Dental Practices That Install Video Surveillance Cameras Need to Carefully Balance Security With Patient Privacy Rights
Jordan Uditsky • August 16, 2023
Like every other business, dental offices are vulnerable to criminal acts or disruptions that could put both people and property at risk. Whether it be burglary or vandalism that costs a practice tens of thousands of dollars or a random act of violence that causes incalculable losses, the potential for such incidents has led most dental practices to institute a variety of security measures to protect their patients, employees, and facilities. For many practices, this includes the installation of video surveillance cameras inside and outside their offices. But the added security provided by these cameras can also come with unanticipated risks if they violate the privacy of patients and/or their medical records.
The danger that security cameras may run afoul of patient privacy rights is most acute if those cameras record audio as well as video, and if they are placed in areas where patients reasonably expect privacy, including in treatment areas.
While laws regarding video and audio recordings vary from state to state, the fundamental concerns regarding surveillance cameras are the same everywhere and are two-fold:
- Violating a patient’s (and employee’s) reasonable expectation of privacy
- Violating HIPAA and other obligations regarding protected health information (PHI)
Patient Expectations of Privacy
There are some areas of a dental office where a “reasonable expectation of privacy” is a no-brainer, such as restrooms and changing rooms. Do not install cameras in such locations. But patients likely have a similar expectation in private treatment rooms or operatories. If cameras are to be used in these areas, the patient should be advised in advance and sign a consent and release form agreeing to their use. If a patient, for whatever reason, does not consent, disable the camera or cease recording during the course of treatment.
Employees also have a reasonable expectation of privacy, at least in areas like breakrooms or lunch rooms. Inform all employees, in writing, that cameras are in use. You do not need their permission, but you do need a signed acknowledgment, which you should keep in their employee file.
In all circumstances, patients and employees alike should be given notice that your office is under video surveillance; surreptitious recordings or hidden cameras are ill-advised. In common areas like reception areas and waiting rooms, place signage stating that there is a nearby security camera in use. This discourages claims that someone reasonably expected the area to be private and supports a legitimate purpose — safety and security. Additionally, have a consistent policy on how recordings may be used and how long they will be kept.
Many states have strict laws against eavesdropping such that audio recordings present particularly tricky issues. Some states require the consent of both parties before making an audio recording, while others permit recording with only one party’s consent. Given the legal risks associated with audio recordings, and the limited additional security benefits audio provides, the most prudent course is to make video recordings only.
Potential HIPAA Violations
Critically, dental practice owners should consider HIPAA and data privacy rules when installing cameras in their offices. Ensure that cameras are not able to capture a computer screen or charts that contain a patient’s PHI. But PHI extends beyond records and includes the mere fact that a patient is at your office for treatment. As such, recordings from exterior cameras as well as those inside must be protected from dissemination or disclosure. You can disclose any such recordings to law enforcement if they request the information by subpoena.
The bottom line is that dental practice owners have every right to take the steps needed to protect their facilities, patients, and employees, including installing and using video cameras. But they should do so in ways that ensure that those being recorded are aware of and consent to that fact, that the cameras do not impinge on personal expectations or privacy, and that all PHI is sufficiently shielded from unauthorized disclosure.
If you have any questions regarding the use of video surveillance cameras in your offices, please call Grogan Hesse & Uditsky today.
We Focus on You So You Can Focus on Your Patients
At Grogan Hesse & Uditsky, P.C., we focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you.
Please call us at (630) 833-5533 or contact us online to arrange for your free initial consultation.
Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices. This blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
Speak to an Attorney
Related Posts
For employers and employees alike, in workplaces from restaurants to factories to dental practices, the specter of a visit from ICE, CBP, or other federal immigration forces looms large. Trepidation and fear are common feelings in this perilous climate, exacerbated by uncertainty as to one’s rights and how to respond when militarized agents arrive at a workplace. For dental practice owners, protecting their employees, patients, and business is a top priority, as is doing so in a legal, peaceful, and effective manner that doesn’t make a difficult situation worse. That is why it is so critical that you understand your rights and obligations in the face of such intrusions. While you should absolutely and immediately contact counsel if immigration agents show up at your practice, here is some practical guidance to help keep you and your employees safe. Different Responses to Different Types of ICE Actions Historically, ICE has conducted three types of workplace actions: I-9 audits (Notice of Inspection or “NOI”), which are administrative reviews of employment eligibility verification forms; worksite enforcement operations, which may include arrests; and searches pursuant to a warrant. Unfortunately, these customary practices have recently expanded to include warrantless, legally unauthorized, and sometimes violent entry into workplaces. The type of action the agency takes determines your obligations and your rights. An I-9 audit begins with a formal notice, typically giving you three business days to produce your I-9 forms and supporting documentation. A worksite enforcement operation or raid, however, often comes without warning. Understanding which situation you're facing is the critical first step. When ICE Arrives Without Notice – Keep Calm, Call Your Lawyer, and Ask For Authority If ICE agents appear at your workplace without prior notice, remain calm and follow these essential steps: · Keep calm , and don’t make any quick or impulsive decisions. Politely ask the agents to wait while you contact your attorney. You are not required to let agents enter non-public areas of your workplace without proper legal authority. While agents can enter your reception area or other common spaces as any member of the public could, they cannot access private areas such as treatment rooms, back offices, lunchrooms, or labs without your consent, a valid warrant, or an emergency. · Ask to see credentials and any warrants or legal documents. Scrutinize these thoroughly and understand this crucial distinction: an administrative warrant (Form I-200 or I-205) is not the same as a judicial warrant signed by a judge. Administrative warrants alone do not give ICE the authority to enter your private property or detain individuals. A judicial warrant, however, must be honored, though you should still speak with your lawyer who can help verify that it's properly signed, dated, and identifies the correct location and individuals. · Designate a single point of contact , ideally yourself as practice owner or an office manager, to communicate with the agents. Instruct other employees not to answer questions or provide information without guidance. This prevents confusion and minimizes the chances of miscommunication or escalation. Understanding Your Rights Employers have constitutional rights that apply during ICE encounters. The Fourth Amendment protects against unreasonable searches and seizures. As noted, without a judicial warrant or your consent, ICE generally cannot enter private areas of your practice, search filing cabinets or computer systems, or detain employees based solely on their immigration status. You have the right to refuse consent to a search. Exercise that right. If agents don't have a warrant, you can politely but firmly state: "I do not consent to a search of the premises. If you have a warrant signed by a judge, I would like to see it and have my attorney review it." If they have a warrant, verify it carefully to check that the address is correct, the signature is from a federal judge (not an ICE officer), and it's dated recently. Despite the recent rhetoric and actions of ICE agents and officials, you have an absolute right to observe, record, video, and document what's happening and what the agents are doing, so long as you do not interfere with or impede their operations. If ICE does enter your practice, you or your designated representative has the right to, and should, accompany agents to witness their actions. Protecting Your Employees Your employees also have rights, regardless of their immigration status. They have the right to remain silent and do not have to answer questions about their immigration status, where they were born, or how they entered the country. They have the right to refuse to show documents beyond what's necessary to demonstrate identity, unless they're under arrest. They should not lie or present false documents, as this can create additional legal problems. Before an ICE visit occurs, consider holding a "know your rights" training for employees. Inform them that if ICE arrives, they should remain calm, not run, and not present false documents. Provide them with a card that includes information about their rights and the contact information for your practice's attorney. You should never lie to federal agents or provide false information. However, you are not required to volunteer information or answer questions beyond what's legally necessary. If asked about specific employees, you can politely decline to answer and refer agents to your attorney. Once ICE agents leave, immediately document everything that occurred and save any videos or recordings so you can send them to your attorney. Preparing Before ICE Arrives The best time to prepare for an ICE visit is before it happens. Consider the following proactive steps: · Develop a written policy for your practice that designates who will handle ICE encounters, what steps to take, and how to contact your attorney. · Conduct an internal I-9 audit to identify and correct any paperwork errors or gaps. · Train office managers and supervisors on the protocol. Everyone should know not to consent to searches, not to answer questions without guidance, and to remain professional and calm. Post "know your rights" information for employees in common areas. If you have any questions or concerns regarding ICE or immigration enforcement activities at your practice, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
