Dental IT support in St. Louis, Missouri

Most compliance advice assumes a practice answers to one state. In St. Louis that assumption breaks the moment a patient drives across the river.

Dental IT support in St. Louis has to account for a metro split across two states with genuinely different breach rules. A practice in Chesterfield and a practice in Belleville can face the same incident and owe different things to different regulators, and the Illinois side carries a requirement that catches HIPAA-compliant practices off guard.

Medix Dental IT has worked exclusively in dental for more than 20 years, supporting single offices through multi-location DSOs. Here is what running dental IT across the St. Louis metro actually requires.

The Illinois Rule That Catches Compliant Practices

The St. Louis metro spans both Missouri and Illinois, and roughly 680,000 people live on the Illinois side alone. Most established practices here treat patients from both.

Missouri is the simpler of the two. Under Mo. Rev. Stat. § 407.1500, consumer notice is due “without unreasonable delay” with no fixed day count, and when a practice notifies more than 1,000 consumers at one time, it must also notify the Attorney General and the nationwide consumer reporting agencies. Unlike Iowa and Wisconsin, Missouri’s statute does not name HIPAA as an exemption, so a practice here should not assume the federal process alone closes out the state question.

Illinois is where practices get caught. Under 815 ILCS 530/50, a HIPAA-covered entity is deemed compliant with Illinois law only if, when it notifies the Secretary of Health and Human Services, it also provides that notification to the Illinois Attorney General within five business days. Doing the federal process correctly and stopping there leaves an Illinois obligation unmet.

Two more Illinois details matter. The Personal Information Protection Act expressly counts medical information and health insurance information as protected data, which is most of what a dental practice holds. And separate notice to the Illinois Attorney General is required when a single breach affects more than 500 Illinois residents.

The practical consequence is that a bi-state group cannot run one incident response plan and assume it covers every location. It needs to know which residents were affected, in which state, before the clock starts.

Eight Inches in a Day, and a 1915 Record Broken

On July 26, 2022, St. Louis Lambert International Airport recorded 8.64 inches of rain in 24 hours, breaking a record of 6.85 inches that had stood since August 1915. Parts of the corridor from Hawk Point to St. Peters saw close to 11 inches in about eight hours. Two people died.

Flooding is a different failure mode than a storm that takes the roof off. Water reaches ground-floor server closets, and a practice discovers that its backup drive was sitting on the same floor as the server it was backing up. That is not a backup, that is a second copy in the same hazard zone.

Our assessments look at where your data physically lives and whether recovery has ever been tested end to end. Untested backups are not backups.

Dental IT Services for a Two-State Metro

Group dental is well represented across the metro. Aspen Dental operates offices in Brentwood, Bridgeton, Florissant, Overland, St. Charles, St. Peters and Wentzville, Midwest Dental runs Watson Road and Seven Oaks, and La Cross Dental covers the Illinois side from Edwardsville with offices in Belleville, Collinsville, Granite City, O’Fallon and beyond. About 15.7% of Missouri dentists and 14.6% of Illinois dentists were DSO-affiliated in 2024, per ADA Health Policy Institute data.

What we provide, framed for the St. Louis operating reality:

  • Bi-state compliance support that tracks Missouri and Illinois obligations separately, including the Illinois five-business-day Attorney General requirement that runs alongside HIPAA.
  • Enterprise-grade cybersecurity. Managed detection and response, identity governance, and tenant-level monitoring inside Microsoft 365 or Google Workspace. Antivirus is not a cybersecurity program.
  • Backup and disaster recovery designed so your recovery copy is not sitting in the same flood zone as your server. See our guide to dental data backup.
  • Dental software expertise across Dentrix, Eaglesoft, and Open Dental, including cloud deployments that scale across locations.
  • IT KPI reporting on uptime, MFA adoption, endpoint compliance, and backup health, so IT performance stops being anecdotal and starts being measured like production.

We support practices on both sides of the river, including Chesterfield, Clayton, Kirkwood, Ballwin, Creve Coeur, Webster Groves, Florissant, Town and Country, St. Charles and O’Fallon in Missouri, plus Belleville, Edwardsville, Collinsville, Alton and Granite City in Illinois.

Multi-factor authentication reduces the risk of account compromise by 99.22%. In a metro where one incident can put you in front of two attorneys general, the cheapest control available is also the one most often left switched off.

If you are running locations in both states and want one operating standard rather than two, we publish DSO technology playbooks and are happy to compare notes.

St. Louis Dental IT Support FAQs

What areas around St. Louis does Medix Dental IT support?

We support dental practices across the bi-state metro, including St. Louis city and county, Chesterfield, Clayton, Kirkwood, Ballwin, Creve Coeur, Webster Groves, Florissant, Town and Country, St. Charles and O’Fallon on the Missouri side, plus Belleville, Edwardsville, Collinsville, Alton, Granite City and O’Fallon on the Illinois side. Support is a mix of remote response and on-site visits when hardware needs hands on it.

How do Missouri and Illinois breach notification rules differ?

Missouri requires consumer notice without unreasonable delay, with no fixed deadline, and adds Attorney General and consumer reporting agency notice when a practice notifies more than 1,000 consumers at one time. Illinois requires Attorney General notice when more than 500 Illinois residents are affected, and under 815 ILCS 530/50 a HIPAA-covered practice is deemed compliant only if it also sends the Attorney General its HHS notification within five business days. A practice treating patients from both states has to satisfy both.

We follow HIPAA. Is that enough on the Illinois side?

Not by itself. Illinois grants HIPAA-covered entities compliance status on the condition that the Attorney General receives the same notification sent to the Secretary of Health and Human Services within five business days. A practice that runs a clean federal breach process and stops there has still missed a state requirement, which is why the Illinois step belongs in your incident response plan rather than being discovered during an incident.

Do you support St. Louis DSOs and multi-location dental groups?

Yes, and the bi-state split is exactly where group IT gets difficult. Every new office multiplies identity, security, and standardization work, and here it can also change which state’s rules apply. We build one security baseline and unified governance across locations, with compliance handling that accounts for both states, and we report IT KPIs at the group level.

What dental software does your St. Louis team support?

We support the platforms St. Louis practices run, including Dentrix, Eaglesoft, and Open Dental, along with the imaging systems that move large files across the practice network. For groups consolidating onto a cloud platform, we handle Open Dental cloud deployments that scale across multiple locations.

Posted in Service Areas

Filter By: