Dec 29 , 2022

Session 384: Can you review if receiving info on google workspace is okay for PHI if you have a BAA?

View Session

BAABAA for classic cell phone servicesGoogle workspaceHIPAA-friendlyLastpass breachreceiving PHIRingRxsending PHISprucetraditional SMS texting

May 19 , 2022

Session 352: Is having an Alexa in my office a risk for HIPAA compliance?

View Session

1099 contractorAlexaBetterHelpbusiness softwaredocs and excel sheets without PHIE-faxEHRformal recordsfree VPN optionsGoogle FiGoogle minigoogle voiceGoogle workspaceHIPAA compliantHIPAA compliant emailHIPAA covered entityhipaa secureHIPAA security riskiPlumMacbookopening PDFs with PHI in web browserspersonal hotspotPHQ9Policies and Procedures manualprotonmailproviding telehealth in a co-working spacerecommendationsRingRxsaving contacts as initialssecure VoIPsecure way to receive client infosharing internettelehealth provider networkVPN for phone

Feb 24 , 2022

Session 340: I have recently self-diagnosed with HFS (HIPAA Fatigue Syndrome)...

View Session

Advanced protection programBAABack-up Enhanced Add-on Planbitlockercloud storageCompliance Archivedelete downloads from local accountsdevice hardeningelectronically stored PHIenable automatic updatesEOBgoogle driveGoogle workspacehunkey doreyhushmailIntermediaiPlumMicrosoft Office 365 Business Standardmultiple user accountsonedrivePassword ProtectedPCT WayPDFs of PHI emailsReaddle Scanner Prorecovering google accountRingRxSolo practitionerSpiderOak ONestoring and accessing client emergency infosuggestionsTorguard Business VPNvetting communication servicesZoom

Jan 27 , 2021

Session 336: Regarding VOIP and internet-based communication systems...

View Session

chromebookfile names in Google DriveGoogle DocsGoogle workspaceHushforms Preservice AgreementHushmail storageinternet-based communication systemsiPlumiPlum voicemailIvyPaypayment methodsphirecommendationsrecommendations for privacy screensrequire two-factor authenticationRingRxsetting up solo practicesolo practiceSolo practitionerSprucestoring voicemailsvoip

Nov 18 , 2021

Session 327: How does destroying records apply to the financial aspects of a practice?

View Session

accessing clients informationautomatic backupBAAchromebookclinician safetydelete from billing softwaredelete record from EHRdestroying recordsdevice security instruction centerdownloading appsdoxy.meEpic MyChart informationfinancial aspectsfull disk encryptiongoogle driveGoogle OneGoogle workspaceHIPAA complianthushmailiPlumout-of-state therapistspersonal phoneresourcesright to see informationRingRxrisk analysis reportS modesecure emailShareEverywhere functionvoicemail transcriptionsWindows 10 OSwritten policies and processes

Jun 24 , 2021

Session 306: Does PCT offer personal consultations for encrypting external hard drives and old laptops?

View Session

306assessing security incindentsAzure Active DirectoryBAABusiness Plus Google Workspacecameraschecking identitiesconsultationsconverting to PDFsdrivers licenseencrypting softwareGoogle Meethard drive encryptionHIPAA complianthiring adminhushmailiPlumlegal requirementsMedicaid billingoutsourcingphipolicy and procedures manualpros and consReaddle Scanner ProRingRxrisk assessmentsample documentssfaxSprintstart and stop timesT-MobileUbiquitywaiting area

Apr 8 , 2021

Session 295: What does keeping therapist notes separate from client files look like on a device?

View Session

8x8.comback up.CDC COVID safety protocolsclient filesE-faxe-signaturesEHRgoogle driveGoogle workspaceHIPAA covered entityHIPAAppropriateness reviewsInformation Blocking / Open Notes RulingInsurance BillingiPlumlegal-ethicalmigrating emailminorsnot wearing masks indoorsphone servicesrecording and examining system activityrelease of recordsRingRxrisk analysis toolROIseparating documentsSpiderOak ONetherapist notesvaccinatedvoip

Feb 18 , 2021

Session 288: Are HIPAA requirements different than civil/criminal laws?

View Session

BAAcloud basedcontact listscyber liability insurancedeath of patientdelete from clouddomain nameGoogle Nestgoogle voiceHIPAA compliantHIPAA requirementshushmailiPlumLegally Practicing Across Borderslimiting supervision hoursLPC internMalwarebytesphiretiring devicesRingRxsignalSimple PracticeSupervisor/clinical regulationsVPNsword processing options

Feb 11 , 2021

Session 287: Am I required to my psychotherapy notes for 7 years?

View Session

BAABackup & Syncconfiguring devicesdifference between psychotherapy notes and chart notesdigital securitydoxy.meEHRelectronic record keepingfdeGoogle workspaceGsuitekeeping records 7 yearsransomware alertRingRxsecured filesSimple PracticevaultWiFi capable alarm system

Feb 4 , 2021

Session 286: As a non-HIPAA-covered entity, should I still get a BAA with Google Workspace?

View Session

attaching documentsBAABusiness owners policyconfidentialitycyber liability insurancecyber rider policydoxy.mee-mail from MicrosoftEHRGDrivegmailGoogle contacts not covered by BAAGoogle workspaceHIPAA covered entityhushmailluxsciMicrosoft 10non-secureonedrivephone calls onlyRingRxsecurity breachsecurity incidentStandard encryption (TLS)vpn