Not sure when to use secure messaging? Use this 3-question framework

Learn how to spot PHI in client emails, when regular email is fine, and when secure messaging can help support HIPAA compliance.

Can you email a referral under HIPAA? Learn when you can share PHI with other healthcare providers and what safeguards you need to send it securely.

Is Squarespace HIPAA-compliant? Learn why your website's contact form matters, and how to let prospective clients reach out securely without rebuilding your website.

Discover the truth behind five common HIPAA myths, from email compliance to PHI and enforcement, with practical guidance for small practices.

Learn whether insurance information counts as PHI under HIPAA, when clients should update coverage details, and how secure forms can simplify insurance collection for therapy practices.

Learn when HIPAA applies to prospective client emails, why the first contact may already involve PHI, and how to handle inquiries securely without adding complexity.

Learn how therapists can use AI tools safely and ethically while staying HIPAA-compliant. Tips for risk analysis, safeguards, and informed consent to protect client privacy.

PHI isn’t just clinical notes. Learn how small healthcare practices can identify and protect PHI in everyday communication.

Generic HIPAA and consent forms may leave out required state disclosures, telehealth rules, and ethics standards. Here’s how to fix yours.

Confused about Notice of Privacy Practices (NPPs) for your small practice? Our guide breaks it down and shows you how to get it right.

Email can be protected while it’s being sent. But what happens after delivery? Learn what therapists should consider about HIPAA risk.

What therapists call a HIPAA waiver isn't a true waiver. Learn what client requests for non-secure communication actually do and what HIPAA still requires.

A straightforward six-step HIPAA checklist to help you tighten security and reduce risk. It walks through several safeguards highlighted in proposed HIPAA Security Rule updates, such as risk assessments, two-step verification, and encryption, as well as other core HIPAA responsibilities for small practices.

The HHS is placing renewed emphasis on three familiar safeguards in the HIPAA Security Rule: multi-factor authentication, risk analysis, and encryption. Understanding what's happening in each area can help you make small, practical adjustments that support client privacy and boost your practice's security.

HIPAA Update Series: Learn why encryption may become mandatory under HIPAA, how it protects client data, and simple steps small practices can take now.

HIPAA Update Series: Learn how OCR is enforcing risk analysis more strictly, what this means for small practices, and how to stay compliant with confidence.

HIPAA Update Series: Learn what multi-factor authentication is, why you should use it, and what the current and proposed HIPAA Security Rules say about it.

Learn HIPAA-compliant ways to destroy PHI. Simple, affordable methods for small practices to securely dispose of paper and electronic records.