Have a Compliance Question? Email compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

May 5

Episode 111 | Free Dentistry, Fraud Risks, and More Myths That Won’t Die

Employee dental benefits sound simple… until insurance fraud, wage and hour issues, HIPAA, PPO contracts, and surprise audits slip into the operatory. In this episode of Compliant AF, Amy Wood and Kara Kelley are joined by Rick Garofolo - CEO of The Dental Practice Mechanic and founder of the Dental Billing & Business Academy - to unpack more dental compliance myths that just refuse to die. From “we just waive the employee portion” to “the hygienist can clock out to clean her husband’s teeth,” this conversation goes exactly where you think it will: straight into the land of please stop putting that in writing before someone subpoenas it. This conversation was just so good, we had to make it TWO episodes! In Part 1, we’re breaking down the compliance chaos hiding inside common dental practice habits… billing insurance while writing off employee balances treating employee dental care like a casual perk instead of an actual policy making hygienists clock out when they are still performing work for the practice assuming PPO contracts, HIPAA rules, and “cash pay” preferences all magically agree with each other letting office managers, spouses, or Facebook experts drive decisions that can trigger audits believing “we’ve always done it this way” is a defense strategy instead of a cry for help ...and more! Learn why free or discounted dental care for employees and family members needs to be structured intentionally, documented clearly, and reviewed through the lenses of insurance billing, HR, HIPAA, wage and hour, and contract compliance. Because generosity is lovely. Accidental fraud is less charming. Rick also explains why insurance audits are increasing, how AI is making it easier for carriers to spot billing red flags, and why one failed audit may invite a whole compliance conga line of insurance companies and agencies. Cute, right? Featured Expert Rick Garofolo is the founder and CEO/President of The Dental Practice Mechanics, which he launched in 2001 after marrying a dentist and seeing firsthand how much support dental practices needed with business management, practice growth, and operational systems. Over the years, Rick and his team have helped dental practices strengthen the business side of dentistry through proper accounting techniques, recall and follow-up systems, treatment plan presentation, billing systems, and more than 20 other practice management systems. Rick takes pride in leading a close-knit, full-time, in-house team with no overseas or work-from-home outsourcing. Through The Dental Practice Mechanics, Rick helps practices understand what is expected and required of them so they can improve profitability, create safer environments for patients and team members, and maybe even let the dentist sleep at night. Meet the Hosts Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker and business coach. Have a Compliance Question? Email compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

Apr 2

Episode 110 | When Dentistry Goes Mobile (But Your Compliance Plan Doesn’t)

Mobile dentistry and teledentistry are growing fast - and so are the ways practices can accidentally create compliance problems on wheels (or Wi-Fi). In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood dig into what really changes when you take healthcare out of a controlled environment and drop it into vans, schools, nursing homes, living rooms, and video calls. Because the moment you lose the four walls, you also lose a lot of the assumptions that were quietly keeping you compliant. From lost laptops and questionable Wi-Fi to patients within earshot and team members working across state lines, the risks aren’t new - but the way they show up is. Amy breaks down the HIPAA and cybersecurity realities of mobile and telehealth setups, including why your “good enough” tech stack might not actually be good enough anymore (looking at you, free Zoom accounts and social media messaging). Kara brings the HR perspective, unpacking travel time, wage and hour landmines, multi-state headaches, and how quickly “simple” operational decisions turn into compliance exposure. Also in this episode: Why mobile dentistry is easier to get wrong Situational awareness (and why not every team member has it) The real question behind new tech isn’t “can we use it?” - it’s “should we?” How telehealth can create privacy risks before you even realize it Wage and hour traps in mobile teams, including travel time, remote work, and “portal-to-portal” pay Multi-state compliance challenges when work is performed across state lines How small leadership decisions can unintentionally set costly precedents for your entire team Scaling mobile operations without scaling your compliance problems Why your managers and regional leaders need HR compliance training before they start making field decisions Bottom line: if your compliance plan for dentistry on four wheels is the same as dentistry within four walls, it’s already outdated. Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Have a Compliance Question? Email: compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

Mar 2

Episode 109 | Multi-Location Madness

Multi-location growth sounds like a flex - until payroll, policies, and penalties enter the chat. In this episode of Compliant AF, Amy Wood and Kara Kelley are joined by Alan Twigg of Bent Ericksen & Associates to unpack the real-world compliance landmines that show up when dental practices expand into multiple locations, multiple states, or simply start hiring remote employees. We're breaking down the biggest compliance blind spots emerging groups run into... - assuming separate tax IDs means separate payroll - trying to force one handbook across multiple states - mishandling overtime when employees float between locations - treating remote work like an automatic 1099 situation (it’s not) ...and more! Learn why HR + compliance experts needs to be involved early - before contracts are signed, systems change, and “we’ve always done it this way” turns into an expensive problem. Featured Expert Alan Twigg is a Co-Owner at Bent Ericksen & Associates. For over 10 years, Alan has guided thousands of clients and consultants through the ever-changing world of HR and Employment Compliance. He is a speaker, consultant, and author. Alan is passionate about bringing education and peace-of-mind to such a confusing topic. As a strong proponent of symbiotic employer-employee relations, Alan is passionate about teamwork and positive work cultures, with an emphasis on long-term personnel retention and employment compliance, where his solutions-oriented outlook excels. Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Have a Compliance Question? Email compliantafpodcast@gmail.com Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

