BLOG
Mytech Partners September 2026 The Wild West of AI in Healthcare: Protecting Your Medical Practice from Hidden Security Risks Artificial intelligence is rapidly finding its way into healthcare. From drafting patient communications and summarizing notes to improving administrative efficiency, AI has the potential to help medical practices do more with less. But as healthcare organizations embrace these tools, a new risk is emerging. The greatest AI security threat isn't necessarily coming from cybercriminals. It's often coming from within the organization through well-intentioned employees using AI tools without understanding the potential impact on protected health information (PHI) and patient privacy. Industry analysts predict that more than 40% of AI-related data breaches will originate inside organizations. In healthcare, the consequences can be especially serious, resulting in HIPAA violations, patient trust issues, regulatory scrutiny, and financial penalties. Why Healthcare Organizations Face Unique AI Risks Medical practices handle some of the most sensitive data imaginable. Every patient record contains personal information that must be protected. Unfortunately, many AI activities that seem harmless can create compliance concerns: A staff member pastes patient notes into a public AI chatbot to create a summary. A physician uses an AI meeting assistant that automatically records and stores appointment discussions. An employee uploads spreadsheets containing patient information to an AI tool to generate reports. A manager assumes removing patient names makes information safe to share with AI, without realizing that individuals can often be identified through context alone. None of these actions are malicious. In fact, they are often motivated by a desire to work more efficiently. But every one of these scenarios has the potential to expose PHI and create compliance risks. Why Banning AI Isn't the Answer Some healthcare leaders respond by prohibiting AI altogether. The problem? Employees often continue using AI tools anyway, just outside approved channels. They may access AI from personal devices, home computers, or unapproved applications, creating even less visibility and greater risk. The goal shouldn't be to stop innovation. It should be to create clear guardrails so physicians, administrators, and staff can use AI safely and responsibly. The organizations that succeed will not be the ones that avoid AI. They will be the ones that govern it effectively. A Three-Step Framework for Secure AI Adoption in Medical Practices 1. Govern: Understand How AI Is Already Being Used Many healthcare practices are surprised to learn how many AI tools are already in use. Start by identifying: Which AI applications staff members are using How patient data may be interacting with those tools Whether any AI solutions have access to calendars, email, EHR systems, or cloud storage platforms Which departments could benefit from approved AI solutions Visibility is the first step toward reducing risk. 2. Protect: Implement Controls to Safeguard Patient Data Many healthcare organizations already own security tools capable of helping manage AI risks. Key controls include: Data Loss Prevention (DLP) policies that prevent PHI from being shared improperly Sensitivity labels to classify patient and business data App approval processes that prevent unauthorized AI integrations Mobile application management to protect organizational data on personal devices Monitoring tools that provide insight into how AI applications are being used These safeguards help practices maintain compliance while still supporting innovation. 3. Enable: Teach Staff How to Use AI Responsibly Technology alone is not enough. Every employee should understand: What information can and cannot be used in AI tools Which AI applications are approved How HIPAA requirements apply to AI When human review is required before using AI-generated content Healthcare organizations that invest in training and governance often see stronger adoption, fewer compliance concerns, and better outcomes overall. The Patient Data Challenge Many healthcare organizations are exploring AI tools that connect to internal knowledge sources and documentation repositories. Before doing so, it's important to evaluate: Outdated policies and procedures Duplicate documentation Inconsistent permissions Historical files that should no longer be accessible AI systems can only be trusted as much as the data they are trained on or connected to. Poor data governance can lead to inaccurate recommendations, compliance concerns, and unintended exposure of sensitive information. Questions Every Medical Practice Should Ask Do we know which AI tools our employees are using today? Do we have policies addressing AI and patient data? Can employees connect third-party AI applications without IT approval? Have we implemented data protection policies for PHI? Are staff members trained on appropriate AI use? Could we identify if patient data was entered into an unauthorized AI tool? Are our document repositories and data permissions properly maintained? Do we have a clear vision for how AI will support our practice in the future? The Bottom Line AI has enormous potential to improve efficiency, reduce administrative burden, and enhance patient experiences. But healthcare organizations must balance innovation with security and compliance. The most successful medical practices won't be the ones that avoid AI. They'll be the ones that adopt it thoughtfully, with the right governance, protections, and training in place. By focusing on visibility, security controls, and employee education, healthcare organizations can confidently embrace AI while protecting patient trust and meeting their regulatory obligations. Have more AI or cybersecurity questions? Mytech is happy to help!
