Is an email from a prospective client considered PHI under HIPAA?

Learn when HIPAA applies to prospective client emails, why the first contact may already involve PHI, and how to handle inquiries securely without adding complexity.

Learn how therapists can use AI tools safely and ethically while staying HIPAA-compliant. Tips for risk analysis, safeguards, and informed consent to protect client privacy.

PHI isn’t just clinical notes. Learn how small healthcare practices can identify and protect PHI in everyday communication.

Generic HIPAA and consent forms may leave out required state disclosures, telehealth rules, and ethics standards. Here’s how to fix yours.

Confused about Notice of Privacy Practices (NPPs) for your small practice? Our guide breaks it down and shows you how to get it right.

Email can be protected while it’s being sent. But what happens after delivery? Learn what therapists should consider about HIPAA risk.

What therapists call a HIPAA waiver isn't a true waiver. Learn what client requests for non-secure communication actually do and what HIPAA still requires.

A straightforward six-step HIPAA checklist to help you tighten security and reduce risk. It walks through several safeguards highlighted in proposed HIPAA Security Rule updates, such as risk assessments, two-step verification, and encryption, as well as other core HIPAA responsibilities for small practices.

The HHS is placing renewed emphasis on three familiar safeguards in the HIPAA Security Rule: multi-factor authentication, risk analysis, and encryption. Understanding what's happening in each area can help you make small, practical adjustments that support client privacy and boost your practice's security.

HIPAA Update Series: Learn why encryption may become mandatory under HIPAA, how it protects client data, and simple steps small practices can take now.

HIPAA Update Series: Learn how OCR is enforcing risk analysis more strictly, what this means for small practices, and how to stay compliant with confidence.

HIPAA Update Series: Learn what multi-factor authentication is, why you should use it, what HIPAA says, and how to prepare for upcoming changes.

Learn HIPAA-compliant ways to destroy PHI. Simple, affordable methods for small practices to securely dispose of paper and electronic records.

We asked our community of therapists which forms and assessments they use most. Discover the top 10, including PHQ-9 and GAD-7, and learn how to securely send them with HIPAA-compliant forms.

Feel more confident screening your clients — in minutes, not hours.

Your Google Business Profile could expose client data. Learn how to secure it with HIPAA-compliant solutions and protect privacy from the very first click.

Between back-to-back therapy sessions and the endless demands of running his business, Sean had a lot on his mind. One task was eating up time and mental energy — emailing client forms. Sean knew there had to be a better way, so he reached out to Hushmail.

Find out which records you need to be HIPAA compliant, what to put in them, and how long to keep them.