Episode 321: [Compliance] Record Retention & HIPAA Requirements

We discuss the record retention requirement for HIPAA; the actual client medical record requirements under state law; the difference between documentation of HIPAA compliance activities and maintaining client records; considerations for destroying records, (paper and electronic); how to document destroyed records; where to find record retention requirements for your state; and what should be in a client’s record.

Episode 320: [Interview] Interns, AI, and More: An Interview with Tara Sanderson

We discuss leveraging technology and systems for supervision; seeking supervision or consultation throughout your career; features of good supervision; supervision as risk analysis; taking reasonable steps to ensure competence with new technology; considerations for AI use for therapists; current ways therapists utilize AI; balancing legality, ethics, and humanity; being open to other perspectives, continual learning, and vulnerability as a leader; the art form of supervision; trainings that Tara has found helpful; Tara’s podcast and training course; receiving supervision to become a better supervisor; and what’s in Tara’s tech stack. 

Episode 317: [Compliance] Can Clients Waive the Need for HIPAA Compliance?

We discuss misconceptions that stem from non-enforcement for parts of the HIPAA Security Rule during the federal Public Health Emergency; who needs a BAA; the protections BAAs provide for the HIPAA Covered Entity; client’s rights to request non-secure communications; client’s rights to access their health information; and why clients cannot waive the Business Associate Agreement requirement.

Episode 316: [Legal] Contractor Clinicians – What You Need to Know for HIPAA Compliance & Employment Law

We discuss covered entities; HIPAA policies and procedures; IRS factors of control for contractors vs employees; the ABC test to determine classification; contracting as a business to business relationship; acting as a Managed Services Organization (MSO); Business Associate Agreements (BAAs); risk exposure and risk analysis; consequences of misclassifying contractors; and our HIPAA compliance manual service that can help with setup and implementation.

Episode 315: [Tech Tips] Phone Service & HIPAA Compliance Updates

In our latest episode, we’re talking about HIPAA compliance with phone services in group practice. 

We discuss VoIP, cellular, and landline services; what is subject to the HIPAA Security Rule; how to get a BAA with your phone service provider; phone service providers we recommend; porting phone numbers; managing phone service for a team; and implications for the end of the Public Health Emergency. 

Episode 313: [HIPAA] Compliance Considerations for Your Practice Website

In our latest episode, we take a look at how to keep established and potential client info safe and secure on your website.

We discuss the BetterHelp debacle and lessons we can learn from it; contact forms on websites; what qualifies as PHI; where PHI gets collected through websites; how to set up a secure contact form; HIPAA friendly vs. secure email communication; requests for non secure communication; secure form options; what to include in HIPAA Notice of Privacy Practices; Good Faith Estimates; whether tracking technologies and Google Analytics are permissible; and what is and isn’t included in Google’s BAA.

v2.0.2-beta

Scheduled Maintenance

We will be temporarily taking the website offline at 10:00 PM Pacific (1:00 AM Eastern) tonight, July 6, in order to make some improvements. We plan to be back online by midnight Pacific (3:00 AM Eastern). We apologize for any inconvenience this may cause. Dismiss