by Brenda Thornburg
What is two factor authentication? Two-factor authentication (2FA) is an identity and access management security method that requires two forms of identification to access resources and data. 2FA gives businesses the ability to monitor and help safeguard their most vulnerable information and networks.
by Caitlin Denison, BS, RDH
Can I share my patient’s protected health information with their spouse? The answer is, in certain circumstances, yes.
By Olivia Wann
During an onsite mock OSHA – Infection Control audit, we evaluate how the treatment room is cleaned and disinfected. Quite often we note that the keyboards and mice are not addressed. Keyboards can become contaminated with pathogenic microorganisms and can result in cross contamination.
by Gracie Hogue
In a busy practice, it can be easy for the team to lose track of each other even if they are working together. We can all develop tunnel vision with our own to-do lists and daily duties, then losing the scope of teamwork. How do we step back and get a better perspective of the whole?
by Terri Walker
Congratulations on your selection as Safety Manager! This esteemed role is more than just a title; it represents the trust placed in you to significantly impact the safety of everyone in the office, including your team members, doctors, and patients.
by Brenda Thornburg
When evaluating disposal items such as bloody gauze, cotton rolls, patient bibs and other disposable items, determine whether the item is saturated enough to release blood or other potentially infectious material (OPIM) if compressed. If so, dispose of this waste as regulated biohazardous waste in the red bag or Isolyser.
by Olivia Wann
Can you classify a temporary or part-time hygienist as a 1099? It seems like it would be a lot less paperwork and reporting hassle to simply classify the RDH as a 1099 rather than a W2. However, according to the IRS, we must examine the business relationship that exists between the employer and the person performing the service, the hygienist. We evaluate the degree of control and independence to include behavioral, financial and the type of relationship as measured with the IRS standards to include behavioral control.
by Olivia Wann
Nothing can frustrate an employee more than asking them to attend a course on a usual day for them to work and not compensating them.
Is it required by law to pay employees for their time to attend a CE event? The short answer is it depends.
by Caitlin Denison
Georgia is leading the way in patient safety with a new law requiring all dental practices to ensure that water used in nonsurgical procedures meets U.S. EPA drinking water standards. This regulation is a significant step forward—and many practices need to act fast to stay compliant.
by Olivia Wann
Most practices maintain a website. According to the Office of Civil Rights, if you maintain a website, you are required to make available your Notice of Privacy Practices (NPP). According to 45 CFR 164.520(c)(3), “(i) A covered entity that maintains a web site that provides information about the covered entity’s customer services or benefits must prominently post its notice on the web site and make the notice available electronically through the web site.”
If you have a run in with a HIPAA violation, don’t be surprised if the OCR peruses your website. They will want evidence that the Notice of Privacy Practices (NPP) plus the contact information.
The NPP must designate who the HIPAA Compliance Officer is. This person would receive complaints and provide additional information. Is your NPP current? Is the HIPAA Compliance Officer name current and the contact information current, such as the name and practice telephone number?
These are two very basic requirements and trust me, it comes up.
If you are collecting protected health information (PHI) through your website, this is another potentially serious issue. You must consult your webmaster about encrypting data that is in motion and at rest to prevent a breach.