California-Specific Privacy Laws Outlines laws, provides links & other useful resources. California has many laws aimed at protecting the personal and confidential information of its residents. View resource California-Specific Privacy Laws
Consent Form for Use or Disclosure of Patient Health Information Use this sample form to obtain patient consent for use or disclosure of patient information as required by HIPAA and state law. View resource Consent Form for Use or Disclosure of Patient Health Information
Credit Card Chargeback and Release of Patient Information A credit card company may request information when a patient disputes a charge to a dental practice. Use these resources to respond to the company. View resource Credit Card Chargeback and Release of Patient Information
Cybersecurity Information Resources Learn what cybersecurity practices your dental practice should have by reviewing resources from these government agency websites. View resource Cybersecurity Information Resources
Data Breach Notification Requirements California law requires individuals be notified when specified personal information, including health and medical insurance information, that is stored electronically is breached. View resource Data Breach Notification Requirements
Ensure State Provisions Are Included In Your Privacy Policies and Procedures Describes state requirements to include in a dental practice’s policies and procedures for protecting patient information. View resource Ensure State Provisions Are Included In Your Privacy Policies and Procedures
HIPAA and California Health Information Privacy and Protection Laws Q&A Answers to questions asked by dental offices on how to comply with HIPAA rules on privacy, security, and national provider identification (NPI). View resource HIPAA and California Health Information Privacy and Protection Laws Q&A
HIPAA and the California Medical Information Act This checklist provides an at-a-glance view of elements required to comply with state and federal privacy laws. View resource HIPAA and the California Medical Information Act
HIPAA Breach Assessment and Notification This is the fourth of four presentations created to train a dental practice’s privacy officer and security officer on the requirements of federal and state privacy laws and on their respective responsibilities. View resource HIPAA Breach Assessment and Notification
HIPAA Business Associate Agreement Describes HIPAA business associates and the requirement for covered entities such as dental practices to have agreements with them. A sample business associate agreement is included. View resource HIPAA Business Associate Agreement
HIPAA Privacy and Security Officers: Overview of Responsibilities This is the first of four presentations created to train a dental practice’s privacy officer and security officer on the requirements of federal and state privacy laws and on their respective responsibilities. View resource HIPAA Privacy and Security Officers: Overview of Responsibilities
HIPAA Safeguards A discussion on HIPAA safeguards – what administrative, technical and physical safeguards are required to be implemented and how to determine if a safeguard is reasonable and appropriate. View resource HIPAA Safeguards
HIPAA Security Rule - A Summary The rule sets standards to protect patient information in electronic form. A covered entity must implement or address more than 30 administrative, physical and technical standards summarized here. View resource HIPAA Security Rule - A Summary
HIPAA Training Resources Here are four presentations for dental practice HIPAA privacy and security officers to learn about their responsibilities, and one training presentation that can be used in combination with a dental practice’s written policies and procedures to train office workforce (includes students and others). View resource HIPAA Training Resources
How to do a HIPAA Risk Analysis This is the third of four presentations created to train a dental practice’s privacy officer and security officer on the requirements of federal and state privacy laws and on their respective responsibilities. View resource How to do a HIPAA Risk Analysis
Information Privacy and Security - HIPAA, State Laws This PowerPoint presentation can be used in conjunction with the dental practice’s written policies and procedures to train staff on compliance with HIPAA and state laws. View resource Information Privacy and Security - HIPAA, State Laws
Patient Records - Requirements and Best Practices Format and content, patient access to records and requests to amend, disclosure of information, data breach notification, retention and disposal, transferring records in a sale. View resource Patient Records - Requirements and Best Practices
Patient Request to Access Records (Records Release) Form and Q&A Summary of records release rules with customizable sample form. Patients have the right to access their record and can request paper, film or electronic copies. View resource Patient Request to Access Records (Records Release) Form and Q&A
Patient Request to Restrict Disclosure of Patient Health Information to a Dental Benefit or Health Care Plan Includes information on this patient right to restrict disclosure of patient health information to a dental benefit or health care plan and a sample form to use for a patient who requests such a restriction. View resource Patient Request to Restrict Disclosure of Patient Health Information to a Dental Benefit or Health Care Plan
Patient Rights Under HIPAA Describes patient rights and dental practice responsibilities under HIPAA. Patients must be informed of these rights through the distribution of the covered entity’s Notice of Privacy Practices. View resource Patient Rights Under HIPAA
Patient Rights, Privacy Practices and Safeguards This is the second of four presentations created to train a dental practice’s privacy officer and security officer on the requirements of federal and state privacy laws and on their respective responsibilities. View resource Patient Rights, Privacy Practices and Safeguards
Sample Breach Notification Notice Use sample notice to inform patients of a breach of their personal information. Sample notice includes elements required by law. View resource Sample Breach Notification Notice
Sample Nondisclosure Agreement Practices should personalize the attached sample language to their practices and confirm that the agreement is consistent with existing policies and procedures. View resource Sample Nondisclosure Agreement
Sample Notice of Privacy Practices Customize this form to create a practice’s notice. It must have specified elements. The final notice must be provided to patients and an acknowledgment of receipt should be collected. Post it in the practice and on the practice website. View resource Sample Notice of Privacy Practices
Sample Notice of Privacy Practices Layered A customizable form to notify patients of privacy practices. Layered version is formatted to allow posting of the first page on a wall with the full notice available for review close to the posting. View resource Sample Notice of Privacy Practices Layered