The Email That Went to the Wrong Person
There's a specific feeling that every office worker knows. You hit send, glance at ...
Install the Update. Yes, Now.
It's 10:15 on a Tuesday morning. You're three tabs deep into something important. A little box slides ...
If You Clicked, Say So in 60 Seconds
It's 2:30 on a Thursday. You've been in the weeds all day. An ...
That QR Code in the Parking Lot Is a Trap
You pull into a downtown parking spot. The meter has a QR code on it: "Scan to pay." You scan, a payment page appears, ...
What Do We Do in the First 24 Hours After a Breach at a Mental Health Practice?
The first day, in order. Containment, preservation, assessment, then planning the notice. Disconnect the affected device from the network, but do not power it off....
Is Our Telehealth Setup Actually HIPAA Compliant?
Seven checks covering the platform, the configuration, the room, and the device. Probably not entirely, and the gap is usually not the video platform. Most...
Can Our Clinicians Use Personal Phones and Laptops for Client Notes?
What is generally fine, what needs controls, and what should never happen. Yes, with controls. HIPAA does not prohibit personal devices. What it requires is...
Switching IT Providers Without Disrupting Client Appointments
How a transition is sequenced around a clinical calendar. A well run IT transition costs a practice zero appointments. The records platform never goes down,...
What Does 42 CFR Part 2 Require That HIPAA Does Not?
Where 42 CFR Part 2 goes further than HIPAA for substance use disorder records. 42 CFR Part 2 protects substance use disorder treatment records more...
How Do I Pass a HIPAA Security Risk Analysis at a Small Practice?
The nine areas a ...
