Episode 615: Your Data is Not Your Own: Why VC-Owned Healthcare Wants Your Information
Release Date: 05/08/2026
Episode 633: Supporting Your Team & Protecting Your Practice -- with Niki Ramirez of HR Answers
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we interview Niki Ramirez of HR Answers about how human resources plays a role in effective leadership and a successful group practice. We discuss: Skills that make clinicians effective leaders, and common friction points for clinician leaders How Niki helps group practice leaders develop effective communication skills Progressive discipline, directive coaching, and non-directive coaching The importance of clear expectations and policies Shared...
info_outline
Episode 632: Device Termination: How to Retire a Device That Won't Turn On
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share how we recommend behavioral health practices safely and appropriately dispose of devices that won’t turn on. We discuss: Why smashing devices with lithium-ion batteries is a safety hazard Documentation for disposing of devices that won’t turn on Making sure the device actually won’t turn on Devices that are safe to physically destroy Electronic device recycling programs Listen here: For more, PCT Resources — Practical tools,...
info_outline
Episode 631: Supporting the Whole Client: Physiology, Mental Health, and GLP-1s with Dr. Kristen Allott
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Dr. Kristen Allott about how mental health providers can support client well-being by looking at the foundational aspects of wellness. We discuss: How mental health is impacted when the power supply for the body (food, sleep, exercise, breathing) isn’t adequate Our primary attachment being to our body The impact of adrenaline in the body, and how that impacts folks with complex trauma, especially if they don’t eat regularly How understanding...
info_outline
Episode 630: “I Have to Report This, Right?” Mandatory Reporting and the Risk of Future Harm
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we’re discussing a topic that’s come up frequently in the wake of the Clancy case: mandated reporting. We cover: Misconceptions around mandated reporting Mandatory reporting vs. other legal and ethical duties that apply What a clinician needs to evaluate when there is concern harm may occur Permission to disclose vs. duty to protect Tarasoff duties and liabilities Determining what is required and what is permitted under applicable law The framework that...
info_outline
Episode 629: Does HIPAA Require TLS 1.2+ for Email? What Practices Actually Need to Know
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we answer a listener question and provide clarification on whether securing outbound email in Google Workspace (as discussed in Episode 623) would constitute a HIPAA violation. We discuss: Why blanket claims about HIPAA violations or HIPAA requirements from service providers or vendors raise our ethical hackles Opportunistic vs. forced TLS Legacy TLS and how it would be used with the forced TLS setting configured in Google Workspace What HIPAA actually...
info_outline
Episode 628: HIPAA Security Officer: Who Leads, Who Does the Work, and Who’s Liable?
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we go over some common questions we get at PCT about the HIPAA designated Security Officer role. We discuss: The primary purpose of the Security Officer’s role What is actually required of the person in this role Determining the right person for this role in your practice Tasks that can be passed off to a Deputy Security Officer Operational structure for Security Officers and Deputy Security Officers Whether the Security Officer or Deputy Security...
info_outline
Episode 627: Key Takeaways from Day One of the 2026 NIST–OCR HIPAA Security Conference: Security Rule Updates & Risk Analysis
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we recap what behavioral health practice owners should know from day one of the HIPAA Security Conference. We discuss: The timeline for proposed Security Rule changes What practices must have documented in writing according to the current Security Rule Encryption being reasonable and appropriate in almost every practice environment Expanding risk analysis enforcement initiative to include risk management Why risk analyses are foundational, and what they have...
info_outline
Episode 626: Is Google Search Console HIPAA-Friendly? What Therapy Practices Can Learn Without Google Analytics
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we share a HIPAA-friendly way for therapy practice owners to get useful information about how their websites are performing, via Google Search Console. We discuss: What Google Search Console can tell you about your website The crucial differences between Google Analytics and Google Search Console Why Search Console is permissible for therapy practice websites Caveats and what to consider when configuring Search Console Listen here: For more, Resources for...
info_outline
Episode 625: Google Analytics for Therapy Practice Websites – The HIPAA Risks Explained
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we unpack the reasoning, step by step, behind PCT’s position on Google Analytics for therapy practices. We discuss: Can website activity constitute Protected Health Information? HIPAA’s definition of healthcare operations vs. HIPAA’s definition of marketing Business Associates, and how there is no BAA available for Google Analytics The disclosures required for HIPAA authorization for marketing activity Cases where collecting PHI without a BAA has gone...
