top of page
Tooth Nerd Logo Black White_edited.jpg
Tooth Nerd Logo Black White_edited.jpg

North Carolina

Your all-in-one guide for OSHA, HIPAA, Infection Control, Radiation Safety, HR, and State Board CE.

Operate with confidence. This North Carolina guide explains what’s required and how to keep it organized year after year.

♥️ CE and Compliance Courses for Dental Professionals

Our Services: Tailor-Made Services for Every Need

Give us a try! 

10% off

Use Coupon Code  toothnerd2025

Young woman at a brightly lit conference.jpg

Crafted by clinical risk experts with real-world dental experience — and backed by top-tier friends across the industry.

Patterson-microsite-logo-new.png
dsn-logo.webp
JA Logo.webp
AGD logo.png
maris-list-logo.webp

Federal Compliance Guidelines for Dental Practices

Last Reviewed 10/27/2025

Protecting your team, your patients, and your license starts with knowing the federal standards that every dental practice must meet.
 

Dental practices operate in one of the most regulated environments in healthcare. Federal agencies such as OSHA, HHS, CDC, and the FDA establish national rules that define safe, ethical, and compliant dental care. Whether you’re a single-location practice or a multi-state DSO, these federal frameworks create the foundation upon which all state-specific regulations are built.
 

The five pillars of federal compliance in dentistry are:

  1. OSHA – Workplace Safety and Hazard Communication

  2. HIPAA – Patient Privacy and Data Security

  3. Infection Control – Universal Precautions and CDC Standards

  4. Radiation Safety – ALARA Principles and Equipment Performance

  5. Emergency Preparedness – Response Planning and Team Readiness

 

1. OSHA Compliance in Dental Settings
 

Overview
 

The Occupational Safety and Health Administration (OSHA) sets national standards to protect dental employees from workplace hazards such as bloodborne pathogens, hazardous chemicals, ergonomic injuries, and sharps exposure. Every dental employer must maintain written safety programs, provide training, and document compliance activities.
 

Key Federal Requirements

  • Bloodborne Pathogens Standard (29 CFR 1910.1030):
    Requires an Exposure Control Plan, annual training, use of safer sharps, and free hepatitis B vaccinations.

  • Hazard Communication Standard (29 CFR 1910.1200):
    Mandates a Hazard Communication Plan, Safety Data Sheets (SDS), chemical labeling, and staff training.

  • Personal Protective Equipment (PPE) Standard:
    Employers must assess and provide appropriate PPE—gloves, masks, eyewear, gowns—and train on proper use.

  • Ergonomic and Injury Prevention:
    Practices must identify repetitive strain risks and maintain OSHA injury logs (Form 300).

 

Documentation & Training

  • Written plans (BBP, HazCom, IIPP or Safety Program)

  • Employee exposure incident logs and post-exposure protocols

  • Annual training with proof of attendance

 

Common Pitfalls


Failure to update annual training, missing SDS binders, and outdated exposure control plans are among the top citations in dental OSHA audits.
 

2. HIPAA & Federal Privacy Requirements
 

Overview


The Health Insurance Portability and Accountability Act (HIPAA) is enforced by the U.S. Department of Health and Human Services (HHS) through the Office for Civil Rights (OCR). It safeguards patient information (PHI) in all formats—paper, electronic, and verbal.
 

Key Federal Rules

  • Privacy Rule: Governs how PHI is used and disclosed.

  • Security Rule: Requires technical, physical, and administrative safeguards for ePHI.

  • Breach Notification Rule: Mandates reporting of any unauthorized PHI disclosure.

 

Practice Obligations

  • Maintain written HIPAA policies and procedures

  • Conduct an annual Security Risk Assessment

  • Appoint a Privacy Officer and Security Officer

  • Train all staff upon hire and annually

  • Sign and maintain Business Associate Agreements (BAAs) with vendors

 

Common Pitfalls
 

Improper disposal of records, unsecured computers, weak passwords, and lack of encryption are frequent violations. HHS fines can reach millions of dollars per breach event.
 

3. Infection Control Standards
 

Overview
 

Federal infection control expectations stem from the Centers for Disease Control and Prevention (CDC) and OSHA’s Bloodborne Pathogen Standard. Every dental practice must adhere to the CDC’s Guidelines for Infection Control in Dental Health-Care Settings (2003) and periodic updates.
 

