Templates / HIPAA dental form

Compliance and security

HIPAA dental form

Free PDF • 2 pages, print-ready • Clinician-reviewed

Maja Popovska Last updated November 3, 2026 Reviewed by Dr. Vanja Kitanova

---

A HIPAA dental form is the privacy document that tells patients how your practice uses, shares and safeguards their protected health information (PHI). Dental practices that send claims or other health information electronically are HIPAA covered entities. You must give each new patient a Notice of Privacy Practices at the first visit and make a good-faith effort to collect a signed acknowledgment. This free template pairs that acknowledgment with patient rights, a personal representative section and signature lines. Practices that work paperless can send it through Pabau, our practice management platform, before the first appointment.

Template details

Template type

Form

Format

Printable PDF, 2 pages

Sections

8 sections

Best for

Compliance and security

Key takeaways

A HIPAA dental form explains how the practice uses, shares and protects patient health information.

Dental practices must give the Notice of Privacy Practices at first service and try to collect a signed acknowledgment.

Consent and authorization forms serve different purposes, and only disclosures outside treatment, payment and operations need an authorization.

State laws in California and New York add requirements, so have counsel review the final form.

Pabau, the practice management platform we build, sends the form before the first visit and files the signed copy in the patient record.

What a HIPAA dental form is

A HIPAA dental form is a written privacy document that dental practices give patients to explain their rights over protected health information (PHI).

In a dental setting, PHI goes well beyond a patient’s name and address. X-rays, treatment notes, and billing records all qualify, so your privacy documents should account for every record type your team creates.

Dental practices that send claims or other health information electronically count as HIPAA covered entities under HHS guidance on covered entities. That means the Privacy Rule applies to the records you create and hold.

How to use the template

Treat the template as a starting point and adapt it before any patient sees it. The steps below follow a typical new-patient workflow.

1. Add your practice name, contact details, and the name of your designated privacy officer.
2. Compare the wording with your current Notice of Privacy Practices so the two documents match.
3. Have counsel review the final version, particularly if you treat patients in California or New York.
4. Add the form to your new-patient packet and hand it over at the first visit, on paper or digitally.
5. Record the signed acknowledgment in the chart, or document the refusal and your good-faith effort.

Store the signed copy in the patient record so it can be retrieved during an audit. If your practice has no notice yet, our notice of privacy practices template gives you a first draft to adapt.

Which dental practices need one?

Any dentist who transmits health information electronically, including for insurance claims, falls under HIPAA. That covers general dentists and specialists, and the rules reach the hygienists and practice managers who run patient intake.

Solo practitioners and multi-location groups both need one. Groups should confirm that every location uses the same current version, so patients receive consistent information.

If your team also runs medical services, compare your processes with our guide to HIPAA for medical offices.

Benefits of a consistent privacy form

A consistent form delivers three practical benefits.

• Clear patient communication: Patients know how their information is used before treatment starts.
• Audit readiness: A signed, dated copy shows your good-faith effort.
• Consistent front-desk process: Every patient receives the same document in the same way.

Notice, consent and authorization compared

Practices often mix up three documents. The table below separates them by purpose and timing.

The Notice acknowledgment is a distinct item from consent and from authorization. Some practices print them on one page, but label each item clearly so patients know what they are signing. Authorization requirements sit in 45 CFR Part 164, which lists the elements every valid authorization must carry.

Sending records to a third party such as an attorney needs that signed authorization. Our dental records release form covers that request. For every other use, the choice comes down to one question, shown in the flow below.

What must a HIPAA dental form include?

A HIPAA dental form must explain how the practice uses and discloses PHI, state patient rights, and name a privacy contact. The Privacy Rule sets these elements in 45 CFR 164.520, and your template should reflect each one:

• How the practice uses and discloses PHI for treatment, payment, and operations
• Patient rights, including access to records and requests for amendment
• The practice’s legal duties and the effective date of the notice
• How patients can file a complaint with the practice and with HHS
• A named contact for privacy questions
• A signature line for the patient acknowledgment, with name and date

This template adds a personal representative section for a parent, guardian or other person who makes decisions for the patient. It records their name, relationship and contact details, plus the scope of their authority.

Confirm exact wording with counsel, because required content depends on how your practice uses PHI.

Staying compliant beyond the paperwork

A signed form does not make a practice compliant on its own. The HIPAA Security Rule requires safeguards for electronic PHI. Regular HIPAA training for employees matters as much as the paperwork.

Any vendor with access to PHI on your behalf needs a Business Associate Agreement, including practice management software that stores patient records.

State law can add obligations on top of HIPAA. California’s Confidentiality of Medical Information Act and New York’s SHIELD Act both go beyond the federal rules. Check your state’s requirements before you finalize the form.

Enforcement sits with the HHS Office for Civil Rights, which publishes HIPAA guidance for professionals.

If a disclosure has already happened, our guide to handling a HIPAA violation outlines the first actions to take.

How Pabau collects and files signed privacy forms

Paper packets fail in a predictable way. A patient skips the acknowledgment page, or the front desk hands out last year’s version, and nobody notices until an audit.

Pabau sends digital intake forms and consents before the first appointment. Patients sign on their own phone or computer, and the completed form lands in their patient record automatically.

You update the template once, so every new patient receives the current version. Pabau’s compliance software for practices keeps signed acknowledgments easy to pull up when an auditor asks.

Collect signed HIPAA forms before the visit

Pabau sends your HIPAA dental form with the intake paperwork and files each signed copy in the patient record. Book a demo to see the workflow in your practice.

Book a demo

Conclusion

Adapt the template before your next new-patient visit, and match it line by line to your Notice of Privacy Practices. Keep consent, acknowledgment and authorization clearly labeled, even when they share a page.

The trade-off is time up front. A legal review and a state law check take longer than printing the PDF. They are still far easier than reworking a form after a complaint.

Once the wording is settled, collecting signatures is the part worth automating. Book a demo to see how Pabau sends your HIPAA dental form before the first visit and files each signed copy.

Continue your research

Shopping for a platform that covers HIPAA? HIPAA compliance software compares eight options for practice owners.

Preparing for a compliance review? HIPAA audit checklist gives you a free PDF to work through before an audit.

Moving your privacy forms online? HIPAA-compliant form builder comes with four free templates for digital paperwork.

Worried about what a violation could cost? HIPAA violation penalties explains the penalty tiers and how to avoid them.

Not sure where your privacy risks sit? HIPAA risk assessment is a step-by-step guide for small practices.

Frequently asked questions