20.4 Catastrophe Preparedness & Practice Continuity Planning

Catastrophe Preparedness & Practice Continuity Planning

Why this matters on the INBDE: "Develop a catastrophe preparedness plan for the dental practice" is a named Clinical Content area. It is one of the most commonly skipped topics in preparation and one of the easiest to score on, because the content is structural rather than clinical.

Step 1: Hazard Vulnerability Assessment

A plan begins with an honest assessment of what can actually happen to this practice, in this building, in this region.

For each hazard, rate probability, impact on people, impact on property, and impact on operations, then prioritize mitigation and planning effort accordingly. A practice in a floodplain plans differently from one in a wildfire zone.

Step 2: The Written Plan

Emergency action plan (an OSHA requirement for most workplaces)

1. Evacuation routes and exits, posted, with an assembly point.
2. Procedures for employees who remain to shut down critical operations — oxygen and nitrous oxide cylinders closed, compressor and vacuum shut down, gas and main power isolated where safe.
3. Employee accountability — a named person accounts for all staff and patients at the assembly point.
4. Rescue and medical duties for designated employees.
5. Reporting procedures — how to report a fire or emergency.
6. Named contacts who can provide further information about the plan.
7. Alarm system capable of alerting everyone, including anyone in an operatory with a handpiece running.

Special dental considerations for evacuation: a patient may be under nitrous oxide sedation, in a supine position, in a rubber dam, or mid-procedure. The plan should specify how to terminate treatment safely and rapidly, who assists patients with mobility limitations, and how the reception area is cleared.

Communication plan

• Emergency contact list for all staff, updated at least annually, with an out-of-area contact — local circuits fail first in a regional disaster.
• Patient notification — a method to reach scheduled patients and a channel for status updates (recorded phone message, website banner, social media, text broadcast).
• Vendor and utility contacts — laboratory, supply, insurance carrier, IT support, landlord, utilities.
• Regulatory contacts — state dental board, health department, DEA field office.
• Chain of command with named alternates, so decisions do not stall if the owner is unreachable.

Data and records protection

Records are the least replaceable asset in a practice.

• The 3-2-1 rule: three copies of the data, on two different media types, with one copy off-site or in the cloud.
• Test restoration regularly. A backup that has never been restored is a hypothesis, not a backup.
• Encrypt backups containing protected health information; a lost unencrypted drive is a reportable HIPAA breach, while an encrypted one generally is not.
• HIPAA Security Rule explicitly requires a contingency plan with a data backup plan, a disaster recovery plan, and an emergency mode operation plan.
• Store paper originals of essential documents — licenses, DEA registration, insurance policies, lease, tax records — in a fireproof safe with duplicates off-site.
• Plan for downtime procedures: paper forms and a documented process for entering data once systems return.

Insurance

Maintain a current equipment inventory with serial numbers, purchase dates, and photographs or video, stored off-site. Claims are settled from documentation.

Controlled substances and pharmaceuticals

• Loss or theft of controlled substances must be reported to the DEA on Form 106 and to local law enforcement.
• Store controlled substances in a securely locked, substantially constructed cabinet, and account for them in a perpetual inventory.
• Plan for refrigerated pharmaceuticals and their temperature excursions during a power failure.

Infection control and water systems after an event

• After a boil-water advisory or loss of pressure, do not use public water for dental treatment, handpieces, or handwashing with plain water until the advisory is lifted; use antimicrobial hand rub or bottled water.
• When the advisory is lifted, flush all waterlines and faucets thoroughly, disinfect the waterlines per the manufacturer's protocol, and change filters.
• Verify sterilizer function with a biological indicator (spore test) before resuming treatment after any power interruption or flooding.
• Discard sterile packages exposed to water, and any that are wet, torn, or compromised.

Step 3: Training, Drills, and Review

• Train all staff on the plan at hire and at least annually.
• Rehearse. Conduct fire and evacuation drills, and at least tabletop exercises for the higher-probability hazards.
• Review and update annually and after any actual event, near-miss, staffing change, or renovation.
• Debrief after any real incident, and feed the lessons into the plan — this is the same continuous improvement cycle used for clinical quality assurance.

Step 4: Recovery and the Professional Obligation

Recovery planning should specify: damage assessment and documentation before cleanup, contacting the carrier, securing the premises, the order of restoration (utilities, then infection control systems, then clinical operations), and the criteria for reopening.

Patients do not stop needing care because the practice is closed. Continuity obligations include arranging urgent care coverage, communicating an alternative provider, ensuring access to records for patients being treated elsewhere, and — for practices that will not reopen — proper transfer or custody of records and formal notification to patients and the state board. Abandoning patients or records after a disaster remains a licensure violation, however sympathetic the circumstances.

Dentists also have a community role in disaster response: forensic identification through dental records is a recognized dental contribution to mass-fatality response, and many jurisdictions maintain volunteer registries for licensed health professionals.