Compliance and risk
HIPAA
HIPAA is the federal law that protects the privacy and security of patient health information held by health plans and by providers who bill electronically.
HHS says the HIPAA Privacy Rule establishes national standards to protect individuals' medical records and other individually identifiable health information. It applies to health plans, health care clearinghouses, and health care providers that conduct certain transactions electronically. A dental office that conducts those transactions electronically is covered.
HIPAA has several rules. The HIPAA Security Rule covers electronic information. The Breach Notification Rule covers what to do after a data breach. Vendors that handle patient data usually need a business associate agreement.
HIPAA is a legal topic. Ask an attorney or a qualified compliance adviser how it applies to your office.