All Things HIPAA Compliance
Resources for The Black Sheep Community
HIPAA touches more parts of a therapy practice than many clinicians realize. From the technology you use and the vendors you work with to how you communicate with clients, protect information, respond to incidents, and document your compliance efforts, there is a lot happening beyond the forms clients sign.
This resource page was created for members of The Black Sheep Community as part of our October 1, 2026 live conversation with Samantha Schalk, LMSW-C, LMSW-M, CAADC, CIMHP, BCP3, CHPSE, founder of Guardian Clinical Essentials™.
Thanks for joining us!
A big thank you to Tina Vitolo and The Black Sheep Community for inviting me in to talk all things HIPAA.
Our conversation was designed to help you recognize areas of HIPAA compliance that may not have been on your radar, ask questions about what is happening in your own practice, and leave with a better idea of what deserves a closer look.
You do not need to become a HIPAA expert. But you do need to understand where HIPAA touches your practice and know when there is more to investigate.
Your Black Sheep HIPAA Resources
Keep these resources handy as you take a closer look at your practice.
What Might You Be Missing?
A HIPAA Check-In for Your Therapy Practice
Use this resource to look across several areas of your practice and identify where you may have unanswered questions or work to do. It covers your HIPAA foundation, technology and vendors, AI and transcription, client communication, your website, access and security, and what happens when something goes wrong.
Should I Use This AI Tool? A Simple Decision Framework for HIPAA Risk
Before putting client information into an AI tool, there is more to consider than whether the company says it is HIPAA compliant. Use this decision framework to think through PHI, BAAs, access, data handling, information sharing, output review, policies, and other factors that can affect risk.
✅ AI Tools: What to Look For (Not a Safe List)
Shows real examples of commonly used tools and how to think about them in terms of BAA availability, access level, and data handling.
Reinforces that there is no universal “safe list” and that risk depends on configuration, access, and use.
Want to keep learning? More Free HIPAA Resources
If you have more questions, Guardian Clinical Essentials™ has additional free resources created specifically for therapists and behavioral health practices.
You’ll find practical guidance on HIPAA compliance, Security Risk Analysis, technology, AI, privacy, and other areas that may need attention in your practice.
What to Do Next
You may have identified a few things today that weren’t on your radar before. You don’t have to tackle everything at once.
Start with the areas that made you pause. Look at what you already have in place, what may be missing, and what needs a closer look.
HIPAA compliance is made up of interconnected pieces. Your risk analysis, policies, technology, vendors, safeguards, documentation, training, and response processes all need to work together.
Start Here
If you’re not sure where to begin, take a look at your Security Risk Analysis.
Your Security Risk Analysis helps you identify where electronic protected health information is created, received, maintained, and transmitted; identify potential risks and vulnerabilities; evaluate the safeguards you already have in place; and determine where additional action may be needed.
Want a Simpler Place to Start?
Take a quick look at your current HIPAA compliance program.
✔ See what you already have in place
✔ Identify areas that may be missing
✔ Get a clearer picture of what deserves your attention
Need Help Figuring Out Your Next Step?
If today’s conversation helped you identify areas of your HIPAA compliance program that need attention, Guardian Clinical Essentials™ provides behavioral health specific compliance resources and consulting support to help you address them.
Not sure where to start? You can schedule a free compliance strategy call to talk about what you’re looking for and which resources or services may fit your needs.
Educational Disclaimer
The information and resources provided on this page and during the training are for general educational purposes and are not legal advice. HIPAA compliance is specific to the circumstances, systems, vendors, risks, and operations of each practice. Additional federal, state, licensing, contractual, or professional requirements may also apply.