Course Syllabus

1. Mental Health Professionals and Confidentiality Risks
   • Mental health professionals already know a lot about security. We’ll explain how.
   • Meeting clients where they are with your security practices.
   • New social norms for communication and how they impact security.
   • Some work on noticing our emotional responses to technical and regulatory issues.
   • The legal and ethical context for security in mental health practice.
2. Reducing, Accepting, and Collaborating on Risks in Communication with Clients
   • The differences between reducing risks and accepting risks.
   • Technical ways to protect emails and text messages.
   • Workinf with the idea of accepting risks.
   • Talking to clients about email and texting risks.
   • Working with clients to understand the risks and use unsecured or secured email and texting.
   • A look at the Internet so we can understand it better.
   • HIPAA and exceptions around phone services.
3. Legal/Regulatory Concerns in Communications with Clients
   • HIPAA covered entity status and what it means when a professional does or doesn’t have it.
   • HIPAA Business Associates and working with them.
   • The conduit exception for Business Associates.
   • Business Associates and email.
   • Business Associates and clients.