// breach.compliance / dental
For general and specialty dental practices. Sixteen documents across three tiers: Quick-Start ($199) delivers the five universal HIPAA foundation docs. Complete Suite ($499) adds six dental-specific documents. Master Bundle ($999) adds five hands-on implementation tools.
// all.artifacts.by.tier
Sixteen artifacts across three tiers. Quick-Start ($199) delivers the five universal HIPAA foundation documents. Complete Suite ($499) adds six dental-specific documents. Master Bundle ($999) adds five implementation tools. Every artifact ships with a paired self-verification report mapping content to primary regulatory sources.
// quick start
Universal HIPAA §164.520 NPP updated for the 2024 Reproductive Health Privacy Rule. Covers all required notice elements, patient rights block, effective-date field, and distribution acknowledgment. Suitable for all covered healthcare entities without modification.
// quick start
HHS Model BAA adapted for small-practice use. Prominent attorney-signoff disclaimer. Covers all §164.504(e) required provisions: permitted uses, safeguard obligations, subcontractor flow-down, breach notification, termination, and return-or-destruction of PHI.
// quick start
HIPAA-compliant intake form with built-in PHQ-2/GAD-2 screening questions. Covers demographic, insurance, emergency contact, and care-coordination consent fields. Designed for dental practices; section headers reference dental-specific treatment authorization language.
// quick start
Workforce training acknowledgment satisfying §164.530(b) documentation requirement. References the sanctions policy, lists the seven training topic categories, and includes a sign-off block for training date, trainer, and employee signature for practice training records.
// quick start
§164.530(e) workforce sanctions framework. Defines violation severity tiers (inadvertent / negligent / willful), proportionate sanction responses for each tier, documentation and investigation procedures, and non-retaliation statement. Required to be in place before OCR audit.
// complete suite
Integrated clinical informed consent for sedation dentistry with four HIPAA-specific authorizations (recording, family-disclosure-during-sedation, emergency disclosure, post-procedure communication preferences). Supports all 6 AAOMS sedation tiers from N2O to general anesthesia.
// complete suite
Per §164.508 authorization framework for dental imaging. Covers x-ray, CBCT, intraoral and full-face photographs, 3D scans, and before/after photos. Four granular non-standard-use authorization scenarios with separate yes/no/de-identified options.
// complete suite
Operationalizes retention across the entire HIPAA documentation universe. 8-category × 2-patient-type retention matrix (adult vs minor). Storage security, destruction with NIST SP 800-88 references, practice-transition procedures, and BAA requirements for off-site storage and destruction vendors.
// complete suite
Attaches to the Imaging Privacy form for practices using cone-beam CT. ALARA principle statement, 8-indication clinical checkbox, pediatric Image Gently protocol, pregnancy defer-or-shield language, ADA / AAOMR / FDA dose comparison table. State radiation safety officer placeholder section.
// complete suite
State-by-state matrix for the 13 all-party-consent recording states (CA, CT, FL, IL, MD, MA, MI, MT, NV, NH, OR, PA, WA). Federal 18 USC §2511 baseline, per-state penalty tiers, patient consent form, pre-recording verbal script, storage and access policy, telehealth cross-state guidance.
// complete suite
Three-table regulatory digest across 10 high-volume states: sedation permit requirements per modality, recording statute digest, and records retention minimums. Each row presents citation, statute text excerpt, and last-verified date with per-cell fetch-status labels. Not legal advice; reference only.
// master bundle
Landscape flowchart walking the §§164.402-164.414 assessment in plain decision-tree form. Four-factor low-probability-of-compromise framework, individual / media / HHS notification thresholds, BA notification chain, law enforcement delay. Companion narrative reference and fillable incident-documentation worksheet.
// master bundle
Fillable §164.308(a)(1)(ii)(A) annual self-assessment. ePHI inventory, 10-threat identification matrix, vulnerability assessment across all five safeguard categories, 3×3 likelihood-impact risk grid, mitigation plan tracker, sign-off block. Methodology aligned with NIST SP 800-30 Rev. 1.
// master bundle
Companion usage guide for the Vendor BAA Tracker spreadsheet. Step-by-step setup instructions, column definitions for all 20 fields, guidance on the BAA-required-vs-conduit-exception determination, risk tier definitions, and a quick-start checklist for initial population of the tracker.
// master bundle
Editable 26-slide PowerPoint for the §164.530(b)(1) annual training requirement. PHI definitions, TPO disclosures, Minimum Necessary, breach reporting, workstation and device security, social engineering, sanctions, OCR enforcement examples, knowledge check, sign-off slide for practice training records.
// master bundle
Four-sheet Excel template for §164.502(e) Business Associate Agreement administration. 20-column tracker with dropdown validation and five example vendor rows, BAA-required-vs-conduit-exception guidance, risk tier definitions, common vendor categories needing BAAs.
Sixteen artifacts total: 5 Quick Start (cyan) + 6 Complete Suite (green) + 5 Master Bundle (violet). See pricing tiers below.
// pick.your.tier
Quick-Start is the HIPAA-ready foundation for any solo dental practice. The Complete Suite layers on dental specialty documents and a state reference table (11 documents total). The Master Bundle adds five hands-on implementation tools for a complete 16-deliverable kit.
// dental.faq
Does this work for an oral surgeon doing general anesthesia, or just general dentists with N2O?
Both. The Sedation Consent & HIPAA Authorization document supports all six AAOMS-recognized sedation modalities (local only, N2O, oral conscious, IV moderate, deep sedation, general anesthesia). General dentists check the modality they actually use; oral surgeons doing GA use the same form. Advanced Suite includes state-board permit number language for jurisdictions that require it on the consent.
Is the Imaging Privacy form just for x-rays, or does it cover the 3D scans we use for Invisalign?
Covers everything: intraoral x-rays, panoramic, CBCT, intraoral photos, full-face/smile photos, 3D intraoral scans for clear aligners, and before/after treatment photos. The §164.508 authorization framework lets the patient consent (or decline) granularly per use case: marketing, before/after publication, professional education, IRB research.
My state requires a longer dental records retention than the federal HIPAA 6-year floor. Does the Records Retention Policy handle that?
The Quick-Start Records Retention Policy uses conservative defaults (7-10 years depending on record category) that meet or exceed federal HIPAA and most state minimums. The Policy includes an alert box explicitly directing the buyer to verify state-specific overlays before adoption. The Advanced Suite version includes the actual state statute citation for the buyer's state pre-filled.
We use Dentrix. Does the Advanced Suite tier include Dentrix-specific instructions?
Yes. The Advanced Suite includes EHR-vendor-specific deployment guides for Dentrix, Eaglesoft, Open Dental, Curve Dental, and Carestream, covering psychotherapy-notes-equivalent separation for sensitive clinical commentary, sedation consent attachment workflows, and imaging metadata redaction for marketing-use exports.
Real human responds within one business day. We're a templates vendor, not a compliance consultancy; we're not going to charge you for a discovery call.