Episode 609: Update: HHS Releases Model NPP for Part 2 Changes — What It Means for Your Practice
Release Date: 03/17/2026
Episode 633: Supporting Your Team & Protecting Your Practice -- with Niki Ramirez of HR Answers
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we interview Niki Ramirez of HR Answers about how human resources plays a role in effective leadership and a successful group practice. We discuss: Skills that make clinicians effective leaders, and common friction points for clinician leaders How Niki helps group practice leaders develop effective communication skills Progressive discipline, directive coaching, and non-directive coaching The importance of clear expectations and policies Shared...
info_outline
Episode 632: Device Termination: How to Retire a Device That Won't Turn On
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share how we recommend behavioral health practices safely and appropriately dispose of devices that won’t turn on. We discuss: Why smashing devices with lithium-ion batteries is a safety hazard Documentation for disposing of devices that won’t turn on Making sure the device actually won’t turn on Devices that are safe to physically destroy Electronic device recycling programs Listen here: For more, PCT Resources — Practical tools,...
info_outline
Episode 631: Supporting the Whole Client: Physiology, Mental Health, and GLP-1s with Dr. Kristen Allott
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Kristen Allott about how mental health providers can support client well-being by looking at the foundational aspects of wellness. We discuss: How mental health is impacted when the power supply for the body (food, sleep, exercise, breathing) isn’t adequate Our primary attachment being to our body The impact of adrenaline in the body, and how that impacts folks with complex trauma, especially if they don’t eat regularly How understanding...
info_outline
Episode 630: “I Have to Report This, Right?” Mandatory Reporting and the Risk of Future Harm
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we’re discussing a topic that’s come up frequently in the wake of the Clancy case: mandated reporting. We cover: Misconceptions around mandated reporting Mandatory reporting vs. other legal and ethical duties that apply What a clinician needs to evaluate when there is concern harm may occur Permission to disclose vs. duty to protect Tarasoff duties and liabilities Determining what is required and what is permitted under applicable law The framework that...
info_outline
Episode 629: Does HIPAA Require TLS 1.2+ for Email? What Practices Actually Need to Know
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we answer a listener question and provide clarification on whether securing outbound email in Google Workspace (as discussed in Episode 623) would constitute a HIPAA violation. We discuss: Why blanket claims about HIPAA violations or HIPAA requirements from service providers or vendors raise our ethical hackles Opportunistic vs. forced TLS Legacy TLS and how it would be used with the forced TLS setting configured in Google Workspace What HIPAA actually...
info_outline
Episode 628: HIPAA Security Officer: Who Leads, Who Does the Work, and Who’s Liable?
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we go over some common questions we get at PCT about the HIPAA designated Security Officer role. We discuss: The primary purpose of the Security Officer’s role What is actually required of the person in this role Determining the right person for this role in your practice Tasks that can be passed off to a Deputy Security Officer Operational structure for Security Officers and Deputy Security Officers Whether the Security Officer or Deputy Security...
info_outline
Episode 627: Key Takeaways from Day One of the 2026 NIST–OCR HIPAA Security Conference: Security Rule Updates & Risk Analysis
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we recap what behavioral health practice owners should know from day one of the HIPAA Security Conference. We discuss: The timeline for proposed Security Rule changes What practices must have documented in writing according to the current Security Rule Encryption being reasonable and appropriate in almost every practice environment Expanding risk analysis enforcement initiative to include risk management Why risk analyses are foundational, and what they have...
info_outline
Episode 626: Is Google Search Console HIPAA-Friendly? What Therapy Practices Can Learn Without Google Analytics
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share a HIPAA-friendly way for therapy practice owners to get useful information about how their websites are performing, via Google Search Console. We discuss: What Google Search Console can tell you about your website The crucial differences between Google Analytics and Google Search Console Why Search Console is permissible for therapy practice websites Caveats and what to consider when configuring Search Console Listen here: For more, Resources for...
info_outline
Episode 625: Google Analytics for Therapy Practice Websites – The HIPAA Risks Explained
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we unpack the reasoning, step by step, behind PCT’s position on Google Analytics for therapy practices. We discuss: Can website activity constitute Protected Health Information? HIPAA’s definition of healthcare operations vs. HIPAA’s definition of marketing Business Associates, and how there is no BAA available for Google Analytics The disclosures required for HIPAA authorization for marketing activity Cases where collecting PHI without a BAA has gone...
info_outline
Episode 624: The Math Has to Math: Building a Sustainable, Profitable Group Practice in 2026 — with Julie Herres of GreenOak Accounting
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Julie Herres of GreenOak Accounting about how there’s still good money to be made in private practice, and what you need to know to make it. We discuss: Profitability and intentionality, and what it takes to stay on track Rate changes and cost of living changes impacting group practices How Julie would respond to practice owners who are feeling the squeeze right now Setting up the financials for a healthy practice Compensation for pre-licensed...
info_outlineWelcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we discuss HHS’s new model Notice of Privacy Practice for Part 2 programs, what has changed, and what that means for your practice.
We cover:
- The Part 2 Final Rule from 2024
- Why the Feb. 16th enforcement deadline has been so confusing
- The model Part 2 NPP and Patient Notice from HHS, and the function of each document
- Who is considered a lawful holder and what that means
- Whether you need to switch to the HHS templates
- What to do if you already used our decision guide and resources ahead of the deadline
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
- Updated HHS Model Notice of Privacy Practices
- Model Part 2 Patient Notice
- HHS Part 2 Final Rule Fact Sheet
- PCT decision guide and sample language resource
Additional PCT Resources
- Episode 605: 42 CFR Part 2, HIPAA NPPs, and the February 16 Deadline: What Actually Needs to Change
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- + assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
- + assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more