The Encrypted Chart
A Briefing for Independent Healthcare Practice

Digital defense for the practices the industry forgot.

Twice-weekly operational guidance on the invisible digital traps eroding solo and small-group practice — and the pre-drafted shields that close them. Written by a JD (retired) and practicing psychiatric mental health nurse practitioner.

Free · Twice Weekly · Unsubscribe Anytime
Choose Your Track

Subscribe to the welcome series for your specialty.

The Encrypted Chart publishes one main feed and four specialty welcome tracks — each a five-email series tuned to the operational risks specific to your discipline. Pick the closest match.

Track One

For Therapists, Psychologists & Counselors

The post-BetterHelp landscape, the pixel trap on your booking page, and what your healthcare attorney didn't tell you about your intake form.

Start the welcome series →
Track Two

For Nurse Practitioners

BAA gaps in prescribing platforms, cross-state telehealth privacy, the 1099 contractor PHI ownership question — built for the operational reality of independent NP practice.

Start the welcome series →
Track Three

For Physicians (MD / DO)

EMR vendor BAA sprawl, AI scribe due diligence, and the privacy industrial complex's quiet effect on independent physician practices.

Start the welcome series →
Track Four

For Allied Health Practitioners

Built for PTs, chiropractors, audiologists, OTs, and other independent allied health professionals — the digital exposure framework adapted to your model.

Start the welcome series →
From Readers
Encrypted Chart is an incredibly valuable tool. Over the past 10 years, I've tried out a variety of resources to learn more about security and compliance, and I've certainly learned some good tips along the way. However, Encrypted Chart really stood out to me given how clear and straightforward it is compared to anything else I've come across. You've created an extremely useful and accessible resource that will help providers maintain the highest standards of security, compliance, and trust while caring for our patients.
Samantha Gaies, PhD
Licensed Clinical Psychologist · New York, NY
People use templates from services like SimplePractice and assume they're airtight because that's how they're marketed. They're not. I was the listed Privacy Officer at my former, well-established group practice, and didn't think to add myself when I went solo. That's the kind of detail that's easy to forget when you switch environments. The Encrypted Chart Vault caught it on the very first document I audited, plus a few other nuances I needed to tighten.
Annemarie Hardgrove, LCSW-R, CYT
Former Co-Director of a Long Island Group Psychotherapy Practice; Now in Solo Practice
Latest Issue

Issue No. 09.

June 2, 2026 · 7 min read

Your Vendor's Breach Just Became Your Lawsuit.

A federal court in Chicago ruled last week that patients can sue a healthcare provider over a vendor's data breach. The diligence defense — "they were reputable, they had certifications, I trusted them" — just got materially narrower.

Read the issue →
The Archive

Past issues.

Issue No. 08 May 30, 2026
$900,000 for the 72 Hours You Didn't Plan For
Read →
Issue No. 07 May 26, 2026
California Just Reached Into Your Out-of-State Practice.
Read →
Issue No. 06 May 23, 2026
Your Forms Predate the 42 CFR Part 2 Update. So Did Mine.
Read →
Issue No. 05 May 19, 2026
$245,000 for the Form You Don't Have
Read →
Issue No. 04 May 16, 2026
Your Website Is Probably Leaking Patient Data to TikTok and Meta.
Read →
Issue No. 03 May 12, 2026
Sutter's AI Scribe Just Got Sued. You Use the Same Tool.
Read →
Issue No. 02 May 9, 2026
When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call
Read →
Issue No. 01 May 6, 2026
Five Questions Hospital Compliance Officers Ask About AI Scribes — and Solo Practices Don't
Read →

Browse the full Beehiiv archive →

What This Is

An operational briefing — not a legal newsletter.

Most healthcare privacy content is written by attorneys for attorneys, or by marketing people for nobody in particular. The Encrypted Chart sits in the gap. It translates what's happening in federal enforcement, state privacy law, and digital-vendor sprawl into the operational moves an independent practice can actually make on a Tuesday afternoon.

Each issue picks one specific exposure — a tracking pixel, a chat widget, a BAA gap, a telehealth platform misconfiguration — and walks through what the risk is, why it persists, and what to do about it. The rhythm is meant for the practice owner who doesn't have a compliance team and isn't going to hire one.

Read by therapists, nurse practitioners, physicians, and allied health professionals across the country.

The Companion Toolkit

The Private Practice Protection Vault.

The newsletter teaches the framework. The Vault gives you the templates. Forty-one pre-drafted operational documents — policies, BAAs, breach response plans, intake-form language, vendor-cull checklists, incident protocols — in a single downloadable archive.

Get the Vault National & NY Editions

$299 National Edition · $349 New York Edition (includes SHIELD Act and state-specific addenda).

About

Why this exists.

Solo and small-group practice owners operate in the same regulatory environment as hospital systems — but without the in-house counsel, compliance officers, privacy officers, and IT security teams that make that environment manageable. Most upstart practices don't know what they don't know about digital exposure, until a state board complaint, an FTC consent order, or a patient lawsuit arrives in the mail.

The Encrypted Chart is the briefing the institutional practice owner already has — translated for the practitioner who left the institution to get autonomy back.

Brad Lieberman
Brad Lieberman
JD (Retired) · MSN · PMHNP

Founder of The Encrypted Chart and Lieberman Consulting, LLC. A practicing psychiatric mental health nurse practitioner with a Juris Doctor (retired) — clinician by trade, with the legal training to read between the regulatory lines.

Brad built the Vault and writes The Encrypted Chart from inside a working clinical practice. The dual-authority frame — JD-trained, clinically practicing — is the lens. The output is operational, not theoretical.

For Specific Practice Questions

Operational Advisory Sessions.

A 60-minute working session for practice owners with a specific exposure, vendor question, or regulatory letter on their desk. Limited availability while Brad is on paternity leave.

Book a Session

Educational content only. The Encrypted Chart is published by Lieberman Consulting, LLC, a consulting firm — not a law firm. Brad Lieberman holds a Juris Doctor but does not actively practice law. Content is general education and operational guidance, not legal advice for your specific practice or jurisdiction. For legal interpretation specific to your situation, consult counsel licensed in your state.