Investigations into HIPAA violations aren't random. Most begin with a patient complaint or a reported data breach. What happens next is still within your control when your documentation and processes are in place.

Recent enforcement actions show that when penalties happen, they are frequently tied to core breakdowns that are preventable: security risk not formally assessed or managed, documentation that doesn't exist or can't be produced, and operational failures that create Right of Access problems during routine records requests.

This session covers the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule through a practical, enforcement-informed lens. You'll learn what OCR expects to see when they ask for proof, where dental practices most often get exposed in day-to-day workflows, and how to build a compliance program that holds up under scrutiny.

New for 2026: Updated federal substance use disorder (SUD) record protections under 42 CFR Part 2 took effect February 16, 2026. This session explains what changed, how Part 2 now aligns more closely with HIPAA, and what dental practices must update—including workforce training and Notice of Privacy Practices revisions.

At the session:

• HIPAA Compliance Training (1 CE credit) — Digital CE certificates will be delivered by email after the session.

• Updated for 2026 Notice of Privacy Practices handout

Exclusive ComplyBetter Access: Attendees will receive exclusive access to online, self-paced training courses on WSDA’s compliance training platform, ComplyBetter- an opportunity to earn up to 3 more CE credits beyond the session:

• Infection Control Training (1 CE hour)

• Bloodborne Pathogens Training (2 CE hours)

• Bonus Online Content — 2026 HIPAA Compliance Training— Access the content covered in this session

CE certificates are available for download immediately upon passing each course.