Lesson 4: OSHA Basics for the Dental Office

Lessons 1 through 3 were about infection control, which protects patients and staff. This lesson is about employee safety law, which protects staff specifically. The two overlap heavily in practice, and they come from completely different places: infection control guidance comes from CDC and is advisory, while OSHA standards are enforceable regulations with an employer on the hook.

The distinction matters because it explains the shape of the requirements. OSHA does not care whether your patients get an infection. It cares whether your employees are exposed to blood and chemicals, whether they were trained, whether the protective equipment was provided free, and whether you can prove all of it.

There is no dental OSHA standard

People talk about "OSHA for dental offices" as if it were a single rulebook. It is not. OSHA has general industry standards, and a dental practice is subject to the ones that fit what happens in the building. The ones that matter most:

Plus the general duty clause, which requires employers to keep the workplace free from recognized serious hazards even where no specific standard applies. Waste anesthetic gas from nitrous oxide is a good example: there is no OSHA permissible exposure limit for nitrous oxide, but NIOSH recommends controlling exposure and scavenging, and an uncontrolled nitrous setup is a recognized hazard.

Bloodborne pathogens: 29 CFR 1910.1030

This is the standard that shapes dental practice. Its parts, in the order you would build them:

The written exposure control plan

A written plan that identifies the job classifications with occupational exposure, describes the tasks and procedures involved, explains how the practice complies with each part of the standard, and documents the procedure for evaluating exposure incidents.

Two features people miss:

• It must be reviewed and updated at least annually, and whenever tasks, procedures, or positions change in a way that affects exposure. An annual review is a dated, documented event, not a plan that sits in a binder.
• The annual review must document the consideration and implementation of safer medical devices, and the employer must solicit input from non-managerial employees with direct patient care exposure on the identification and selection of those devices, and document that solicitation in the plan. In a small practice, ask everyone who is exposed, write down that you asked, and write down what they said.

Engineering and work practice controls

Engineering controls remove or isolate the hazard: sharps disposal containers, self-sheathing or retractable needle devices, safer scalpels, needle recapping devices. Where a safer device is commercially available, appropriate, and effective, the employer is expected to consider and implement it, and to document annually when no suitable option exists for a given procedure.

Work practice controls change behavior: no recapping needles two-handed (use a one-handed scoop or a mechanical device), no bending or breaking needles, sharps containers located close to the point of use, no eating or drinking or applying cosmetics in work areas, hand hygiene after glove removal, and mechanical means rather than hands for picking up broken contaminated glassware.

PPE

Provided by the employer at no cost to the employee, in appropriate sizes, readily accessible, with cleaning, laundering, repair, replacement, and disposal at the employer's expense. Contaminated protective clothing stays at the workplace.

Hepatitis B vaccination

Offered within 10 working days of initial assignment to all employees with occupational exposure, at no cost, after the employee has received the required training, and following US Public Health Service recommendations, including post-vaccination antibody testing one to two months after the series is completed. An employee who declines signs a declination statement in the wording the standard specifies, and may request and receive the vaccination later at any time.

Post-exposure evaluation and follow-up

Available immediately, confidential, at no cost. It includes documenting the route and circumstances of exposure, identifying and testing the source individual where permitted by law, testing the exposed employee with consent, post-exposure prophylaxis per current recommendations, counseling, and a written opinion from the evaluating healthcare professional. Write the procedure into the exposure control plan, including who to call and where to go, and make sure it is posted where an assistant can find it at 4:45 on a Friday.

Labels and signs

Biohazard labels or red bags on containers of regulated waste, sharps containers, refrigerators and freezers holding potentially infectious material, and containers used to store or transport such material.

Training

At the time of initial assignment to tasks with occupational exposure, and at least annually thereafter, within one year of the previous training. It must be interactive, delivered by a person knowledgeable in the subject matter, and give employees an opportunity to ask questions. Additional training is required when new tasks or procedures change exposure. The standard specifies the content, including an explanation of the standard itself, epidemiology and symptoms, modes of transmission, the practice's exposure control plan and how to get a copy, controls and PPE, the hepatitis B vaccine, what to do in an exposure incident, and the post-exposure procedure.

Records

Medical records are confidential and are not disclosed without the employee's written consent except as the standard allows.

Hazard communication: 29 CFR 1910.1200

Hazard communication is the standard that gets quietly ignored in dental offices, usually because nobody thinks of disinfectant and etchant as industrial chemicals. The requirements:

1. A written hazard communication program describing how the practice handles labels, safety data sheets, and training.
2. A list or inventory of the hazardous chemicals in the workplace.
3. Safety data sheets (SDS) for each hazardous chemical, readily accessible to employees during their shift. Electronic access counts if employees can actually get to it without barriers and there is a backup for power or system failure.
4. Labels. Manufacturer containers keep their labels intact. Secondary containers, meaning anything you decant a chemical into, must be labeled with the product identifier and the hazard information.
5. Employee training on the standard, the hazards, how to read labels and SDSs, protective measures, and where the written program and SDSs are kept.