Selling a dental practice is a lengthy and involved process that involves due diligence, negotiation, drafting, financing, and other elements, culminating in the seller handing over the keys to the business to the buyer. But the parties’ signatures on the final purchase agreement and ancillary documents hardly mean that the now-former owner can ride off into the sunset without a care in the world. That is because the purchaser will want and require the seller to be responsible for any undisclosed or undiscovered problems with the practice they just bought. For this reason, every dental practice purchase agreement will inevitably contain indemnification provisions that address what happens if problems emerge after closing. These clauses determine who bears the risk for post-closing discoveries and how much exposure each party faces. While the purchaser wants the assurances and protections that come from the contract’s indemnification provisions, the seller doesn’t want to make an open-ended, potentially limitless promise that could eviscerate the financial upsides of the transaction and leave them forever on the hook for millions of dollars in possible liability. That is why deal savvy dental practice attorneys usually require that the purchase and sale agreement’s indemnification provisions include “caps” and “baskets” that establish the maximum exposure a seller will face as well as the minimum amount that must be at issue before any indemnification obligations are triggered. Given the significance that these maximums and minimums have for both parties, it is critical that buyers and sellers understand how caps and baskets work and the best ways to protect their respective interests in a dental practice sale. It All Starts With the Seller’s Representations and Warranties In any dental practice sale, the seller makes certain representations and warranties about the practice and its current condition. These disclosures might include assurances that all patient records are accurate, all equipment is in good working order, the practice has no pending lawsuits or liabilities, all taxes have been paid, and certain personnel matters are in order. If any such representations prove to be false, the indemnification provisions give the buyer the right to seek compensation from the seller for any losses incurred. Liability Caps Establish the Seller’s Maximum Indemnification Exposure A liability cap limits the total amount a seller must pay for breaches of representations and warranties. In dental practice transactions, caps can range from 10% on longer transactions to 100% of the purchase price on practices trending below $1,000,000, with 25% to 50% being most common for middle-market acquisitions. Where the parties ultimately land as to that percentage is a factor of each party’s risk tolerance and the practice's characteristics. A well-established practice with meticulous records, abundant goodwill, and comprehensive due diligence might justify a lower cap. Conversely, a practice with a limited or checkered financial history or significant operational complexity might warrant a higher cap to protect the buyer. Most liability caps exclude certain matters for which the seller remains on the hook for an unlimited amount. Such issues can include overt fraud or fundamental misrepresentations regarding the seller's authority to sell the practice or having clear title to assets. Tax obligations, environmental issues, and employee-related liabilities might also receive special treatment with separate, higher caps than provided for other matters. Baskets Are Like Deductibles While caps address maximum liability, baskets establish minimum thresholds before indemnification obligations arise. Think of a basket like a deductible in an insurance policy. Just as an insured is responsible for paying amounts up to the deductible before the insurer’s obligations kick in, a basket establishes the threshold below which the purchaser must bear any costs or liabilities for post-closing problems, even for matters covered by the contract’s indemnification provisions. Dental practice sales typically include one of two basket types: · A “true deductible” basket provides that the buyer absorbs all losses until reaching the threshold amount, after which they are entitled to recover all sums above it. For example, with a $25,000 true deductible basket, if the buyer’s losses total $30,000, the seller pays only $5,000. · A “tipping” basket , sometimes called a dollar-one basket, provides that once the buyer’s losses exceed the designated threshold, the seller pays from dollar one. Using the same example, the seller would pay the entire $30,000 once that threshold is crossed. Basket amounts in dental practice sales typically range from $5,000 to $25,000, depending on deal size. A $500,000 practice might have a $5,000 basket, while a $3 million practice might see a $25,000 threshold, for example. How Caps and Baskets Impact the Parties After Closing These provisions significantly impact post-closing dynamics. A seller who negotiates a low cap and high basket will minimize their exposure, while a buyer who secures a high cap and low basket gains significant protection and reassurance. Since negotiations over indemnification caps and baskets aren’t conducted in a vacuum, a party that secures an advantageous cap and basket arrangement can expect more challenging negotiations when discussing other aspects of the transaction, such as a higher purchase price or less favorable payment terms. Unanticipated liabilities can wreak havoc for dental practice buyers and sellers alike long after the ink has dried on their agreement. Dentists on either side of a practice sale should work closely with experienced legal counsel to negotiate terms that strike an appropriate balance between protection and practicality. Contact Grogan, Hesse & Uditsky Today If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
