practice-health

The Wild West of AI in Healthcare: Protecting Your Medical Practice from Hidden Security Risks

Tue, 27 Oct 2026 15:10:54 GMT

Mytech Partners

September 2026

The Wild West of AI in Healthcare: Protecting Your Medical Practice from Hidden Security Risks

Artificial intelligence is rapidly finding its way into healthcare. From drafting patient communications and summarizing notes to improving administrative efficiency, AI has the potential to help medical practices do more with less.

But as healthcare organizations embrace these tools, a new risk is emerging. The greatest AI security threat isn't necessarily coming from cybercriminals. It's often coming from within the organization through well-intentioned employees using AI tools without understanding the potential impact on protected health information (PHI) and patient privacy.

Industry analysts predict that more than 40% of AI-related data breaches will originate inside organizations. In healthcare, the consequences can be especially serious, resulting in HIPAA violations, patient trust issues, regulatory scrutiny, and financial penalties.

Why Healthcare Organizations Face Unique AI Risks

Medical practices handle some of the most sensitive data imaginable. Every patient record contains personal information that must be protected.

Unfortunately, many AI activities that seem harmless can create compliance concerns:

A staff member pastes patient notes into a public AI chatbot to create a summary.
A physician uses an AI meeting assistant that automatically records and stores appointment discussions.
An employee uploads spreadsheets containing patient information to an AI tool to generate reports.
A manager assumes removing patient names makes information safe to share with AI, without realizing that individuals can often be identified through context alone.

None of these actions are malicious. In fact, they are often motivated by a desire to work more efficiently. But every one of these scenarios has the potential to expose PHI and create compliance risks.

Why Banning AI Isn't the Answer

Some healthcare leaders respond by prohibiting AI altogether.

The problem? Employees often continue using AI tools anyway, just outside approved channels. They may access AI from personal devices, home computers, or unapproved applications, creating even less visibility and greater risk.

The goal shouldn't be to stop innovation. It should be to create clear guardrails so physicians, administrators, and staff can use AI safely and responsibly.

The organizations that succeed will not be the ones that avoid AI. They will be the ones that govern it effectively.

A Three-Step Framework for Secure AI Adoption in Medical Practices

1. Govern: Understand How AI Is Already Being Used

Many healthcare practices are surprised to learn how many AI tools are already in use.

Start by identifying:

Which AI applications staff members are using
How patient data may be interacting with those tools
Whether any AI solutions have access to calendars, email, EHR systems, or cloud storage platforms
Which departments could benefit from approved AI solutions

Visibility is the first step toward reducing risk.

2. Protect: Implement Controls to Safeguard Patient Data

Many healthcare organizations already own security tools capable of helping manage AI risks.

Key controls include:

Data Loss Prevention (DLP) policies that prevent PHI from being shared improperly
Sensitivity labels to classify patient and business data
App approval processes that prevent unauthorized AI integrations
Mobile application management to protect organizational data on personal devices
Monitoring tools that provide insight into how AI applications are being used

These safeguards help practices maintain compliance while still supporting innovation.

3. Enable: Teach Staff How to Use AI Responsibly

Technology alone is not enough.

Every employee should understand:

What information can and cannot be used in AI tools
Which AI applications are approved
How HIPAA requirements apply to AI
When human review is required before using AI-generated content

Healthcare organizations that invest in training and governance often see stronger adoption, fewer compliance concerns, and better outcomes overall.

The Patient Data Challenge

Many healthcare organizations are exploring AI tools that connect to internal knowledge sources and documentation repositories.

Before doing so, it's important to evaluate:

Outdated policies and procedures
Duplicate documentation
Inconsistent permissions
Historical files that should no longer be accessible

AI systems can only be trusted as much as the data they are trained on or connected to. Poor data governance can lead to inaccurate recommendations, compliance concerns, and unintended exposure of sensitive information.

Questions Every Medical Practice Should Ask

Do we know which AI tools our employees are using today?
Do we have policies addressing AI and patient data?
Can employees connect third-party AI applications without IT approval?
Have we implemented data protection policies for PHI?
Are staff members trained on appropriate AI use?
Could we identify if patient data was entered into an unauthorized AI tool?
Are our document repositories and data permissions properly maintained?
Do we have a clear vision for how AI will support our practice in the future?

The Bottom Line

AI has enormous potential to improve efficiency, reduce administrative burden, and enhance patient experiences. But healthcare organizations must balance innovation with security and compliance.

The most successful medical practices won't be the ones that avoid AI. They'll be the ones that adopt it thoughtfully, with the right governance, protections, and training in place.

