All guides

ClaveLog field guide · CDC & OSHA-cited

Setting Up Sterilization & Infection Control in a New Dental Practice

Opening a practice means standing up an infection-control program from scratch — and inspectors don't grant new offices a grace period. The good news: the core requirements are well defined by the CDC and OSHA, and most of them are one-time setup plus a logging habit. This guide lays out what to have in place before your first patient, cited to primary sources, and points you to your state board for the specifics only it can set.

Verified against 4 primary sources

Informational only — not legal advice. Verify current requirements with your state dental board.

§ 01 — Your written program

Start with a written infection prevention program

Before instruments or autoclaves, you need a written program. The CDC's guidance is direct: "At least one individual with training in infection prevention — the infection prevention coordinator — should be responsible for developing written infection prevention policies and procedures based on evidence-based guidelines, regulations, or standards."

Two things follow from that. First, name a coordinator — one person accountable for the policies, the logging, and the follow-up. Second, write it down and keep it current: "Policies and procedures should be tailored to the dental setting and reassessed on a regular basis (e.g., annually) or according to state or federal requirements." The coordinator also "should ensure that equipment and supplies... are available," which for sterilization means your monitoring supplies (chemical indicators, spore tests, and their controls) are stocked from the start.

Note the scope: the CDC's dental infection-prevention program deliberately extends "beyond the Occupational Safety and Health Administration (OSHA) bloodborne pathogens standard to address patient safety." OSHA is the floor, not the whole program.

§ 02 — OSHA from day one

Your OSHA obligations from day one

OSHA's Bloodborne Pathogens standard, 29 CFR 1910.1030, is federal law and applies as soon as you have an employee with occupational exposure. The setup items for a new office:

  • A written Exposure Control Plan. Required under 1910.1030(c), and it "shall be reviewed and updated at least annually and whenever necessary to reflect new or modified tasks and procedures."
  • Hepatitis B vaccination offered. It "shall be made available... within 10 working days of initial assignment to all employees who have occupational exposure... at no cost to the employee" (1910.1030(f)).
  • Training. Required "at the time of initial assignment to tasks where occupational exposure may take place" and "at least annually thereafter" (1910.1030(g)).
  • Recordkeeping. Employee medical records must be kept "for at least the duration of employment plus 30 years" (1910.1030(h)(1)(iv)), and "training records shall be maintained for 3 years from the date on which the training occurred" (1910.1030(h)(2)(ii)).

Set these up before you open — the Exposure Control Plan, the vaccination offer, the first training session, and the files to store the records — and the annual cadence takes over from there.

§ 03 — The three indicators

Sterilization monitoring: the three indicators

Sterilizer monitoring is separate from OSHA and comes from CDC guidance. The standard is to use all three indicator types together: "The ability of a sterilizer to reach conditions necessary to achieve sterilization should be monitored using a combination of biological, mechanical, and chemical indicators."

From your first load:

  • Mechanical monitoring on every load. "Mechanical monitoring should be conducted for every sterilizer load" — check the gauges, displays, or printouts and document pressure, temperature, and exposure time.
  • A chemical indicator inside every package. "A chemical indicator should be used inside every package," with an external indicator too when the internal one isn't visible. Inspect it on unloading; if the color change didn't occur, don't use the instruments.
  • A weekly biological (spore) test. "A spore test should be used at least weekly to monitor sterilizers," with a matching control from the same lot, plus a test "for every load with an implantable device."

The biological vs chemical indicators guide explains what each one proves.

§ 04 — Recordkeeping from day one

Set up your recordkeeping before your first patient

The habit that saves new practices is starting the log on day one rather than reconstructing it later. The CDC's reasoning is practical: "Maintaining accurate records ensures cycle parameters have been met and establishes accountability," and documentation "helps to determine if an instrument recall is necessary" if a sterilizer problem surfaces.

For how long, the CDC defers to your state: "Maintain your sterilization monitoring records (mechanical, chemical, and biological) long enough to comply with state and local regulations." So decide up front where every load and every spore test will be recorded, and keep it consistent from your very first cycle. Our guide on how to document a load log correctly lists the exact fields to capture, and the free State Log tool gives you a compliant starting template. Starting clean on day one is also the easiest time to go digital — before a paper binder becomes the system of record.

