We discuss:
How to audit system access in your practice
Defining roles and responsibilities to determine access
Managing shared email accounts with email delegation
The difference between email aliases and delegated accounts
Steps to take when systems don’t allow for multiple logins
We discuss:
Why shared accounts are a no-no, and why it’s such a common practice
The HIPAA standards that are impacted by this practice
The internal and external risks of sharing admin accounts
The why and what of role-based access control
We discuss:
Overwhelm as a barrier to HIPAA compliance and the key to success
Two security settings to update on your smartphone
Risk exposure + device security
How to get step-by-step guidance for your specific device
We discuss:
The history and purpose of the Parity Act
What has not changed with the Parity Act
Key provisions of the 2024 Final Rule
The implications of the non-enforcement of this rule
State laws and states with stronger parity protections
What you can do as a provider to advocate for parity
Resources on parity we recommend
We cover:
Top misconceptions about documenting intakes and assessments
Time management and logistics for intakes and assessments
Balancing ethics, legal obligations, and customer service
What Maelisa recommends covering in an intake session
Layering informed consent
How to minimize writing the same things over and over in assessments
Our upcoming CE training with Maelisa on documentation for new clients
We discuss:
Maelisa’s background and business, QA Prep
Why there aren’t black and white guidelines for documentation
How to determine what to include in documentation
The most common people who will read your notes
Informed consent and documentation, especially for vulnerable populations
Progress note templates and policies
Collaborative documentation in group practice
Why clinicians find documentation so stressful
Our upcoming CE training with Maelisa on Client Centered Documentation
We cover:
Managing confidentiality and availability of data
Having redundancies for worst case scenarios
Types of calendar syncs and their benefits and drawbacks
How to sync your calendars in a HIPAA-appropriate way
We cover:
Popular screen recording software, Loom, and why it’s not HIPAA compliance compatible
Google Vids being covered by the Google Workspace BAA
Use cases for screen recording software for group practices
Key reminders and usage notes for Google Vids
We discuss:
Devices being searched by Customs and Border Patrol at the US border
Why border agents can search devices without a warrant
HIPAA being the minimum security standard, not the ceiling
When HIPAA permits disclosure of PHI
How clients can be impacted when PHI is accessed by law enforcement
How to conduct a risk analysis of the potential impact of client PHI being accessed by law enforcement
What to remove from devices before traveling
Upcoming resources we will be providing on this topic
We discuss:
Common myths we hear about practicing telehealth across jurisdictions
The risks of unpermitted practice
The threshold of client risk (and the only instances where cross-jurisdictional practice is permitted for clients in crisis)
What constitutes client abandonment and what doesn’t
Requesting temporary practice permission from a different jurisdiction
Our recent training on navigating legal-ethical cross-jurisdictional teletherapy practice for therapists