
New York
Your all-in-one guide for OSHA, HIPAA, Infection Control, Radiation Safety, HR, and State Board CE.
Operate with confidence. This New York guide explains what’s required and how to keep it organized year after year.
♥️ CE and Compliance Courses for Dental Professionals
Our Services: Tailor-Made Services for Every Need
Give us a try!
10% off
Use Coupon Code toothnerd2025

Crafted by clinical risk experts with real-world dental experience — and backed by top-tier friends across the industry.





Federal Compliance Guidelines for Dental Practices
Last Reviewed 10/27/2025
Protecting your team, your patients, and your license starts with knowing the federal standards that every dental practice must meet.
Dental practices operate in one of the most regulated environments in healthcare. Federal agencies such as OSHA, HHS, CDC, and the FDA establish national rules that define safe, ethical, and compliant dental care. Whether you’re a single-location practice or a multi-state DSO, these federal frameworks create the foundation upon which all state-specific regulations are built.
The five pillars of federal compliance in dentistry are:
-
OSHA – Workplace Safety and Hazard Communication
-
HIPAA – Patient Privacy and Data Security
-
Infection Control – Universal Precautions and CDC Standards
-
Radiation Safety – ALARA Principles and Equipment Performance
-
Emergency Preparedness – Response Planning and Team Readiness
1. OSHA Compliance in Dental Settings
Overview
The Occupational Safety and Health Administration (OSHA) sets national standards to protect dental employees from workplace hazards such as bloodborne pathogens, hazardous chemicals, ergonomic injuries, and sharps exposure. Every dental employer must maintain written safety programs, provide training, and document compliance activities.
Key Federal Requirements
-
Bloodborne Pathogens Standard (29 CFR 1910.1030):
Requires an Exposure Control Plan, annual training, use of safer sharps, and free hepatitis B vaccinations. -
Hazard Communication Standard (29 CFR 1910.1200):
Mandates a Hazard Communication Plan, Safety Data Sheets (SDS), chemical labeling, and staff training. -
Personal Protective Equipment (PPE) Standard:
Employers must assess and provide appropriate PPE—gloves, masks, eyewear, gowns—and train on proper use. -
Ergonomic and Injury Prevention:
Practices must identify repetitive strain risks and maintain OSHA injury logs (Form 300).
Documentation & Training
-
Written plans (BBP, HazCom, IIPP or Safety Program)
-
Employee exposure incident logs and post-exposure protocols
-
Annual training with proof of attendance
Common Pitfalls
Failure to update annual training, missing SDS binders, and outdated exposure control plans are among the top citations in dental OSHA audits.
2. HIPAA & Federal Privacy Requirements
Overview
The Health Insurance Portability and Accountability Act (HIPAA) is enforced by the U.S. Department of Health and Human Services (HHS) through the Office for Civil Rights (OCR). It safeguards patient information (PHI) in all formats—paper, electronic, and verbal.
Key Federal Rules
-
Privacy Rule: Governs how PHI is used and disclosed.
-
Security Rule: Requires technical, physical, and administrative safeguards for ePHI.
-
Breach Notification Rule: Mandates reporting of any unauthorized PHI disclosure.
Practice Obligations
-
Maintain written HIPAA policies and procedures
-
Conduct an annual Security Risk Assessment
-
Appoint a Privacy Officer and Security Officer
-
Train all staff upon hire and annually
-
Sign and maintain Business Associate Agreements (BAAs) with vendors
Common Pitfalls
Improper disposal of records, unsecured computers, weak passwords, and lack of encryption are frequent violations. HHS fines can reach millions of dollars per breach event.
3. Infection Control Standards
Overview
Federal infection control expectations stem from the Centers for Disease Control and Prevention (CDC) and OSHA’s Bloodborne Pathogen Standard. Every dental practice must adhere to the CDC’s Guidelines for Infection Control in Dental Health-Care Settings (2003) and periodic updates.
Core Elements
-
Standard Precautions: Treat every patient as potentially infectious.
-
Engineering Controls: Use sharps containers, dental unit waterline management, and sterilization monitoring.
-
Work Practice Controls: Proper hand hygiene, use of PPE, instrument cleaning, sterilization, and safe injection practices.