Core Elements

  • Standard Precautions: Treat every patient as potentially infectious.

  • Engineering Controls: Use sharps containers, dental unit waterline management, and sterilization monitoring.

  • Work Practice Controls: Proper hand hygiene, use of PPE, instrument cleaning, sterilization, and safe injection practices.

  • Environmental Cleaning: Disinfect clinical contact surfaces between patients.

 

Documentation & Monitoring

  • Written infection control plan and sterilization logs

  • Weekly spore testing records

  • Waterline monitoring and maintenance

  • Annual infection control training

 

Common Pitfalls- Failure to perform weekly spore testing, improper sterilization packaging, and overlooking dental waterline maintenance.
 

4. Radiation Safety in Dentistry
 

Overview
 

Federal radiation safety oversight is shared by the U.S. Food and Drug Administration (FDA) and the Nuclear Regulatory Commission (NRC). While most operational rules are enforced at the state level, federal standards define how equipment is manufactured, operated, and maintained.
 

Core Federal Standards

  • FDA Performance Standards (21 CFR 1020.30-31): Regulate dental X-ray machine design and radiation output.

  • ALARA Principle (“As Low As Reasonably Achievable”): Minimizes exposure for patients and staff.

  • Operator Protection: Use of lead barriers, dosimeters where required, and safe positioning (6 feet and 90-135° from beam).

  • Equipment Quality Assurance: Regular calibration, maintenance, and testing per manufacturer and state requirements.

 

Documentation & Training

  • Equipment maintenance and inspection logs

  • Radiography technique chart and exposure protocols

  • Annual radiation safety training for all operators

 

Common Pitfalls- Expired equipment registrations, missing QA logs, and inadequate shielding or operator distance awareness.
 

5. Emergency Preparedness & Medical Readiness


Overview
While no single federal law dictates dental emergency preparedness, multiple agencies—OSHA, CDC, ADA, and DHS—establish expectations for medical and workplace emergencies. Every practice must maintain an Emergency Action Plan and ensure staff readiness for both medical and environmental crises.
 

Core Requirements

  • OSHA Emergency Action Plan (29 CFR 1910.38): Procedures for evacuation, reporting fires, and contacting emergency services.

  • Medical Emergencies in Dentistry: Maintain an emergency kit, AED, oxygen tank, and train staff in Basic Life Support (BLS).

  • CDC Guidance: Infection and biohazard response, including pandemic preparedness.

  • Homeland Security (DHS): Encourages all healthcare facilities to have continuity and disaster response plans.

 

Documentation & Training

  • Written Emergency Action Plan and posted evacuation routes

  • Annual mock drills and CPR certification

  • Maintenance logs for emergency medications and AED checks

 

Common Pitfalls- Expired emergency drugs, untrained front desk personnel, and lack of posted emergency numbers.
 

Why Federal Compliance Matters


Federal compliance isn’t just about avoiding penalties—it’s about building a culture of safety, trust, and accountability. A practice that masters federal requirements can more easily meet state-specific laws, pass inspections, and maintain operational integrity across multiple locations.
 

Next Steps for Dental Teams

  • Audit your OSHA, HIPAA, Infection Control, and Radiation Safety programs annually.

  • Document all training and review your written plans.

  • Conduct mock emergencies and incident response drills.

  • Use a centralized compliance platform—like Done Desk or Tooth Nerd Quick Start Programs—to manage documentation, renewals, and training.

 

Protect your practice. Empower your people. Stay compliant.
Explore the Quick Start Compliance Program for ready-to-use OSHA, HIPAA, Infection Control, and Radiation Safety plans built specifically for dental practices.

State Guidelines

North Carolina-Specific Information


Regulating Bodies


  • North Carolina State Board of Dental Examiners (NCSBDE) — regulates dental licensure, continuing education, anesthesia/sedation permits, infection-control standards, and professional conduct under NC General Statutes Chapter 90, Article 2.

  • North Carolina Department of Health and Human Services (NCDHHS) — Radiation Protection Section — oversees registration, inspection, and compliance for dental X-ray equipment.

