A business associate agreement is not required by the Privacy Rule for dental laboratory services that are customarily provided by our lab pursuant to your prescriptions. The U.S. Department of Health and Human Services drafted the Privacy Rule so that it would not interfere with the sharing of information among health care providers for the treatment of patients.1 The Privacy Rule classifies dentists and the dental laboratories that fulfill dentists’ work orders for prosthetics as health care providers.2 Disclosures between you and the dental laboratory for the treatment activities that the lab provides are explicitly excepted from the business associate requirements of the Privacy Rule.3
You will be interested to know that, according to the ADA News, “the Office of Civil Rights, the Health and Human Services agency charged with HIPAA Privacy Rule enforcement provisions, said OCR agrees… that dental laboratories are health care providers, so no Business Associate Agreement is required to share protected health information for treatment purposes.” The lab does not receive patients’ telephone numbers, addresses, birth dates, social security numbers, medical records or data directly identifying individuals’ relatives, employers or household members (“Protected Health Information”). Names that clients provide are only used by the lab to help clients identify their cases and you can use an in-office coding system to identify cases if you wish.
The ADA HIPAA Privacy and Security Kit, for example, instructs readers to exclude labs and other health care providers involved in treating patients from their list of business associates. Additionally, you can call the ADA’s HIPAA Hotline at 312-440-2899, ext. 3, for a recorded message explaining that dental laboratories are not business associates and what transactions are covered. Although a business associate agreement is not required between you and the lab, we remain committed to safeguarding the confidentiality of our clients, and you can rest assured that no privileged doctor-patient confidential information will ever be disclosed without your authorization.
We appreciate the opportunity to participate in the treatment of your patients. Thank you for using our lab’s dental laboratory services.
1 See 67 Federal Register 53252
2 See 65 Federal Register 82568
3 See Privacy Rule 164.502 (e)(1)
During your visit here, if information is downloaded or if the website is simply browsed, we collect certain non-personal information by automatic operation through our site’s web servers such as the internet protocol (IP) address of the computer you are using and the date and time you access our website. This information does not identify you. We use this information to help us improve the performance of the website and the value of informational materials that we provide. Unless required for law enforcement or otherwise required by law, we do not disclose, give, sell or transfer any information about visitors to our website to others. We may employ software programs for security purposes to identify unauthorized attempts to upload or change information or cause damage to our website.