-
Environmental Cleaning: Disinfect clinical contact surfaces between patients.
Documentation & Monitoring
-
Written infection control plan and sterilization logs
-
Weekly spore testing records
-
Waterline monitoring and maintenance
-
Annual infection control training
Common Pitfalls- Failure to perform weekly spore testing, improper sterilization packaging, and overlooking dental waterline maintenance.
4. Radiation Safety in Dentistry
Overview
Federal radiation safety oversight is shared by the U.S. Food and Drug Administration (FDA) and the Nuclear Regulatory Commission (NRC). While most operational rules are enforced at the state level, federal standards define how equipment is manufactured, operated, and maintained.
Core Federal Standards
-
FDA Performance Standards (21 CFR 1020.30-31): Regulate dental X-ray machine design and radiation output.
-
ALARA Principle (“As Low As Reasonably Achievable”): Minimizes exposure for patients and staff.
-
Operator Protection: Use of lead barriers, dosimeters where required, and safe positioning (6 feet and 90-135° from beam).
-
Equipment Quality Assurance: Regular calibration, maintenance, and testing per manufacturer and state requirements.
Documentation & Training
-
Equipment maintenance and inspection logs
-
Radiography technique chart and exposure protocols
-
Annual radiation safety training for all operators
Common Pitfalls- Expired equipment registrations, missing QA logs, and inadequate shielding or operator distance awareness.
5. Emergency Preparedness & Medical Readiness
Overview
While no single federal law dictates dental emergency preparedness, multiple agencies—OSHA, CDC, ADA, and DHS—establish expectations for medical and workplace emergencies. Every practice must maintain an Emergency Action Plan and ensure staff readiness for both medical and environmental crises.
Core Requirements
-
OSHA Emergency Action Plan (29 CFR 1910.38): Procedures for evacuation, reporting fires, and contacting emergency services.
-
Medical Emergencies in Dentistry: Maintain an emergency kit, AED, oxygen tank, and train staff in Basic Life Support (BLS).
-
CDC Guidance: Infection and biohazard response, including pandemic preparedness.
-
Homeland Security (DHS): Encourages all healthcare facilities to have continuity and disaster response plans.
Documentation & Training
-
Written Emergency Action Plan and posted evacuation routes
-
Annual mock drills and CPR certification
-
Maintenance logs for emergency medications and AED checks
Common Pitfalls- Expired emergency drugs, untrained front desk personnel, and lack of posted emergency numbers.
Why Federal Compliance Matters
Federal compliance isn’t just about avoiding penalties—it’s about building a culture of safety, trust, and accountability. A practice that masters federal requirements can more easily meet state-specific laws, pass inspections, and maintain operational integrity across multiple locations.
Next Steps for Dental Teams
-
Audit your OSHA, HIPAA, Infection Control, and Radiation Safety programs annually.
-
Document all training and review your written plans.
-
Conduct mock emergencies and incident response drills.
-
Use a centralized compliance platform—like Done Desk or Tooth Nerd Quick Start Programs—to manage documentation, renewals, and training.
Protect your practice. Empower your people. Stay compliant.
Explore the Quick Start Compliance Program for ready-to-use OSHA, HIPAA, Infection Control, and Radiation Safety plans built specifically for dental practices.
State Guidelines
New York-Specific Information
Regulating Bodies
New York State Education Department (NYSED) — Office of the Professions, State Board for Dentistry — regulates licensure, continuing education, infection-control training, sedation permits, and professional discipline under New York Education Law, Article 133.
New York State Department of Health (NYSDOH) — Bureau of Environmental Radiation Protection — oversees registration, inspection, and compliance for dental X-ray machines.
Federal OSHA — New York does not operate a state OSHA plan; all dental employers fall under federal OSHA jurisdiction.
New York Department of Labor (NYDOL) — offers workplace safety consultation and labor compliance programs.
Licensing & Continuing Education
Dentists: Renew triennially; must complete 60 hours of continuing education per renewal period.
Required CE includes:
Infection Control and Barrier Precautions Course (every 4 years) — mandated by 10 NYCRR §239.2.
CPR/BLS certification from an approved provider.
2 hours in Ethics or Professional Conduct recommended.
