Nov 25 , 2025

Session 534: Office Hours (November 25th, 2025)

View Session

Apple accountdenying permissionsdevice hardeningGoogle workspaceHealth appiCloud storageiCloud+ Private RelayiPlumNord accountNordVPNpersonal phone lines under a business accountphiSpruceswitching office WiFi and phone serviceVerizon BAA

Nov 20 , 2025

Session 533: Office Hours (November 20th, 2025)

View Session

access audit logsadvanced security featuresBAA expiration datesEHRexternal physical firewallfirewallsiCloud back-up storageintakeqinternal firewallMicrosoft Authenticator notificationsMicrosoft Officeoff-boarding clinicianongoing Business AssociatesPHI storagereview audit logssecure connectionself-setup Gatewaysoftware updates logsolo practiceSpruceswitching office WiFi and phone serviceT-Mobile 5G GatewayT-Mobile Amplified business plan for small businesseswireless modem/router

Nov 6 , 2025

Session 531: Eric Ström, JD PhD LMHC Office Hours (November 6th, 2025)

View Session

access to secure messagingBAAbusiness email communicationensuring client privacyEric-Day SessiongmailGoogle workspaceGoogle Workspace BAAHIPAA breachHIPAA compliantHIPAA covered entityhushmailincidental vs accidental disclosure of PHIindependent contractorsleasing out office spaceLocal Model AI agentmaintaining updated chartsmitigating unnecessary PHI accessoffline AI modelPCT and Eric recommendationsPCT Security Policy and Procedures ManualPHI breachreferral processrisk analysissample logsharing video recordingssigned ROIsSpruce

Sep 11 , 2025

Session 523: Office Hours (September 11th, 2025)

View Session

antivirus programsauthenticator appcloud storagecodes saved to Google accountcost effective optionsFaxagegodaddyGoogle workspaceHIPAA compliantiPlumold Outlook emailorganization contact emailPCT recommended security behaviorsphiphone/voicemailRingRxscam potentialscanning hard copiesscanning photo IDscreening online contactssecure messagingSimple PracticeSpruceSpruce's Higher level planSquarespace domainTalkrouteTime Machine backupupload documentswebsite and domain protection

Jun 12 , 2025

Session 510: Office Hours (June 12th, 2025)

View Session

access to passwordcompromising HIPAA compliancecomputer repairEHR logsintakeqlaptop trade-inMicrosoft emailPCT recommendationsPCT’s Security Awareness Training Grab-Bag trainingreview audit logsSolo practitionerSpruce

Feb 20 , 2025

Session 494: Office Hours (February 20th, 2025)

View Session

"""offsite"" sessions"account securityBAA copiesbuilt-in email contact featureclause in security manualclinical social work associationCloud Organizationconsolidate billingcontract agreementdoor codes and keysemail from GoogleemrFile explorerfirewall protectionGoogle Cloud Platform adminsGoogle filesGoogle workspaceguest networkHIPAA compliantHIPAA compliant appsIAM policiesiPlumlogin codelost/stolen computersMFA verification methodmonitoring servicesnot accepting credit cardsoffer separate BAAoffers BAAonline billingPassword Protectedpayment processingPDFspotential accessibilitypotential concernspotential patient and therapist privacy violationsprotect patient and clinician privacypsychology todayremote factory resetrenting officeSecurity Policies and Procedures Manualsegmented networksending PDFsshared business WiFiSimple PracticeSpruceTherapy DenTherapy Tribeupdate language in manualVonageWashington political climatewifi hotspot

Dec 19 , 2024

Session 486: Is it okay to have Google Ads?

View Session

antivirus softwareavastbasic plan vs. paid plancreating account with DOCfirewallgoogle adsGoogle NestGoogle Nest Wifi Pro 6e routerHIPAA complianthushmailiPlumkiosk for email and scanned emailmarketing a practice effectivelyNest Wifi Cloud ServicesNord VPNpro bono supportSpruceTelzioTP-link Ax-55 routerWifi device usage data

Sep 12 , 2024

Session 472: Can I merge my personal password management account with my practice account?

View Session

accessing PHIAccommodationsantivirus softwarebest practicesbreached personal informationbusiness software servicecommunication channelscomputer virusdocumenting supervison meetingsdownloading/uploadingefficient alternativesEHR interactionEHR storagefillable clinical formsGoogle workspacehardened devicesHIPAA complianthipaa secureintake paperworkMacbook Airmerging password management accountsmicrosoft 365Microsoft One DrivepasskeysPCT recommendationsPCT Support Workbookpersonal Gmail accountPHI storageprinter and scannerScannersecurity breachsending records securelysending ROIsenior populationSimple PracticeSpruceSRfaxswitching emailstechnology inexperienced clientsthird party antivirus softwarethird party companytwo-factor authenticationvirus/malware/spyware

Mar 28 , 2024

Session 448: How do I enable my successor to be able access what they need to if I can't share my password with them?

View Session

addendumcontact formsGoogle FormsGoogle workspace emailHIPAA compliantlegal disclaimersluxscinon-signed BAAspassword sharingreviewing BAAssecure communicationsecure messagingSimple PracticeSprucesuccessorsTeletherapyTerms of Servicevirtual assistant

Mar 7 , 2024

Session 445: Is there a way to verify/check that my website/google isn't collecting data?

View Session

BAABAA for Zoomcompliance considerations for websitesconfidentiality disclosuredeleting plug-insGoogle AnalyticsGoogle workspaceGoogle Workspace vs. Microsoft 365HIPAA compliantMac OSPCT WayphiprotonmailReactionssolo practice HIPAA manualSprucetherapynotesVideoconfrencingZoom