  • Federal OSHA — North Carolina operates a state OSHA plan (NC OSHA) that covers both private and public-sector employers, administered by the North Carolina Department of Labor (NCDOL).


Licensing & Continuing Education


  • Dentists: Renew annually by March 31; must complete 15 hours of continuing education each year.
    CE must include infection control, ethics/jurisprudence, and CPR/BLS certification.
    Sedation/anesthesia permit holders must complete additional CE specific to anesthesia safety and emergency management.

  • Dental Hygienists: Renew annually; must complete 6 hours of CE per year, including infection control and CPR.

  • CE must be obtained from ADA CERP, AGD PACE, or Board-approved providers.

  • Licensees must retain CE documentation for at least three years for audit.

  • Reference: 21 NCAC 16R .0101–.0206 (Continuing Education Requirements).


Workplace Safety (NC OSHA)


  • North Carolina operates its own OSHA-approved plan covering all private and public dental employers.

  • Dental offices must maintain written Exposure Control and Hazard Communication Plans, provide annual Bloodborne Pathogens and HazCom training, and ensure PPE use and documentation.

  • NC OSHA adopts all federal OSHA standards, including 29 CFR 1910.1030 (BBP) and 1910.1200 (HazCom), and enforces them statewide.

  • The NCDOL provides consultation and compliance assistance through its Education, Training, and Technical Assistance Bureau.


Radiation Safety


  • All dental X-ray units must be registered with the NCDHHS Radiation Protection Section before operation.

  • Maintain Quality Assurance (QA) and Quality Control (QC) documentation, radiation survey reports, and operator competency records.

  • Regulations appear in 15A NCAC 11 .0100–.1600 (Rules for Protection Against Radiation).

  • Only trained and authorized personnel may expose radiographs; assistants must complete a Board-approved Dental Radiography course or equivalent certification.

  • NCDHHS inspectors conduct periodic inspections to ensure compliance with radiation safety standards.


Infection Control & Patient Safety


  • North Carolina requires dental offices to follow CDC infection control guidelines and OSHA Bloodborne Pathogens standards.

  • Maintain written sterilization, disinfection, and PPE procedures.

  • Weekly biological (spore) testing of sterilizers is required; results must be logged and retained for inspection.

  • Infection-control training must be completed at hire and annually for all clinical staff.

  • Noncompliance is considered unprofessional conduct under 21 NCAC 16L .0101.


Emergency Preparedness


  • All dental facilities must maintain oxygen, emergency drugs, and equipment appropriate for the procedures performed.

  • At least one staff member with current BLS certification must be present whenever patients are treated.

  • Sedation and anesthesia permit holders must maintain ACLS or PALS certification, conduct annual emergency drills, and maintain written emergency plans and inspection logs.

  • Compliance is verified during sedation permit renewal or office inspection by the NCSBDE.


Official Resources


  • North Carolina State Board of Dental Examiners

  • North Carolina Administrative Code – 21 NCAC 16

  • NCDHHS Radiation Protection Section

  • 15A NCAC 11 – Radiation Protection Rules

  • North Carolina OSHA Program (NCDOL)

  • CDC Infection Control Guidelines

Get Started

Now that you know everything it's time to get started by training your people and operationalizing excellence with Done Desk! 

Dental Team Training Requirements in North Carolina


Overview


North Carolina dental practices are licensed by the NCSBDE. Dental X-ray equipment registration, inspections, and operator safety are regulated by NC DHHS – Radiation Protection Section under 15A NCAC 11.

Private practices follow federal OSHA; all providers must comply with HIPAA and CDC infection-control guidance. Dentists and hygienists complete biennial CE; personnel who expose radiographs need documented training and competency that meets state operator-safety expectations.


Dentist Training Requirements

Required


  • OSHA Bloodborne Pathogens & Hazard Communication (Annual): Written Exposure Control & HazCom plans; engineering controls, PPE, post-exposure procedures; documented annual training.

  • Infection Control (Annual): Implement CDC-aligned written SOPs: sterilization monitoring, waterline maintenance, hand hygiene, and exposure management.

  • Radiation Safety & X-ray Registration: Register units with NC Radiation Protection; maintain QA/QC tests, operator instructions, signage, and ALARA practices per 15A NCAC 11.

