ABYDE FOR COLORADO MEDICAL SOCIETY MEMBERS

It's time for stress-free compliance.

  • EASIEST SOFTWARE YOU’LL EVER USE

    And if we’re being honest, easy is an understatement. All companies say it, but we are so confident in the simplicity of our software that we will prove it.

  • ‘HANDS OFF’ APPROACH

    We automate it all – from notifications about training to policy generation. Can you imagine not having to set your own reminders?! Go ahead, focus on your patients – we will ping you with the important stuff.

  • CUSTOMER SUCCESS TEAM LIKE NO OTHER

    We will meet you where you are – whether that’s by phone, chat, or email. It’s tough stuff in the tech space, but our customers love us as much as we love them.

  • STATE BY STATE, LAW BY LAW

    No matter what state your practice is in, our solution is for you — from sea to shining sea. We know our stuff and dedicate ourselves to staying on top of the latest state and federal changes so you don’t have to.

  • MORE THAN JUST SOFTWARE

    With us, you get more than policies and software. We offer Master Classes, newsletters, and more to keep you up to date. At the end of the day, we are proud to lead with education.

LATEST COMPLIANCE NEWS

Small Healthcare Practice HIPAA Fine

Small Size, Same Rules: HIPAA Fine Serves as Reminder for All Healthcare Providers

May 19, 2025   HIPAA compliance is not just a recommendation; it’s a requirement, no matter how small your organization is. The latest HIPAA fine is a testament to this, with Vision Upright MRI the latest practice to be penalized.  The small California MRI center experienced a significant breach, which exposed several violations in the fallout. Acting Office for Civil Rights (OCR) Director Anthony Archeval emphasized the widespread cybersecurity risks, noting that these threats impact healthcare providers of all sizes:  “Cybersecurity threats affect large and small covered healthcare providers.”  Vision Upright MRI was fined $5,000 and will now face a two-year Corrective Action Plan (CAP), being monitored by the OCR.  This fine showcases that no practice, big or small, must be followed to keep patient data safe.     What Happened? At the end of 2020, Vision Upright MRI experienced a breach in its systems due to an insecure server. This cybercrime exposed over 21,000 patients’ medical images, leading to the OCR’s investigation.  The investigation discovered that the MRI center had never completed a Security Risk Analysis (SRA). The SRA thoroughly examines a practice, reviewing all current safeguards to secure Protected Health Information (PHI). These safeguards can include physical barriers the practice has implemented, like locked doors and alarms, and the administrative techniques the practice follows, like routinely checking access to sensitive patient data.  The SRA is critical for a compliant practice and should be completed annually and after any breaches.  While the SRA is a fundamental requirement for a practice, it is unfortunately often overlooked. The OCR has implemented a Risk Analysis Initiative to ensure practices are completing this requirement, and has reinstated the audit program, reviewing if regulated entities are maintaining this document.  In addition to missing the SRA, Vision Upright MRI did not properly notify affected parties within 60 days, violating the Breach Notification Rule.  The Breach Notification Rule requires practices to notify patients within 60 days of discovering a breach, regardless of how many were impacted. This short timeline allows patients to take the necessary precautions for the safety of their data. The practice should also provide credit monitoring. Since this event impacted well over 500 patients, the threshold to consider the situation a large breach, Vision Upright MRI also needed to notify the media and the OCR within a 60-day timeline. Communicating this is imperative, allowing the OCR to swiftly begin its investigation and potentially affected patients to receive information through media channels. These serious missteps led to the monetary settlement and years of government monitoring.    Streamlining HIPAA Compliance Even a small practice doesn’t require overwhelming resources to be HIPAA compliant. The right compliance program can simplify HIPAA compliance. With smart solutions, the SRA can be completed easily, reviewing questions and potential vulnerabilities the practice faces. Additionally, breaches can be reported in intelligent software, with compliance experts assisting practices through alerting patients and the OCR.  Meet with an expert today to learn how to automate your compliance program.   

Read More »
OSHA in Dentistry

A Dentist’s Guide to OSHA Compliance

May 15, 2025   On a global scale, more than 2 million healthcare workers experience needle-stick injuries on an annual basis. Dentists are at the most at risk, with 59% of dentists studied experiencing needle stick injuries.  Dentists are particularly susceptible to OSHA violations due to the daily use of sharps and the increased possible exposure to bloodborne pathogens and saliva when working in patients’ mouths. Protecting your dental team through safety and compliance isn’t just a good idea—it’s essential. Here’s a clear look at the standard preventive measures for OSHA in dentistry.    First Line of Defense: Training There are numerous safety precautions to keep staff safe, but the first layer of protection is proper training and procedures. Before working with patients, staff must be thoroughly trained on the possible risks and mitigation techniques. Staff must also be provided a walk-through of the practice, assuring they know where all emergency equipment and exits are located.  Training programs must review all possible risks, like sharps, bloodborne pathogens, radiation, etc. Videos and training materials must be easily accessible for staff to review. All relevant policies outlining compliant procedures for various situations must also be accessible to all staff members. Training is the foundation of a compliant practice, and with proper OSHA in dentistry training, your staff can feel confident handling any situation.    Always Wear Personal Protective Equipment  While it might not always be the most fashionable decision, wearing Personal Protective Equipment (PPE) is imperative to keep staff safe.  It is key that staff always wear PPE when working with patients. PPE can be defined as gloves, masks, gowns, face shields, and more. By wearing PPE, your staff have a barrier when working with patients, minimizing the risks of exposure.  PPE must be provided to staff free of charge, cultivating a safe environment. Staff must also be appropriately trained to use PPE when working with patients, ensuring all know the necessary steps to protect themselves. PPE minimizes exposure to risks by limiting contact with patients, and is a staple for a safe healthcare practice.    Stay Sharp: Handling Needles Carefully  Dentists are well aware of the risks associated with working with needles, scalers, and other sharps.  Use sharps carefully and utilize devices with safety features when working with sharps. Many sharps have preventative measures, like retractable needles after use, self-sheathing blades, and reinforced containers for sharps.  When using sharps, ensure your staff wear gloves and other applicable PPE. Sharps handling, from initial use on a patient to disposal, requires strict adherence to safety protocols to minimize the risk of accidental sticks and the transmission of bloodborne pathogens.   Bloodborne Pathogens 101  Working in healthcare, especially dentistry, puts staff at risk for exposure to bloodborne pathogens. Bloodborne pathogens are microorganisms that cause disease, like hepatitis B, C, and HIV. The World Health Organization states that 3 million healthcare workers are exposed to bloodborne diseases through skin puncture injuries each year. With PPE and appropriate sharps equipment, your staff is already significantly mitigating risk.  However, if a sharp needle or blade pricks a staff member, it is essential to receive First Aid to protect the wound immediately. The staff member should have their blood tested as soon as possible. Depending on the situation, time is of the essence after a sharps incident. Some diseases, like HIV, can be prevented within 3 days of exposure.  While it can be overwhelming, staff must stay calm and follow the proper procedures after an incident, with most sharps incidents not resulting in an infection.    Simplifying OSHA Compliance As you can see, handling OSHA compliance in dentistry can be daunting. With the correct compliance program to address numerous risks, your dental staff can feel secure and concentrate on delivering excellent patient care. Intelligent OSHA software offers automatically generated policies, required forms, and training resources in a centralized compliance hub, providing a documented compliance program for your team. Meet with a compliance expert today to learn more about how you can streamline your OSHA compliance program. 

Read More »

READY TO BE STRESS-FREE?