Group Practice Tech

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share an important warning for practice owners about increasingly sophisticated phishing attacks for you and your staff to be aware of. We discuss: How phishing attacks are now using legitimate services like DocuSign, Google Calendar, and more What these phishing attacks typically look like and things to watch out for How scammers access these trusted platforms  What adversary-in-the-middle phishing attacks are and how they can circumvent MFA Combining technical and behavioral security measures What to do if your practice experiences a phishing attack What this means for HIPAA security compliance, risk management, and practice protection Best practices for managing this risk, and practical protections to put in place Our soon to be updated training that will cover this exact topic Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. Resources for Listeners PCT Resources HIPAA Security Awareness Grab-Bag — Three short, on-demand staff security awareness trainings covering stopping phishing and social engineering, avoiding inappropriate disclosures of PHI, and protecting PHI in public. A practical resource for strengthening your team's security awareness right now. Group Practice Care Premium — Includes weekly Group Practice Office Hours for direct support and consultation with PCT experts, including a monthly session with therapist and attorney Eric Ström, JD, PhD, LMHC. Also includes the Device Security Suite and Remote Workspace Security Suite, with assignable staff trainings, step-by-step security tutorials, and tools to document device and workspace security for all team members at no additional per-person cost. Coming Soon: Updated Phishing Security Awareness Training — We're developing dedicated trainings for practice staff and practice leaders/Security Officers addressing sophisticated phishing attacks involving DocuSign, Google Workspace file sharing, calendar invitations, adversary-in-the-middle attacks, and session hijacking. Stay tuned for more information! Resources DocuSign Safety Center: Current Fraud Alerts — Regularly updated alerts about phishing campaigns exploiting DocuSign, including fraudulent invoices, EFT remittance notices, and malicious documents distributed through legitimate DocuSign envelopes. DocuSign: Phishing Scams Using Fake Blurred Documents to Gain Device Access — A real-world example of attackers using legitimate DocuSign notifications to trick recipients into downloading malicious software to supposedly reveal a blurred document. Google Calendar Help: Manage Invitations and Prevent Unsolicited Events — Instructions for controlling which invitations automatically appear on your calendar. Consider selecting "When I respond to the invitation in email" under Settings → Event settings → Add invitations to my calendar, rather than automatically adding invitations from known contacts whose accounts could potentially be compromised. Microsoft: Identity Protection Risk Detections — Technical guidance on account security threats, including adversary-in-the-middle phishing and stolen session tokens that may allow attackers to access accounts even when conventional multifactor authentication is enabled. HHS OCR: Social Engineering – Searching for Your Weakest Link — Official guidance on social engineering, phishing, workforce security awareness, and protecting electronic protected health information (ePHI). HHS OCR: HIPAA Cybersecurity Guidance and Resources — Cybersecurity resources to help HIPAA-covered entities and business associates understand security risks, implement safeguards, and prepare for security incidents. HHS OCR: HIPAA Breach Notification Rule — Official guidance on assessing potential breaches of unsecured PHI and understanding breach notification obligations. A reminder that containing an account compromise is not the same as completing an incident investigation and determining whether a reportable breach occurred.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we interview Niki Ramirez of HR Answers about how human resources plays a role in effective leadership and a successful group practice.   We discuss: Skills that make clinicians effective leaders, and common friction points for clinician leaders How Niki helps group practice leaders develop effective communication skills Progressive discipline, directive coaching, and non-directive coaching The importance of clear expectations and policies Shared knowledge leading to shared vision and aligned action Course correcting if you don't have HR pieces in place HR foundations to have in place when launching a practice How HIPAA compliance and risk management and HR components work together Managing offboarding and employment transitions How to work with Niki and HR Answers Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share how we recommend behavioral health practices safely and appropriately dispose of devices that won't turn on. We discuss: Why smashing devices with lithium-ion batteries is a safety hazard Documentation for disposing of devices that won't turn on Making sure the device actually won't turn on Devices that are safe to physically destroy  Electronic device recycling programs Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. PCT Resources Group Practice Care Premium — Practical tools, staff training, and ongoing support to help group practice leaders secure and document the devices and workspaces their teams use. Premium includes: Device Security Suite: Assignable staff HIPAA Security Awareness: Bring Your Own Device training, plus access to the Device Security Center with step-by-step, device-specific tutorials and registration forms for securing and documenting all personally owned and practice-provided devices—for all team members, at no per-person cost. Remote Workspace Security Suite: Assignable staff HIPAA Security Awareness: Remote Workspaces training, plus access to the Remote Workspace Center with step-by-step tutorials and registration forms for securing and documenting remote workspaces—for all team members, at no per-person cost. Direct support and consultation: Weekly live and recorded Group Practice Office Hours, including a monthly session featuring therapist and attorney Eric Ström, JD, PhD, LMHC, plus additional direct support and consultation resources. Solo Practice Care Premium — Practical resources and ongoing support to help solo clinicians secure their devices and workspaces and make informed decisions as practice questions arise. Premium includes: Device Security Instruction Center: Step-by-step tutorials and registration forms for securing and documenting personally owned and practice-provided devices. Home & Mobile Workspace Security Instruction Center: Step-by-step tutorials and registration forms for securing and documenting home and mobile workspaces. Direct support and consultation: Weekly live and recorded Office Hours, including a monthly session featuring therapist and attorney Eric Ström, JD, PhD, LMHC.