info_outline
Episode 624: The Math Has to Math: Building a Sustainable, Profitable Group Practice in 2026 — with Julie Herres of GreenOak Accounting
Group Practice Tech
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech. In our latest episode, we chat with Julie Herres of GreenOak Accounting about how there’s still good money to be made in private practice, and what you need to know to make it. We discuss: Profitability and intentionality, and what it takes to stay on track Rate changes and cost of living changes impacting group practices How Julie would respond to practice owners who are feeling the squeeze right now Setting up the financials for a healthy practice Compensation for pre-licensed...
info_outlineWelcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we share a cautionary tale about a Talkspace client whose healthcare information was weaponized against them.
We discuss:
- Venture capital firms buying therapy practices, monetizing, and weaponizing client data to make more money
- A recent case where a Talkspace client’s data was read aloud in court
- Platforms using client communication to train LLMs and AI platforms
- How these platforms are profoundly detrimental to clients, therapists, and the profession
- Why when something seems too easy and convenient, you are often the product (and your clients are the product)
- How these companies operate outside of HIPAA Security Rule standards
- The importance of vetting platforms and having BAAs for safeguarding client information
Listen here: https://personcenteredtech.com/group/podcast/
For more, visit our website.
Resources
- Story referenced in episode re: employee termination and litigation using all their session data/content from Talkspace chatbot
- Story regarding AI models failing ethics standards and standards of care
PCT Resources
- Live (and recorded) PCT CE Course: Beyond Hype and Anxiety: A Practical Framework for Ethical AI Use in Clinical Practice is a 4-hour legal-ethical CE training co-presented by Dr. Maelisa McCaffrey and Liath Dalton, designed to help clinicians move beyond fear and guesswork into confident, responsible AI use. The course provides a structured, real-world framework for integrating AI into clinical workflows while upholding HIPAA requirements, ethical standards, and clinical standards of care. Participants will learn how to evaluate AI tools, understand what constitutes PHI (and the limits of de-identification), implement appropriate policies and safeguards, and maintain documentation quality and clinical integrity. With practical tools, decision-making frameworks, and implementation strategies, this training supports clinicians in making informed, defensible decisions about AI use in practice.
- Live Webinar Presentation on May 8th, 2026
- Registration for live training includes receiving ownership of and perpetual access to the on-demand self-study CE training produced from recording of live presentation. Get both the content *and* the CE, even if you can’t join live.
- PCT's recommended/curated collection of role-based foundational and topical needs-based staff trainings, including HIPAA and Privacy Ethics for clinical staff, admins; leadership trainings; clinical staff teletherapy training; director/supervisor training; and topical trainings on documentation, rights of access, suicidality, accessibility, countertransference, and much more.
- Nationally respected, role-based HIPAA and privacy ethics and teletherapy training built for mental health staff
- On-demand trainings are accessible in perpetuity and do not expire.
- APA, NBCC, and multiple state licensing board CE provider approvals mean that CE courses count towards licensure renewal requirements for your clinical team.
- Group Practice Care Premium
- weekly (live & recorded) direct support & consultation service, Group Practice Office Hours — including monthly session with therapist attorney Eric Ström, JD PhD LMHC
- Device Security Suite: assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing and documenting all personally owned & practice-provided devices (for *all* team members at no per-person cost)
- Remote Workspace Security Suite: assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing and documenting Remote Workspaces (for *all* team members at no per-person cost) + more
- PCT’s Comprehensive HIPAA Security Compliance Program (discounted) bundles:
-
- For Group Practices
- For Solo Practitioners
- Comprehensive HIPAA Security Policies & Procedures
- Forms & Logs for documenting implementation and maintenance of Policies & Procedures in practice
- Device & Workspace Security Suites
- Direct Support & Consultation from PCT team + therapist attorney Eric Ström, JD PhD LMHC (live & recorded + searchable library)
- Includes the Risk Analysis & Risk Mitigation Planning service + tool
- HIPAA Security & Privacy Ethics training
-