If you bill insurance, offer telehealth, or store any client information electronically, you have real compliance obligations under HIPAA — and real liability if something falls through the cracks. The good news is that most of the risk is preventable once you know where to look.

Private practices are increasingly attractive targets for cybercriminals. That's because healthcare data is extraordinarily valuable, and small practices often don’t have the infrastructure that larger organizations do. The majority of data breaches start with basic human error: an unsecured text to a client, a spoofed email that gets opened, a team message board where someone shares a detail they shouldn’t. The challenge is that most cybersecurity education is built for IT professionals and enterprise organizations — not therapists trying to run ethical, sustainable practices. This webinar attempts to fill the gaps.

Burton Maben of Creative Cyber Management is a cybersecurity practitioner who works specifically with small businesses on compliance and data security, with a focus on making complex security concepts actionable and accessible. He’ll walk you through what HIPAA actually requires, where private practices are most commonly vulnerable, how to evaluate the tools you’re already using, and what to prioritize — whether you’re solo or scaling a group practice.

Some of the terminology may be new, but Burt is known for meeting people where they are with zero judgment. If you’ve been meaning to get your compliance house in order, this is a great place to start.

 LEARNING OBJECTIVES

• Understand your obligations as a HIPAA-covered entity in private practice.

• Identify the most common cybersecurity vulnerabilities in therapy practices — from email to telehealth platforms and internal communication tools.

• Evaluate whether current tools and workflows (email, messaging, AI-assisted documentation, EHRs) meet HIPAA security standards.

• Discuss best practices for training clinical and administrative staff on data security protocols.

• Analyze real-world breach scenarios relevant to small and growing practices.

• Explore options for conducting a security risk assessment.