The 2027 Dental HIPAA Audit-Ready Evidence Pack

The paperwork OCR asks a 1–3 provider dental office for first, as editable Word, Excel and PowerPoint files, written from the text of the HIPAA regulations and cited throughout. One payment of $199. No subscription, no contract, no sales call.

Available soon

Why now: in 2026 OCR settled with a solo Pennsylvania dental practice. According to published reports the practice paid $140,000, and OCR found it had no right-of-access policy and no privacy or breach-notification policies and procedures. It was missing paperwork, not a hack. The dental cases.

What's inside

Section	Contents
00 Start Here	Start-here guide, a 30-day implementation calendar, and an audit-ready evidence binder index
01 Privacy & Breach Policies	19 policies: privacy officer, uses and disclosures, minimum necessary, authorizations, the Notice, right of access, amendment, accounting, restrictions, minors, family and friends, requests from police and courts, marketing and online reviews, business associates, complaints, sanctions, breach notification, documentation
02 Security Policies	11 policies sized for a small office, each specification marked Required or Addressable
03 Right-of-Access Kit	Front-desk procedure, request log with deadline calculator, fee worksheet, and 4 letters (acknowledgment, extension, fulfillment, denial)
04 Training Kit	25-minute deck with speaker notes, 10-question quiz and key, new-hire checklist, confidentiality acknowledgment, sign-off log
05 Risk Analysis	Excel workbook (inventory, risk register, remediation and evidence tracker, all 22 addressable decisions, sign-off) plus a step-by-step guide
06 Incidents & Breaches	First-hour checklist, breach risk-assessment worksheet, notification letters, HHS reporting calendar, incident log
07 Business Associates	"Is this vendor a business associate?" guide, BAA template, BAA review checklist, vendor tracker
08 Patient Forms	Notice of Privacy Practices (updated for February 2026), acknowledgment, authorization, and request forms for access, restriction, amendment, confidential communications and accounting; complaint form
09–10	Proposed Security Rule changes to watch; documentation and retention policy

Every spreadsheet includes a filled-in example for a fictional two-dentist practice, so you can see what "done" looks like. A combined, printable PDF of everything is included.

How it's written

From the regulation text (45 CFR Parts 160 and 164, current as of November 2026), not copied from other templates.
"Must" means the rule requires it, with the citation next to it. Anything beyond the rule is marked "Recommended", so you know what you can adapt.
Checked independently against the regulations: 328 requirements mapped to the documents that implement them.
Current for 2027: reflects the February 2026 Notice of Privacy Practices changes and the 2025 court decision vacating the reproductive-health rule; follows today's Security Rule and explains the pending proposal.

What this is not

It is not a certification, a seal, coaching, or legal advice, and nobody reviews your documents. It gives you well-built, cited templates and a plan to finish them in about a month. Your state may have stricter rules on records requests, fees, minors and retention; the documents point out where.

After you buy

You land on a download page immediately; bookmark it for re-downloads. Your Stripe receipt is your proof of purchase. 30-day refund, no questions asked.

Available soon

Not ready? Start with the free right-of-access kit.