Things a medical practice can do: • Provide general information about treatments to patients and healthcare news. This information should be broad and be used to attract new patient leads.  • Promote the certifications of providers and staff at a medical practice have to showcase their expertise in treatments.  • Share any professional honors providers or staff have received.  • Before placing a patient on an email marketing list, ask for a patient’s permission first. • Seek out third-party vendors that have experience in maintaining HIPAA compliance. • Ensure that no PHI identifiers are in any images used for marketing campaigns or social media posts.