WP146 | 5 Big HIPAA Mistakes That Put Your Practice at Risk with Dr. Tiana Kelly

If you think HIPAA compliance is boring… think again.

Hey friends, Whitney here! 🙋‍♀️ I know, I know—just hearing the word HIPAA might make your eyes glaze over. But trust me, this is the episode you didn’t know you desperately needed.

Whether you're running a solo practice or leading a growing group, staying compliant isn’t optional—and the risks of getting it wrong are bigger than you might think.

That’s why I brought in Dr. Tiana Kelly, a rockstar compliance consultant and practicing therapist, to break down the five most common HIPAA mistakes she sees in private practices (yes, even the well-meaning ones). We’re talking accidental breaches, boundary blunders, billing issues, and those little things you “didn’t know you didn’t know”—all the stuff that could put your practice at risk.

The best part? Tiana shares super practical, doable steps you can take today to clean up your systems, tighten your documentation, and train your team without the overwhelm.

So pour a cup of coffee, grab your notebook, and let’s make sure your practice is protected and thriving. 🎧

1. Accidental Breaches

What happens: You meant to send Client A’s records, but accidentally attached Client B’s notes.

Why it matters: Even an honest mistake is still a breach—and you’re required to report it.

What to do: Create workflows to prevent PHI (protected health information) from lingering on your desktop or in your email. Dr. Kelly recommends a daily “PHI purge”—clearing your downloads and trash at the end of the day—to avoid mishaps and signal to your brain that your workday is done.

2. Boundary Violations (Especially via Texting)

What happens: Therapists (especially younger ones) may casually text with clients, crossing clinical boundaries without realizing it.

Why it matters: Texting can blur lines and expose PHI, especially if not done through an encrypted platform.

What to do: Establish clear policies about texting—what’s okay, what’s not—and use encrypted systems like Spruce. And if you catch something concerning (like a client texting their dinner plate to their therapist), use it as a teachable moment, not a disciplinary one.

3. Untimely Documentation

What happens: Notes pile up, get delayed, or are submitted outside of the 24–48 hour window.

Why it matters: Late notes can lead to billing issues, poor clinical care, and compliance risk.

What to do: Encourage your team to set a personal note-taking time limit (e.g., 5–7 minutes per note), and offer support when delays are due to skill gaps or life circumstances. Whitney even shared a story about discovering a therapist’s note delays were due to slow typing—not laziness!

4. Billing Before the Note Is Done

What happens: A session gets billed to insurance before the therapist completes their documentation.

Why it matters: Technically, the service isn't complete until the note is done—and billing early is a compliance violation.

What to do: Build billing workflows that require documentation before claims are submitted. It’s not just about getting paid—it's about doing things ethically and legally.

5. You Don’t Know What You Don’t Know

What happens: You’re unintentionally out of compliance because…well, no one ever taught you.

Why it matters: Ignorance won’t protect you if a breach happens or if the state board comes calling.

What to do: Invest in education and stay up-to-date on both federal HIPAA guidelines and your state-specific regulations. And don’t rely solely on your EHR to do the work for you—it's still your job to make sure your systems are set up properly.

Want Help Getting Compliant?

Dr. Kelly and the team at Move Forward Counseling now offer compliance consulting services for private practices. Whether you’re just starting or need an outside audit, they offer chart reviews, policy development, training, and CEU-eligible compliance workshops.

➡️ Learn more at www.moveforwardpa.com under the Business Consulting tab.

Final Thoughts

Running a faith-based private practice means doing the right thing—even when it’s complicated. This episode is packed with practical, non-judgmental advice for strengthening your systems, training your team, and protecting your clients.

Show Sponsor My Best Practice

Looking for an EHR that saves you time and supports real therapy? Try My Best Practice.

Created by therapists for therapists, MBP gives you:

- AI SOAP & Progress Notes

- One-click documentation

- 2-Way Google Sync

- A mobile app

- Group Appointments and Notes

- Customizable Forms, Notes, and Treatment Plans

- Payroll reporting

Therapists love how it makes routine outcome measures seamless—with auto-scheduling, autoscoring, and automatic charting.

With all that, it’s no surprise MBP was named Best Overall EHR in Mental Health for 2025 for the second year in a row and the first EHR ever awarded 5/5 stars by Choosing Therapy.

Get 3 months free by going to:

https://referral.mbpractice.com/ref/wisepractice

Dr. Tiana Kelly’s Resources

Website

Instagram

Facebook

Move Forward Counseling on LinkedIn

Dr. Kelly on LinkedIn

Links and Resources

The Wise Practice Summit

Wise Practice Membership

Looking for support and connection: Join the Wise Practice Community

Learn More about Wise Practice Consulting

Connect with Wise Practice on Instagram

Connect with Whitney Owens on Facebook

Check the podcasts on the PsychCraft Network

Previous
Previous

WP147 | Allow Your Money to Serve You with Diane Webber, LPC

Next
Next

WP145 | How EOS Brings Stability and Purpose to Your Business with Tara Vossenkemper, PhD, LPC