The HIPAA Security Rule is headed for its most significant overhaul since 2013. The proposed rule published by HHS in January 2025 would eliminate the distinction between “required” and “addressable” […]
Compliance and Security
74 posts
The proposed HIPAA Security Rule update eliminates the flexibility that behavioral health teams have relied on for twenty years. The workaround you documented. The consumer-grade tool you justified because nothing […]
OCR collected more than $6.6 million in HIPAA fines in 2025. Risk analysis failures drove nearly every settlement. One of those settlements was a behavioral health provider. And that was […]
As of January 1, 2026, virtual direct supervision is permanent Medicare telehealth policy. A supervising practitioner connected via real-time audio/video now satisfies the direct supervision requirement for most services, not […]
Three months ago, CMS made telehealth supervision permanent. Your templates, POS defaults, and supervisory documentation standards were supposed to change with it. For most behavioral health organizations, they didn’t. The […]
Somewhere in your organization right now, a vendor has active credentials that should have been revoked months ago. Maybe it’s the login for a patient portal pilot that ended last […]