The 2024 update

OSHA published a final rule on May 20, 2024 updating the hazard communication standard to align with the seventh revision of the Globally Harmonized System, changing label and safety data sheet requirements. Compliance dates phase in over several years, and OSHA subsequently extended them by four months, pushing the first substance deadline for manufacturers, importers, and distributors from January 19, 2026 to May 19, 2026, with the other dates shifted accordingly.

What that means for a dental practice is mostly downstream: as suppliers send updated labels and safety data sheets, the practice updates its own SDS collection, updates workplace labeling, and retrains employees on the new label elements. Check current dates on the OSHA hazard communication rulemaking page, since extensions and corrections have been issued.

The rest of the list

• Eyewash. 1910.151(c) requires suitable facilities for quick drenching or flushing of the eyes and body within the work area where the eyes or body may be exposed to injurious corrosive materials. Whether your practice needs a plumbed eyewash station, and what specification it should meet, depends on the chemicals you use and on interpretation, so make the call with a qualified safety consultant and your state program rather than guessing.
• First aid. Adequate first aid supplies readily available, and trained personnel where medical facilities are not in near proximity.
• The poster. The OSHA "Job Safety and Health: It's the Law" poster must be displayed where employees can see it. It is free from OSHA.
• Reporting serious events. Regardless of the recordkeeping exemption, employers must report to OSHA any work-related fatality within 8 hours, and any work-related inpatient hospitalization, amputation, or loss of an eye within 24 hours.
• Employee rights. Employees may file complaints and request inspections, and retaliation for doing so is prohibited. Practically, this is worth knowing because the most common trigger for a dental office inspection is an employee complaint. See what happens during an OSHA inspection of a dental office.
• Waste. Regulated medical waste, sharps, amalgam, and chemical waste are handled under a mix of OSHA, EPA, and state rules. See dental waste disposal.

Building the annual cycle

Almost everything above has a date attached, which means the whole thing can be run off a calendar instead of a memory. A workable annual cycle:

Our annual OSHA and compliance calendar puts these on dates, and the compliance chapter covers how this fits with HIPAA and the rest.

Try it

1. Find the exposure control plan and look for the date of the last annual review. If it is more than a year old, or if it is a generic document with the practice name typed in and nothing customized, you have found the practice's largest OSHA gap.
2. Check the safer-device documentation. Is there a record of asking non-managerial clinical staff about sharps devices, and of what was considered? If not, run that conversation this month and write it down.
3. Walk the building with a clipboard and write down every chemical container you see. Compare that list to the SDS binder or system. Fix both directions: missing sheets and sheets for products long gone.
4. Look for unlabeled secondary containers. Spray bottles, squeeze bottles, cups in the lab. Label or discard every one you find.
5. Verify the training records. Pull the last three years of bloodborne pathogens training documentation and confirm each session records the date, contents, trainer name and qualifications, and attendees.
6. Test the post-exposure plan. Ask a team member what they would do if they were stuck with a contaminated needle at 4:45 on a Friday. If they cannot answer in two sentences, the plan exists on paper only.

Check yourself

1. Is there an OSHA standard written specifically for dental offices?

No. OSHA applies its general industry standards, most importantly bloodborne pathogens and hazard communication, to dental practices. State Plans can add requirements, and state dental boards and health departments have their own separate rules.

2. How often must the exposure control plan be reviewed, and what must the review document?

At least annually, and whenever tasks, procedures, or positions change exposure. The review must document consideration and implementation of appropriate safer medical devices, and the plan must document that the employer solicited input from non-managerial employees with direct patient care exposure.

3. When must hepatitis B vaccination be offered to a new exposed employee, and who pays?

Within 10 working days of initial assignment, after training, at no cost to the employee. An employee who declines signs the declination statement the standard specifies and may accept the vaccination later.

4. How long do training records and employee medical records have to be kept?

Training records for three years from the date of training. Employee medical records for the duration of employment plus 30 years, kept confidential.

5. Why are many dental offices not federally required to keep a sharps injury log, and why keep one anyway?

Because the sharps injury log requirement is tied to Part 1904 recordkeeping, and NAICS 6212, Offices of Dentists, appears on the list of partially exempt industries. Keep one anyway because it is how you notice patterns, such as one device or one task causing repeat injuries, and because a State Plan may require it. Serious events must still be reported regardless of the exemption.

Where to go next

Lesson 5 pulls the whole course together into an inspection-ready state: the documents, the walkthrough, the self-audit, and what to do when an inspector actually arrives.

Related reading: what happens during an OSHA inspection, the annual compliance calendar, and the compliance chapter for HIPAA and the rest of the picture. Next: Lesson 5: Being Inspection Ready.

This guide is educational content and does not constitute legal, financial, tax, or clinical advice. Laws and regulations vary by state and change over time. Consult your own dental-specific attorney, CPA, and state dental board before acting.