Episode 627: Key Takeaways from Day One of the 2026 NIST–OCR HIPAA Security Conference: Security Rule Updates & Risk Analysis
Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.
In our latest episode, we recap what behavioral health practice owners should know from day one of the HIPAA Security Conference.
We discuss:
The timeline for proposed Security Rule changes
What practices must have documented in writing according to the current Security Rule
Encryption being reasonable and appropriate in almost every practice environment
Expanding risk analysis enforcement initiative to include risk management
Why risk analyses are foundational, and what they have…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.