PCI & HIPAA Compliance for Dental, Medical & Small Business in Wayne County
If your office takes card payments or stores patient information, you're on the hook for PCI and HIPAA, whether or not anyone's helped you with it. I'm Tyler with The Circuit Barn. I make compliance practical for small local offices: I assess where you stand, fix the gaps, set up the security and backups, and get the paperwork in order, in plain English, on-site.
Serving dental offices, clinics, and small businesses across Wayne County. Free initial assessment, no obligation.
Compliance without the fear-sales pitch
Most compliance companies either scare you into an expensive contract or hand you a checklist and disappear. I do neither. I sit down with you, figure out exactly what your office needs to actually be compliant, and then do the hands-on work to get you there, the same person for the assessment and the fix.
I already handle PCI and HIPAA for a local dental office, so this isn't theory. It's the real controls, real documentation, and the day-to-day IT that keeps you compliant month to month.
HIPAA for dental & medical offices
If you store or handle patient information, HIPAA's Security Rule applies to your systems. I help you meet it.
- Security risk assessment (the one HIPAA actually requires)
- Access controls, strong passwords, and secure logins
- Encryption for computers, drives, and backups
- Reliable, tested backups so patient records aren't lost
- Business Associate Agreements (BAAs) sorted out with your vendors
- Practical staff guidance so the team doesn't undo it
- Documentation and policies you can show if you're ever audited
PCI compliance for anyone taking cards
If you accept credit or debit cards, PCI DSS applies. For most small offices that means a Self-Assessment Questionnaire (SAQ) plus some real security behind it.
- Figuring out which SAQ type fits how you take payments
- Securing the network your card system runs on
- Keeping payment devices and Wi-Fi separated from the rest
- Firewalls, updates, and antivirus actually configured
- Walking you through the SAQ so it's done honestly and correctly
How it works
1. Free assessment. I come on-site, look at how you take payments and store data, and tell you plainly where you stand and what's missing. No scare tactics.
2. A clear plan and flat quote. You get a short, readable list of what needs doing and what it costs, no mystery retainer.
3. I do the work. I set up the security, backups, and controls, and put the documentation together.
4. I keep you there. Compliance isn't one-and-done. I can maintain it month to month so you stay covered and don't scramble at renewal or audit time.
Who this is for
Based in Walworth, serving Newark, Macedon, Palmyra, Ontario, Penfield, Fairport, Webster, and all of Wayne County.
Common questions
Do I really have to worry about HIPAA and PCI?
If you handle patient information, HIPAA applies. If you take card payments, PCI applies. It's not optional, and "we've always just done it this way" is exactly what gets small offices fined after a breach. The good news is that for a small practice it's very manageable once someone sets it up right.
Are you a certified auditor?
I'm not a formal PCI QSA or a HIPAA auditor, and for a small office you usually don't need one, most are self-assessed. What I do is the practical, hands-on part: the risk assessment, the actual security and backups, and the documentation, so you genuinely meet the requirements and can prove it. If your situation ever needs a formal auditor, I'll tell you straight.
What's a Business Associate Agreement?
Under HIPAA, any outside vendor who can access your patient data (including your IT person) needs a signed BAA with you. I'll sign one with you, and help you get them in place with your other vendors too.
How much does it cost?
The initial assessment is free. After that you get a flat quote for the fixes, and an optional monthly plan to keep you compliant and supported. No surprise invoices.
Not sure if your office is compliant?
Most aren't, and don't know it. Call or text for a free, plain-English assessment. No pressure, no scare tactics.
Call (315) 333-0868