Your annual ComplyBetter membership includes:

HIPAA Policies and Procedures Documentation

Dental offices must maintain written policies and procedures to safeguard protected health information (PHI). ComplyBetter will guide you through a series of questions about your practice, then generate a formatted HIPAA Policies and Procedures document customized for your dental practice.

Easily update and re-generate this document at any time with just a few clicks!

HIPAA Security Risk Assessment Documentation

HIPAA rules require the periodic completion of a Security Risk Assessment (SRA). ComplyBetter will guide you through a series of questions to identify and address potential security risks to PHI in your practice, then generate a comprehensive HIPAA SRA report. This report may also serve as a documented action plan and includes identified threats or vulnerabilities as well as reference to official HIPAA rules and guidance.

Easily update and re-generate this document at any time with just a few clicks!

HIPAA Assets Documentation

Any electronic device involved in creating, storing, processing, or transmitting protected health information (ePHI) is considered an asset. ComplyBetter will guide you through a series of questions about your dental practice’s devices, then generate a formatted HIPAA Asset document. Efficiently record device details and track their status, including instances of loss or disposal.

Easily update and re-generate this document at any time with just a few clicks!

HIPAA Vendors Documentation

To protect patient information under HIPAA, you need a clear picture of who has access to PHI. This requires knowing your vendors — the companies you work with that might also handle patient information. ComplyBetter will guide you through a series of questions about your dental practice’s vendors, then generate a formatted HIPAA Vendors document to help you easily manage and track vendors.

Easily update and re-generate this document at any time with just a few clicks!

HIPAA Training

HIPAA training is an ongoing requirement for everyone working in healthcare who handles patient information. ComplyBetter offers two courses to fulfill HIPAA training requirements. The ComplyBetter HIPAA Policies and Procedures Course is created based on the Policies and Procedures document you create for your office. The ComplyBetter HIPAA Compliance Training Course (1 CE Hour) covers the Privacy Rule, Security Rule, and Breach Notification Rule, equipping healthcare professionals with the essential knowledge to safeguard PHI.

Required for all employees who manage protected health information upon hire, whenever office policies change, and regularly as a refresher. May include but is not limited to front office staff, billing/accounting employees, office management, and all clinical staff members such as dentists, hygienists, assistants, and sterilization technicians.

ComplyBetter automatically assigns and tracks required training based on staff role!

HIPAA Resources

ComplyBetter offers members several useful HIPAA forms and resources, including:

• Notice of Privacy Practices Form: The Notice of Privacy Practices (NPP) is a document that explains how your dental practice can use and disclose patients’ protected health information (PHI). It also outlines patients’ rights concerning their PHI, such as the right to access and request corrections to their records. You must provide a copy of the NPP to patients at their first visit or when they request it. It’s also important to have the NPP readily available in our office and on your website.
• Authorization to Disclose PHI Form: A signed authorization to disclose PHI is required for most non-routine disclosures such as sharing for marketing purposes or sharing information with family members or friends.
• Model Business Associate Agreement: Business associate agreements are required to ensure that business associates properly protect PHI and comply with HIPAA regulations. Business associates are any person or organization that performs services for a covered entity that involves handling PHI. This could include IT providers, billing companies, or repair technicians.
• Sample Breach Notification Resources: If you determine that a breach has happened, you must document the incident and your response which may include notifying individuals, or a security risk assessment. In the event of a breach, ComplyBetter offers resources to assist with your breach assessment and communications, including a Sample Breach Risk Assessment Form, Sample Breach Notification Letter Template, and Breach Notification Log.