Archive
A printable Illinois checklist for behavioral health practices covering licensure and supervision, entity choice, the Mental Health and Developmental Disabilities Confidentiality Act, HIPAA psychotherapy notes and access, limits on AI in therapy, Part 2 records, mandated reporting, and telehealth.
A formation-to-launch checklist for Illinois medical practices: entity authority, clinical control, fees, HIPAA, vendors, workforce, patient rights, and the evidence a new practice should be able to produce.
A printable checklist for opening an Illinois dental practice, covering the professional entity, the DSO or MSO agreement, IDFPR permits, x-ray and controlled substance registrations, HIPAA, and OSHA bloodborne pathogens duties.
A printable, bilingual self-assessment against the current HIPAA Security Rule: governance, risk analysis and management, access and encryption, vendors, incidents and backups, workforce, evidence to keep, ranking gaps, and what the proposed rule would add.
Illinois organizations using AI should connect each system to the law that actually applies: employment discrimination and notice under the Human Rights Act, video-interview duties, BIPA controls for covered biometrics, and documented governance using a framework such as NIST AI RMF.
Illinois enacted the Wellness and Oversight for Psychological Resources Act, 225 ILCS 155, effective August 1, 2025. The statute draws functional lines, and the practice should classify each use against those lines.
Illinois corporate-practice analysis is not a one-case slogan. Current statutes expressly identify professional entities and fee-splitting rules, while the core operational question remains who owns and controls the medical practice and professional judgment.
Illinois regulates ownership by separating the clinical practice from nonclinical business services. The first task in a transaction is therefore to identify which entity will hold the dental license-dependent business and which people or entities own and control it.
Illinois changed the damages math in 2024, not the operating duties. A 2026 BIPA program still begins before collection: identify the biometric function, give the required notice, obtain a written release, control disclosure, publish retention rules, and make deletion real.
What the current HIPAA Security Rule requires in 2026: flexibility and addressable specifications, risk analysis and management, administrative, physical, and technical safeguards, documentation, business associates, recognized security practices, and penalties.