553
Medical privacy complaints
Reported by participating Texas agencies in FY2025.
01Conference offers
Your EPDC HIPAA and cybersecurity offers at a glance
Five distinct offers: a free introductory assessment, plus four paid cybersecurity products. Choose one to see its scope and next step.
02Texas enforcement activity · FY2025
Why this matters now
A breach can expose patient records, interrupt your practice, and trigger federal and Texas enforcement.
Find the gaps, train your staff, and document your risk before an incident.
72
Dental board complaints
Medical privacy complaints reported by the Texas State Board of Dental Examiners.
132
Reported agency actions
Enforcement or disciplinary actions reported across participating Texas agencies, including dismissals with no violation.
$1.5M
Statutory annual ceiling
Maximum annual civil penalty a court may assess for a pattern or practice under Texas Health and Safety Code §181.201(c).
81% of reported 2023 breaches affecting 500 or more people were hacking or IT incidents.
278% increase in large breach reports involving ransomware from 2018 to 2022.
HHS 2023 breach report · HHS healthcare cybersecurity strategy
Complaints are allegations, whether or not substantiated. The 132 actions are statewide, include dismissals with no violation, and are not limited to dental practices.
Sources: Texas Attorney General, FY2025 Medical Records Privacy Act report; Texas Health and Safety Code §181.201.
03Offer details
Choose the next step that fits your practice
Complimentary first step
Free 45-Minute HIPAA Readiness Assessment
Free
45 minutes
A focused conversation about your practice, current safeguards, and the risks or questions you want to address first.
Discuss how your practice handles patient information and everyday security concerns
Identify high-level priorities and possible next steps
Decide whether a paid service warrants a separate proposal
This introductory assessment is free. It does not replace the paid six-week HIPAA Risk Assessment or certify compliance.
Special event pricing
Six-Week HIPAA Risk Assessment
Previously $2,999
$1,999
one-time
A six-week assessment of ePHI, technical safeguards, and workforce practices, with the risks to address first ranked for your practice.
Review how ePHI is handled across the agreed environment
Examine technical safeguards and workforce practices
Rank risks and identify practical next steps
The service agreement defines the assessment deliverables and any remediation work.
Special event pricing
Staff Cyber Security Training
Previously $1,999
$999
one-time
Give staff practical guidance and regular reinforcement for safer daily habits.
Expert-led training session
Full-year online subscription
Monthly checks that reinforce secure habits
Your proposal will define the user count, session format, subscription platform, and monthly checks.
Special event pricing
Vulnerability Scan & Remediation
Previously $4,999
$2,999
one-time
Find important weaknesses across agreed systems and address critical findings within a defined scope.
Twice-yearly scans of firewall, website, and internal infrastructure
Remediation of critical findings
Your proposal will define the covered assets, scan method, remediation boundary, retesting, and timing.
Special event pricing
Cyber Defense & Compliance Bundle
Previously $11,995
$5,995
per practice per year
Bring the three offers together with additional security coverage for servers and workstations.
Staff training, six-week HIPAA risk assessment, and vulnerability scan & remediation
Client–server security package described in the selected offer as worth $2,000 and included at no additional charge
Automated security patch management
MDR for servers and EDR for workstations
Your proposal will define device limits, license terms, ongoing-service periods, renewal, and the scope of each included service.
The 45-minute assessment is free. Paid event pricing may change or end without notice. The signed service agreement controls final price, inclusions, user and device counts, limits, deliverables, and terms.
04Covered by the offers above
HIPAA and Texas HB 300 readiness
Each paid offer addresses a different part of your practice's security and privacy work. The free 45-minute assessment helps you choose where to start.
Staff Cyber Security Training
Workforce training
Texas HB 300 sets training expectations for staff who handle patient information. Build practical habits and a record of training.
Six-Week HIPAA Risk Assessment
Risk analysis on record
A documented risk analysis helps identify risks to ePHI under the HIPAA Security Rule. The paid six-week assessment has its own defined deliverables.
Vulnerability Scan & Remediation
Technical safeguards
Scan the agreed firewall, website, and internal systems; prioritize and address critical findings within the proposed scope.
Cyber Defense & Compliance Bundle
Ongoing oversight
Patching, MDR for servers, and EDR for workstations add ongoing security coverage between assessments, within the agreed service period.
These offers support readiness; no assessment or service certifies or guarantees compliance. The free 45-minute conversation is not a documented risk analysis.
Sources: HHS, Summary of the HIPAA Security Rule; Texas Health and Safety Code Chapter 181.
Start with a focused conversation.
-
01
Tell us
Share your practice details and the concern you want to discuss.
-
02
Connect
ICT Solutions follows up to arrange your free 45-minute assessment.
-
03
Prioritize
Discuss the highest-level gaps and which next step fits your practice.
-
04
Decide
Review any proposed paid work, scope, and price separately before committing.
Know what each next step covers.
The free assessment helps identify high-level priorities. Each paid product has its own scope and proposal.
- 01
Free 45-minute assessmentA high-level conversation about your practice and priorities. It is separate from the paid six-week risk assessment and does not certify compliance.
- 02
Six-week HIPAA risk assessmentA separate $1,999 one-time engagement examining ePHI, technical safeguards, and workforce practices. The agreement defines its deliverables.
- 03
Vulnerability workThe covered assets, critical-finding remediation, retesting, and timing are set in the proposal.
- 04
Training and bundle coverageUser counts, device limits, licenses, service periods, and renewal terms are stated before you decide.
ICT Solutions supports HIPAA and Texas HB 300 readiness. No assessment or service guarantees compliance.
05Choose an offer
Tell us which offer interests you
Choose the free assessment, one or more paid products, or both. ICT Solutions will follow up about the next step for each selection.
Your offer request has been received.
ICT Solutions has received your selected offers and practice details.
We will contact you about the next step for each selection.
Questions to settle before you decide.
The free assessment and each paid product have different scope. We will put proposed work in writing.
01Is the free 45-minute assessment the six-week assessment?
No. The free 45-minute assessment is a high-level conversation. The six-week HIPAA Risk Assessment is a separate $1,999 one-time engagement with deliverables set in the service agreement.
02Does an assessment certify HIPAA compliance?
No. It helps identify and prioritize risks. ICT Solutions supports HIPAA and Texas HB 300 readiness; it does not certify or guarantee compliance.
03What is included in the $5,995 per-practice, per-year bundle?
It combines training, the six-week assessment, and vulnerability scan and remediation with a client–server security package, automated patch management, MDR for servers, and EDR for workstations. The agreement defines limits, licenses, service period, and renewal.
04Are these EPDC rates guaranteed?
No. Event pricing may change or end without notice. The signed service agreement sets the final price and terms.
05What happens after I send the form?
ICT Solutions contacts you about the offers you selected. For the free assessment, we arrange a time. For a paid product, we discuss scope and a separate proposal.