Patient Trust & Digital Privacy Standards

6.1California Confidentiality of Medical Information Act (CMIA)

In addition to federal HIPAA mandates, all clinical records and patient communications maintained by Dentalogy Institute of Newport Beach are governed by the heightened protections of the California Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq.). Under CMIA, health care providers may not disclose medical information regarding a patient without first obtaining a valid, specifically worded written authorization, except in limited emergency care circumstances or upon lawful court order.

Electronic Health Record (EHR) Security & Retention: In compliance with California Health and Safety Code § 123149 and California Dental Board statutory requirements, all electronic patient health records are preserved in tamper-evident systems with granular user audit trails. Adult patient treatment and diagnostic records are preserved for a mandatory minimum statutory retention period of seven (7) years following the date of last service; pediatric records are retained until the patient reaches age nineteen (19) plus an additional seven (7) years.

6.2California 'Shine the Light' Law (Civil Code § 1798.83)

California Civil Code Section 1798.83 permits California residents who have established a clinical or business relationship with Dentalogy Institute to request specific information regarding any disclosure of personal identifying information to third parties for their direct marketing purposes.

California patients wishing to confirm this policy in writing may direct inquiries to our designated Privacy Officer at team@dentalogynb.com with the subject line "California Shine the Light Inquiry."

6.3California Online Privacy Protection Act (CalOPPA) & Global Privacy Control (GPC)

In accordance with the California Online Privacy Protection Act (CalOPPA), this Privacy Policy is accessible via a conspicuous link on our homepage and prominently details the specific categories of personally identifiable information gathered through our online platforms.

Do Not Track (DNT) & Global Privacy Control (GPC) Signal Handling: Modern web browsers can transmit automated privacy preferences, including Do Not Track (DNT) and Global Privacy Control (GPC) signals. Because Dentalogy Institute of Newport Beach does not track users over time across third-party websites or engage in behavioral cross-context advertising, our web infrastructure naturally respects user privacy intent. Furthermore, we recognize and honor browser-level GPC signals as a valid statutory opt-out request for any non-essential analytics tracking.

6.4CCPA/CPRA Authorized Agent Protocols & Designation

Under California Civil Code § 1798.145, California consumers have the right to designate an authorized agent registered with the California Secretary of State to submit privacy rights requests on their behalf (such as Right to Know, Right to Delete, or Right to Correct non-clinical data).

To protect patient confidentiality and prevent unauthorized disclosures, the following verification protocols are enforced:

• Written Authorization: The authorized agent must present written proof signed by the consumer authorizing the agent to act on the consumer's behalf, or furnish a valid, legally executed Power of Attorney pursuant to California Probate Code §§ 4120–4130.
• Direct Consumer Verification: Unless a statutory Power of Attorney is presented, Dentalogy Institute reserves the right to contact the consumer directly to verify their personal identity and confirm that they provided the designated agent permission to submit the request.