Opioid Prescribing and Pain Management training required for DEA-registered prescribers.
CE must be taken from NYSED-approved providers.Dental Hygienists: Renew triennially; must complete 24 hours of CE and the Infection Control and Barrier Precautions Course.
CE records must be retained for at least six years for audit.
Reference: 8 NYCRR §61.15 – Continuing Education Requirements.
Workplace Safety (Federal OSHA)
New York dental offices fall under federal OSHA for workplace safety enforcement.
Employers must maintain written Exposure Control and Hazard Communication Plans, conduct annual Bloodborne Pathogens and HazCom training, and ensure PPE use and documentation.
Maintain injury, training, and post-exposure records for inspection.
OSHA enforcement in New York is handled through the Albany, Manhattan, and Syracuse Area Offices.
The NYDOL On-Site Consultation Program offers voluntary compliance assistance to small employers.
Radiation Safety
All dental X-ray equipment must be registered with the NYSDOH Bureau of Environmental Radiation Protection.
Maintain Quality Assurance (QA) and Quality Control (QC) logs, operator competency documentation, and annual calibration or performance tests.
Radiation control regulations are codified in 10 NYCRR Part 16 (Ionizing Radiation).
Operators must complete appropriate Dental Radiography Safety training as part of their professional education or through NYSED-recognized coursework.
NYSDOH conducts periodic compliance inspections of dental facilities statewide.
Infection Control & Patient Safety
New York mandates that all licensed dentists, hygienists, and dental assistants complete a state-approved Infection Control and Barrier Precautions Course every 4 years.
Dental offices must maintain written infection-control policies addressing sterilization, disinfection, and PPE.
Weekly biological (spore) testing of sterilizers is required; results must be recorded and kept for inspection.
Practices must follow CDC guidelines and OSHA Bloodborne Pathogens standards.
The State Board may inspect offices for infection-control documentation and training compliance.
References: 10 NYCRR §239.2 and 8 NYCRR §61.18.
Emergency Preparedness
Dental facilities must maintain emergency equipment, oxygen, and drugs appropriate for the services performed.
At least one team member with current BLS certification must be present whenever patients are treated.
Sedation and anesthesia permit holders must maintain ACLS or PALS certification, conduct annual mock emergency drills, and document training and equipment checks.
Emergency preparedness is reviewed during permit renewal or complaint investigation by NYSED.
Official Resources
New York State Board for Dentistry
8 NYCRR §61.15 – Continuing Education
New York State Department of Health – Bureau of Environmental Radiation Protection
10 NYCRR Part 16 – Ionizing Radiation Rules
10 NYCRR §239.2 – Infection Control and Barrier Precautions
Get Started
Now that you know everything it's time to get started by training your people and operationalizing excellence with Done Desk!
Dental Team Training Requirements in New York
Overview
New York licenses and regulates dental professionals through the New York State Education Department (NYSED), Office of the Professions – State Board for Dentistry. Dental X-ray registration, operator rules, and QA/QC fall under the NY State Department of Health (NYSDOH) – Bureau of Environmental Radiation Protection (10 NYCRR Part 16).
Private practices follow federal OSHA; all providers must comply with HIPAA and CDC infection-control guidance. New York also mandates a state-approved Infection Control & Barrier Precautions course for dentists, hygienists, and RDAs, and separate mandatory prescriber education for controlled-substance prescribers.
Dentist Training Requirements
Required Training
OSHA Bloodborne Pathogens & Hazard Communication (Annual): Written Exposure Control & HazCom plans; engineering controls, PPE, post-exposure steps; documented annual training.
New York Infection Control & Barrier Precautions Course: State-approved course; complete initially and at required intervals (NYSED cycle) to maintain licensure.
Child Abuse Identification & Reporting: One-time NYSED-approved course for initial licensure (keep proof on file).
Radiation Safety & X-ray Registration: Register dental X-ray units with NYSDOH; maintain QA/QC tests, operator instructions, signage, and ALARA per 10 NYCRR Part 16.
CPR/BLS (Current).
Continuing Education (CE): 60 hours every 3 years (triennial). CE must be offered by NYSED-approved providers; include infection control, ethics/jurisprudence, medical emergencies.