The care that dentists need to provide their patients doesn’t end when they get up from the chair. Dental offices, and the computers, networks, servers, and files maintained within (and outside of) their walls, contain patient files and information that must be kept protected from data breaches and unauthorized disclosure. Failure to handle these records properly can not only breach patient trust, but it can also create regulatory and licensing headaches for dentists and practice owners. That’s why ensuring that patient records are transferred securely and appropriately is of the utmost importance when a dental practice changes hands from one owner to the next. When selling a dental practice, one of the most critical yet often overlooked aspects of the transaction involves the proper handling of patient records. As an attorney who has advised numerous healthcare providers through practice transitions, I can tell you that mishandling patient records can expose both the selling and buying dentists to significant legal liability, regulatory penalties, and damage to professional reputation. Understanding your obligations under federal and state law is essential to protecting yourself and your patients during this transition. HIPAA Considerations Are the Highest Priority Patient dental records are governed by both federal regulations, primarily the Health Insurance Portability and Accountability Act (HIPAA), and state-specific laws that vary considerably across jurisdictions. Under HIPAA, patient records are protected health information (PHI), and any transfer of a patient’s protected health information (PHI) must comply with the law’s strict privacy and security requirements. Additionally, most states have dental practice acts and regulations that impose specific recordkeeping and transfer obligations on licensed dentists. The downsides of failing to thoroughly and carefully follow these requirements arguably represent the biggest potential legal threat to buyers and sellers alike in a practice sale. The selling dentist remains the legal custodian of patient records until the practice sale is complete and proper transfer protocols have been followed. This means that the practice owner cannot simply hand over file cabinets or hard drives to the buyer without taking appropriate legal steps. The seller’s fiduciary duty to their patients continues through the transition period and beyond. Notifying Patients Obviously, patients want and deserve to know that their dentist’s office is changing hands. While HIPAA does not explicitly require advance notice of a practice sale, it does require that patients be informed about who has access to their records. More importantly, many state laws explicitly require written notification to patients when a practice changes hands. The seller should inform patients of the new practice owner's identity, the date of the transition, their options regarding their records, and how they can obtain copies of their records if they choose to seek care elsewhere. Typically, this notification should be sent 30 to 60 days prior to the sale closing, allowing patients sufficient time to make informed decisions about their care. The Actual Transfer Itself The purchase agreement should clearly specify how the records will be transferred, who will bear the costs of transfer, and in what format the records will be transferred. For electronic health records (EHRs), the seller may need to coordinate with their EHR vendor to ensure the proper migration of data to the buyer's system or to maintain access if the buyer intends to use the same platform. For practices that still maintain paper records, the physical transfer must be handled securely to prevent unauthorized access or data breaches. Consider using a secure courier service and keeping a detailed inventory of all records transferred. Record Retention Obligations Generally, upon closing, the buyer assumes the responsibility for maintaining patient records going forward and must retain them for the period required by state law, which typically ranges from five to ten years from the last date of treatment. However, the seller may retain copies of records for their own protection, particularly if there's potential for future liability claims related to treatment provided before the sale. For patients who choose not to continue with the new owner and who do not request their records be sent to another provider, the buyer typically assumes responsibility for storing these inactive records for the required retention period. The purchase agreement should clearly allocate these ongoing obligations and any associated costs. Selling a dental practice is often the culmination of decades of hard work and the start of a new chapter in which the now-former practice owner can reap the benefits of those efforts. However, missteps in the handling of patient records could compromise those plans and leave the seller vulnerable to potential liability. By working closely with experienced counsel throughout the sales process, practice owners can wrap up their careers with clarity, confidence, and conclusiveness. If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. Contact Grogan, Hesse & Uditsky Today If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
