Group Practice Tech

Person Centered Tech

Group Practice Tech by Person Centered Tech: a podcast where we help mental health group practice owners ethically and effectively leverage tech to improve their practices.

  1. 42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change

    6D AGO

    42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what's actually necessary when updating your Notice of Privacy Practices due to Part 2. We discuss: The confusion around updating NPPs without an updated model from HHS A quick refresher on Part 2 Who is considered a lawful holder under Part 2 Next steps for updating your NPP if you are a Part 2 program or lawful holder Our free resource on updating your NPP before the 2/16 enforcement deadline Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources PCT Free Resource: 42 CFR Part 2 & HIPAA Notices of Privacy Practices: A Decision Guide and Sample Language for Covered Entities a practical resource designed to help HIPAA-covered practices determine whether the updated 42 CFR Part 2 rules apply to them — and, if so, what belongs in their Notice of Privacy Practices. The guide includes a clear decision flow, plain-language explanations of Part 2 program vs. lawful holder obligations, and sample NPP language tailored to each category. It was created to fill the gap left by the absence of an updated HHS model NPP following the 2024 Part 2 Final Rule. Resources HHS Fact Sheet on the 42 CFR Part 2 Final Rule this HHS Fact Sheet summarizes the 2024 Final Rule updating 42 CFR Part 2, including new consent provisions, redisclosure alignment with HIPAA, enforcement changes, and the February 16, 2026 compliance deadline. It provides high-level regulatory context for healthcare organizations handling substance use disorder records. JD Supra Article: 42 CFR Part 2 and Privacy Rule Compliance: Action Required by February 16, 2026 This JD Supra article from Snell & Wilmer outlines the compliance steps healthcare organizations must take in response to the 2024 Final Rule updating 42 CFR Part 2. It explains which entities are required to update their Notices of Privacy Practices by February 16, 2026, including both Part 2 programs and HIPAA-covered entities that receive or maintain Part 2-protected records. The article highlights required NPP updates, enforcement risks, and the importance of aligning privacy notices with the amended regulations.

    15 min
  2. HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know

    JAN 23

    HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we have an update (and are once again offering reassurance) around the proposed HIPAA Security Rule changes. We discuss: The proposed Security Rule update on the OCR's spring regulatory agenda Why you're already in good hands if you're following PCT's advice  Some of the proposed changes that will impact therapy practices Reassurance about these proposed changes Effective dates versus compliance date Forecasting scenarios for these changes to take effect Steps to take now (and important things to not do now) to be proactive rather than reactive Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources: Article: HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know Explore our in-depth article unpacking the proposed HIPAA Security Rule updates — what's really happening, why it matters, and why this is a runway, not a cliff. You can also use our free Mini Risk Tool(download link in article) for a gentle check-in to see where your practice stands and what would most meaningfully support your security and compliance foundation. PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: For Group Practices For Solo Practitioners Comprehensive HIPAA Security Policies & Procedures Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice Device & Workspace Security Suites  Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) Includes the Risk Analysis & Risk Mitigation Planning service + tool HIPAA Security & Privacy Ethics training HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks. Group Practice Care Premium weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost) + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more

