We discuss:
The recently revealed hack of major global telecom providers
The difference between secure communications and non-secure communications
The difference between HIPAA secure and HIPAA friendly
How clients can opt out of secure communications
Which VoIP services are HIPAA secure (and which major one isn’t)
Reframing HIPAA security as client care
We discuss:
Security policies around network security and device security, particularly BYOD policies
How Private Relay works, and its limitations
How Private Relay is similar to a VPN (and how it is different)
What functionality is required for network and device security
Private Relay alternatives and their limitations
Our recommended VPN service
We discuss:
The common anxieties around corporate/VC owned telehealth companies
The incentives these companies use to lure clinicians
The cracks starting to appear in these companies
How the rate cuts will impact clinicians
How the rate cuts will impact group practices and solo practices
We discuss:
What multi-factor authentication is and why it’s important
Different types of factors for authentication
What Google Authenticator is and how it works
What accounts you can use Google Authenticator for
HIPAA considerations for using Google Authenticator
Using Google Authenticator appropriately in a group practice context
We discuss:
HIPAA regulations vs. state laws
What communications are included in a client’s record and why
The distinction between progress notes and psychotherapy notes
Resources for training your staff on rethinking notes
The Open Notes Rule
Managing documentation compliance in your practice
We discuss:
Common use cases for Gemini in a group practice context
What’s covered under the Google Workspace BAA (and what isn’t)
Ethical and legal considerations for using PHI with AI tools
Informed consent for clients when AI tools are used for clinical documentation
Establishing a Gemini usage policy for your practice