HIPAA Security Rule update · proposed encryption, MFA, and technical safeguards
For dental practices
Live Compliance runs the HIPAA program for dental practices: the risk analysis, written policies with review dates, staff training with records, lab and vendor BAAs, and the evidence an auditor asks for, with a named compliance team on every plan.
~10 minutes · No credit card · No call required
Dental practices are on the client wall, Reznicek Dental Group among them. Read the client stories.
Review dates tracked, reminders sentReview dates tracked, reminders sent
Actual platform · demo organization
Where it goes wrong
OCR has settled with dental practices, and the pattern is consistent: not the dentistry, the documentation. The file behind the chart is what gets examined.
HIPAA requires written policies and procedures, reviewed and updated, with documentation retained for six years. A 2026 OCR settlement with a dental practice turned on exactly this, the file behind the chart. We wrote up the case.
In the programPolicies live in the platform with review dates, reminders, and staff acknowledgments tracked per person, so the binder is never the evidence.
Security awareness and training is required for all workforce members, including the new front-office hire, with records to prove it. Dental teams are small and turnover is real; the training record is usually the first gap an auditor finds.
In the programRole-based training with completion records, new hires trained on arrival, and annual refreshers on a schedule the platform keeps.
Every vendor that creates, receives, maintains, or transmits PHI on the practice’s behalf needs a signed Business Associate Agreement before PHI moves. For a dental practice that is the lab, the billing service, the claims clearinghouse, the imaging vendor, and the IT company.
In the programVendor and BAA tracking on every plan: each agreement on file, renewal dates watched, and satisfactory assurance documented.
Disposal of ePHI and the hardware it lives on is a required implementation specification, and so is removing ePHI before media is reused. The workstation that went to the e-waste bin with the schedule still on it is a reportable problem.
In the programAsset Manager keeps the device register with signed records when equipment is issued, recovered, or destroyed. Included with Professional and Enterprise.
Accuracy and legal note. Plain-language summary of the HIPAA Privacy and Security Rules (45 CFR 164.308, 164.310, 164.316, 164.502), accurate as of November 2026. Regulations change. This is general educational information, not legal advice. Verify current requirements at hhs.gov/hipaa or with your compliance counsel.
Straight answers
Live Compliance is the HIPAA compliance program for dental practices: documentation, training, vendor agreements, and the evidence, with a named compliance team on every plan.
It works beside the IT company the practice already uses. The program runs on a schedule the platform keeps, so a three-person front office never has to become a compliance department.
Yes. HIPAA applies to every covered entity regardless of size, and dental practices that transmit any health information electronically, claims included, must comply with all applicable rules. Public OCR settlements include dental practices; small organizations are not too small to be enforced against.
The file behind the chart: the organization-wide risk analysis, written policies with review dates and staff acknowledgments, dated training records for everyone including new hires, signed Business Associate Agreements for the lab, the billing service, and every other vendor that touches PHI, and the incident log. Live Compliance keeps all of it in one record.
The platform and a named compliance team run it with you. Training lands by role, policies arrive with acknowledgment tracking, exclusion checks and reminders run on a schedule, and a specialist guides onboarding and keeps the program alive. It is built so compliance does not need a compliance department.
Every price is published: $399, $895, or $1,450 a month plus $8.33 per employee per month, billed annually, with no add-on fees. Example: a 10-employee practice runs $482.30 a month on Essentials. That includes the program and a named compliance team.
Get your free 10-minute audit-readiness score. Then, if you want it, the guarantee: audit-ready in 60 days, or we keep working at no additional cost until you are.
~10 minutes · No credit card · No call required