The best practice for deploying permission sets from a sandbox to production is to use a change set. Change sets allow administrators to push configurations, including permission sets, directly from one Salesforce environment to another. This ensures a smooth and error-free transfer of configurations, maintaining the integrity of permissions and access controls in the production environment.