By focusing on visibility, security controls, and employee education, healthcare organizations can confidently embrace AI while protecting patient trust and meeting their regulatory obligations.

Have more AI or cybersecurity questions? Mytech is happy to help!

Serving the Unique Needs of Physician Offices By AdvantageTrust, a CollaboRATE Partner

Wed, 23 Sep 2026 19:30:09 GMT

Serving the Unique Needs of Physician Offices

As prices for goods and services rise and supply chain issues persist, spending on supplies and services significantly impacts a practice’s budget. Physician practices are facing a challenging financial landscape marked by increasing prices, supply chain instability, and the need to operate efficiently without compromising patient care. In this environment, smarter purchasing has evolved from a mere cost-saving tactic to a resilience strategy. Independent physician offices are turning to group purchasing to stabilize spending, enhance financial performance and reclaim time otherwise spent chasing quotes or addressing supply chain disruptions.

The reality is that independent practices often face the same supply needs as large systems but without negotiating power. That imbalance leads to higher prices, inconsistent access and operational strain. Strategic procurement partnerships are emerging as one of the most effective ways to close that gap. By leveraging collective buying power, practices can protect margins, improve supply reliability and expand savings into non‑clinical categories that support day‑to‑day operations.

You can use your Practice Health membership and access a Free member benefit that gives you access to hospital-level pricing without fees or workflow disruption. Your ordering process remains the same.

AdvantageTrust, a division of HealthTrust Performance Group, is one of the largest, national group purchasing organizations (GPO) delivering significant savings typically only enjoyed by large healthcare systems. Trusted by more than 90,000 non-acute care sites across the country, AdvantageTrust delivers unmatched purchasing power and savings on a national scale.

Practice Health members gain immediate savings on medical, surgical, pharmaceutical and vaccine spend, plus access to non‑medical categories like office supplies, waste services, shipping, records management, interpretive services, travel and more.

Enrollment is easy and takes less than two minutes. Once enrolled, an Account Manager will contact you to start saving. Members become active in just 72 hours! With dedicated account managers to support you, free and easy enrollment and a vast contract portfolio, the Advantage of Joining is Yours!

Visit purchaseclinic.com/practicehealth to enroll today!

What is a medical practice really worth?

Tue, 08 Sep 2026 17:38:20 GMT

Panacea Financial

9/8/26

How do you know if you are overpaying for a practice or passing on a great one?

It's one of the most common questions facing any doctor considering buying a medical practice and one of the easiest to get wrong. Two practices can look nearly identical on paper and still be worlds apart in what they actually put in your pocket. The difference comes down to one of the most important, and most misunderstood, concepts in practice ownership: economic benefit.

There are several metrics you should look at when considering buying a practice: gross annual revenue, overhead, and net income. They all tell an important story about the health of the business. But the metric that matters the most is economic benefit - the total financial value a practice creates for its owner and it isn't found on a tax return or income statement.

Why economic benefit is important

Imagine you're evaluating two practices. Both have established patient bases, experienced staff, and strong online reviews. Practice A has a revenue of $1.2M, overhead of 60% ($720K) and resulting net income of $480K. Practice B also has a revenue of $1.2M, a significantly higher overhead of 75% ($900K) and a much lower net income of $300K.

Which one should you buy? Common sense says Practice A. And that's where common sense is no match for deeper financial knowledge.

Looking under the hood

Start with Practice B's overhead. At 75%, it looks like a poorly run office, the kind of number that might make you walk away before asking another question. But a closer look at the books tells a different story. Roughly $250K of what's recorded as "overhead" isn't the cost of running the practice at all. Instead, it reflects discretionary financial decisions made by the current owner:

Family on payroll $80K
Retirement and pension funding $110K
Vehicle, travel, continuing education $60K

When we set these aside, Practice B's true overhead is no longer 75%, but 54%, lower than Practice A’s 60%.

Which means the practice isn't earning $300K. It's generating $550K in real, recurring value for its owner. Practice B, the one that looked worse on paper, actually puts $70K more in its owner's pocket every year than Practice A.

Economic benefit as the foundation of practice valuation

That $550K is the practice's economic benefit — the real financial value it produces for its owner, and the number you should be building a valuation on when buying a practice.

Unfortunately, it isn't always the number healthcare valuations are built on. Too often, brokers and generalist lenders rely on broad rules of thumb, such as multiples of gross revenue or reported net income taken directly from financial statements and tax returns. That approach prices a practice at face value and can miss its true financial picture.

This creates an arbitrage opportunity for informed buyers and their advisors. By understanding a practice's true economic benefit, you may recognize value that others overlook. That can help you confidently pursue an exceptional practice that might otherwise be mispriced, underfunded, or even declined.

