HIPAA and OSHA Compliance: A Practical Checklist for Dental Practices

Clinical excellence doesn't protect a dental practice from a HIPAA breach fine or an OSHA citation. Compliance is a separate, ongoing responsibility — and one that's easy to let slip amid the daily demands of running a practice.

Why compliance gets overlooked. Most practice owners are dentists first, not compliance officers. Handbooks go unreviewed for years, staff training lapses, and policies that were adequate at five employees may no longer hold up at fifteen.

HIPAA basics practices often miss. A written Notice of Privacy Practices, a current risk assessment, documented staff training (not just a one-time onboarding session), and a real breach-response plan are all required — not optional add-ons. Texting patient information on personal devices without a compliant system in place is one of the most common violations seen in smaller practices.

OSHA basics practices often miss. Bloodborne pathogen exposure control plans, safety data sheets for all chemicals used in-office, proper sharps disposal documentation, and annual staff safety training are frequently outdated or incomplete — often because they were set up once at practice opening and never revisited.

Employee handbooks — the quiet compliance gap. An outdated handbook can create liability rather than prevent it, particularly around leave policies, at-will employment language, and anti-harassment procedures that haven't kept pace with current law.

A simple starting checklist:

- When was your HIPAA risk assessment last updated?

- Do all staff have documented compliance training, not just a signature on a form?

- Is your employee handbook current with applicable state and federal law?

- Do you have a designated privacy officer and OSHA safety coordinator, even informally?

- Is your breach-response plan written down, or does it exist only in someone's head?

If you're unsure of the answer to more than one of these, it's worth a compliance consultation before an audit or incident forces the issue.