Jul 16 , 2026 Session 567: Eric Ström, JD PhD LMHC Solo Practice Office Hours (July 16th, 2026) View Session 50/50 residencyAI for note writingBAAbilling challengesbilling insurancebrighter visionBusiness FacebookCIPA Legal Demand Lettersclients partner (non-client) providing paymentscloud-based storagecollecting personal informationconsent bannerconsultation/training groupscookie bannercopays and deductiblescouples sessionsdata securityData Storagedeleted file locationdeleted filesdisabling messaging functionDMV residency fraud investigationdropboxElfsightencrypted emailEric-Day SessionFalse Claims ActgmailGoogle AIgoogle driveGoogle employee accessGoogle sheetsGoogle workspaceGoogle Workspace BAAHIPAA compliance and securityHIPAA complianthushmailindividual insuranceIP address auditlegal/ethical considerationsmalpractice insuranceMedicad clientnon-client requesting invoicesobtaining ROIs from clientpassword manager access deniedPCT and Eric recommendationsPCT recommendationsPHI risksPHI storageprogress notesrecorded Zoom sessionsrevoked the releaseright to request recordsROI templatesecure emailsecurely record and share videoService Level Agreement templatesharing client names/PHIshowing session recordingsSimple Practice employeesstorestoring passwordstherapist recommendationsthird-party financial agreementtreatment summarieswebsite cookiesZoom AI tanscription
Jun 4 , 2026 Session 561: Eric Ström, JD PhD LMHC Solo Practice Office Hours (June 4th, 2026) View Session backup internet connectionsbreach of confidentialitybuilt to comply with HIPAAcellular hotspotsChatGPTclinical supervisorconnecting devices to WiFidiagnosis codedocumentation requirementsdocumenting initial inquiries from prospective clientsdocumenting substance use (not abuse)documents and devices locked upEric-Day Sessionfamily psychotherapy without client presentHIPAA compliance and securityHIPAA compliantinformed consentinsurance companiesintake coordinatorlegal/ethical considerationsmarketing vs. actual security infrastructuremedical emergency during telehealthminor/adolescent clientnetwork security standardsnon-HIPAA entityNotice of Privacy Practices (NPP)parent providing informationparent-only intake sessionsPCT guidancePCT resources/servicespersonal hotspot requirementspotential legal/ethical concernspractice policypractitioner protectionsprotections in placepublic wifiremember and summarize sessionsresponsibility of informing clientssecurity measuressubstance use disorderssuperbillsupport client-directed AI assistance for therapytherapists scope of responsibilitytreatment summariesUndertoneVPN necessaryWorkforce ManualZoom transcripts