If you've followed the example above, you've already seen this process in action. At Panacea, for instance, we use Seller's Discretionary Earnings (SDE) in our underwriting. SDE is a financial analysis tool that starts with a practice's reported profit and adds back certain owner-specific discretionary expenses to estimate its true economic benefit.

Buying and running a successful practice is a team sport

That's why it's important to build a team of experienced advisors who understand the unique economics of healthcare practices. Your CPA, attorney, practice consultant, and lender each bring a different perspective, helping you evaluate opportunities from multiple angles.

You want a team that understands healthcare practices and knows how to look beyond the tax return, sort through the cash flow, and separate the true operating costs of the practice from the owner's personal financial choices. At Panacea, for example, we've built healthcare-focused underwriting models that help us identify a practice's true economic benefit more accurately than a generalist lender. That deeper understanding often allows us to approve larger loans, require lower down payments, and move more quickly than traditional banks.

So, the next time you're comparing two practices, don't ask which one has the higher revenue or lower overhead. Ask a deeper question: Which practice creates the greatest economic benefit? The answer may surprise you—and it could make all the difference in finding the right practice to own.

At Panacea, that expertise is built into how we evaluate and finance practices. Our healthcare-focused underwriting helps us identify a practice’s true economic benefit more accurately than a generalist lender—often allowing us to approve larger loans, require lower down payments, and move more quickly.

Acquiring, expanding, or relocating your practice? Talk with a Practice Finance Specialist.

Coding Medicare Annual Wellness Visits: What Providers and Coders Need to Know

Thu, 05 Feb 2026 20:35:18 GMT

Pinnacle Claims Management

2/5/26

Medicare Annual Wellness Visits (AWVs) play an important role in preventive care and in practice revenue. Yet they remain one of the most misunderstood services when it comes to coding and documentation.

Common challenges include determining eligibility, meeting timing requirements, and capturing all required visit components.

Fortunately, most claim denials aren’t caused by medical complexity. They stem from incomplete documentation.

This guide outlines Medicare’s requirements for Annual Wellness Visits and explains how accurate coding of G0438 and G0439 can support compliance, reduce denials, and improve reimbursement.

Understanding Medicare AWVs

An AWV is a prevention-focused services designed to assess risk, create personalized health plans, and guide long-term care. They are not problem-oriented E/M visits and require specific Medicare-defined components.

Before submitting claims, coders should always confirm:

Patient eligibility
Correct timing between visits
Complete documentation of all required elements

Attention to these details can significantly reduce denials and improve reimbursement.

Medicare AVW HCPCS Codes

Medicare recognizes two Annual Wellness Visit codes:

G0438 – Initial Annual Wellness Visit
G0439 – Subsequent Annual Wellness Visit

Each code has distinct timing rules and documentation requirements.

G0438: Initial Annual Wellness Visit

The Initial AWV may be billed once per beneficiary per lifetime and only after the patient has been enrolled in Medicare Part B for at least 12 months.

This visit focuses on prevention, risk assessment, and developing a personalized prevention plan.

Required Documentation for G0438

The HRA may be completed by the patient or provider and must include:

Demographic data
Self-assessment
Psychosocial risks
Behavioral risks
Activities of Daily Living (ADLs)
Instrumental ADLs (IADLs)

Additional Required Elements

Updated medical and family history
Current providers and suppliers list
Physical measurements (including blood pressure and weight or waist circumference)
Cognitive impairment screening
Depression risk documentation
Functional ability and safety assessment (ADLs, fall risk, hearing, home safety, driving when appropriate)
Updated written screening schedule
Updated risk factors and conditions with recommended interventions
Personalized Prevention Plan Services (PPPS), including referrals as appropriate
Advance Care Planning (optional, at patient discretion)
Documentation of current opioid prescriptions
Screening for substance use disorders
Social Determinants of Health (optional)

Missing any of these elements may result in claim denial or down-coding.

G0439: Subsequent Annual Wellness Visit

The Subsequent AWV may be billed once every 12 months after completion of the Initial AWV. This visit updates information gathered previously and refines the patient’s prevention plan.

Required Documentation for G0439

At minimum:

Demographic data
Self-assessment
Psychosocial risks
Behavioral risks
ADLs and IADLs

Additional Required Elements

Updated medical and family history
Current providers and suppliers list
Physical measurements (including blood pressure and weight or waist circumference)
Cognitive impairment screening
Updated screening schedule
Updated risk factors and intervention recommendations
Updated PPPS and referrals
Advance Care Planning (optional)
Current opioid prescriptions
Substance use disorder screening

As with the initial visit, incomplete documentation remains the leading cause of denials.

