Guides · Practice compliance · 8 min read

Every Training a Dental Team Needs: The Complete Requirements Matrix

Dental team training requirements fall into three tiers. Federally mandated: OSHA bloodborne pathogens training (annual, records kept 3 years, 29 CFR 1910.1030) and HIPAA workforce training (at hire and on policy change, records kept 6 years, 45 CFR 164.316). State-conditional: infection control, radiation safety, medical emergency readiness, and harassment prevention, each set by state boards or statutes. Contract-driven: fraud, waste and abuse training, required by payer programs with 10-year record retention per CMS guidance.

This matrix comes from the regulatory research behind DentalReady's compliance curriculum: nine training topics, each traced to the rule that actually requires it, who it covers, how often it recurs, and how long the records must survive. Two findings surprise almost everyone who reads it. First, only two of the nine are truly federal mandates. Second, record retention spans from one year to ten depending on the topic, which is why one binder with one policy fails audits. It is general information, not legal advice, and your state may add requirements on top.

The matrix

The table below is the whole picture. Three tiers run through it: federal mandates that apply in every state, state-conditional topics whose force comes from your dental board or state statute, and contract-driven training that binds through the programs and payer plans you enroll in rather than through any law.

Dental team training requirements at a glance (compiled from DentalReady's regulatory research, checked August 17, 2026)
Training	Who	When	Required by	Keep records	Citation
OSHA and workplace safety	Everyone with anticipated exposure	At hire, annually, and on task or hazard change	Federal, every state	3 years	29 CFR 1910.1030
HIPAA privacy and security	Every workforce member	At hire, on policy change; annual by convention	Federal, every state	6 years	45 CFR 164.316
Infection control and sterilization	Clinical, sterilization, room turnover staff	At hire, annually, on equipment change	State dental board; CDC is standard of care	3 years	29 CFR 1910.1030(h) plus state rules
Radiation safety	Anyone positioning or exposing radiographs	At hire, annually, on equipment or rule change	State radiation control program	3 years	State program rules
Medical emergency readiness	Every team member	At hire, annually, after any drill or event	Expected everywhere; specifics from state board	3 years	State board rules; 29 CFR 1910.151
Harassment prevention	Every team member	Within 6 months of starting, then every 2 years where mandated	Several states mandate (e.g., California); federal law protects but sets no training	2 years	e.g., 2 CCR 11024
Harassment prevention for supervisors	Anyone who hires, directs, or disciplines	Within 6 months of the role, then every 2 years where mandated	State-mandated hours (e.g., California's 2-hour rule)	2 years	e.g., 2 CCR 11024(b)(2)
Workplace violence prevention	Every team member, every location	At hire, annually, on plan change	Required in California under SB 553; spreading	1 year	California Labor Code 6401.9
Fraud, waste and abuse	Anyone touching coding, billing, or claims	Within 90 days of hire, then annually where programs require	Contract-driven via payer programs, not statute	10 years	CMS compliance program guidance

The three findings that surprise practices

Only two of nine are federal mandates. OSHA bloodborne pathogens and HIPAA training bind every practice in every state. Everything else derives its force from your state board, a state statute, or a contract you signed. This is why compliance advice that ignores your state is half wrong by construction.

Retention is not one number. Records must survive 1 year for workplace violence, 2 for harassment, 3 for OSHA topics, 6 for HIPAA, and 10 for fraud, waste and abuse. A practice that shreds on a single schedule is out of compliance somewhere, in either direction.

The strictest requirement in your file may be a contract. FWA training carries the longest retention of all nine topics, and it binds through payer program enrollment rather than any legislature. Most practices bound by it have never read the clause.

How to use the matrix

Run your roster against the Who column once a year: every person maps to a set of rows, and every row maps to a dated record you should be able to produce.

Put the When column on a single practice calendar. The topics cluster naturally into one annual training week, with harassment on its two-year cycle and FWA tied to your program year.

Match your record retention to the strictest applicable row, not a house default. When in doubt, keep it longer.

DentalReady's Compliance Pack, launching in September, delivers the training rows of this matrix as short scenario-based courses with dated certificates, built from this same research.

Common questions

Which dental team trainings are federally required?

Two: OSHA bloodborne pathogens training for exposed employees, annually under 29 CFR 1910.1030, and HIPAA workforce training at hire and on policy change under 45 CFR 164.316. Everything else is state or contract driven.

How long must dental training records be kept?

It varies by topic: 1 year for workplace violence prevention, 2 for harassment, 3 for OSHA-related topics, 6 for HIPAA, and 10 for fraud, waste and abuse under CMS program guidance.

Is annual HIPAA training legally required?

The rule requires training at hire and when policies materially change, with no fixed interval. Annual training is the defensible convention auditors expect, not the letter of the law.

What makes fraud, waste and abuse training different?

It binds through the payer programs and plan contracts a practice enrolls in rather than through statute, and it carries the longest record retention of any topic: 10 years.

The Compliance Pack launches in September, built from this same research.

Handle the training rows automatically

Sources

Written by Dr. Sree Koka, Founder, DentalReady; Prosthodontist

Keep reading

OSHA Training Requirements for Dental Offices, Explained HIPAA Training Requirements for Dental Offices, Explained The Dental Office Compliance Checklist: What to Have Ready Before Anyone Asks