The Encrypted Chart
A Briefing for Independent Healthcare Practice

Digital defense for the practices the industry forgot.

Twice-weekly operational guidance on the invisible digital traps eroding solo and small-group practice — and the pre-drafted shields that close them. Written by a JD (retired) and practicing psychiatric mental health nurse practitioner.

Free · Twice Weekly · Unsubscribe Anytime
Choose Your Track

Subscribe to the welcome series for your specialty.

The Encrypted Chart publishes one main feed and four specialty welcome tracks — each a five-email series tuned to the operational risks specific to your discipline. Pick the closest match.

From Readers
Encrypted Chart is an incredibly valuable tool. Over the past 10 years, I've tried out a variety of resources to learn more about security and compliance, and I've certainly learned some good tips along the way. However, Encrypted Chart really stood out to me given how clear and straightforward it is compared to anything else I've come across. You've created an extremely useful and accessible resource that will help providers maintain the highest standards of security, compliance, and trust while caring for our patients.
Samantha Gaies, PhD
Licensed Clinical Psychologist · New York, NY
People use templates from services like SimplePractice and assume they're airtight because that's how they're marketed. They're not. I was the listed Privacy Officer at my former, well-established group practice, and didn't think to add myself when I went solo. That's the kind of detail that's easy to forget when you switch environments. The Encrypted Chart Vault caught it on the very first document I audited, plus a few other nuances I needed to tighten.
Annemarie Hardgrove, LCSW-R, CYT
Former Co-Director of a Long Island Group Psychotherapy Practice; Now in Solo Practice
Latest Issue

Issue No. 17.

August 8, 2026 · 4 min read

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Fourteen investigations, one missing document, and the quietest four weeks of your working year.

Read the issue →
The Archive

Past issues.

Issue No. 16 August 4, 2026
I Bolted a Hard Drive to a Desk That Moves Up and Down
Read →
Issue No. 15 July 7, 2026
Telehealth and Digital Communication Consent: Why It Exists and Why the Talkspace Case Just Made It Urgent
Read →
Issue No. 14 June 30, 2026
AI Scribes: Four States Now Require Patient Opt-Out
Read →
Issue No. 13 June 23, 2026
No One Hacked Your EHR. They Just Logged In.
Read →
Issue No. 12 June 20, 2026
Two Breaches, One Question: When Does Your Clock Start?
Read →
Issue No. 11 June 13, 2026
The Email Habits That Just Cost a Mental Health Practice $900,000
Read →
Issue No. 10 June 9, 2026
Three Breaches Last Month. All Started With One Email.
Read →
Issue No. 09 June 2, 2026
Your Vendor's Breach Just Became Your Lawsuit.
Read →
Issue No. 08 May 30, 2026
$900,000 for the 72 Hours You Didn't Plan For
Read →
Issue No. 07 May 26, 2026
California Just Reached Into Your Out-of-State Practice.
Read →
Issue No. 06 May 23, 2026
Your Forms Predate the 42 CFR Part 2 Update. So Did Mine.
Read →
Issue No. 05 May 19, 2026
$245,000 for the Form You Don't Have
Read →
Issue No. 04 May 16, 2026
Your Website Is Probably Leaking Patient Data to TikTok and Meta.
Read →
Issue No. 03 May 12, 2026
Sutter's AI Scribe Just Got Sued. You Use the Same Tool.
Read →
Issue No. 02 May 9, 2026
When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call
Read →
Issue No. 01 May 6, 2026
Five Questions Hospital Compliance Officers Ask About AI Scribes — and Solo Practices Don't
Read →
What This Is

An operational briefing — not a legal newsletter.

Most healthcare privacy content is written by attorneys for attorneys, or by marketing people for nobody in particular. The Encrypted Chart sits in the gap. It translates what's happening in federal enforcement, state privacy law, and digital-vendor sprawl into the operational moves an independent practice can actually make on a Tuesday afternoon.

Each issue picks one specific exposure — a tracking pixel, a chat widget, a BAA gap, a telehealth platform misconfiguration — and walks through what the risk is, why it persists, and what to do about it. The rhythm is meant for the practice owner who doesn't have a compliance team and isn't going to hire one.

Read by therapists, nurse practitioners, physicians, and allied health professionals across the country.

The Companion Toolkit

The Private Practice Protection Vault.

The newsletter teaches the framework. The Vault gives you the templates. Forty-one pre-drafted operational documents — policies, BAAs, breach response plans, intake-form language, vendor-cull checklists, incident protocols — in a single downloadable archive.

$299 National Edition · $349 New York Edition (includes SHIELD Act and state-specific addenda).

About

Why this exists.

Solo and small-group practice owners operate in the same regulatory environment as hospital systems — but without the in-house counsel, compliance officers, privacy officers, and IT security teams that make that environment manageable. Most upstart practices don't know what they don't know about digital exposure, until a state board complaint, an FTC consent order, or a patient lawsuit arrives in the mail.

The Encrypted Chart is the briefing the institutional practice owner already has — translated for the practitioner who left the institution to get autonomy back.

Brad Lieberman
Brad Lieberman
JD (Retired) · MSN · PMHNP

Founder of The Encrypted Chart and Lieberman Consulting, LLC. A practicing psychiatric mental health nurse practitioner with a Juris Doctor (retired) — clinician by trade, with the legal training to read between the regulatory lines.

Brad built the Vault and writes The Encrypted Chart from inside a working clinical practice. The dual-authority frame — JD-trained, clinically practicing — is the lens. The output is operational, not theoretical.

For Specific Practice Questions

Operational Advisory Sessions.

A 60-minute working session for practice owners with a specific exposure, vendor question, or regulatory letter on their desk. Limited availability while Brad is on paternity leave.

Book a Session