HIPAA Compliance Is Just the Beginning: Digital Security for Therapists


Psychedelic Affirming Education Newsletter

Digital Security in the Age of Surveillance Capitalism

Dear Healthcare Professional,

You might be wondering why a psychedelic education platform is addressing digital security. As a therapist and former researcher who managed sensitive databases at VA medical centers, I've seen firsthand how critical data protection is. The work we do as healthcare professionals involves deeply personal information. Just as we prioritize informed consent and risk assessment with our clients, we should extend the same thoughtful consideration to our digital practices. The sensitive nature of psychedelic-affirming therapy makes digital security not just a technical concern but an ethical one.

Why Digital Security Matters for Everyone

In today's digital landscape, protecting sensitive information isn't just about HIPAA compliance—it's about recognizing that we all live in an era of surveillance capitalism where our digital footprints are constantly tracked, analyzed, and monetized.

As healthcare professionals, you're already familiar with privacy regulations, but the reality extends far beyond compliance requirements. Every digital interaction—from search queries to email communications to location data—creates a trail that various entities can access:

  • Tech companies collecting data to serve targeted advertisements
  • Data brokers who aggregate and sell personal information
  • Service providers who may have access to unencrypted communications
  • Potential security breaches that could expose sensitive information

Essential Security Practices for Healthcare Professionals

I recently discovered an excellent resource called Activist Checklist that provides straightforward security recommendations anyone can implement. While designed for activists, these practices are valuable for all professionals who handle sensitive information:

  1. Use encrypted communication tools like Signal for texts and calls
  2. Implement a password manager with strong, unique passwords for each service
  3. Enable two-factor authentication on all important accounts
  4. Use privacy-focused browsers instead of Chrome
  5. Keep all software updated to protect against security vulnerabilities
  6. Be mindful of location tracking in your apps and device settings

My Personal Security Journey

Implementing all the security essentials from the checklist has given me a sense of control and peace of mind. One simple change that made a significant difference was switching my search engine to DuckDuckGo. The results are excellent; there's less spam, no AI unless I want it, and I can search without being tracked.

Another game-changer has been using a VPN when connecting to public Wi-Fi. As someone who frequently works from coffee shops and shares sensitive professional documents, this added layer of protection ensures my data remains secure even on untrusted networks.

Securing Your Digital Communications

Email remains one of the most vulnerable channels for sensitive information. Standard email services often scan content for advertising purposes and store messages in ways that could be accessible to third parties.

A Solution I Use and Recommend: After being a paying customer for over seven years, I'm pleased to share Proton's suite of privacy-focused tools. Their services include encrypted email, secure cloud storage, calendar, and VPN—all designed with privacy at the core.

What makes Proton particularly valuable for healthcare professionals:

  • End-to-end encrypted email that can be configured for HIPAA compliance
  • No scanning of email content for advertising purposes
  • Protected by strong Swiss privacy laws
  • Secure VPN for protecting connections on public networks
  • An integrated ecosystem of privacy tools

Try Proton Unlimited for just $1 for your first month →

Simple Next Steps

  1. Review the Security Essentials Checklist
  2. Consider how your current digital practices might expose sensitive information
  3. Implement at least one new security measure this week
  4. Explore Proton's privacy tools as an alternative to surveillance-based services

Remember that digital security isn't about having something to hide—it's about protecting your fundamental right to privacy in an increasingly surveilled world. For those of us working in sensitive fields like psychedelic-affirming therapy, it's also about creating a digital environment as thoughtfully protected as the therapeutic spaces we create for our clients.

Wishing you digital well-being,

Peter H. Addy, Ph.D.

Psychedelic Affirming Education

This email contains affiliate links. If you purchase through these links, we receive a small commission at no extra cost to you. This helps support our mission to provide evidence-based education for mental health professionals.

Subscribe to Psychedelic Affirming Education