Conducting a Gap Analysis

Perform a Gap Analysis or audit on an ongoing basis. Most dental practices have probably already evaluated internal operations in order to comply with the April 14, 2003, HIPAA privacy deadline. This is not a difficult task but it will help if the practice is ever audited because of a patient complaint. There must be a review of where the practice is now in regards to HIPAA compliance and what is necessary to This requires evaluation of current compliance with HIPAA as well as existing dental information laws, state laws, professional standards and accreditation requirements. Review of written policies and procedures is a critical part of the Gap Analysis.

The ADA Privacy Kit contains a good sample Gap Analysis tool that is already customized for dental practices. This tool was also printed on page 27 of the April 2003 Access. This tool will provide a way to review existing and proposed uses and disclosures of health information that involves review of existing physical, personnel and system privacy and security measures. This will outline the scope of any projects needed to improve procedures to protect patient confidentiality and help establish priorities.