Compliance Due Diligence for Dental Practices: Credentials, Exclusions, and the Sedation Permit Cascade

Most dental practices believe they sit outside the heaviest part of healthcare regulation. No hospital privileges to manage, no CMS Conditions of Participation, no Joint Commission survey. The reality is more uncomfortable. Any dental practice that bills Medicaid (and most do, particularly for pediatric care) sits inside the same federal exclusion regime as a 500-bed health system. Any practice offering sedation runs a permit cascade with five or six credentials that all have to be current at once. And the dental boards, which do not coordinate with the medical boards or the OIG, can suspend a license between the moment you onboarded a hygienist and the moment they next walk in for a shift.

The result is a category of practice that thinks of itself as low-risk while running a credential stack that fails the same way SNFs and ASCs fail. Here is what due diligence actually looks like in a dental practice that takes the regulators seriously.

Why "low risk" is wrong

The OIG has been bringing dental Medicaid fraud cases for years. Ocean Dental, an Oklahoma chain, paid more than $5 million to resolve allegations that it submitted false Medicaid claims for dental restorations that were either upcoded or not performed at all. State attorneys general, working through Medicaid Fraud Control Units, generate dental-specific actions every year. The OIG's enforcement actions database is searchable and well-stocked with dentist exclusions.

Add the DEA, which regulates the controlled substances any practice with sedation or post-op pain prescribing relies on. Add the state dental boards, which discipline dentists, hygienists, dental assistants, and expanded function dental assistants on independent timelines. Add anesthesia permit boards, which are themselves separate regulators in many states. The credential surface area is wider than the practice owner usually realizes.

Per-role credential checks

Dentists (DDS or DMD)

Active state dental license, no board actions. DEA registration if the dentist prescribes controlled substances, registered in every state where they prescribe. OIG LEIE clear, SAM.gov clear, state Medicaid exclusion list clear if the practice bills Medicaid. NPI active and taxonomy correct. Sedation or anesthesia permit if applicable, with all underlying prerequisites current.

Dental hygienists

Active hygienist license. Local anesthesia permit where the state allows hygienist administration. CE compliance current; many states require infection control and safety hours specifically. State board disciplinary history clear. Hygienists are licensed by state boards and can be excluded from federal programs in their own right.

Dental assistants and EFDAs

State certification or registration where required. Radiology certification (state-specific). Coronal polishing or expanded-function permits where the role includes them. Dental assistants are often treated as "non-licensed" staff in compliance frameworks, which is a mistake. In states that license or register them, they are in the same regulatory category as everyone else and can be the source of an exclusion or board action that the practice is responsible for catching.

The sedation team

This is where dental practices most often fail their due diligence. Anesthesia and sedation permits depend on prerequisite credentials that are themselves time-limited. See the full credential cascade for dental anesthesia permits. The pattern, with state-by-state variation, looks like this:

• Active dental license as the foundation.
• Specialty training in moderate sedation, deep sedation, or general anesthesia, completed and documented.
• Current ACLS for adult sedation/anesthesia. Often PALS additionally if the practice sedates pediatric patients.
• Current BLS as the prerequisite for ACLS and PALS.
• State sedation permit from the dental board, contingent on all of the above remaining current.

ACLS lapses every two years. BLS lapses every two years. PALS lapses every two years. The dental sedation permit may itself renew on a different cycle. If any of the underlying certifications lapses mid-permit-cycle, the permit holder is technically out of compliance with the permit conditions even if the permit document itself looks fine. See the BLS/ACLS/PALS/NRP comparison and how cascade credentials work.

OIG exclusion screening for dental practices

The federal exposure is the same as for any other healthcare provider. If the practice bills Medicaid and an excluded dentist, hygienist, or assistant participates in the care, the practice owes repayment plus civil monetary penalties under 42 USC 1320a-7a. The OIG's position is that the screening obligation is monthly and applies to every employee and contractor in any role connected to federal program billing. See the real cost of employing an excluded provider.

Pediatric dental practices have unusually high Medicaid exposure because Medicaid covers a large share of pediatric dental care nationally. A single excluded staff member working pediatric chairs for a year can generate liability that exceeds the entire annual practice profit.

Continuing education traps

Most state dental boards require CE on a multi-year cycle, with category breakdowns (clinical, infection control, opioid prescribing, jurisprudence, and so on). Two failure modes are common:

• Provider not approved. Hours completed through a CE provider not recognized by the state board do not count, even if the hygienist or dentist completed them in good faith. The renewal goes through, and then the audit notice arrives.
• Category miscount. A dentist completes the total hour count but lacks the required hours in a mandatory category like opioid prescribing or infection control. The renewal application is technically incomplete.

State board reporting obligations add a third trap. Many states require self-reporting of arrests, malpractice settlements, or out-of-state board actions within a defined window (often thirty days). Failure to self-report is itself a basis for discipline, separate from the underlying event.

Cadence: what to verify and how often

• Dental license, hygienist license, assistant registration: continuous monitoring. State boards can act between annual checks. Continuous license monitoring is the practical fix.
• OIG LEIE, SAM.gov, state Medicaid exclusion list: monthly for every employee and contractor.
• DEA registration: tracked to expiry with 90/60/30-day reminders.
• Sedation/anesthesia permit: tracked alongside every prerequisite credential it depends on. A permit holder whose ACLS lapsed last week is, in practical terms, no longer permitted.
• BLS, ACLS, PALS: 90-day prior-to-expiry monitoring on every credential, every cycle.
• CE compliance: tracked against state board category requirements, not just hour totals.
• Primary source verification: at hire and on a documented schedule thereafter. See what primary source verification means.

The audit trail

A dental practice that gets a state Medicaid audit letter, a board investigation notice, or an OIG self-disclosure decision needs to produce documentation that is timestamped, complete, and resistant to the obvious challenge of "you generated this after the fact." That is not what spreadsheets produce. That is what monitoring platforms produce, automatically, as a record of every screening event.

The practical test: if a regulator asked tomorrow whether your sedation dentist's ACLS was current on a specific date six months ago, can you answer with a system log? If the answer is "I think so, let me check the binder," you don't have an audit trail, you have a story.

What dental practices get wrong

The single most common pattern is treating credentialing as a one-time event at hire. A hygienist hired three years ago whose license has been quietly on probation for the last six months looks identical to a fully active hygienist on the schedule. The practice is billing Medicaid for cleanings she performs. A monthly LEIE check would not catch a probation-only board action, but a continuous license status monitor would. The two together close the gap.

The second most common pattern is treating sedation permits as a single credential rather than a stack. The permit document says "valid through 2027." The practice does not separately track the ACLS that has to remain current under the permit conditions. ACLS lapses in 2026. Nothing visibly changes until the dental board audits the permit holder and pulls the underlying records. By then, every sedation case run between the lapse and the audit is a problem.

Build the system before you need the system. The regulators do not grade on effort.