Jan 22

Episode 108 | The Hidden Costs of Buying or Selling a Practice

Buying or selling a practice comes with costs that don’t show up on a balance sheet. Beyond the purchase price, transitions often uncover compliance gaps, misclassified employees, outdated policies, vendor risks, and benefit promises that quietly inflate the true cost of the deal. In this episode of the Compliant AF Podcast, Kara Kelley (Clinical HR) and Amy Wood (Copper Penny Consulting) break down the hidden HR, HIPAA, and cybersecurity expenses that surface before - and especially after - closing, and explain why waiting until the paperwork is signed is the most expensive mistake practice owners make. Key Takeaways When to bring in HR and HIPAA/cybersecurity support on the front end of a transition Why vendor contracts, antivirus, backups, and access controls can’t wait until “after closing” How compliance gaps change the true cost of a practice, including payroll surprises like misclassified hygienists and unpaid mandated leave Why “just use the seller’s handbook” and recycled onboarding packets are a trap (hello, expired I-9 forms and policies written for the wrong office) What brokers, CPAs, and even attorneys often don’t ask — and the questions that should be asked anyway How to handle legacy perks, inflated wages, PTO promises, and benefit changes without detonating morale The mindset shift that matters most: you can redecorate later, but nobody audits your paint color Bottom line - when HR, HIPAA, cybersecurity, and employment obligations are treated as afterthoughts, the true cost of the transition shows up later in audits, complaints, and avoidable risk. This episode delivers a clear-eyed look at what actually matters, so practice owners can protect the investment, set the team up for success, and move forward without inheriting someone else’s mess. Downloadable Resource Smooth Handoffs Transition Questions Have a Compliance Question? Email compliantafpodcast@gmail.com Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

12/29/2025

Episode 107 | Ten Tips for Practices to Start the Year Compliant AF

The end of one year and the start of another is when compliance gaps show up fast- and get expensive just as quickly. In this episode, Kara Kelley and Amy Wood share their HR and HIPAA/cybersecurity checklists every dental and medical practice should be tackling before January (or early in the new year). From HR audits and payroll reviews to HIPAA risk assessments, access controls, passwords, and backups, this conversation focuses on the things practices think they have handled - until they don’t. You’ll hear real-world examples of: Outdated policies and onboarding paperwork I-9 and payroll mistakes hiding in plain sight Vendors, software changes, and cloud systems triggering HIPAA risk assessments Temps, former employees, and forgotten system access Password habits that create unnecessary risk Backup systems that haven’t been tested (and may not work) Training, benefits, and compliance calendars that only exist in someone’s head If your practice is busy, short on time, or relying on “we’ve always done it this way,” this episode will help you reset, prioritize, and start the year compliant AF - without panic, guesswork, or dumpster fires. Perfect for practice owners, office managers, and leadership teams who want fewer surprises and fewer frantic phone calls in the year ahead. Have a Compliance Question? Email compliantafpodcast@gmail.com Meet the Hosts Kara D. Kelley, SHRM-SCP, SPHR Founder & CEO of Clinical HR, Kara is a nationally recognized HR consultant, speaker, and advisor to dental leaders and healthcare executives. She specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations. Disclaimer This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.

Compliant AF Podcast

Episode 114 | For the Love of HIPAA, Stop Clicking That!

Episode 113 | The Dental Dystopia: What If Assistants Stop Waiting for Raises?

Episode 112 | Cover Your Assets: Bad Advice, Billing Risks & Compliance Training to Keep You Out of Jail

Episode 111 | Free Dentistry, Fraud Risks, and More Myths That Won’t Die

Episode 110 | When Dentistry Goes Mobile (But Your Compliance Plan Doesn’t)

Episode 109 | Multi-Location Madness

Episode 108 | The Hidden Costs of Buying or Selling a Practice

Episode 107 | Ten Tips for Practices to Start the Year Compliant AF

About

Information

Compliant AF Podcast

Episodes

Episode 114 | For the Love of HIPAA, Stop Clicking That!

Episode 113 | The Dental Dystopia: What If Assistants Stop Waiting for Raises?

Episode 112 | Cover Your Assets: Bad Advice, Billing Risks & Compliance Training to Keep You Out of Jail

Episode 111 | Free Dentistry, Fraud Risks, and More Myths That Won’t Die

Episode 110 | When Dentistry Goes Mobile (But Your Compliance Plan Doesn’t)

Episode 109 | Multi-Location Madness

Episode 108 | The Hidden Costs of Buying or Selling a Practice

Episode 107 | Ten Tips for Practices to Start the Year Compliant AF

About

Information