For employers and employees alike, in workplaces from restaurants to factories to dental practices, the specter of a visit from ICE, CBP, or other federal immigration forces looms large. Trepidation and fear are common feelings in this perilous climate, exacerbated by uncertainty as to one’s rights and how to respond when militarized agents arrive at a workplace. For dental practice owners, protecting their employees, patients, and business is a top priority, as is doing so in a legal, peaceful, and effective manner that doesn’t make a difficult situation worse. That is why it is so critical that you understand your rights and obligations in the face of such intrusions. While you should absolutely and immediately contact counsel if immigration agents show up at your practice, here is some practical guidance to help keep you and your employees safe. Different Responses to Different Types of ICE Actions Historically, ICE has conducted three types of workplace actions: I-9 audits (Notice of Inspection or “NOI”), which are administrative reviews of employment eligibility verification forms; worksite enforcement operations, which may include arrests; and searches pursuant to a warrant. Unfortunately, these customary practices have recently expanded to include warrantless, legally unauthorized, and sometimes violent entry into workplaces. The type of action the agency takes determines your obligations and your rights. An I-9 audit begins with a formal notice, typically giving you three business days to produce your I-9 forms and supporting documentation. A worksite enforcement operation or raid, however, often comes without warning. Understanding which situation you're facing is the critical first step. When ICE Arrives Without Notice – Keep Calm, Call Your Lawyer, and Ask For Authority If ICE agents appear at your workplace without prior notice, remain calm and follow these essential steps: · Keep calm , and don’t make any quick or impulsive decisions. Politely ask the agents to wait while you contact your attorney. You are not required to let agents enter non-public areas of your workplace without proper legal authority. While agents can enter your reception area or other common spaces as any member of the public could, they cannot access private areas such as treatment rooms, back offices, lunchrooms, or labs without your consent, a valid warrant, or an emergency. · Ask to see credentials and any warrants or legal documents. Scrutinize these thoroughly and understand this crucial distinction: an administrative warrant (Form I-200 or I-205) is not the same as a judicial warrant signed by a judge. Administrative warrants alone do not give ICE the authority to enter your private property or detain individuals. A judicial warrant, however, must be honored, though you should still speak with your lawyer who can help verify that it's properly signed, dated, and identifies the correct location and individuals. · Designate a single point of contact , ideally yourself as practice owner or an office manager, to communicate with the agents. Instruct other employees not to answer questions or provide information without guidance. This prevents confusion and minimizes the chances of miscommunication or escalation. Understanding Your Rights Employers have constitutional rights that apply during ICE encounters. The Fourth Amendment protects against unreasonable searches and seizures. As noted, without a judicial warrant or your consent, ICE generally cannot enter private areas of your practice, search filing cabinets or computer systems, or detain employees based solely on their immigration status. You have the right to refuse consent to a search. Exercise that right. If agents don't have a warrant, you can politely but firmly state: "I do not consent to a search of the premises. If you have a warrant signed by a judge, I would like to see it and have my attorney review it." If they have a warrant, verify it carefully to check that the address is correct, the signature is from a federal judge (not an ICE officer), and it's dated recently. Despite the recent rhetoric and actions of ICE agents and officials, you have an absolute right to observe, record, video, and document what's happening and what the agents are doing, so long as you do not interfere with or impede their operations. If ICE does enter your practice, you or your designated representative has the right to, and should, accompany agents to witness their actions. Protecting Your Employees Your employees also have rights, regardless of their immigration status. They have the right to remain silent and do not have to answer questions about their immigration status, where they were born, or how they entered the country. They have the right to refuse to show documents beyond what's necessary to demonstrate identity, unless they're under arrest. They should not lie or present false documents, as this can create additional legal problems. Before an ICE visit occurs, consider holding a "know your rights" training for employees. Inform them that if ICE arrives, they should remain calm, not run, and not present false documents. Provide them with a card that includes information about their rights and the contact information for your practice's attorney. You should never lie to federal agents or provide false information. However, you are not required to volunteer information or answer questions beyond what's legally necessary. If asked about specific employees, you can politely decline to answer and refer agents to your attorney. Once ICE agents leave, immediately document everything that occurred and save any videos or recordings so you can send them to your attorney. Preparing Before ICE Arrives The best time to prepare for an ICE visit is before it happens. Consider the following proactive steps: · Develop a written policy for your practice that designates who will handle ICE encounters, what steps to take, and how to contact your attorney. · Conduct an internal I-9 audit to identify and correct any paperwork errors or gaps. · Train office managers and supervisors on the protocol. Everyone should know not to consent to searches, not to answer questions without guidance, and to remain professional and calm. Post "know your rights" information for employees in common areas. If you have any questions or concerns regarding ICE or immigration enforcement activities at your practice, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