The Bottom Line

Accurate Medicare AWV coding depends far more on documentation completeness than clinical complexity.

By verifying eligibility and timing, ensuring Health Risk Assessments are current, and confirming all required elements are clearly documented, coders play a vital role in:

Reducing claim denials
Supporting compliance
Ensuring appropriate reimbursement

When coded correctly, AWVs reinforce Medicare’s preventive care goals and help support long-term patient health.

Resources

CMS Medicare Wellness Visits (MLN6775421, updated November 2024)
American Academy of Family Physicians – Annual Wellness Visit Coding

Authored by Alysia Delozier, A.A.S. CIS, CPC, CPMA
Senior Physician Auditor/Educator – Professional Audit, Coding & Education Services (PACE)

A Comprehensive Guide to Tail Coverage in Medical Malpractice Insurance

bberendsen@ideazonemarketing.com (Bob Berendsen) — Fri, 06 Jun 2025 17:15:51 GMT

Hilb Healthcare, formerly Keane Insurance Group

5/30/25

Understanding the ins and outs of tail coverage is essential for healthcare professionals such as physicians, surgeons, nurse practitioners, and practice administrators. When evaluating malpractice insurance options, three core components should be carefully reviewed: Prior Acts , Policy Type , and Cost . Among these, tail coverage —formally known as an Extended Reporting Endorsement—plays a critical role in maintaining protection after a policy ends.

What Is Tail Coverage?

Tail coverage extends the window in which claims can be reported, even after your medical malpractice insurance policy has expired. This means it will still cover claims resulting from incidents that happened while the policy was active (after the retroactive date), as long as those claims are filed during the extended reporting period.

Tail coverage is essentially an add-on to a claims made policy and may last for a set period (commonly 2–3 years) or indefinitely. However, this added protection comes at a price.

How Much Does Tail Coverage Cost?

The cost of tail coverage can vary widely between insurers. On average, it ranges from 2.5 to 3 times the annual premium of your malpractice policy. Given its cost, it’s wise to explore your options. Partnering with a seasoned medical malpractice insurance broker can help you compare policies and secure quality tail coverage at a more competitive rate.

Claims Made vs. Occurrence: Why It Matters

Whether you need tail coverage largely depends on the type of insurance policy you have.

Occurrence policies cover any incident that happens during the policy period—regardless of when a claim is filed. Even if the policy is no longer active, it still protects against past incidents. The downside? If the insurer goes out of business, you could be left vulnerable.
Claims made policies , by contrast, only cover claims filed while the policy is active. Once the policy ends, so does the protection—unless you purchase tail coverage. This endorsement keeps coverage in place for incidents that occurred during the policy but are reported later.

Keep in mind that not all tail endorsements are equal—some may be limited and not cover all past acts. Always review the specifics carefully.

The Importance of Prior Acts Coverage

Medical malpractice claims can surface years after an incident, making Prior Acts coverage a vital part of your policy. This provision ensures that claims tied to earlier events are still covered—even if they’re filed much later.

For instance, if a patient files a claim in 2024 for a procedure done in 2021, your current claims made policy can respond—as long as the policy includes prior acts coverage going back to your retroactive date (often the date you first began practicing). Maintaining that same retroactive date with any future policy is crucial for continuous protection.

When Is Tail Coverage Necessary?

You’ll need to consider purchasing tail coverage when a claims made policy is canceled or not renewed—unless your new policy includes prior acts coverage. A few common scenarios where this comes into play include:

Changing Employers
If your new employer provides malpractice insurance, make sure it includes prior acts coverage. If it doesn’t, you’ll need to buy tail coverage to remain protected from past claims.
Retirement, Death, or Disability
In these situations, many insurers offer free tail coverage. However, eligibility and terms can vary, so check the fine print in your policy.

Why Tail Coverage Matters

Without tail coverage or a new policy that covers prior acts, healthcare providers could face claims with no insurance to back them. The financial and reputational risks of this gap can be significant.

Work with an Expert Broker

Navigating malpractice insurance, especially tail coverage, can be complex. An experienced medical malpractice insurance broker can simplify the process—helping you evaluate options, compare quotes, and secure appropriate protection at the best possible price.

Final Thoughts

Tail coverage is a crucial safeguard for medical professionals with claims made policies. It ensures continued protection for past incidents once a policy ends. While it can be costly, the peace of mind and financial security it provides make it a worthwhile investment.

Understanding your policy type, knowing your retroactive date, and ensuring seamless coverage through tail or prior acts provisions are key to avoiding gaps. Always consult with an insurance expert to make the most informed decision for your practice and future.