Serving the Unique Needs of Physician Offices
Panacea Financial 9/8/26 How do you know if you are overpaying for a practice or passing on a great one? It's one of the most common questions facing any doctor considering buying a medical practice and one of the easiest to get wrong. Two practices can look nearly identical on paper and still be worlds apart in what they actually put in your pocket. The difference comes down to one of the most important, and most misunderstood, concepts in practice ownership: economic benefit. There are several metrics you should look at when considering buying a practice: gross annual revenue, overhead, and net income. They all tell an important story about the health of the business. But the metric that matters the most is economic benefit - the total financial value a practice creates for its owner and it isn't found on a tax return or income statement. Why economic benefit is important Imagine you're evaluating two practices. Both have established patient bases, experienced staff, and strong online reviews. Practice A has a revenue of $1.2M, overhead of 60% ($720K) and resulting net income of $480K. Practice B also has a revenue of $1.2M, a significantly higher overhead of 75% ($900K) and a much lower net income of $300K. Which one should you buy? Common sense says Practice A. And that's where common sense is no match for deeper financial knowledge. Looking under the hood Start with Practice B's overhead. At 75%, it looks like a poorly run office, the kind of number that might make you walk away before asking another question. But a closer look at the books tells a different story. Roughly $250K of what's recorded as "overhead" isn't the cost of running the practice at all. Instead, it reflects discretionary financial decisions made by the current owner: Family on payroll $80K Retirement and pension funding $110K Vehicle, travel, continuing education $60K When we set these aside, Practice B's true overhead is no longer 75%, but 54%, lower than Practice A’s 60%. Which means the practice isn't earning $300K. It's generating $550K in real, recurring value for its owner. Practice B, the one that looked worse on paper, actually puts $70K more in its owner's pocket every year than Practice A. Economic benefit as the foundation of practice valuation That $550K is the practice's economic benefit — the real financial value it produces for its owner, and the number you should be building a valuation on when buying a practice. Unfortunately, it isn't always the number healthcare valuations are built on. Too often, brokers and generalist lenders rely on broad rules of thumb, such as multiples of gross revenue or reported net income taken directly from financial statements and tax returns. That approach prices a practice at face value and can miss its true financial picture. This creates an arbitrage opportunity for informed buyers and their advisors. By understanding a practice's true economic benefit, you may recognize value that others overlook. That can help you confidently pursue an exceptional practice that might otherwise be mispriced, underfunded, or even declined. If you've followed the example above, you've already seen this process in action. At Panacea, for instance, we use Seller's Discretionary Earnings (SDE) in our underwriting. SDE is a financial analysis tool that starts with a practice's reported profit and adds back certain owner-specific discretionary expenses to estimate its true economic benefit. Buying and running a successful practice is a team sport That's why it's important to build a team of experienced advisors who understand the unique economics of healthcare practices. Your CPA, attorney, practice consultant, and lender each bring a different perspective, helping you evaluate opportunities from multiple angles. You want a team that understands healthcare practices and knows how to look beyond the tax return, sort through the cash flow, and separate the true operating costs of the practice from the owner's personal financial choices. At Panacea, for example, we've built healthcare-focused underwriting models that help us identify a practice's true economic benefit more accurately than a generalist lender. That deeper understanding often allows us to approve larger loans, require lower down payments, and move more quickly than traditional banks. So, the next time you're comparing two practices, don't ask which one has the higher revenue or lower overhead. Ask a deeper question: Which practice creates the greatest economic benefit? The answer may surprise you—and it could make all the difference in finding the right practice to own. At Panacea, that expertise is built into how we evaluate and finance practices. Our healthcare-focused underwriting helps us identify a practice’s true economic benefit more accurately than a generalist lender—often allowing us to approve larger loans, require lower down payments, and move more quickly. Acquiring, expanding, or relocating your practice? Talk with a Practice Finance Specialist.
