Dental clinic IT backups in BC: how to know yours will restore

Your clinic’s backup probably runs every night and reports success. The harder question with dental clinic IT backups in BC is whether anyone has used one of those copies to bring the schedule, the charts and the X-rays back onto a working computer. Until that happens, you don’t know how long it would take or whether everything comes back.

What lives on a clinic server

Your practice management software holds the schedule, charts, treatment plans, billing, insurance claims and recall lists. Whether the clinic runs ABELDent, Dentrix, Tracker or ClearDent, that data usually sits in a database on a server or main workstation in the office, or with the vendor if you’ve moved to a hosted version.

X-rays, pans, CBCT scans and intraoral photos often live in a separate imaging program and storage folder, and those files are far larger than the chart data. A backup job set up years ago for the practice software may skip the imaging folder, and a sensor or scanner added later may save its files somewhere the backup never looks. Radiographs are part of the patient record, so losing them is a records problem as well as a clinical one.

What BC expects you to keep, and for how long

Dentists and other oral health professionals in BC are regulated by the British Columbia College of Oral Health Professionals (BCCOHP), formed in 2022 when the College of Dental Surgeons of BC merged with three other oral health colleges. Its Recordkeeping Practice Resource, in force since April 1, 2026, says the recordkeeping standards apply to all practice records, paper or electronic, wherever they’re stored. It also makes the practice owner responsible for the retention period set by BC’s Limitation Act.

The older CDSBC Dental Recordkeeping Guidelines, which that resource replaced, spelled the period out: 16 years from the last entry, and for a child, 16 years after they turn 19. That comes from the Act’s 15-year limit on lawsuits plus a year to serve one, and the 15-year limit hasn’t changed. Check your own case with your lawyer, but plan for patient records to stay readable for well over a decade. Backup history matters too, because a backup that keeps only 30 days of copies can’t help with a chart that was damaged four months ago.

BC’s Personal Information Protection Act (PIPA) also applies to private clinics, and section 34 requires reasonable security arrangements to protect the personal information you hold. The Office of the Information and Privacy Commissioner for BC publishes a security self-assessment with two questions that apply here: are backups stored off site, and are backup recovery procedures tested at regular intervals?

The 3-2-1 rule for dental clinic IT backups in BC

The Canadian Centre for Cyber Security recommends the 3-2-1 rule: three copies of your information (the original and two backups), on two different types of media, with one copy kept off site. For a clinic it usually looks like this:

• The live data on the server or hosted system.
• A backup on a separate device in the office, so a large restore doesn’t depend on your internet speed.
• A copy off site, in a cloud service or data centre, behind separate logins so ransomware on the office network can’t reach it or delete it.

PIPA’s security section doesn’t say off-site backups must stay in Canada, but a Canadian data centre is simpler to explain to patients who ask. Either way, know the provider, the location and who holds the encryption key.

Ransomware and the clinic server

Ransomware spreads to whatever the infected computer can reach, and the Cyber Centre notes that includes network-attached storage, the backup box many offices keep on the same network as everything else. So at least one copy should be offline or off site, where a compromised front-desk PC can’t touch it. If your only backup is a drive the server sees as a drive letter, expect it to be encrypted along with the server.

Why a backup nobody has restored can’t be relied on

Backup software tells you a job finished. It doesn’t tell you the database copy will open, that the imaging folder was included, that the practice software license will move to new hardware, or that anyone still knows the password to the cloud account. A restore test finds those gaps on a quiet afternoon while the real server is still running.

A rhythm that works for most small clinics:

1. Every month, restore a few files to a separate folder, including a recent X-ray and a recent chart, and open them.
2. Every quarter, restore the full practice database and imaging archive to a spare computer and log in to the practice software the way the front desk would.
3. Time that full restore from start to finish and write the number down.
4. Confirm the off-site copy is current and that you can reach it without the office server.
5. Keep a printed one-page note, stored away from the server, listing where the backups are, the account details and who to call.

How long a clinic could be down

The time from your quarterly test is your answer. It depends mostly on the size of the imaging archive and where the copy lives. As a rough example, 500 GB of images over a 100 Mbps internet connection takes about 11 hours at full speed, before anyone reinstalls software or reconnects sensors. A clinic in Surrey or Coquitlam with a full Monday book should know that number ahead of time, and it’s a good reason to keep a local copy next to the off-site one.

At Umbrella IT, a Burnaby company working with businesses across the Lower Mainland since 2013, we test backups by restoring real data on a schedule and go over the results at quarterly reviews. If you’re comparing options for dental IT in Vancouver, ask any provider, us included, for the date and result of the last full restore test for your clinic. Our dental clinic IT page and backup and disaster recovery service have more detail.

Common questions

How often should a dental clinic test its backups?

A small file restore every month and a full restore of the practice database and imaging every quarter suits most clinics. Test again after any change to the server or software.

How long do dental records need to be kept in BC?

BCCOHP’s current guidance points practice owners to BC’s Limitation Act. The college’s older guidelines put that at 16 years from the last entry, or 16 years after age 19 for a child.

Is a cloud-hosted practice management system already backed up?

The vendor usually backs up its own servers, but check the contract for how long copies are kept and how you’d get your data out. Imaging kept on a local computer still needs its own backup.

If you’d like someone to check what your clinic’s backups cover and time a test restore with you, book a free IT assessment.