HIPAA Compliance

Commitment to the Privacy and Security of Your Health Information

 

Introduction

Nova Dental Studio is committed to protecting your Protected Health Information (PHI). We fully comply with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and all applicable regulations to ensure the privacy, security, and integrity of your medical and dental information.

 

Our HIPAA Commitment

We implement comprehensive administrative, physical, and technical safeguards to protect your Protected Health Information from unauthorized access, use, or disclosure.

  • HIPAA Privacy Rule: Protects your health information
  • HIPAA Security Rule: Establishes standards for electronic PHI
  • Breach Notification Rule: Requires notification of PHI breaches
  • Omnibus Rule: Extends HIPAA protections to business associates

Security Safeguards

  • Regular staff training on HIPAA privacy and security
  • Written policies and procedures for PHI handling
  • Designated Privacy Officer and Security Officer
  • Risk analysis and regular assessments
  • Security incident management process
  • Contingency plans for emergency response

Physical Safeguards

  • Secure facility access controls
  • Video surveillance systems
  • Secure workstations
  • Equipment and media access controls
  • Proper disposal of PHI
  • Locked records storage areas

Technical Safeguards

  • Encryption of electronic PHI
  • Unique user access controls
  • Automated audit trails
  • Firewall and antivirus systems
  • Secure data transmissions
  • Regular data backups and recovery

Your Rights Under HIPAA

Right to Access

You can request and receive copies of your health records

Right to Amend

You can request corrections to your health information

Right to an Accounting

You can request a record of certain disclosures of your PHI

Right to Restrictions

You can request limitations on the use or disclosure of your PHI

Right to Confidential Communication

You can request to receive communications in a confidential manner

Right to File a Complaint

You can file a complaint if you believe your privacy rights have been violated

Permitted Uses and Disclosures

We only use and disclose your PHI as permitted by HIPAA:

  • Treatment: To provide dental and medical care
  • Payment: For billing and insurance processing
  • Healthcare Operations: For business operations and quality improvement
  • With Your Authorization: For other purposes only with your written consent
  • Required by Law: When required by state or federal regulations

Breach Notification Protocol

In the event of a breach of your unsecured health information:

  • We will notify you without unreasonable delay and no later than 60 days after discovery
  • The notification will include a description of the breach
  • We will provide information about what information was compromised
  • We will describe the steps we took to mitigate harm
  • We will inform you about steps you can take to protect yourself
  • We will notify the Secretary of the Department of Health and Human Services

Business Associate Agreements

All our business associates who handle PHI are contractually required to:

  • Comply with HIPAA regulations
  • Implement appropriate safeguards
  • Report any security breaches
  • Ensure any subcontractors also comply with HIPAA
  • Return or destroy PHI upon service termination

Staff Training

All our staff receive:

  • Comprehensive initial HIPAA training
  • Annual HIPAA compliance updates
  • Role-specific training on PHI handling
  • Ongoing education about security threats
  • Certification of understanding and compliance

Contact Our Privacy Officer

If you have questions about our HIPAA practices or wish to exercise your rights:

HIPAA Privacy Officer

Nova Dental Studio

710 East 49th Street, Suite 101, Hialeah, FL 33013

(786) 882-7227

privacy@novadentalmiami.com

Monday–Friday: 8:00 AM – 6:00 PM

Notice of Privacy Practices

You can obtain a copy of our complete Notice of Privacy Practices detailing how we may use and disclose your health information at our office or by requesting it via email.