All Industries

Dental Regulatory Compliance

Dental practices, DSOs, and oral surgery centers.

State Dental BoardOCR/HHSOSHACMS

2,069

Total Enforcement Actions

1,776

Actions This Year

Total Penalties Tracked

2,069

Critical / High Severity

Regulatory Overview

Dental practices are regulated by state dental boards for licensure, OSHA for infection control and bloodborne pathogens, and OCR/HHS for HIPAA compliance. Dental service organizations (DSOs) face additional scrutiny from state boards concerned about corporate practice of dentistry and OIG regarding Medicaid billing. FDA regulates dental devices and radiological equipment.

Primary Enforcement Focus

State dental board license actions and OSHA citations lead enforcement volume. OIG targets Medicaid pediatric dental fraud. HIPAA breaches (ransomware) are increasing.

Common Violation Patterns

critical

Infection Control Deficiencies

Failure to properly sterilize instruments, reuse of single-use items, inadequate surface disinfection — leading to patient notification events.

critical

Medicaid Pediatric Billing Fraud

Billing for procedures not performed, unbundling, and excessive pulpotomies — the top OIG target in dental enforcement.

frequent

HIPAA Ransomware Breaches

Small dental practices are disproportionately targeted. OCR OCR phase 2 audit focus includes security risk analysis failures.

common

State Board License Violations

Practicing without current DEA registration, unlicensed staff performing restricted procedures, continuing education failures.

Enforcement Actions — Dental

Violations Signal Board

Key Regulations

29 CFR 1910.1030 — Bloodborne Pathogens

OSHA standard requiring written exposure control plan, hepatitis B vaccination, PPE, and sharps handling procedures.

State Dental Practice Acts

Each state defines scope of practice for dentists and dental hygienists, supervision requirements for auxiliaries, and discipline procedures.

HIPAA 45 CFR Parts 160 & 164

Dental records are PHI. Ransomware attacks on small dental practices are a leading cause of HIPAA breach reports to OCR.

CMS Medicaid EPSDT Requirements

Early and Periodic Screening, Diagnostic, and Treatment (EPSDT) mandates dental coverage for pediatric Medicaid enrollees. High OIG audit focus area.

21 CFR Part 892 — Radiological Devices

FDA regulations on dental X-ray equipment. State radiation control programs add inspection requirements.

Violation Categories

HipaaInfection ControlOsha BloodborneBilling FraudLicensing