30-60-90 day plan for dental office managers
On this page
A dental office manager runs the business side of a practice: the schedule, insurance claims and collections, patient balances, the front desk team, supplies and vendors, and the compliance records that a practice often neglects until a breach or an inspection. The dentist who hires them usually wants two things: a fuller, steadier schedule and money collected faster. A 30-60-90 day plan for dental office managers should check the compliance basics in the first month, build a baseline of schedule and collections, and then fix the workflows behind broken appointments and unpaid claims.
This plan is for the practice owner or a dental group's regional manager hiring an office manager for a general or specialty practice. For an office manager outside healthcare, see the 30-60-90 day plan for office managers. The general structure is in the 30-60-90 day plan template for new hires.
HIPAA and OSHA records to check first
A dental practice is a HIPAA covered entity if it transmits health information electronically in connection with a covered transaction, such as an electronic insurance claim, under the definition in 45 CFR 160.103. Most practices that bill insurance electronically meet it. As of October 2026, the HIPAA rules a new manager should check include:
- Privacy official and training. 45 CFR 164.530 requires a designated privacy official and complaint contact, training for each new workforce member within a reasonable period, and retention of required policies and documentation for six years.
- Security risk analysis. The Security Rule at 45 CFR 164.308 requires an accurate and thorough assessment of risks to electronic protected health information, and risk management measures based on it.
- Breach notification. Under 45 CFR 164.404, affected individuals must be notified without unreasonable delay and no later than 60 calendar days after a breach is discovered. Under 45 CFR 164.408, breaches affecting 500 or more people are reported to HHS at the same time, and smaller breaches are logged and reported within 60 days after the end of the calendar year.
- Patient access. Under 45 CFR 164.524, a request for access to records generally must be acted on no later than 30 days after it is received.
Dental teams also have occupational exposure to blood, so OSHA's bloodborne pathogens standard applies: a written exposure control plan reviewed at least annually, training at initial assignment and at least annually, and hepatitis B vaccination made available within 10 working days of initial assignment. State dental boards, radiation control programs and state privacy laws add requirements of their own. Confirm what applies with counsel; this is not legal advice.
The 30-60-90 day plan
30-60-90 day plan — [Name], Dental Office Manager, [practice]
Reports to: [owner dentist / regional manager] Start: [date]
Practice: [N] dentists, [N] hygienists, [N] front office
Software: [practice management system] Payers: [main plans]
DAYS 1-30 — Records and baselines
Goals:
- Check HIPAA policies, privacy official designation, the last
security risk analysis and training records
- Check the OSHA exposure control plan, training and
vaccination records
- Baseline: insurance AR by age, claim rejections and denials,
patient balances, broken appointments, unfilled hours,
hygiene recall
- Sit at the front desk: check-in, check-out, phones, scheduling
- Meet every team member one to one
Deliverables by day 30:
- Compliance gap list with dates
- Baseline report the owner agrees with
Check-in: day 30, with [owner dentist]
DAYS 31-60 — Fix the workflows
Goals:
- Close the urgent compliance gaps (example: schedule the
overdue risk analysis, complete missing training)
- Verify insurance before the appointment, not at checkout
- Work the oldest insurance claims and denials by payer
- Set a confirmation and short-notice list process for the
schedule
Deliverables by day 60:
- AR over 90 days falling against the baseline
- Broken appointment process in place and tracked
Check-in: day 60
DAYS 61-90 — Own the business side
Goals:
- Show schedule, AR and recall against the baseline
- Review fee schedules and the main payer contracts with the
owner
- Set a monthly report for the owner with the same measures
Deliverables by day 90:
- Monthly report delivered; compliance gaps closed or dated
- One workflow improvement held for a full month
Check-in: day 90 — full reviewWhat to measure
The standards below are examples only. Define each measure with the owner and track it the same way every month.
| Measure | Why it matters | Example standard (example only) |
|---|---|---|
| Insurance AR over 90 days | Older claims are harder to collect | Falling against the day-30 baseline |
| Claim rejections and denials by reason | Shows where the front desk workflow breaks | Top reasons fixed at the source |
| Broken and unfilled appointment time | Lost production for dentists and hygienists | Tracked weekly; short-notice list used |
| Hygiene recall | Patients overdue for care and future production | Overdue patients contacted on a set schedule |
| Compliance gaps open | Breach and inspection exposure | Every gap owned and dated |
A filled example
Dental office manager: Linh Tran (invented), previously a front desk lead, joining a two-dentist general practice with three hygienists.
