Ethical, Legal, and Security Considerations for Technology and Mental Health Care

Technology is now woven into nearly every aspect of mental health practice. Even clinicians who provide services entirely in person may rely on email, electronic health records, telehealth platforms, websites, digital forms, online scheduling, texting, billing systems, cloud storage, or other tools that affect client privacy and clinical risk. As technology continues to evolve, behavioral health professionals need more than a general reminder to “follow HIPAA” or “protect confidentiality.” They need a practical way to think through what secure, ethical, and legally informed technology use actually requires in daily practice.

Many clinicians were trained to uphold confidentiality, informed consent, documentation standards, and professional boundaries, but received little formal preparation in technology security, platform selection, vendor agreements, cyber risk, or emerging tools such as Artificial Intelligence. This gap can leave professionals vulnerable to avoidable mistakes, unclear policies, poor platform choices, inappropriate use of client data, or uncertainty about how to respond when systems fail, breaches occur, or new tools outpace existing laws and ethics codes.

Dr. Amy Marschall, Psy.D., brings a practical, clinically grounded perspective to the ethical and security challenges that arise when technology becomes part of mental health care. As a certified Telemental Health provider and author of Telemental Health with Kids Toolbox and Telemental Health with Kids Toolbox Volume Two, Dr. Marschall is especially well suited to help clinicians move beyond abstract compliance language and think through how technology decisions affect confidentiality, consent, documentation, access, boundaries, and client safety in real-world practice.

Rather than framing technology as either inherently helpful or inherently risky, Dr. Marschall emphasizes careful clinical discernment. The training explores how professional ethics codes and HIPAA-related responsibilities apply to everyday practice realities, including electronic records, email, telehealth platforms, texting, social media, recording, home offices, staff access, business associate agreements, breach response, record disposal, and jurisdictional considerations. Throughout, clinicians are encouraged to think beyond whether a tool is convenient and consider whether it fits their ethical obligations, legal responsibilities, work setting, client needs, and scope of competence.

The program also addresses emerging concerns related to Artificial Intelligence, cybersecurity, and human error. Dr. Marschall examines AI use in documentation, transcription, client communication, chatbots, and administrative tasks while highlighting unresolved questions about consent, data retention, clinical judgment, subpoenas, and the limits of “HIPAA compliant” as a complete ethical standard. The discussion also brings attention to practical vulnerabilities such as phishing emails, rushed responses, weak access practices, unclear policies, and therapist-targeted scams, helping clinicians slow down, verify information, vet vendors, update safeguards, and reduce preventable risks to both clients and their practice.

Key Takeaways

• Protect client information in everyday technology use: Strengthen your understanding of how ethical, legal, and security responsibilities apply to the digital tools commonly used in mental health practice.
• Make more informed technology decisions: Learn how to evaluate platforms, vendor claims, business associate agreements, AI features, and practice policies with greater clinical and ethical discernment.
• Reduce preventable risk: Recognize how human error, unclear boundaries, poor access practices, and scams can undermine security—and identify practical steps to support safer practice.

Why This Course?

• It is designed for modern clinical practice: Technology is no longer limited to telehealth. This course addresses the tools, platforms, and communication methods that now shape routine behavioral health care.
• It turns compliance into practical decision-making: The training helps clinicians connect ethics codes, HIPAA-related responsibilities, and security expectations to real situations they may encounter in practice.
• It supports client trust and professional protection: By strengthening technology-related judgment, clinicians can better safeguard confidential information, respond thoughtfully to emerging tools, and reduce avoidable exposure to ethical, legal, and security concerns.

Learning Objectives

• Apply ethical and legal standards to secure use of technology in mental health practice, including compliance with relevant professional ethics codes and HIPAA.
• Evaluate risks and benefits of emerging technologies, including Artificial Intelligence, in clinical settings and with administrative tasks.
• Analyze security vulnerabilities, including human error risks, and implement strategies to select platforms and products that protect client confidentiality.

Technology will continue to shape mental health care, but clinicians do not have to respond to each new tool with either fear or blind adoption. This course offers practical guidance for using digital resources more thoughtfully, protecting client information more effectively, and making informed decisions that support ethical, legally sound, and clinically responsible practice.