Guides · Practice compliance · 6 min read
The Dental Office Compliance Checklist: What to Have Ready Before Anyone Asks
By Dr. Sree Koka · 6 min read
A dental office compliance file needs four things current and findable: dated training logs for OSHA bloodborne pathogens (kept three years) and HIPAA (kept six years), a reviewed exposure control plan, hepatitis B vaccination records with team certifications, and state-required certificates for each team member. Run the full checklist annually, the same week as annual training, and log the date.
Compliance fails in dental offices for a boring reason: not bad intentions, but scattered paperwork and training nobody logged. This checklist organizes what a practice should have current and findable, in the order someone would actually ask for it. Run through it once a year, ideally the same month you run annual training.
Training records, first because they are asked first
A dated log of annual bloodborne pathogens training for every exposed employee: date, content summary, trainer name and qualifications, attendee names and job titles, kept at least three years.
HIPAA training documentation for every workforce member, kept at least six years, with signed acknowledgments.
Records of hazard communication training, and of any role-specific training like radiography certificates. If it is not written down with a date and a name, it did not happen.
Written plans and where they live
An exposure control plan, reviewed and updated within the last year, that your team can physically locate. An inspector asking where it lives is a test of whether it is real.
Your HIPAA policies and procedures, a designated privacy contact, and a written breach response plan naming who gets told the same day something looks wrong.
Safety data sheets for the chemicals in your office, current and accessible where the chemicals are used.
The people items practices forget
Hepatitis B vaccination records or signed declinations for exposed employees.
Current basic life support certification for the clinical team, with expiration dates on a calendar someone owns.
State-specific items: radiography certificates, expanded function credentials, and any courses your state requires within a set period of hire. These vary by state, so check your dental board's list against your roster annually.
Make it annual, make it boring
The practices that pass inspections without drama treat compliance as one predictable week per year: run the annual training, sign the logs, review the plans, check the expirations, done.
The failure mode is heroics: scrambling when a letter arrives. A checklist run in a calm October beats a panic in a bad March.
DentalReady's Compliance Pack, launching in September, handles the training row of this checklist automatically: short annual courses with dated certificates and completion records for every team member.
Common questions
What compliance records do dental offices need to keep?
Dated training logs for bloodborne pathogens, hazard communication, and HIPAA, a current exposure control plan, safety data sheets, hepatitis B vaccination records, and state-required certificates for each team member.
How long do we keep compliance records?
Bloodborne pathogens training records at least three years. HIPAA documentation at least six years. When in doubt, keep it longer.
How often should a dental office run compliance training?
Annually for bloodborne pathogens, which is explicitly required for exposed employees, and most practices run HIPAA and the rest on the same yearly cycle.
What does an inspector usually ask for first?
The exposure control plan and the training log. Both should be findable in minutes, current within the year, and signed.
The Compliance Pack launches in September. Ask about early access.
Handle the training row automaticallySources
Written by Dr. Sree Koka, Founder, DentalReady; Prosthodontist
Keep reading
OSHA Training Requirements for Dental Offices, ExplainedHIPAA Training Requirements for Dental Offices, ExplainedThe HIPAA Compliance Checklist for Dental Practices