Day 30: Found no security risk analysis on file for several years and two staff without documented HIPAA training. The exposure control plan had not been reviewed in over a year. The baseline showed a large share of insurance AR over 90 days, mostly claims rejected for missing attachments or outdated subscriber information.
Day 60: Engaged an IT vendor for the risk analysis, completed the missing training and reviewed the exposure control plan with the lead assistant. Moved insurance verification to two days before each appointment and worked the oldest claims payer by payer.
Day 90: AR over 90 days fell against the baseline and rejections for subscriber information dropped. A confirmation call routine and a short-notice list reduced unfilled hygiene hours. The owner received the first monthly report with the same measures as the baseline.
What "on track" looks like
| Checkpoint | On track | Worth a direct conversation |
|---|---|---|
| Day 30 | Compliance checked; baseline agreed; time at the front desk | Only financial reports; no look at HIPAA or OSHA records |
| Day 60 | Urgent gaps closed; verification moved earlier; old claims worked | AR unchanged; denials resubmitted without fixing causes |
| Day 90 | Measures improving; monthly report running | Changes announced but not held; team confused about new steps |
What the practice owes the new office manager
- Authority over the front office schedule and processes, agreed with the dentists.
- Access to payer portals, contracts and fee schedules.
- Budget for compliance work, such as a risk analysis vendor, when gaps are found.
- A monthly meeting with the owner to review the same measures.
Common mistakes
| Mistake | Result | Fix |
|---|---|---|
| Chasing old claims without fixing intake | New rejections replace old ones | Verify insurance before the visit; fix top denial reasons |
| Treating HIPAA as a binder on a shelf | No risk analysis, no training records | Check the records in the first month |
| Changing every process at once | A confused front desk and patient complaints | One workflow at a time, held for a month |
| Reporting different numbers each month | The owner cannot see progress | Define measures at day 30 and keep them |
Working with the clinical team
A dental office manager usually does not supervise clinical work, but the schedule and the front desk affect it every hour. Agree with the dentists and the hygiene team on how procedures are scheduled (example: blocks for crowns or new patient exams), who can move appointments, and how treatment plans are presented and followed up. Ask the lead assistant and lead hygienist what slows their day, because many front desk fixes, like accurate appointment notes and confirmed insurance, help the clinical side as much as collections.
Adapting the plan
- Dental groups with central billing: focus the money work on front desk data quality and coordination with the billing team rather than working claims directly.
- Specialty practices: add referral tracking with general dentists and the documentation payers require for specialty procedures.
- Practices with heavy medical billing or cash pay: adjust the baseline to the payment mix and add financing or membership plan administration.
If you are building the team, the dental assistant screening questions, dental hygienist screening questions and medical billing coder screening questions cover the roles a dental office manager works with most.
Questions people ask
What should a new dental office manager check first?
Compliance records and the money. On compliance: the HIPAA privacy and security policies, the last security risk analysis, staff training records and the OSHA bloodborne pathogens exposure control plan. On money: insurance accounts receivable by age, rejected and denied claims, patient balances and the schedule for the next few weeks.
What HIPAA rules does a dental office manager need to know?
A dental practice that transmits health information electronically in standard transactions, such as insurance claims, is a HIPAA covered entity. It must designate a privacy official, train its workforce, keep policies and required documentation for six years, conduct a security risk analysis and follow breach notification rules, including notifying affected patients without unreasonable delay and no later than 60 days after discovery. This is not legal advice.
How do you measure a dental office manager's first 90 days?
Against the day-30 baseline: insurance AR over 90 days, claim rejections and denials, broken or unfilled appointment time, hygiene recall, and patient balances. Add compliance items closed, such as an updated risk analysis or completed training. Use the practice's own history rather than industry figures.
Should a new dental office manager change the practice management software?
Not in the first 90 days unless the current system is failing. Most problems in a dental office come from how the system is used: incomplete insurance information at scheduling, codes entered late or claims not followed up. Fix the workflow first, then decide on software with evidence.