Learn how to code Medicare Annual Wellness Visits (AWVs) correctly. This guide covers G0438 and G0439 eligibility, documentation requirements, and tips to reduce claim denials.
Hilb Healthcare, formerly Keane Insurance Group 5/30/25 Understanding the ins and outs of tail coverage is essential for healthcare professionals such as physicians, surgeons, nurse practitioners, and practice administrators. When evaluating malpractice insurance options, three core components should be carefully reviewed: Prior Acts , Policy Type , and Cost . Among these, tail coverage —formally known as an Extended Reporting Endorsement—plays a critical role in maintaining protection after a policy ends. What Is Tail Coverage? Tail coverage extends the window in which claims can be reported, even after your medical malpractice insurance policy has expired. This means it will still cover claims resulting from incidents that happened while the policy was active (after the retroactive date), as long as those claims are filed during the extended reporting period. Tail coverage is essentially an add-on to a claims made policy and may last for a set period (commonly 2–3 years) or indefinitely. However, this added protection comes at a price. How Much Does Tail Coverage Cost? The cost of tail coverage can vary widely between insurers. On average, it ranges from 2.5 to 3 times the annual premium of your malpractice policy. Given its cost, it’s wise to explore your options. Partnering with a seasoned medical malpractice insurance broker can help you compare policies and secure quality tail coverage at a more competitive rate. Claims Made vs. Occurrence: Why It Matters Whether you need tail coverage largely depends on the type of insurance policy you have. Occurrence policies cover any incident that happens during the policy period—regardless of when a claim is filed. Even if the policy is no longer active, it still protects against past incidents. The downside? If the insurer goes out of business, you could be left vulnerable. Claims made policies , by contrast, only cover claims filed while the policy is active. Once the policy ends, so does the protection—unless you purchase tail coverage. This endorsement keeps coverage in place for incidents that occurred during the policy but are reported later. Keep in mind that not all tail endorsements are equal—some may be limited and not cover all past acts. Always review the specifics carefully. The Importance of Prior Acts Coverage Medical malpractice claims can surface years after an incident, making Prior Acts coverage a vital part of your policy. This provision ensures that claims tied to earlier events are still covered—even if they’re filed much later. For instance, if a patient files a claim in 2024 for a procedure done in 2021, your current claims made policy can respond—as long as the policy includes prior acts coverage going back to your retroactive date (often the date you first began practicing). Maintaining that same retroactive date with any future policy is crucial for continuous protection. When Is Tail Coverage Necessary? You’ll need to consider purchasing tail coverage when a claims made policy is canceled or not renewed—unless your new policy includes prior acts coverage. A few common scenarios where this comes into play include: Changing Employers If your new employer provides malpractice insurance, make sure it includes prior acts coverage. If it doesn’t, you’ll need to buy tail coverage to remain protected from past claims. Retirement, Death, or Disability In these situations, many insurers offer free tail coverage. However, eligibility and terms can vary, so check the fine print in your policy. Why Tail Coverage Matters Without tail coverage or a new policy that covers prior acts, healthcare providers could face claims with no insurance to back them. The financial and reputational risks of this gap can be significant. Work with an Expert Broker Navigating malpractice insurance, especially tail coverage, can be complex. An experienced medical malpractice insurance broker can simplify the process—helping you evaluate options, compare quotes, and secure appropriate protection at the best possible price. Final Thoughts Tail coverage is a crucial safeguard for medical professionals with claims made policies. It ensures continued protection for past incidents once a policy ends. While it can be costly, the peace of mind and financial security it provides make it a worthwhile investment. Understanding your policy type, knowing your retroactive date, and ensuring seamless coverage through tail or prior acts provisions are key to avoiding gaps. Always consult with an insurance expert to make the most informed decision for your practice and future.