Episode 609: Update: HHS Releases Model NPP for Part 2 Changes — What It Means for Your Practice
Release Date: 03/17/2026
Episode 609: Update: HHS Releases Model NPP for Part 2 Changes — What It Means for Your Practice
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we discuss HHS’s new model Notice of Privacy Practice for Part 2 programs, what has changed, and what that means for your practice. We cover: The Part 2 Final Rule from 2024 Why the Feb. 16th enforcement deadline has been so confusing The model Part 2 NPP and Patient Notice from HHS, and the function of each document Who is considered a lawful holder and what that means Whether you need to switch to the HHS templates What to do if you already used...
info_outline
Episode 608: AI Isn’t the Problem, Lack of Governance Is – A PSA for Group Practice Leadership
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share a PSA for group practice owners to address unauthorized AI use within your practice. We discuss: What we mean by governance What counts as Protected Health Information (PHI) The standard we use at PCT to determine if something is PHI Why AI tools like ChatGPT are inappropriate for PHI De-identification standards under HIPAA Ethical standards and informed consent for clinical use of AI Concrete next steps to take as a practice leader to address AI...
info_outline
Episode 607: HIPAA After Retirement – How to Close Your Practice the Right Way
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we discuss the HIPAA responsibilities for therapy practice owners when closing their practice or retiring. We cover: Common assumptions about responsibilities after retirement What determines your record retention length How long you must remain contactable after closing your practice and why The key functionalities you need to maintain, and the most economical ways to DIY them Outsourcing to an executor service as an alternative to the DIY approach Common...
info_outline
Episode 606: Being Findable in an AI-Shaped Referral World
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we offer actionable tips for practice owners regarding the rapidly changing landscape of online referral sources. We discuss: How online referral sources have changed over the last year Why Psychology Today is no longer the dominant referral pathway Emphasizing community based referrals How clients are using AI to find therapists How AI tools prioritize results Practical do’s and don’ts for being findable via AI Listen here: For more, PCT Resources ...
info_outline
Episode 605: 42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what’s actually necessary when updating your Notice of Privacy Practices due to Part 2. We discuss: The confusion around updating NPPs without an updated model from HHS A quick refresher on Part 2 Who is considered a lawful holder under Part 2 Next steps for updating your NPP if you are a Part 2 program or lawful holder Our free resource on updating your NPP before the 2/16 enforcement deadline Listen here: For more, PCT Resources PCT Free...
info_outline
Episode 604: Don't Get Phished!
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share advice on how to avoid phishing scams. We discuss: Phishing scams in text messages and email Common scams you might encounter What not to do when you get a suspicious text message PCT resources for how to identify scams and social engineering Listen here: For more,
info_outline
Episode 603: HIPAA Security Rule Changes: January 2026 Update & What Practices Need to Know
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we have an update (and are once again offering reassurance) around the proposed HIPAA Security Rule changes. We discuss: The proposed Security Rule update on the OCR’s spring regulatory agenda Why you’re already in good hands if you’re following PCT’s advice Some of the proposed changes that will impact therapy practices Reassurance about these proposed changes Effective dates versus compliance date Forecasting scenarios for these changes to...
info_outline
Episode 602: Insurance, Documentation, and Audits - With Dr. Maelisa McCaffrey
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Maelisa McCaffrey of QA Prep about how the landscape of insurance and documentation has shifted over the last decade. We discuss: Risk adjustment audits and how they impact providers Billing codes and audit red flags AI documentation and how insurance companies are using AI Considerations when using AI for documentation Pressuring professional associations to advocate for clinicians and clients Our upcoming CE event on January 30th...
info_outline
Episode 601: Email Hacked? How to Prevent it and What to do When it Happens
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share what to do as a practice owner to prevent email hacks, and how to respond if one occurs. We discuss: Technical and behavioral measures to take to prevent email hacks Mandating two-factor authentication system-wide Education and staff training for prevention Creating a shame-free security culture in your practice Steps to take if you receive an email that looks suspicious Steps to take if you find out your email has been hacked Breach reporting...
info_outline
Episode 544: The Big Stories of 2025 Impacting Mental Health Practices
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we’re highlighting the stories that impacted your practices this year, and the main takeaways from each story. We discuss: The proposed changes to the HIPAA Security Rule Common sense security updates to incorporate into your practice The proliferation of AI and ways therapists can differentiate themselves from AI The proliferation of platforms offering practice management as a service How group practices can stand out from these practice management...
info_outlineWelcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss HHS’s new model Notice of Privacy Practice for Part 2 programs, what has changed, and what that means for your practice.
We cover:
- The Part 2 Final Rule from 2024
- Why the Feb. 16th enforcement deadline has been so confusing
- The model Part 2 NPP and Patient Notice from HHS, and the function of each document
- Who is considered a lawful holder and what that means
- Whether you need to switch to the HHS templates
- What to do if you already used our decision guide and resources ahead of the deadline
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
- Updated HHS Model Notice of Privacy Practices
- Model Part 2 Patient Notice
- HHS Part 2 Final Rule Fact Sheet
- PCT decision guide and sample language resource
Additional PCT Resources
- Episode 605: 42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
- + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more