Updated: October 29, 2026
No, as of September 2026, the proposed HIPAA Security Rule overhaul (mandatory encryption, MFA, asset inventories, semiannual vulnerability scans, annual penetration testing, 72-hour restoration, and more) is still not final law.

Every time HIPAA has updated something over the past decade, most dental offices have handled it the same way. Maybe a quick policy printout gets added to the binder in the back office. A staff training checkbox gets ticked. The compliance folder gets dusted off and put back on the shelf.

A single notification flashes across a screen you’ve stared at a thousand times:

“Your files have been encrypted.”

And suddenly your practice isn’t just “having a tech issue.” It’s frozen.

The front desk can’t pull tomorrow’s schedule.

A few months ago, a dental office in California called us in a panic. A pipe had burst over the weekend, flooding their office and destroying their local hardware. By Monday morning, they couldn’t access patient charts, imaging, or schedules.

Thanks to an offsite encrypted backup, we had them operational again within hours.

Let’s play a quick game of “spot the threat.”

You’re swamped with patients, your front office is managing a flurry of calls, and suddenly...ding...an email arrives: “URGENT: Outstanding Invoice Attached.” It’s from someone who looks vaguely familiar…maybe a vendor? Maybe your CPA?

Spoiler alert: It’s a phish.

You’re juggling patients, insurance calls, schedules, and the occasional “Where’s my coffee?” mystery. But amid the daily whirlwind, there’s something quietly lurking in the background that could really take a bite out of your day, and your practice: cyber threats.

A Must-Have Guide for Practice Owners and Managers

Bringing on a new dental team member? There’s a lot to cover...practice policies, patient care, clinical tools, and yes, compliance. But one topic you can’t afford to gloss over during onboarding is cybersecurity.

Understanding the gravity of HIPAA compliance is crucial for dental practices to avoid costly fines and protect patient privacy. The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for safeguarding sensitive patient information, but despite clear guidelines, many dental offices fall prey to common pitfalls.

Navigating the landscape of data security and privacy in healthcare is incredibly complex. For dental practices, ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA) is not just a legal requirement but a necessity to maintain patient trust and practice integrity.

Health Insurance Portability and Accountability Act (HIPAA) regulations about IT have become much clearer over the course of the past few years, but there are still a few areas in which your office might not be compliant. This isn’t necessarily because of negligence on your part, but rather a lack of understanding of the requirements.