access log reviews forum

How well can clients regulate, process, and heal when their bodies lack the basic fuel they need? Dr. Kristen Allott joins Liath to explore the physiological foundations of mental health, therapist wellness and burnout, and why therapists are uniquely situated to support clients navigating GLP-1 medications—without stepping beyond their scope.

In our latest episode, we’re discussing a topic that’s come up frequently in the wake of the Clancy case: mandated reporting. We cover: Misconceptions around mandated reporting Mandatory reporting vs. other legal and ethical duties that apply What a clinician needs to evaluate when there is concern harm may occur Permission to disclose vs. duty to protect Tarasoff duties and liabilities Determining what is required and what is permitted under applicable law The framework that Eric Strom and Liath presented in the related CE course to determine what to do in these situations

In our latest episode, we answer a listener question and provide clarification on whether securing outbound email in Google Workspace (as discussed in Episode 623) would constitute a HIPAA violation. We discuss: Why blanket claims about HIPAA violations or HIPAA requirements from service providers or vendors raise our ethical hackles Opportunistic vs. forced TLS Legacy TLS and how it would be used with the forced TLS setting configured in Google Workspace What HIPAA actually requires for email security Where NIST (National Institute for Standards of Technology) guidance fits in The actual risk analysis for legacy TLS Benefits of secure email services, and when it might make sense to cancel Data to gather from your secure email service to do your own risk analysis

In our latest episode, we go over some common questions we get at PCT about the HIPAA designated Security Officer role. We discuss: The primary purpose of the Security Officer’s role What is actually required of the person in this role Determining the right person for this role in your practice Tasks that can be passed off to a Deputy Security Officer Operational structure for Security Officers and Deputy Security Officers Whether the Security Officer or Deputy Security Officer hold individual liability in the event of a breach

In our latest episode, we recap what behavioral health practice owners should know from day one of the HIPAA Security Conference. We discuss: The timeline for proposed Security Rule changes What practices must have documented in writing according to the current Security Rule Encryption being reasonable and appropriate in almost every practice environment Expanding risk analysis enforcement initiative to include risk management Why risk analyses are foundational, and what they have to include that a gap analysis doesn’t

In our latest episode, we share a HIPAA-friendly way for therapy practice owners to get useful information about how their websites are performing, via Google Search Console. We discuss: What Google Search Console can tell you about your website The crucial differences between Google Analytics and Google Search Console Why Search Console is permissible for therapy practice websites Caveats and what to consider when configuring Search Console

In our latest episode, we unpack the reasoning, step by step, behind PCT’s position on Google Analytics for therapy practices. We discuss: Can website activity constitute Protected Health Information? HIPAA’s definition of healthcare operations vs. HIPAA’s definition of marketing Business Associates, and how there is no BAA available for Google Analytics The disclosures required for HIPAA authorization for marketing activity Cases where collecting PHI without a BAA has gone awry The risk context in an increasingly AI world The takeaway: is it permissible for therapy practices to use Google Analytics on their practice websites? Uniting as an industry to demand BAAs for Google Analytics

In our latest episode, we chat with Julie Herres of GreenOak Accounting about how there’s still good money to be made in private practice, and what you need to know to make it. We discuss: Profitability and intentionality, and what it takes to stay on track Rate changes and cost of living changes impacting group practices How Julie would respond to practice owners who are feeling the squeeze right now Setting up the financials for a healthy practice Compensation for pre-licensed vs. fully licensed clinicians Julie and Liath’s predictions for the trend to swing away from VC-backed therapy platforms and back to smaller group practices What group practices can bring to the table that these platforms can’t Metrics to track to be able to make informed and aligned decisions in the short, medium, and long-term The value, in time, money, and cognitive overhead, in outsourcing to a trusted expert Julie’s upcoming event in September for group practice owners, Group Practice Con

Google Workspace can be configured to require TLS for all outbound email and prevent delivery when a secure connection cannot be established. Here’s what that changes for mental health practices—and why enforced TLS still is not the same as secure portal or escrow-style messaging.

In our latest episode, we have an exciting update about how to make your Google Workspace email HIPAA-secure. We discuss: The encryption mechanism, TLS, and how it fits into HIPAA Security Rule standards Ways that behavioral health practices typically manage email security Escrow style email The transmission security standard under HIPAA Google’s transparency report about safer email HIPAA-friendly conventional email vs. HIPAA secure email Two limitations to be aware of and a risk management and ethics perspective How to set up this configuration in Google Workspace