8.1 Record Storage, Transfer, Practice Closure, and Secure Disposal

8.1 Record Storage, Transfer, Practice Closure, and Secure Disposal

The Law and Ethics outline asks candidates to know the requirements for the storage and disposal of treatment records, and the protocols for documenting in them. Section 2.2 covered what goes into a chart and how long it must be kept. This section covers everything that happens to the chart afterwards — the part of the lifecycle where licensees most often generate complaints.

Storage: Custody, Security, and the Two Layers of Duty

The physical or electronic media belong to the practice; the health information in them belongs to the patient. That split produces two separate storage duties:

• Security. For electronic records, the HIPAA Security Rule (45 CFR Part 164, Subpart C) requires administrative, physical, and technical safeguards — unique user credentials, automatic logoff, encryption at rest and in transit, locked server rooms, and an inventory of portable media. 16 CCR §§ 1116(d)(3)(B) and 1116.5 expressly require registered mobile dental hygiene clinics and RDHAP physical facilities to comply with the Security Rule.
• Availability. Records must remain retrievable for the full retention period even if the practice moves, is sold, or closes. The Board's registration regulations require a named custodian of records precisely so a patient is never told their chart "went with the old owner."

For paper charts, storage means a locked, climate-stable location out of public view, with a log of who has accessed the file. An operatory counter, a car trunk, or a garage does not satisfy the standard, and a lost unencrypted chart is a reportable breach.

Producing Records to the Board (BPC § 1955)

BPC § 1955 is the enforcement lever behind every records request that originates with the DHBC:

• § 1955(a)(1) — A licensee who fails or refuses to comply with a request for a patient's dental or dental hygiene records accompanied by that patient's written authorization for release to the Board, within 15 days of receiving the request and authorization, shall pay a civil or administrative penalty of up to $250 per day for each day past the fifteenth, up to a maximum of $5,000, unless unable to comply for good cause.
• § 1955(a)(2) — A health care facility gets 30 days, with the same $250-per-day and $5,000 structure, when the request is accompanied by the patient's authorization and a notice citing the section. The Board pays the reasonable cost of copying.
• § 1955(b) — Failing to comply with a court order enforcing a Board subpoena costs $1,000 per day and is a misdemeanor punishable by a fine up to $5,000 payable to the Board, which is added to the licensee's renewal fee if unpaid by the next renewal date. Any statute of limitations on a Board accusation is tolled while the licensee is out of compliance.
• § 1955(d) — Failure or refusal to comply with such a court order is itself unprofessional conduct and grounds for suspension or revocation.

Distinguish this from the patient-facing rule in Health and Safety Code § 123110: inspection within five business days, copies within 15 calendar days of a written request and payment of reasonable clerical costs, and — under § 123110(j) — no withholding for an unpaid bill.

Transferring Records to Another Provider

A patient who moves practices is entitled to copies, not to the original chart; the practice retains the original for the balance of the retention period. Best practice, and the standard the Board applies:

1. Require the request in writing, signed by the patient or legal representative.
2. Acknowledge the request promptly and in writing.
3. Send copies — including duplicate radiographs — within 15 calendar days.
4. Charge only reasonable clerical and duplication costs, and never condition release on payment of a treatment balance.
5. Document the date, recipient, and contents of the transfer in the chart.

Closing or Selling a Practice (16 CCR §§ 1116(j), 1116.5(g))

The DHBC's registration regulations set out an exact closure sequence for RDHAP-registered mobile dental hygiene clinics and physical facilities. Learn it as a timeline, because the exam tests the direction of each clock:

"Active patient of record" has a defined meaning in both regulations: a patient of record whom the owner or provider has examined, treated, or cared for within the two-year period prior to discontinuation of practice, or before the owner or provider moved from or left the city in which services were provided.

Separately, 16 CCR §§ 1116(d)(2)(A) and 1116.5(c)(2)(A) require notice to the Board within 30 days of any change in the registered physical address, and §§ 1116(d)(4) and 1116.5(c)(4) require notice within 30 days of any change in operational status or ownership.

Abandonment Is a Separate Violation (BPC § 1950.5(s))

Closing correctly is not only a records problem. BPC § 1950.5(s) makes it unprofessional conduct to abandon a patient "without written notice to the patient that treatment is to be discontinued and before the patient has ample opportunity to secure the services of another registered dental hygienist, registered dental hygienist in alternative practice, or registered dental hygienist in extended functions and provided the health of the patient is not jeopardized." A licensee who stops mid-course of therapy — for example after two quadrants of scaling and root planing — owes written notice, a reasonable interval to transfer, and emergency coverage in the meantime.

Secure Disposal

Disposal is the end of the retention period, not the end of the duty. HIPAA requires that protected health information be rendered unreadable, indecipherable, and otherwise unable to be reconstructed. In practice that means cross-cut shredding or incineration for paper and radiographic film, and clearing, purging, or physical destruction of electronic media — not deletion alone, and never an ordinary trash or recycling bin. Where a vendor performs the destruction, the practice needs a business associate agreement and certificates of destruction, retained as evidence. A disposal log recording the date, the categories destroyed, the method, and the person responsible is what converts a defensible practice into a provable one.

Two cautions specific to dental hygiene: old radiographic film contains silver and is regulated as hazardous waste in California, so it cannot simply be shredded with paper; and lead foil, fixer, and developer must go to a permitted waste handler rather than into the municipal waste stream.