Home | The Encrypted Chart

Practice Security

A Subpoena Is Not a Court Order

Two psychiatric nurse practitioners spent a day in August explaining their treatment notes to a jury. Neither of them chose to be there. After Friday's mistrial, they may have to do it again.

Brad Lieberman

•

Sep 8, 2026

Intake Forms and Consent

Your Privacy Notice May Describe a Rule That No Longer Exists

A federal rule was struck down, New York got stricter, and nothing on your forms said a word. Introducing Compliance Watch.

Brad Lieberman

•

Aug 11, 2026

Practice Security

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Fourteen investigations, one missing document, and the quietest four weeks of your working year.

Brad Lieberman

•

Aug 8, 2026

Practice Security

I Bolted a Hard Drive to a Desk That Moves Up and Down

A moving day, a screwdriver, and the part of HIPAA nobody writes about

Brad Lieberman

•

Aug 4, 2026

The Encrypted Chart

Join the list to receive our newest posts straight to your inbox.

Latest

Intake Forms and Consent

The Forms That Started All of This

Brad Lieberman

•

Jul 15, 2026

Intake Forms and Consent

Telehealth and Digital Communication Consent: Why It Exists and Why the Talkspace Case Just Made It Urgent

Brad Lieberman

•

Jul 7, 2026

Intake Forms and Consent

AI Scribes: Four States Now Require Patient Opt-Out

Brad Lieberman

•

Jun 30, 2026

Intake Forms and Consent

Your practice name, already on every page

Brad Lieberman

•

Jun 26, 2026

Practice Security

No One Hacked Your EHR. They Just Logged In.

Brad Lieberman

•

Jun 24, 2026

HIPAA Compliance

Two Breaches, One Question: When Does Your Clock Start?

Brad Lieberman

•

Jun 20, 2026

Practice Security

The Email Habits That Just Cost a Mental Health Practice $900,000

Brad Lieberman

•

Jun 13, 2026

Practice Security

Three Breaches Last Month. All Started With One Email

Brad Lieberman

•

Jun 9, 2026