HIPAA Basics for Dental Offices

HIPAA applies to practices of every size

Small dental offices carry the same HIPAA Security Rule obligations as large health systems. The good news is that the core requirements are practical and achievable with the right help.

The essentials

• A documented security risk analysis, updated when systems change
• Unique user accounts and strong authentication
• Encryption for laptops and any device that stores patient data
• Business associate agreements with vendors who handle patient data
• Audit logs and a process for reviewing access

Email and patient communication

Appointment reminders, referrals, and records requests often travel by email. Encrypted email and secure patient portals keep that information protected.

Document everything

If you are ever audited or experience a breach, documentation of your safeguards matters as much as the safeguards themselves.

How WEBIT helps

WEBIT implements and documents the technical safeguards, supports your risk analysis, and signs a business associate agreement with your practice.