§ 05 — Your state board's rules

Check your state dental board's specific rules

The CDC sets the standard of care and OSHA sets the worker-safety floor, but your state dental board is what turns "recommended" into "required" — and it's where the specifics live. Many boards adopt the CDC guidelines by reference; some write their own spore-testing interval or a record-retention period into their rules. The exact requirement, and what an inspector will check, varies by state.

We've researched the sterilization-monitoring frequency and record-retention rules for all 50 states plus DC. Look up yours under state requirements before you open, and confirm the current text with your state board — regulations change, and for a compliance program you want the setup right the first time. The related CDC vs OSHA guide explains how these authorities fit together.

§ 06 — A day-one checklist

A day-one checklist

Have these in place before your first patient, and the ongoing work is mostly logging:

  • Named infection prevention coordinator and a written, dated infection-prevention program.
  • Written OSHA Exposure Control Plan on site, set for annual review.
  • Hepatitis B vaccination offered to at-risk staff within 10 working days of assignment.
  • Initial bloodborne-pathogens training completed and documented, with an annual reminder set.
  • Recordkeeping files ready — medical records (duration of employment + 30 years) and training records (3 years).
  • Sterilization monitoring supplies stocked — chemical indicators plus spore tests and matching controls.
  • A load log started capturing mechanical readings, chemical-indicator results, and the weekly spore test from cycle one.
  • Your state board's rule confirmed for spore-test frequency and record retention.

Set it up once, log it consistently, and inspection-readiness becomes a byproduct rather than a scramble.

§ 07 — Questions of record

Frequently asked questions

What infection control do I need in place before opening a dental practice?
A written infection-prevention program with a named coordinator (per CDC), a written OSHA Exposure Control Plan, a hepatitis B vaccination offer for at-risk staff, documented bloodborne-pathogens training, recordkeeping files, and sterilization-monitoring supplies with a load log started from your first cycle. The CDC also advises confirming requirements specific to your state with your dental board.
Does OSHA apply to a brand-new dental office?
Yes. OSHA's Bloodborne Pathogens standard (29 CFR 1910.1030) applies as soon as you have an employee with occupational exposure. From the start you need a written Exposure Control Plan (reviewed at least annually), a hepatitis B vaccination offer within 10 working days of initial assignment at no cost, training at initial assignment and at least annually, and recordkeeping — medical records for the duration of employment plus 30 years and training records for 3 years.
When do I need to start spore testing my autoclave?
From the beginning. The CDC recommends a spore (biological) test at least weekly for each sterilizer in use, with a matching control from the same lot, plus a test for every load containing an implantable device. Combine that with mechanical monitoring on every load and a chemical indicator inside every package. Some states set their own interval, so verify yours with your dental board.
How long do I need to keep sterilization records for a new practice?
The CDC advises maintaining your sterilization monitoring records (mechanical, chemical, and biological) long enough to comply with state and local regulations — it does not set a single national number. Your state dental board sets the retention period, which commonly ranges from about one to five years or more, so confirm yours before you open.
Where do I find my state's specific sterilization rules?
From your state dental board, which is the body that enforces sterilization monitoring and sets any state-specific interval or retention period. ClaveLog has researched the rules for all 50 states plus DC — check your state's requirements page — and always confirm the current text with your board, since regulations change.

§ 08 — Sources on record

Sources & citations

Every claim in this guide traces back to a primary source. Links open the original CDC, OSHA, or state-board document.

  1. 01CDC — Administrative Considerations (Summary of Infection Prevention Practices in Dental Settings)
  2. 02OSHA — Bloodborne Pathogens Standard, 29 CFR 1910.1030
  3. 03CDC — Best Practices for Sterilization Monitoring in Dental Settings (Dental IPC FAQs)
  4. 04CDC — Sterilization and Disinfection (Summary of Infection Prevention Practices in Dental Settings)

Get a free, dated sterilization log sheet

Generate a printable log built around your state's monitoring requirements — no signup needed. Ready to stop printing? ClaveLog logs every autoclave load from a phone, tracks spore tests from any lab, and prints a board-ready Inspector Packet in one click.

§ 09 — Cross-reference

Keep reading

Browse all ClaveLog guides →