Dental offices hold ePHI on imaging workstations that vendors treat as appliances, plus a front desk that still emails insurance questions. HIPAA expectations don’t shrink because you have eight chairs.
Plain language: we are not “HIPAA certified.” We sign BAAs, implement Security Rule-aligned controls, and package evidence. OCR and your auditor decide outcomes.
What usually needs work
- Segment imaging, PCI, guest Wi-Fi, and cameras.
- Patch and back up the PCs the imaging vendor “didn’t want touched” — with a change window.
- Harden email; billers get BEC’d. Email security.
- After-hours cameras on entries, not default operatory recording. Assessments.
Vertical page: /industries/dental. Lincoln and Omaha are markets; Hickman is HQ (no storefront). 531-625-2111.
