Episode 543: Defining the Role of Secure Email Alongside your EHR - With Hushmail
Release Date: 12/12/2025
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we have an exciting update about how to make your Google Workspace email HIPAA-secure. We discuss: The encryption mechanism, TLS, and how it fits into HIPAA Security Rule standards Ways that behavioral health practices typically manage email security Escrow style email The transmission security standard under HIPAA Google’s transparency report about safer email HIPAA-friendly conventional email vs. HIPAA secure email Two limitations to be aware of and a...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we debunk myths around documentation and fraud with Dr. Maelisa McCaffrey. We discuss: A recent article that is causing concern about whether submitting insurance claims before notes are complete constitutes fraud Fraud vs. mistakes, and consequences for mistakes in billing What constitutes fraud under the False Claims Act, with context from Eric Ström, HIPAA and mental health law attorney and practicing clinician Whether there are rules about when notes...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Maelisa McCaffrey about how to properly document your therapy sessions. We discuss: Normalizing why documentation is such a struggle for clinicians Dispelling the myth that it is necessary to translate what you’re doing into CBT language for insurance reimbursement and why The danger of only considering insurance when documenting Documenting what actually happened in session Acknowledging that progress notes are never going to fully...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we interview attorney Dan Pepitone about how to choose the right business entity for your group practice. We discuss: Building a strong business foundation to reduce risk and exposure to liability The distinctions between different business entities, and tax implications for each Why some states like New York and California require behavioral health care providers to practice under a professional entity like a PC or PLLC When you need to register your...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what you need to know about public wi-fi networks & the security risks they pose to your devices and information. We discuss: The difference between privacy and security How the risks posed by public wi-fi networks have changed over time What security risks public wi-fi networks actually pose to your device How to use a risk analysis lens to put simple, accessible safeguards in place Listen here: For more, Resources: ...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what we know about the proposed HIPAA Security Rule and steps to take to safeguard your practice in the meantime until we know more. We discuss: The current status of the proposed HIPAA Security Rule How regulatory uncertainty does not equal security uncertainty Takeaways from OCR Director Paula Stannard’s comments at the National HIPAA Summit that give insight into the rationale behind the proposed rule Risk analysis, encryption, reasonable...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we have an important update for practice owners who bill insurance. We discuss: Why the change from CAQH to DataSpring is not just an administrative rebrand, as DataSpring is trying to position it Why this change is a big deal for practice owners who bill insurance The action steps recommended by The Group Practice Exchange Additional PCT-recommended action steps Who owns the infrastructure that healthcare depends on? Looking at this change from a risk...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we have exciting updates for cross-jursidictional and multi-jurisdictional practice. We discuss: The Counseling Compact, and the states in which it is live The ETA for the Social Work Licensure Compact going live Access MFT’s licensure portability effort Portability-friendly laws and how they differ from rights for temporary practice PSYPACT updates Physical location restrictions and requirements for providers under compacts Details of our upcoming CE...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share a cautionary tale about a Talkspace client whose healthcare information was weaponized against them. We discuss: Venture capital firms buying therapy practices, monetizing, and weaponizing client data to make more money A recent case where a Talkspace client’s data was read aloud in court Platforms using client communication to train LLMs and AI platforms How these platforms are profoundly detrimental to clients, therapists, and the profession Why...
info_outlineGroup Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we talk about the importance of proficiency and competency with any tool or modality used in your practice. We discuss: Why training is necessary with any tool or modality used in your practice, not just AI What the professional ethics codes say about competence and proficiency for tools and modalities used How PCT evolved to help clinicians manage the advent of new technology Our upcoming CE training on how to evaluate AI and incorporate it into your...
info_outlineWelcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we chat with Ben Cutler, CEO of Hushmail, about how a secure email service can be a crucial part of your practice’s tech stack.
We discuss:
- How secure email can complement the communication features of your EHR
- Communication gaps in EHRs that can impact your security circle
- Pairing secure forms with secure email to optimize the intake process
- Secure communications as a marketing asset
- Creating more efficient streamlined services for clients and providers
- Addressing burnout via efficient business systems
- Using Hushmail to customize forms and coordinate care
- Misconceptions around non-secure communications
- The difference between HIPAA friendly and HIPAA secure
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
- Free Trial of Hushmail!
- Hushmail provides HIPAA-compliant secure email and encrypted online forms designed specifically for behavioral health professionals. It fills the critical gaps your EHR can’t cover—especially during first contact, referrals, and communication with people outside your EHR’s closed messaging system.
- With encrypted email, customizable secure forms, legally binding e-signatures, and ready-to-use templates, Hushmail helps therapists protect client information from the very first inquiry through the entire clinical journey. Clinicians can securely manage intake, collect sensitive documents, send referrals, and maintain compliant records—even during practice transitions or retirement.
- Hushmail’s behavioral-health-specific plans include a signed BAA, automatic archiving to support HIPAA compliance, and access to a customer care team deeply familiar with the needs of therapy practices.
- Exclusive for listeners: Try Hushmail for Healthcare free for 14 days and explore secure email and forms tailored for your practice.
PCT Resources
- PCT CE course: Smooth and Secure Use of Phone, Text, Email, and Video to Meet Modern Clients Where They Are: Legal-Ethical and Real-World Considerations (3 legal-ethical CE credit hours)
- PCT Podcast Episode: Episode 317: [Compliance] Can Clients Waive the Need for HIPAA Compliance?
- PCT’s Sample Request for Non-Secure Communications Form