Question 1

Practical Data Security for Small Healthcare Teams: Protecting PHI Without a Big IT Department

Accepted Answer

Focus:

Concrete, non-technical steps small practices can take to protect PHI in day-to-day work.

Even the best EHR cannot protect you from everyday risks like shared logins, casual texting, or laptops that go back and forth between home and the office. In this session, Angela walks your team through the real ways PHI “leaks” in small offices and the simple, practical safeguards that make the biggest difference.

Your audience will learn:

✓ How PHI actually leaks in small practices
 Screens, email, texting, home computers, shared logins, and cloud tools, what really creates risk and what does not.
✓ Simple access and password practices that work in real life
 How to handle shared workstations, role-based access, and password managers without slowing down the front desk.
✓ Backups and ransomware basics for non-technical teams
 What to back up, where to store it, and how often, so that an attack or outage does not shut the practice down.
✓ A short, plain-language checklist
 Attendees leave with a one-page checklist they can review with their staff and start implementing immediately.

Perfect for:

Owner-led practices, office managers, and small teams that know they need to “do more about security” but need clear, prioritized guidance.

Question 2

Using AI Safely in Healthcare: What Your Practice Can and Cannot Do With Patient Data

Accepted Answer

Focus:

Safe, compliant use of AI tools for admin and clinical workflows in small practices.

AI tools are everywhere, from scheduling assistants to draft message writers, but not all of them are safe for PHI. This session demystifies what is possible, what is off limits, and how to evaluate tools that claim to be “HIPAA compliant.”

Your audience will learn:

✓ Where AI fits in a small practice
 Practical examples for scheduling, patient communication drafts, documentation summaries, and internal policies, without exposing PHI.
✓ What should never go into public AI tools
 Clear, memorable rules for staff so they do not accidentally paste patient identifiers into consumer apps.
✓ How to evaluate vendors and “HIPAA compliant AI” claims
 Key questions to ask, red flags to watch for, and how to connect AI features back to your existing HIPAA program.
✓ A simple decision guide for staff

A “before you click” framework anyone on your team can use to decide when AI is safe to use and when to stop and ask first.

Perfect for:

Practices exploring AI tools, leadership teams setting AI policies, and associations that want education on emerging technology and compliance.

Question 3

2025 HIPAA Security Updates: What Small Practices Need to Do Now

Accepted Answer

Focus:

A plain-language briefing on the 2025 HIPAA security changes and what they mean for day-to-day operations.

Cyber threats and regulatory expectations for healthcare are changing quickly. This session breaks down the 2025 HIPAA security updates into what is new, what is now a stronger focus for regulators, and practical steps smaller organizations can take to stay ahead.

Your audience will learn:

✓ The key changes in the updated Security Rule
 What regulators are emphasizing now and how that affects small and mid-sized practices.
✓ How to prioritize limited time and budget
 A realistic roadmap for the next 3 to 12 months, from risk assessments to policies, technical safeguards, and staff training.
✓ What to ask of IT and vendors
 How to have informed conversations with EHR vendors, managed IT providers, and other business associates about the new expectations.
✓ An action checklist for leadership
 A short list of “do these first” steps that help reduce risk and show good faith compliance.

Perfect for:

Healthcare associations, local medical and dental societies, and practice leaders who need an up-to-date, non-technical briefing.

Speaking & Training for Healthcare Teams

Talk topics

Why Angela