    28 min
  3. Insurance, Documentation, and Audits - With Dr. Maelisa McCaffrey

    JAN 16

    Insurance, Documentation, and Audits - With Dr. Maelisa McCaffrey

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Maelisa McCaffrey of QA Prep about how the landscape of insurance and documentation has shifted over the last decade.  We discuss: Risk adjustment audits and how they impact providers Billing codes and audit red flags AI documentation and how insurance companies are using AI Considerations when using AI for documentation Pressuring professional associations to advocate for clinicians and clients Our upcoming CE event on January 30th with Maelisa on how auditors think and why Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources: PCT CE course: Dealing with Insurance: How Auditors Think and Why a 3 CE credit hour training (including 1 legal-ethical CE hour) taught by Dr. Maelisa McCaffrey (QA Prep). This updated-and-expanded 2026 session demystifies medical necessity, clarifies what auditors and payers are actually looking for (and why), and helps clinicians document with more confidence and less stress. Expect real examples, sample notes reviewed together, and practical tools you can use immediately—covering informed consent language for clients using insurance, treatment planning that supports insurance requirements without sacrificing clinical judgment, and self-auditing techniques to spot red flags before anyone else does. Includes handouts/resources such as diagnosis justification statements, common treatment goals, progress statement formulas and examples, sample progress notes, and a client file review tool. Live webinar presentation on January 30th, 2026 Registration for live training includes ownership of the on-demand self-study CE course produced from recording of live presentation — so you can get all the content *and* the CE, whether or not you can join live. Special Documentation, Insurance, and AI focused Office Hours and Group Practice Office Hours session with Dr. McCaffrey In February, Dr. Maelisa McCaffrey will be hosting a Documentation-Focused Office Hours + Group Practice Office Hours session exclusively for PCT's Practice Care Premium subscribers. This live (and recorded) Q&A is your opportunity to bring *your*  real-world questions about progress notes, documentation challenges, and insurance audits directly to one of the field's leading documentation experts. Submit your questions in advance through your dashboard and get practical, case-specific guidance in a supportive, clinician-centered space. Take a look at all the courses in our Dr. Maelisa McCaffrey, PsyD collection: Client-Centered Documentation: How To Write Ethical, Effective, And Efficient Progress Notes Foundations Of Documentation: Intake, Diagnosis, And Treatment Plans Modern Progress Notes: Considerations For Teletherapy, Insurance Audits, And Artificial Intelligence (AI) Rethinking Notes: Strategies For Making Documentation Simple And Meaningful   Group Practice Care Premium weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost) + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

    43 min
  4. Email Hacked? How to Prevent it and What to do When it Happens

    JAN 9

    Email Hacked? How to Prevent it and What to do When it Happens

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what to do as a practice owner to prevent email hacks, and how to respond if one occurs. We discuss: Technical and behavioral measures to take to prevent email hacks Mandating two-factor authentication system-wide Education and staff training for prevention Creating a shame-free security culture in your practice Steps to take if you receive an email that looks suspicious Steps to take if you find out your email has been hacked Breach reporting timelines to be aware of PCT resources that guide you through security training and awareness; risk analysis and mitigation planning; and breach investigation, documentation, and reporting Ongoing training and security reminders for your team Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. CE Training: PCT's HIPAA Breaches and Investigation course, including a security investigation documentation form. Group Practice Care Premium weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost) + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

    27 min
  5. The Big Stories of 2025 Impacting Mental Health Practices

    12/19/2025

    The Big Stories of 2025 Impacting Mental Health Practices

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we're highlighting the stories that impacted your practices this year, and the main takeaways from each story. We discuss: The proposed changes to the HIPAA Security Rule Common sense security updates to incorporate into your practice The proliferation of AI and ways therapists can differentiate themselves from AI The proliferation of platforms offering practice management as a service How group practices can stand out from these practice management platforms  Clinician burnout and clinicians returning to their clinical roots Progression of cross-jurisdictional practice mobility The uncertainty around the Medicare telehealth cliff  Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources The relevant episodes of our podcast as mentioned: On Practice Management companies On the Medicare cliff On proposed HIPAA changes Free handout resource: Clinician Conversation Starters: Bringing Client AI Use Into the Therapy Room Practical prompts and responses to help clinicians talk with clients about AI use in ways that are safe, constructive, and clinically grounded. Free handout resource: Clinical Leadership Checklist: Guiding Teams in Addressing Client AI Use A step-by-step guide for clinical supervisors and directors to make client AI use considerations an intentional part of practice culture, including team awareness, policy updates, and supervision strategies. On-Demand CE course: Law & Ethics of the Clinical Use of Artificial Intelligence: Implications in Clinical Practice This 3 CE credit training with attorney and mental health counselor Eric Ström, JD, PhD, LMHC explores the rapidly evolving world of artificial intelligence in behavioral health. Learn how AI tools are being applied in clinical practice, what legal and ethical standards apply, and how to confidently evaluate whether and how to integrate new technologies. Participants gain practical strategies for aligning AI use with HIPAA, professional ethics codes, and client care standards—empowering you to implement AI tools responsibly and effectively in your practice. **Useful for all clinicians and practice leadership** Group Practice Care Premium weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost) + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