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Kristen Allott about how mental health providers can support client well-being by looking at the foundational aspects of wellness. We discuss: How mental health is impacted when the power supply for the body (food, sleep, exercise, breathing) isn't adequate Our primary attachment being to our body The impact of adrenaline in the body, and how that impacts folks with complex trauma, especially if they don't eat regularly How understanding wellness and the nervous system can help mental health professionals serve clients better The toolkit Dr. Allott would provide for every mental health practitioner Therapist wellness and why therapist burnout is so severe Self-care vs. self-neglect Dr. Allott's upcoming training on GLP-1s and mental health with PCT Why therapists are uniquely situated to provide care for people managing the effects of GLP-1 medications Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. Resources for Listeners PCT Resources Live (and recorded) CE training: GLP-1s: Mental Health, Addiction, and Disordered Eating — What Therapists Need to Know Join Dr. Kristen Allott, ND LAc, for this three-credit-hour training, presented live on October 30, 2026, with on-demand self-study CE course access also included. This training will help therapists understand how GLP-1 medications may be supporting or compromising a client's well-being and provide a framework for navigating client conversations, setting realistic expectations, and "tipping the scales" toward safety and efficacy — all while remaining within their scope of practice. Resources from Dr. Kristen Allott To learn more about Dr. Kristen Allott, visit KristenAllott.com. The homepage links to all of her free handouts and videos, which you can share with your clients. You can also sign up for the Dynamic Brains Learning Collective, a free monthly virtual meeting where you can ask Dr. Allott your questions and she dives deeply into hot topics. You can learn more about her workbook, Fuel Your Brain, Not Your Anxiety, which walks you through the steps she uses to identify the physical causes of mental health challenges. Be sure to follow Dr. Allott on social media: Instagram: @KristenAllott Facebook: @DynamicPaths Finally, a quick note: Dr. Allott can only see individuals as patients if they live in Washington state. However, she is available to be contracted as a consultant for mental health professionals who want to engage more deeply with their clients and care for the whole body. She is also available for individualized seminars.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we're discussing a topic that's come up frequently in the wake of the Clancy case: mandated reporting. We cover: Misconceptions around mandated reporting Mandatory reporting vs. other legal and ethical duties that apply What a clinician needs to evaluate when there is concern harm may occur Permission to disclose vs. duty to protect Tarasoff duties and liabilities Determining what is required and what is permitted under applicable law The framework that Eric Strom and Liath presented in the related CE course to determine what to do in these situations Listen here: https://personcenteredtech.com/group/podcast/ For more, visit our website. Resources for Listeners PCT Resources On-demand CE course: "I Have to Report This, Right?" Law and Ethics of Mandatory Reporting, Tarasoff Liability, and the Limits of Confidentiality When a client reveals possible abuse or a risk of harm, how do you determine whether a report is required, a disclosure is permitted, or another protective action is needed? In this three-hour legal-ethical CE course (APA and NBCC approved,) attorney and clinician Eric Ström and PCT's Liath Dalton work through these distinctions and their implications, real-world scenarios, differing state laws, and the decisions clinicians face when confidentiality and safety intersect. The course includes the PAUSE framework and worksheet to help you reach and document a proportionate, client-centered response. "This was one of the better, more involved and detailed CE's I have ever attended" "After working 40 years as a therapist, and 25+ of those years in private practice, this is the FIRST time 'Tarasoff' (its hx and utility) was made clear!" On-demand CE course:  Legal-Ethical Cross-Jurisdictional Telemental Health in 2026 For clinicians practicing across state or national borders, this course examines how client location, clinician location, and licensure jurisdictions can affect confidentiality, mandatory reporting, emergency response, and other obligations. 3 legal-ethical CE credit hours. APA and NBCC approved. Direct Support and Consultation: Group Practice Care Premium — For group practice leaders who want support as questions arise, Premium includes weekly live and recorded Group Practice Office Hours, with a monthly session featuring therapist attorney Eric Ström, JD, PhD, LMHC. Solo Practice Care Premium — For solo clinicians who want support as practice questions arise, Premium includes weekly live and recorded Office Hours, with a monthly session featuring therapist attorney Eric Ström, JD, PhD, LMHC. Additional resources HHS: HIPAA Privacy Rule and Sharing Information Related to Mental Health — Guidance on when HIPAA permits mental health information to be shared, including circumstances involving safety concerns. HHS: Disclosure When a Patient Presents a Serious Danger — Explains HIPAA's permission to disclose information to someone reasonably able to prevent or lessen a serious and imminent threat, when the applicable conditions are met. Child Welfare Information Gateway: Mandatory Reporting of Child Abuse and Neglect — An overview of reporting requirements and how they vary across states.