Security management in telepsychology.

Abstract

Psychologists increasingly rely upon “telepsychology” (e.g., e-mail and Internet-based client communications) despite the growing presence of threats to online security. However, practitioners may overestimate the benefits of electronic communications and underestimate their risks. Using the example of the availability heuristic as one cognitive bias, which may promote this imbalance, this article reviews a number of resources for practitioners that provide enhanced security and confidentiality in the digital realm. Governmental, regulatory and professional bodies provide pertinent and detailed guidance that can achieve these goals. To illustrate this process, this article reviews and augments a number of safeguards (administrative, physical, and technical) within the HIPAA Security Rule. It also surveys opportunities for continuing education and credentialing that may enhance professional competence in electronic communications. It concludes with a list of recommendations for enhancing security and reducing the influence of the availability heuristic in telepsychology. These recommendations range across several categories of professional practice: hardware and software management, confidentiality, informed consent, competence, consultation, and continuing education. This article can help practitioners reap the benefits of telepsychology while successfully enhancing confidentiality and security.

Internet-Delivered, Family-Based Treatment for Early-Onset OCD: A Preliminary Case Series

“…Accordingly, we must be cautious against conducting VTC-based treatment in the absence of guidance from the broader professional community, particularly given the unique security, privacy, and liability concerns associated with such care. Fortunately, a guiding dialogue has begun to unfold about the management of threats to confidentiality—addressing key issues such as encryption and privacy protection (American Telemedicine Association, 2009; Banitt Duncan et al, in press; Kramer, Mishkind, Luxton, & Shore, 2013; Schwartz & Lonborg, 2011; Yuen, Goetter, Herbert, & Forman, 2012). However, there is still much to be clarified, and in the interim participating families must be clearly informed prior to consenting to VTC services that there is no current consensus on the role of VTC in mental health care.…”

The occasional case against broad dissemination and implementation: Retaining a role for specialty care in the delivery of psychological treatments.

“…We must be extremely cautious against allowing technology-assisted practices operating in the absence of guidance from the broader professional community, particularly given the unique privacy, security, and liability concerns inherent in such care. In recent years, a guiding dialogue has begun to unfold on the management of threats to confidentiality (Schwartz & Lonborg, 2011; Yuen, Goetter, Herbert, & Forman, 2012)—addressing such key issues as privacy protection and encryption—but we still undoubtedly have a very long way to go before consensus practice parameters addressing matters of patient information security can be expected. In the interim, patients participating in behavioral telehealth care must be clearly informed prior to their consent to treatment that the field currently has no consensus on the role and methods of technology in psychological treatment.…”

Rationale and Considerations for the Internet-Based Delivery of Parent–Child Interaction Therapy

“…As such, we must be cautious against conducting technology-assisted treatment in the absence of guidance from the broader professional community, particularly given the unique security, privacy, and liability concerns associated with such care. Fortunately, a guiding dialogue has begun to unfold regarding the management of threats to confidentiality (Schwartz & Lonborg, 2011; Yuen et al, 2012)—addressing key issues such as privacy protection and encryption. However, we still have a long way to go.…”