Episode 603: HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we have an update (and are once again offering reassurance) around the proposed HIPAA Security Rule changes.

We discuss:

• The proposed Security Rule update on the OCR’s spring regulatory agenda
• Why you’re already in good hands if you’re following PCT’s advice 
• Some of the proposed changes that will impact therapy practices
• Reassurance about these proposed changes
• Effective dates versus compliance date
• Forecasting scenarios for these changes to take effect
• Steps to take now (and important things to not do now) to be proactive rather than reactive

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

PCT Resources:

• Article: HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know
  • Explore our in-depth article unpacking the proposed HIPAA Security Rule updates — what’s really happening, why it matters, and why this is a runway, not a cliff. You can also use our free Mini Risk Tool(download link in article) for a gentle check-in to see where your practice stands and what would most meaningfully support your security and compliance foundation.
• PCT’s Comprehensive HIPAA Security Compliance Program (discounted) bundles:
  • • For Group Practices
    • For Solo Practitioners
      • Comprehensive HIPAA Security Policies & Procedures
      • Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
      • Device & Workspace Security Suites 
      • Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
      • Includes the Risk Analysis & Risk Mitigation Planning service + tool
      • HIPAA Security & Privacy Ethics training
• HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices — care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.
• Group Practice Care Premium
  • weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
  • + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
  • + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more