Selling a dental practice is a lengthy and involved process that involves due diligence, negotiation, drafting, financing, and other elements, culminating in the seller handing over the keys to the business to the buyer. But the parties’ signatures on the final purchase agreement and ancillary documents hardly mean that the now-former owner can ride off into the sunset without a care in the world. That is because the purchaser will want and require the seller to be responsible for any undisclosed or undiscovered problems with the practice they just bought. For this reason, every dental practice purchase agreement will inevitably contain indemnification provisions that address what happens if problems emerge after closing. These clauses determine who bears the risk for post-closing discoveries and how much exposure each party faces. While the purchaser wants the assurances and protections that come from the contract’s indemnification provisions, the seller doesn’t want to make an open-ended, potentially limitless promise that could eviscerate the financial upsides of the transaction and leave them forever on the hook for millions of dollars in possible liability. That is why deal savvy dental practice attorneys usually require that the purchase and sale agreement’s indemnification provisions include “caps” and “baskets” that establish the maximum exposure a seller will face as well as the minimum amount that must be at issue before any indemnification obligations are triggered. Given the significance that these maximums and minimums have for both parties, it is critical that buyers and sellers understand how caps and baskets work and the best ways to protect their respective interests in a dental practice sale. It All Starts With the Seller’s Representations and Warranties In any dental practice sale, the seller makes certain representations and warranties about the practice and its current condition. These disclosures might include assurances that all patient records are accurate, all equipment is in good working order, the practice has no pending lawsuits or liabilities, all taxes have been paid, and certain personnel matters are in order. If any such representations prove to be false, the indemnification provisions give the buyer the right to seek compensation from the seller for any losses incurred. Liability Caps Establish the Seller’s Maximum Indemnification Exposure A liability cap limits the total amount a seller must pay for breaches of representations and warranties. In dental practice transactions, caps can range from 10% on longer transactions to 100% of the purchase price on practices trending below $1,000,000, with 25% to 50% being most common for middle-market acquisitions. Where the parties ultimately land as to that percentage is a factor of each party’s risk tolerance and the practice's characteristics. A well-established practice with meticulous records, abundant goodwill, and comprehensive due diligence might justify a lower cap. Conversely, a practice with a limited or checkered financial history or significant operational complexity might warrant a higher cap to protect the buyer. Most liability caps exclude certain matters for which the seller remains on the hook for an unlimited amount. Such issues can include overt fraud or fundamental misrepresentations regarding the seller's authority to sell the practice or having clear title to assets. Tax obligations, environmental issues, and employee-related liabilities might also receive special treatment with separate, higher caps than provided for other matters. Baskets Are Like Deductibles While caps address maximum liability, baskets establish minimum thresholds before indemnification obligations arise. Think of a basket like a deductible in an insurance policy. Just as an insured is responsible for paying amounts up to the deductible before the insurer’s obligations kick in, a basket establishes the threshold below which the purchaser must bear any costs or liabilities for post-closing problems, even for matters covered by the contract’s indemnification provisions. Dental practice sales typically include one of two basket types: · A “true deductible” basket provides that the buyer absorbs all losses until reaching the threshold amount, after which they are entitled to recover all sums above it. For example, with a $25,000 true deductible basket, if the buyer’s losses total $30,000, the seller pays only $5,000. · A “tipping” basket , sometimes called a dollar-one basket, provides that once the buyer’s losses exceed the designated threshold, the seller pays from dollar one. Using the same example, the seller would pay the entire $30,000 once that threshold is crossed. Basket amounts in dental practice sales typically range from $5,000 to $25,000, depending on deal size. A $500,000 practice might have a $5,000 basket, while a $3 million practice might see a $25,000 threshold, for example. How Caps and Baskets Impact the Parties After Closing These provisions significantly impact post-closing dynamics. A seller who negotiates a low cap and high basket will minimize their exposure, while a buyer who secures a high cap and low basket gains significant protection and reassurance. Since negotiations over indemnification caps and baskets aren’t conducted in a vacuum, a party that secures an advantageous cap and basket arrangement can expect more challenging negotiations when discussing other aspects of the transaction, such as a higher purchase price or less favorable payment terms. Unanticipated liabilities can wreak havoc for dental practice buyers and sellers alike long after the ink has dried on their agreement. Dentists on either side of a practice sale should work closely with experienced legal counsel to negotiate terms that strike an appropriate balance between protection and practicality. Contact Grogan, Hesse & Uditsky Today If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