Mandatory Prescriber Education (if DEA/CDS): Periodic NY training in pain management, palliative care, and addiction (I-STOP/ESCR compliance).
HIPAA Privacy & Security: Workforce training, access controls, breach response, documentation.
Recommended
Risk management & documentation (informed consent, adverse events).
Medical emergency preparedness (ACLS/PALS if providing deeper sedation).
Leadership, harassment-prevention, inclusive communication.
Cybersecurity for ePHI and ransomware defense.
Dental Hygienist Training Requirements
Required Training
OSHA BBP & HazCom (Annual).
NY Infection Control & Barrier Precautions (State-approved, per NYSED interval).
Radiography: Hygienists are authorized operators under dentist supervision; comply with 10 NYCRR Part 16 operator-safety rules and facility QA/QC.
CPR/BLS (Current).
CE: 24 hours every 3 years (triennial) from NYSED-approved providers; include infection control, ethics/jurisprudence, and patient-safety topics.
Recommended
Ergonomics & musculoskeletal injury prevention.
HIPAA communications and secure teledentistry.
Local anesthesia/nitrous CE (if credentialed).
Medical emergency recognition and oxygen basics.
Dental Assistant Training Requirements
Required Training
OSHA BBP & HazCom (Annual).
NY Infection Control & Barrier Precautions (State-approved, per NYSED interval).
Radiography (if taking X-rays): Only NYS Licensed/Registered Certified Dental Assistants (RDA), licensed hygienists, or dentists may operate X-ray equipment. RDAs must meet NYSED education/credentialing and adhere to 10 NYCRR Part 16 (operator rules, signage, ALARA, QA logs).
CPR/BLS (Current).
HIPAA Privacy & Security (Initial + periodic refresh).
Recommended
Expanded/EFDA-style skills permitted by NY scope (impressions, temporaries, polishing/sealants when credentialed).
Instrument processing QA, weekly spore-test logging, maintenance checks.
Emergency preparedness drills and chemical spill response.
Chairside efficiency and service recovery.
Front Desk & Administrative Staff Training Requirements
Required Training
HIPAA Privacy & Security: Minimum-necessary access, disclosures/authorizations, release-of-records, breach response; role-based access controls.
OSHA Awareness: General safety training for non-clinical staff working in healthcare settings (especially if assisting near clinical areas).
Recommended
Scheduling optimization, recall/broken-appointment protocols.
Insurance/billing compliance and financial communications.
Cybersecurity basics (phishing, passwords, device security).
De-escalation, service recovery, and patient experience.
Records retention timelines (state/federal).
Operational Best Practices (All Roles)
Keep written plans current: Exposure Control, Hazard Communication (SDS access), Infection Control/Instrument Reprocessing, Post-Exposure, Emergency Action Plan.
Sterilizer monitoring: Perform and log weekly biological (spore) tests; document maintenance and load tracking.
Radiation QA/QC: Collimation, shielding, technique charts, performance tests, operator instructions; keep NYSDOH registration and inspection paperwork current.
Emergency drills: Document mock events (syncope, anaphylaxis, airway); check oxygen/AED/emergency kit monthly.
Maintain a compliance binder with OSHA/HIPAA certificates, CE, NY infection-control/child-abuse course proofs, radiography credentials, and QA documents.
State References
NYSED – State Board for Dentistry (Office of the Professions) — licensure, CE, infection-control/child-abuse coursework approval
NYSDOH – Bureau of Environmental Radiation Protection (10 NYCRR Part 16) — dental X-ray registration & operator rules
I-STOP / ESCR — prescriber monitoring & mandatory education
CDC Infection Control in Dental Settings
OSHA Dentistry — BBP (29 CFR 1910.1030), HazCom (1910.1200)
HIPAA — Privacy & Security Rules (45 CFR 164)
Turn New York’s layered requirements into a clean checklist.
Enroll your team in Tooth Nerd’s NY-approved Infection Control course, plus OSHA, HIPAA, Radiation Safety, and role-specific CE. Automate renewals, store proofs, and stay inspection-ready without the scramble by using Done Desk.
Get Started
Now that you know everything it's time to get started by training your people and operationalizing excellence with Done Desk!
Home
Contact
support @ Toothnerd.com
Tel. (512) 222-3812
