Spam emails used to be easy to spot. Bad grammar. Weird sender. A Nigerian prince with an unusually urgent financial situation that was going to make you an overnight millionaire.

Those were simpler times.

In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood dig into the increasingly sophisticated phishing and spear-phishing attacks hitting dental and healthcare practices, including fake encrypted messages, DocuSign-style links, retirement party invitations, and emails convincing enough to fool people who absolutely know better.

And that’s the problem... cybercriminals have gotten better at this.

Amy explains how attackers are using compromised email accounts, publicly available information, social engineering, and AI to create highly targeted attacks. One wrong click can give them access to an inbox full of patient information, passwords, insurance portals, cloud practice management systems, financial accounts, vendor relationships, and plenty of other information they can monetize.

Kara and Amy also tackle the uncomfortable reality that cybersecurity isn’t just an IT problem. It’s a people, process, access, and leadership problem.

Also in this episode:

• Why phishing emails are getting much harder to recognize
• How hackers turn one compromised inbox into attacks on patients, vendors, and other practices
• What social engineering has to do with your pets, kids, birthdays, and everything else you post online
• Why cybersecurity training should actually test whether employees recognize phishing attempts
• The problem with giving employees, managers, and even owners access they don't actually need
• Why shared passwords and excessive system permissions create unnecessary exposure
• What practices should be doing now while proposed HIPAA Security Rule changes continue to be delayed
• How AI is making cybercriminals faster and more sophisticated
• Why changing the password after an email compromise may be nowhere near enough

And yes, even cybersecurity experts click things they shouldn’t sometimes. Amy shares how a highly targeted OneDrive phishing attack caught her using the name of a project she was actively working on. Because the goal isn’t pretending humans will never make mistakes. It’s building enough layers of protection that one human mistake doesn’t become a catastrophe.

Bottom line: You don't have to make yourself impossible to hack. But you also don't have to make it so d*mn easy.

Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach.

Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations.

Email compliantafpodcast@gmail.com

This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, medical, HR, cybersecurity, or regulatory advice. Listening does not create a client relationship with the hosts or their companies. Consult qualified professionals regarding your specific circumstances.

What if dentistry's biggest workforce problem isn't here yet?

What if more dental assistants decide temping is a better career path than waiting around for raises? Or, what if someone actually succeeds in organizing unions in dentistry? In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood are joined by labor relations expert Katie Tanner to explore the "dental dystopia" many practice owners hope never becomes reality - and what leaders should be doing now to keep it that way.

In this episode of the Compliant AF Podcast, Kara Kelley and Amy Wood are joined by labor relations expert Katie Tanner to unpack the growing workforce shifts that could fundamentally change dentistry. From union organizing and collective bargaining to skyrocketing temp rates and the long-term sustainability of private practice, this conversation explores the "what if" scenarios many practice owners are quietly wondering about - but few understand.

Katie breaks down how unions actually form, what employers can (and absolutely cannot) do when employees begin organizing, why collective bargaining isn't the magic solution many people assume it is, and how union dues, contracts, and labor law work in the real world. Kara brings the HR perspective, connecting these trends to compensation, retention, wage and hour compliance, employee classification, and the growing temptation for practices to cut compliance corners when margins get tight. Amy rounds out the conversation with practical questions about leadership, technology, and where the profession may be headed next.

• What it actually takes to form a union in healthcare
• Why unions are far more complicated than social media makes them sound
• The hidden costs of collective bargaining agreements and union dues
• What employers can and cannot say when employees discuss unionizing
• When labor attorneys should get involved
• Why temp work is becoming increasingly attractive for hygienists and dental assistants
• How skyrocketing temp wages affect practice profitability
• Independent contractor myths in dentistry
• The growing disconnect between reimbursement rates and labor costs
• Practical ways leaders can reduce turnover before employees look elsewhere
• Why workforce pressures often lead to compliance shortcuts—and why that's a dangerous tradeoff

Bottom line: Whether unions ever become common in dentistry or not, the pressures driving these conversations already exist. Practice owners who understand compensation, culture, compliance, and workforce strategy will be far better positioned than those who simply hope these trends pass them by.