The care that dentists need to provide their patients doesn’t end when they get up from the chair. Dental offices, and the computers, networks, servers, and files maintained within (and outside of) their walls, contain patient files and information that must be kept protected from data breaches and unauthorized disclosure. Failure to handle these records properly can not only breach patient trust, but it can also create regulatory and licensing headaches for dentists and practice owners. That’s why ensuring that patient records are transferred securely and appropriately is of the utmost importance when a dental practice changes hands from one owner to the next. When selling a dental practice, one of the most critical yet often overlooked aspects of the transaction involves the proper handling of patient records. As an attorney who has advised numerous healthcare providers through practice transitions, I can tell you that mishandling patient records can expose both the selling and buying dentists to significant legal liability, regulatory penalties, and damage to professional reputation. Understanding your obligations under federal and state law is essential to protecting yourself and your patients during this transition. HIPAA Considerations Are the Highest Priority Patient dental records are governed by both federal regulations, primarily the Health Insurance Portability and Accountability Act (HIPAA), and state-specific laws that vary considerably across jurisdictions. Under HIPAA, patient records are protected health information (PHI), and any transfer of a patient’s protected health information (PHI) must comply with the law’s strict privacy and security requirements. Additionally, most states have dental practice acts and regulations that impose specific recordkeeping and transfer obligations on licensed dentists. The downsides of failing to thoroughly and carefully follow these requirements arguably represent the biggest potential legal threat to buyers and sellers alike in a practice sale. The selling dentist remains the legal custodian of patient records until the practice sale is complete and proper transfer protocols have been followed. This means that the practice owner cannot simply hand over file cabinets or hard drives to the buyer without taking appropriate legal steps. The seller’s fiduciary duty to their patients continues through the transition period and beyond. Notifying Patients Obviously, patients want and deserve to know that their dentist’s office is changing hands. While HIPAA does not explicitly require advance notice of a practice sale, it does require that patients be informed about who has access to their records. More importantly, many state laws explicitly require written notification to patients when a practice changes hands. The seller should inform patients of the new practice owner's identity, the date of the transition, their options regarding their records, and how they can obtain copies of their records if they choose to seek care elsewhere. Typically, this notification should be sent 30 to 60 days prior to the sale closing, allowing patients sufficient time to make informed decisions about their care. The Actual Transfer Itself The purchase agreement should clearly specify how the records will be transferred, who will bear the costs of transfer, and in what format the records will be transferred. For electronic health records (EHRs), the seller may need to coordinate with their EHR vendor to ensure the proper migration of data to the buyer's system or to maintain access if the buyer intends to use the same platform. For practices that still maintain paper records, the physical transfer must be handled securely to prevent unauthorized access or data breaches. Consider using a secure courier service and keeping a detailed inventory of all records transferred. Record Retention Obligations Generally, upon closing, the buyer assumes the responsibility for maintaining patient records going forward and must retain them for the period required by state law, which typically ranges from five to ten years from the last date of treatment. However, the seller may retain copies of records for their own protection, particularly if there's potential for future liability claims related to treatment provided before the sale. For patients who choose not to continue with the new owner and who do not request their records be sent to another provider, the buyer typically assumes responsibility for storing these inactive records for the required retention period. The purchase agreement should clearly allocate these ongoing obligations and any associated costs. Selling a dental practice is often the culmination of decades of hard work and the start of a new chapter in which the now-former practice owner can reap the benefits of those efforts. However, missteps in the handling of patient records could compromise those plans and leave the seller vulnerable to potential liability. By working closely with experienced counsel throughout the sales process, practice owners can wrap up their careers with clarity, confidence, and conclusiveness. If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. Contact Grogan, Hesse & Uditsky Today If you are a practice owner anticipating a sale or transition, please contact Grogan, Hesse & Uditsky today. We focus a substantial part of our practice on providing exceptional legal services for dentists and dental practices, as well as orthodontists, periodontists, endodontists, pediatric dentists, and oral surgeons. We bring unique insights and deep commitment to protecting the interests of dental professionals and their practices and welcome the opportunity to work with you. Jordan Uditsky, an accomplished businessman and seasoned attorney, combines his experience as a legal counselor and successful entrepreneur to advise dentists and other business owners in the Chicago area. Jordan grew up in a dental family, with his father, grandfather, and sister each owning their own dental practices, and this blend of legal, business, and personal experience provides Jordan with unique insight into his clients’ needs, concerns, and goals.
