A business associate agreement is not required by the Privacy Rule for dental laboratory services that are customarily provided by our lab pursuant to your prescriptions. The U.S. Department of Health and Human Services drafted the Privacy Rule so that it would not interfere with the sharing of information among health care providers for the treatment of patients.¹ The Privacy Rule classifies dentists and the dental laboratories that fulfill dentists’ work orders for prosthetics as health care providers.² Disclosures between you and the dental laboratory for the treatment activities that the lab provides are explicitly excepted from the business associate requirements of the Privacy Rule.³ You will be interested to know that, according to the ADA News, “the Office of Civil Rights, the Health and Human Services agency charged with HIPAA Privacy Rule enforcement provisions, said OCR agrees… that dental laboratories are health care providers, so no Business Associate Agreement is required to share protected health information for treatment purposes.” The lab does not receive patients’ telephone numbers, addresses, birth dates, social security numbers, medical records or data directly identifying individuals’ relatives, employers or household members (“Protected Health Information”). Names that clients provide are only used by the lab to help clients identify their cases and you can use an in-office coding system to identify cases if you wish. The ADA HIPAA Privacy and Security Kit, for example, instructs readers to exclude labs and other health care providers involved in treating patients from their list of business associates. Additionally, you can call the ADA’s HIPAA Hotline at 312-440-2899, ext. 3, for a recorded message explaining that dental laboratories are not business associates and what transactions are covered. Although a business associate agreement is not required between you and the lab, we remain committed to safeguarding the confidentiality of our clients, and you can rest assured that no privileged doctor-patient confidential information will ever be disclosed without your authorization. We appreciate the opportunity to participate in the treatment of your patients. Thank you for using our lab”s dental laboratory services.

---

• See 67 Federal Register 53252
• See 65 Federal Register 82568
• See Privacy Rule 164.502 (e)(1)