Dental and medical offices
Get ahead of the proposed HIPAA Security Rule update.
In January 2025 HHS proposed the first major update to the HIPAA Security Rule since 2013. It is not final yet, but most of what it asks for is worth doing now, and much of it is already expected by cyber insurers.
What the proposal would change
Today many safeguards are labeled addressable, which lets a practice document why it chose something else. The proposal would make most of them required.
It would require two-step login and encryption of patient data, plus a written inventory of your technology and a map of how patient data moves through your network. It does not exempt small practices.
It is still a proposal. No final rule or compliance date has been set, and the details may change.
What is already required today
The current Security Rule already requires a risk analysis, safeguards to protect patient data, and agreements with the vendors who handle it. Many small practices have gaps there before the new rule even arrives.
How we help
Start with what you have, fix what matters most, and keep the paperwork that proves it.
Office checkup
One hour on site, $350, credited once toward a fixed-price project or care plan onboarding signed within 30 days. You get a written list of what we found, most important first.
Close the big gaps
Two-step login on every account, encryption on laptops and workstations, and backups that ransomware cannot reach.
Document it
A technology inventory and a simple network map, the two pieces the proposal would add, kept current as part of monthly care.
Questions owners ask
Do we have to do this now?
The proposal is not law yet. The current rule is, and most of these steps also answer what cyber insurers ask, so they pay off either way.
Is this legal advice?
No. We handle the technical safeguards and the records that show them. Your compliance advisor or attorney owns the legal reading.
What does monthly care cost?
$125 per person a month with a $1,000 monthly minimum, month to month, or $165 with the security tier.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.