  • CPR/BLS (Current).

  • Continuing Education: Complete NCSBDE-required CE each biennium (commonly 30 hours/2 years); include infection control, ethics/jurisprudence, medical emergencies; opioid/pain-management CE if DEA-registered.

  • HIPAA Privacy & Security: Workforce training, access controls, breach response, documentation.


Recommended


  • Risk management & documentation (informed consent, adverse events).

  • Medical emergency readiness (ACLS/PALS if providing sedation).

  • Leadership and harassment-prevention.

  • Cybersecurity for ePHI and ransomware defense.


Dental Hygienist Training Requirements

Required


  • OSHA BBP & HazCom (Annual).

  • Infection Control (Annual) per CDC and Board expectations.

  • Radiography: Hygienists may expose X-rays under dentist authorization; follow NC Radiation Protection operator rules and facility QA/QC.

  • CPR/BLS (Current).

  • CE: Biennial CE as set by NCSBDE (commonly 15 hours/2 years); retain certificates for audit.


Recommended


  • Periodontal instrumentation/calibration; local anesthesia/nitrous updates where permitted.

  • Ergonomics & injury prevention.

  • HIPAA communications and secure teledentistry.

  • Medical emergency recognition and oxygen basics.


Dental Assistant Training Requirements

Required


  • OSHA BBP & HazCom (Annual).

  • Infection Control & Sterilization (Initial + Annual).

  • Radiography (if taking X-rays): Documented radiography education/competency (e.g., DANB RHS or Board-accepted course) and compliance with 15A NCAC 11 operator rules, ALARA, QA logs, and required signage.

  • Expanded Functions: DAII duties require specific education/experience as outlined by NCSBDE; only perform tasks permitted by NC scope.

  • CPR/BLS (Current).

  • HIPAA Privacy & Security (Initial + periodic refresh).


Recommended


  • Chairside efficiency & four-handed dentistry; instrument processing QA.

  • Emergency drills and chemical spill response.

  • Customer service and service recovery.


Front Desk & Administrative Staff Training Requirements

Required


  • HIPAA Privacy & Security: Minimum-necessary access, disclosures/authorizations, release-of-records, breach response; role-based access controls.

  • OSHA Awareness: General safety training for non-clinical staff working near clinical areas.


Recommended


  • Scheduling optimization, recall/broken-appointment protocols.

  • Insurance/billing compliance and financial communications.

  • Cybersecurity basics (phishing, passwords, device security).

  • De-escalation and patient experience excellence.

  • Records retention timelines (state/federal).


Operational Best Practices (All Roles)


  • Maintain current written plans: Exposure Control, Hazard Communication (SDS), Infection Control/Instrument Reprocessing, Post-Exposure, Emergency Action Plan.

  • Sterilizer monitoring: Perform and log weekly biological (spore) tests; document maintenance and load tracking.

  • Radiation QA/QC: Technique charts, collimation, shielding, performance tests, operator instructions; keep registration/inspection documents current.

  • Emergency drills: Document syncope/anaphylaxis/airway scenarios; check oxygen/AED/emergency kit monthly.

  • Keep a compliance binder with OSHA/HIPAA certificates, CE, radiography training, and QA documents.


State References


  • North Carolina State Board of Dental Examiners (NCSBDE) — licensure, CE, scope & delegation rules

  • NC DHHS – Radiation Protection Section (15A NCAC 11) — dental X-ray registration & radiation rules

  • OSHA Dentistry — BBP (29 CFR 1910.1030), HazCom (1910.1200)

  • CDC Infection Control in Dental Settings — sterilization, PPE, waterlines, exposure response

  • HIPAA — Privacy & Security Rules (45 CFR 164)



Make North Carolina compliance hum like a well-tuned handpiece.
Train your team with Tooth Nerd’s OSHA, HIPAA, Infection Control, Radiation Safety, and role-specific CE. Automate reminders, track certificates, and stay inspection-ready year-round with Done Desk.

Get Started

Now that you know everything it's time to get started by training your people and operationalizing excellence with Done Desk! 

Home

Contact

support @ Toothnerd.com

Tel. (512) 222-3812

bottom of page