    28 min
  6. Defining the Role of Secure Email Alongside your EHR - With Hushmail

    12/12/2025

    Defining the Role of Secure Email Alongside your EHR - With Hushmail

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Ben Cutler, CEO of Hushmail, about how a secure email service can be a crucial part of your practice's tech stack.  We discuss: How secure email can complement the communication features of your EHR Communication gaps in EHRs that can impact your security circle Pairing secure forms with secure email to optimize the intake process Secure communications as a marketing asset Creating more efficient streamlined services for clients and providers Addressing burnout via efficient business systems Using Hushmail to customize forms and coordinate care Misconceptions around non-secure communications The difference between HIPAA friendly and HIPAA secure  Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. Resources Free Trial of Hushmail! Hushmail provides HIPAA-compliant secure email and encrypted online forms designed specifically for behavioral health professionals. It fills the critical gaps your EHR can't cover—especially during first contact, referrals, and communication with people outside your EHR's closed messaging system. With encrypted email, customizable secure forms, legally binding e-signatures, and ready-to-use templates, Hushmail helps therapists protect client information from the very first inquiry through the entire clinical journey. Clinicians can securely manage intake, collect sensitive documents, send referrals, and maintain compliant records—even during practice transitions or retirement. Hushmail's behavioral-health-specific plans include a signed BAA, automatic archiving to support HIPAA compliance, and access to a customer care team deeply familiar with the needs of therapy practices. Exclusive for listeners: Try Hushmail for Healthcare free for 14 days and explore secure email and forms tailored for your practice. PCT Resources PCT CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours) PCT Podcast Episode: Episode 317: [Compliance] Can Clients Waive the Need for HIPAA Compliance? PCT's  Sample Request for Non-Secure Communications Form

    59 min
  7. Cybersecurity Insurance for Your Practice: What to Know

    12/05/2025

    Cybersecurity Insurance for Your Practice: What to Know

    Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we answer a frequently asked question: whether therapy practices actually need cybersecurity insurance. We discuss: The benefits and considerations of obtaining a cybersecurity insurance policy PCT's stance on cybersecurity insurance for solo and group practices How cyber insurance relates to your full HIPAA compliance program Common reasons for claim denials The six major areas where cyber policies differ, and how to choose your policy How a PCT risk analysis can help you determine what level of insurance makes sense for your practice Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources Handout: Cybersecurity Insurance for Your Practice — What to Consider (and How to Talk With Your Agent) This episode's companion handout breaks down the six key areas to evaluate when reviewing or selecting a cybersecurity insurance policy for your mental health practice. HIPAA Risk Analysis & Risk Mitigation Planning service for mental health practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health practice, and a prioritized mitigation checklist to help you reduce your risks. (**Currently on sale!!**)  PCT's Comprehensive HIPAA Security Compliance Program (discounted) bundles: For Group Practices For Solo Practitioners Comprehensive HIPAA Security Policies & Procedures Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice Device & Workspace Security Suites Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library) Includes the Risk Analysis & Risk Mitigation Planning service + tool HIPAA Security & Privacy Ethics training

    33 min
4.9
out of 5
12 Ratings

About

Group Practice Tech by Person Centered Tech: a podcast where we help mental health group practice owners ethically and effectively leverage tech to improve their practices.

You Might Also Like