Mar 6 , 2025

Session 496: Eric Ström, JD PhD LMHC Office Hours (March 6th, 2025)

View Session

abandoned recordsautomatic mileage trackingbest practicescollection agenciesconsent formscoordination of carecustodian of recordsdeactivate WPSdropboxEHRethernet connectionsfirmware updatesformer employeeGoogle workspaceHIPAA compliantHIPAA Conduit RuleHIPAA Security RuleHIPAA violationsHIPAA-friendlyHome and Mobile Teletherapy Work Check SheetshushmailiPlumlaws or statuteslocked file cabinetsluxscimental health providerOrbi router settingsparental custodyparenting planprogress notesproposed changesrecords subpoenarelease of recordsRights of AccessRingRxROIsecure textingsecurity riskssignalSignal encryptionSSIDstaffingThe Campaign Registry (TCR)transfer datatransmitting highly sensitive assessmentsTresorit

Feb 27 , 2025

Session 495: Office Hours (February 27th, 2025)

View Session

1passwordAI-powered assistantBusinessWirecollection agenciesdispose of datadoor passcodesfactory resetfiling a BOIfree legal compliance servicesGood Faith EstimatesGoogle drive for desktophipaa complianceHIPAA compliantHIPAA Security RuleMicrosoft 365 Personal accountMicrosoft BAANo Surprises ActPalmpassword managementproposed changesRedZone Password Safesecurity concernsseparate personal and business accounts

Feb 20 , 2025

Session 494: Office Hours (February 20th, 2025)

View Session

"""offsite"" sessions"account securityBAA copiesbuilt-in email contact featureclause in security manualclinical social work associationCloud Organizationconsolidate billingcontract agreementdoor codes and keysemail from GoogleemrFile explorerfirewall protectionGoogle Cloud Platform adminsGoogle filesGoogle workspaceguest networkHIPAA compliantHIPAA compliant appsIAM policiesiPlumlogin codelost/stolen computersMFA verification methodmonitoring servicesnot accepting credit cardsoffer separate BAAoffers BAAonline billingPassword Protectedpayment processingPDFspotential accessibilitypotential concernspotential patient and therapist privacy violationsprotect patient and clinician privacypsychology todayremote factory resetrenting officeSecurity Policies and Procedures Manualsegmented networksending PDFsshared business WiFiSimple PracticeSpruceTherapy DenTherapy Tribeupdate language in manualVonageWashington political climatewifi hotspot

Dec 19 , 2024

Session 486: Is it okay to have Google Ads?

View Session

antivirus softwareavastbasic plan vs. paid plancreating account with DOCfirewallgoogle adsGoogle NestGoogle Nest Wifi Pro 6e routerHIPAA complianthushmailiPlumkiosk for email and scanned emailmarketing a practice effectivelyNest Wifi Cloud ServicesNord VPNpro bono supportSpruceTelzioTP-link Ax-55 routerWifi device usage data

Nov 22 , 2024

Session 482: Is it HIPAAppropriate to offer Apple Pay as a payment method for therapy services?

View Session

access audit logsaccess copies of ausit logsAI toolsApple PayBAABitdefenderbuilt-in security featuresEHRfull device encryptionHIPAA compliance red flagsHIPAA complianthipaajournal .comlogging in to EHRlogging in to servicesMicrosoft 365 subscriptionMicrosoft Surface laptopmodemmulti-factor authentication (MFA)Netgear Armor protectionNetgear routerphirequest audit logssecurity checklistSimple Practiceunauthorized access to PHIunlocking device

Nov 7 , 2024

Session 480: Is it safe to use the added features that came with my NordVPN subscription?

View Session

add-on featuresadheres to PCI-DSS standardsadvanced browsing protectionAlmaanti-malware softwareBelonglybest antivirus/virus scannerclient care coordinatorclient contact formclient onboardingclient portalcredit card processing companydestroy storage componentsdevice securitydevice security instruction centerdisposing devicesdonate old practice devicesfactory resetgeneral admin dutiesHelcimHIPAA certificationHIPAA compliantHIPAAppropriatehushmailhyperlinks to external websitesinsurance verificationMacbook AirMalwarebytes free versionno BAANord VPNNordVPNPCI Level-1 compliant service providerPCT evaluationPCT guidancePCT recommendationspractice phone WiFi connectionpractice websitesprivacy and security settingsprocess customers’ paymentsprovider directoryprovides a BAAreceive transaction informationreferring clientsschedulingsecurity considerationsSimple PracticeSquareSpaceSystem Certificates in Trust Settings changesTap-to-Pay (TTPOP)Wix

Nov 1 , 2024

Session Accessibility & Teletherapy with Emily Decker, MS, LPC, NC: Special Office Hours (November 1st, 2024)

View Session

accessibility features and functionalityaccessibility toolsaccessibility-friendlyanti-oppression client carecontains PHIEHREHR system featuresHIPAA complianthipaa secureHIPAA-friendlykey considerationsluxscimass emails and promotional itemsmultiple partners (polyamory)neurodivergent affirming client carePCT feedbackpractice cultureprogress notesresources and servicessecure emailusing names in client notesvideo platformwebsite accessibility

Oct 10 , 2024

Session 476: Google is now Including AI (Gemini) in their core functionality...

View Session

core functionalitycovered by BAAdigital marketingGoogle AI (Gemini)Google AnalyticsGoogle Workspace BAAGoogle workspace emailHIPAA compliantHIPAA guidelineshipaa secureMacOSmicrosoft 365migrating emailOutlook email addresswebsite tracking

Oct 3 , 2024

Session 475: Is it recommended to turn off iCloud on work iPhone and Macbook?

View Session

airSlateApple KeychainBAAbusiness documentsbusiness structureco-facilitating groupsexternal hard drivegoogle driveGoogle workspaceGoogle Workspace BAAHIPAA compliantHIPAA compliant appsintake formsintakeqmigrating emailmonitoring loginsno BAAoff iCloudOutlook email addressPDFfiller.comprotect PHIrecommendationsROIsecure emailsecurity checklistSimple Practicesolo practice HIPAA manualstoring client information

Sep 26 , 2024

Session 474: Where is the line between designating someone as a participant in a workshop vs a client of a therapy group?

View Session

basic plan vs. paid planbilling documentsclient recordsconsent formsEHR storageelectronic formselectronic signatureHIPAA complianthushmailRelease of Information formworkshop attendee vs a client