AI in your sessions, HIPAA in 2027, and Google rankings: what changed this week

Therapists Are Divided on AI in Sessions. Here Is How to Land on the Right Side.

According to reports, a growing split is emerging among therapists over AI documentation tools, with discussions extending across Washington State and the broader national landscape. Clinicians using AI for notes report dramatic time savings, while critics raise legitimate concerns about accuracy, consent, and client trust. Sources indicate that regulators and lawmakers are watching closely, with some states already considering legislation that could limit or shape how AI is used in clinical settings.

The smartest move for any practice owner right now is to get ahead of this by writing an internal AI use policy before state or licensing boards do it for you. A clear policy protects you, builds client trust, and signals that you are running a thoughtful, professional practice. Waiting for official rules to force the conversation is a risk you do not need to take.

Do this now:

• Review your current documentation workflow and identify every point where AI tools are or could be involved.
• Draft a one-page internal AI use policy covering consent, data handling, and accuracy review before the end of July 2026.
• Share your policy with your malpractice insurance provider and ask whether your current coverage addresses AI-related documentation errors.

HIPAA Security Rule Overhaul Is Delayed Until July 2027. That Does Not Mean You Should Wait.

HHS has officially pushed final action on the proposed HIPAA Security Rule amendments to at least July 2027, according to a Clark Hill analysis published July 14, 2026. The delay gives practices more runway, but the proposed requirements are still coming. They include mandatory multi-factor authentication, documented technology asset inventories, and written incident response plans.

Compliance attorneys are recommending that practices treat the proposed rule as a planning roadmap now, not a future problem. The practices that start work early will face far less disruption than those scrambling in mid-2027. Use this window to audit your current security setup, identify gaps, and fix the easy ones first.

Do this now:

• Download the HHS proposed HIPAA Security Rule amendments and flag the three requirements most relevant to your current tech setup.
• Conduct a basic technology asset inventory this month, listing every device and software platform that stores or accesses client records.
• Contact your EHR vendor and ask specifically whether their platform will meet the proposed multi-factor authentication requirements by July 2027.

AI Scribes Are Saving Clinicians Time, But Therapy Practices May Be Learning Hard Lessons About Data Privacy

According to reports from various industry sources, AI medical scribes are delivering real documentation relief for clinicians, but the tools are raising serious questions about where audio recordings and transcripts are stored, who owns that data, and whether applicable privacy laws are being met. Sources indicate that some practices are discovering compliance gaps after signing on with vendors, though the full scope of this issue has not been independently confirmed across all regions.

Therapy practice owners should vet any AI scribe vendor before the first session is recorded. Key questions include where your data is physically stored, whether it crosses state, provincial, or national borders, and what happens to recordings after transcription. If your vendor cannot answer these questions clearly and in writing, that is your answer.

Do this now:

• Request a written data residency statement from your current or prospective AI scribe vendor, specifying exactly where audio and transcripts are stored.
• Review your provincial privacy law requirements, such as PIPEDA/HIPAA or applicable provincial legislation, and confirm your vendor meets them.
• Update your client consent forms to explicitly disclose AI-assisted documentation and any third-party data processing involved.

AI Has Become the World's Largest Mental Health Resource. The APA Wants You Talking About It With Clients.

APA guidance published June 30, 2026 confirms that general-purpose AI chatbots including ChatGPT, Gemini, and Claude have become the most widely used mental health support tools globally. Two-thirds of adults aged 25 to 34 report they have sought wellbeing support from a chatbot. Many of your current clients are almost certainly using these tools between sessions, whether or not they mention it.

The APA recommends that therapists proactively raise AI use in sessions, covering privacy risks, accuracy limitations, and appropriate crisis response. This is not just a clinical conversation. It is also a practice differentiator. Therapists who open this dialogue position themselves as informed, trusted guides in a landscape clients are navigating largely on their own.

Do this now:

• Add one question about AI chatbot use to your standard intake form or first-session checklist starting with your next new client.
• Review the APA's June 30 guidance at apa.org and identify two or three talking points you can use naturally in session.
• Consider adding a short paragraph to your website or intake packet explaining your practice's perspective on AI mental health tools and how you address them in your work.

Google Ranks Therapy Websites on Expertise and Trust. Here Is What Your Site Needs to Show.

According to reports on Google's Quality Rater framework, E-E-A-T continues to govern how therapy and healthcare websites are ranked in search results. E-E-A-T stands for Experience, Expertise, Authoritativeness, and Trustworthiness, and multiple sources confirm these are established ranking signals. As reported by SEO industry sources, clinician bios, credentials, and original content are core ranking factors for therapy practices, not optional extras.

Practices without clear author attribution and visible credential display are likely losing search visibility to competitors who have these basics in place. Sources indicate that if your website does not show who you are, what you are trained in, and why clients should trust you, Google's systems are designed to rank you lower than sites that do. These are fixable problems, and many practices can address them without a full site rebuild.

Do this now:

• Audit your website's About page and each therapist bio to confirm that credentials, license type, and areas of specialization are clearly displayed.
• Add author attribution to any blog posts or resource pages on your site, linking each article back to the credentialed clinician who wrote it.
• Write or update at least one original piece of content this month that reflects your direct clinical experience, such as a FAQ page or a post explaining your approach to a specific issue you treat.

Quick wins for the week

• Add your license number and license type to your Google Business Profile this week to strengthen your local search credibility.
• Set a calendar reminder for June 2027 to complete a full HIPAA security audit before the revised rule takes effect.
• Ask your next three new clients during intake whether they have used AI chatbots for mental health support, to start building familiarity with the conversation.
• Search your own practice name on Google and confirm that your website, credentials, and contact information appear accurately in the results.

Final thoughts

This week's stories share a common thread: the gap between what is happening in digital and regulatory spaces and what most therapy practice owners have time to track. AI tools are reshaping documentation, client behavior, and search rankings all at once. HIPAA rules are shifting. Google keeps updating the signals it uses to evaluate your credibility. None of this slows down because your schedule is full.

The good news is that none of these challenges require you to become a technology expert. They require awareness, a few targeted actions, and the right support. While you're providing therapy, we're monitoring policy changes, protecting your Google presence, and optimizing for AI search. You shouldn't need to become an SEO expert, compliance specialist, and tech strategist on top of being a therapist.