President & Owner, KTHR Innovations

Katie Tanner is an HR and labor relations consultant specializing in union strategy, collective bargaining, employee relations, and compliance within healthcare organizations. With more than 15 years of HR leadership experience - including extensive work in skilled nursing, home health, and multi-state healthcare operations - Katie helps employers navigate complex labor issues before they become business crises.

Learn more: https://www.kthrinnovations.com

Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach.

Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations.

compliantafpodcast@gmail.com

This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, medical, or HR advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by jurisdiction, so consult qualified professionals regarding your specific situation.

“We’ve always done it this way” sounds harmless… until the audit letter arrives, the employee turns whistleblower, or the wrong provider name on a claim form becomes a much bigger problem than anyone expected.

In this episode of Compliant AF, Amy Wood and Kara Kelley are joined again by Rick Garofolo of The Dental Practice Mechanics for Part 2 of their conversation on the dental compliance myths that simply refuse to die.

We’re breaking down the compliance landmines that show up when practices rely on outdated habits, bad advice, or the always reliable legal defense of “somebody in a Facebook group said it was fine”...

• ignoring team members who raise billing or compliance concerns
• assuming “we’ve always done it this way” means “we’ve always done it correctly”
• uploading bulk EOBs into patient records without considering HIPAA exposure
• billing under the wrong provider after a practice purchase, maternity leave, or temp coverage
• trusting AI-generated answers without reading the actual source
• treating canned HIPAA and OSHA videos like site-specific training
• giving temps or fill-ins full software access without proper training or controls
• assuming compliance training is optional, generic, or someone else’s problem

...and more! Learn why practice owners need to stop treating compliance as an administrative nuisance and start treating it as patient protection, license protection, and business survival.

Rick also shares why provider misrepresentation on claim forms can create serious criminal exposure, why audits are increasingly likely, and why one angry former employee can turn a “small shortcut” into a very large problem.

Because apparently “do it right the first time” is still controversial.

Rick Garofolo Rick Garofolo is the founder and CEO/President of The Dental Practice Mechanics, which he launched in 2001 after marrying a dentist and seeing firsthand how much support dental practices needed with business management, practice growth, and operational systems.

Over the years, Rick and his team have helped dental practices strengthen the business side of dentistry through proper accounting techniques, recall and follow-up systems, treatment plan presentation, billing systems, and more than 20 other practice management systems. Rick takes pride in leading a close-knit, full-time, in-house team with no overseas or work-from-home outsourcing.

Through The Dental Practice Mechanics, Rick helps practices understand what is expected and required of them so they can improve profitability, create safer environments for patients and team members, and maybe even let the dentist sleep at night.

Kara D. Kelley, SHRM-SCP, SPHR As a Fractional HR Business Partner to dental leaders and healthcare executives and CEO of Clinical HR, Kara specializes in HR compliance, workforce strategy, leadership development, and helping practices build systems that are both compliant and sustainable. She is also a nationally recognized speaker, author, and coach.

Amy Wood Founder of Copper Penny Consulting, Amy is a nationally respected HIPAA, cybersecurity, OSHA, and compliance expert serving dental and healthcare practices. Known for her no-nonsense approach to vendor risk, technology, and real-world compliance, Amy helps practices reduce risk without overcomplicating operations.

Email compliantafpodcast@gmail.com

This podcast is for educational and informational purposes only and does not constitute legal, financial, tax, or medical advice. Listening to this episode does not create a client relationship with the hosts or their companies. Laws and regulations vary by state and situation; practices should consult with qualified legal, financial, HR, compliance, and cybersecurity professionals regarding their specific circumstances.