May 21 , 2026

Session 559: Solo Practice Office Hours (May 21st, 2026)

View Session

autofill featuresChrome browserconduit exceptiondispute resolutionfacetimefollow-upfree backupshipaa complianceHIPAA compliance red flagsHIPAA concernsHIPAA considerationslastpasslogging in to Gmailno BAApodcast recommendationsSafe Harbor Protectionsecurity and compliancesettings securitysignalStripetelehealth servicesweb extension download vs desktop

Apr 23 , 2026

Session 555: Solo Practice Office Hours (April 23rd, 2026)

View Session

access and sign BAAbest practicescontact formdeleting phidoxy.meform submission dataGoogle BAAGoogle productsGoogle workspace accounthushmailnew email - same domainprivacy concernssecure contact onlinesecure emailsignalSquarespace pagetelehealth services

Oct 16 , 2025

Session 528: Office Hours (October 16th, 2025)

View Session

accessing clients informationbusiness relatedDepartment of Homeland SecurityEncryptedGoogle Workspace DriveGraphitehushmailiPhone NotesiPlumIvyPayjudicial blockMedicaidpersonal Google drivephiphone security settingsprivacy and security settingsprivacy issuessecure messagingsecurely transferring filessecurity settingsSeparate WiFi from householdsharing notessignalSnopesstate-funded healthcare program recipientstelehealth platformsvirus/malware/spywareWhatsApp

Mar 6 , 2025

Session 496: Eric Ström, JD PhD LMHC Office Hours (March 6th, 2025)

View Session

abandoned recordsautomatic mileage trackingbest practicescollection agenciesconsent formscoordination of carecustodian of recordsdeactivate WPSdropboxEHRethernet connectionsfirmware updatesformer employeeGoogle workspaceHIPAA compliantHIPAA Conduit RuleHIPAA Security RuleHIPAA violationsHIPAA-friendlyHome and Mobile Teletherapy Work Check SheetshushmailiPlumlaws or statuteslocked file cabinetsluxscimental health providerOrbi router settingsparental custodyparenting planprogress notesproposed changesrecords subpoenarelease of recordsRights of AccessRingRxROIsecure textingsecurity riskssignalSignal encryptionSSIDstaffingThe Campaign Registry (TCR)transfer datatransmitting highly sensitive assessmentsTresorit

Jan 9 , 2025

Session 488: Eric Ström, JD PhD LMHC Office Hours (January 9th, 2025)

View Session

adding second line to iPhoneAndroid & Apple phonesAvast antivirus securityBAABAA for executor of professional willBAA templatebilling fraudclassic phone serviceconduit exceptionconsent forms and legal guardianscredit card on fileCyber SecEric-Day Sessionfamily phone planGFE requirementsGood Faith Estimates (GFE)guidance on updating languagehipaa secureHIPAACOW BAA Templateinsurance fraud concernsMacbookmedical requests requestMobile Workspace VideoNordVPNNorthwestern Mutualpassword protectionprequalification for a life insurance policypublic wifireissue invoicesRelease Pointretiring devicesROIsecure vs. non-secure textingself-paying clientssignalSimple Practice Appsuperbillsuperbills requesttoggle switchUnumwritten consent

Jul 25 , 2024

Session 465: Is 1Password still a good program to use for password security?

View Session

1passwordConstant Contactend-to-end encryptionHIPAA compliantMailChimpMicrosoft Windowsopt-in optionspassword managementPassword Protectedprivacy policyprotonmailsecure emailsignalvideo calls

Nov 3 , 2022

Session 376: Where is the definition of residency?

View Session

business and personal lines on one iPhonedefinition of residencydual residencyHIPAA compliantlandlines for businessListservLMHC in Washington Statelogging in with Google IDpracticing across state linesremoving SMS supportsecurity/privacy of voice mail messagessignaltech-privacy forumtelehealth servicesWashington Post article

Sep 29 , 2022

Session 371: I want to shift my business address from my home address to a permanent address locally...

View Session

"""allow others to join"""anti-text spamming law personal hotspotBAA adding verbal consentbacking up workcall-forwardingchanging business addressfeedback/suggestions iPlumgoogle voiceHIPAA compliantHIPAA security training security incident response planiphone 13Macsmultiple accountsno BAA minimum/maximumphiphone screeningphone softwarepolicies for HIPAA manualsecure texting platformssecurity breach on call clinicianssecurity concernsignaltoll free texting

Oct 21 , 2021

Session 323: How often do you recommend I check that my devices are up to date?

View Session

Access Requirements Policy sectionaccess to PHIadjust automatic settingsAdobe AcrobatAdobe E-SignavastBAACC on filechange browsers and settingsclient portalComcastcustomize ROIdevices up to datedifference between psychotherapy notes and chart notesdocumenting consentDocusignDuckDuckGoEHRelectronic fileEMDR certificationencrypted emailsfamily/couples therapistfree versionGoogle ChromeGoogle MeetGoogle workspaceHIPAA complianthushmailiCloud driveidentifying factorsIntake documentsiPhone settingslandline providerlegal regulationsMacbook AirMailhippomaintain paper filesNational Cybersecurity Awareness Monthpassphrasepersonal Gmail accountPractice management platformprivacy checkupprocess client paymentsprotect PHIrecord sessionsROIsecure emailsignalSimple PracticeSolo practitionersquaretext messaging platformupload to drivevulnerable to hacking

Oct 14 , 2021

Session 322: Are video recordings for supervision and training recordings technically PHI?

View Session

accessing PHIBAA-linked Google Workspace calendarbest protocolsChange Management TrackingChrome extensioncloud storagecollecting paymentscollectionsDevice Security Policyencrypted external hard drivegoogle drivehardened devicesHIPAA complianthushmailiPlumphipotential accessibilityReaddle Scanner Proreporting to credit bureausrequest paymentScannerProsignalsolo practiceSpeechifyvideo recordings for supervision and training