Free compliance & forms tool
OSHA Compliance Checklist for Medical Offices
An OSHA compliance checklist for a medical office covers the standards that apply to most practices: bloodborne pathogens (29 CFR 1910.1030), hazard communication, personal protective equipment, emergency and fire plans, and injury recordkeeping and reporting. The 27 items below each cite the regulation, so you can check them off, print the list and show an inspector your work.
Prepared by Prospyr · Reviewed October 3, 2026 · Free, no sign-up, runs in your browser
OSHA compliance checklist: medical office
Practice name: ____________________
0 of 27 items done (0%)
Bloodborne pathogens
0/10Applies to any employee with reasonably anticipated contact with blood or other potentially infectious material, including injectors, nurses, estheticians who break skin, and staff who handle sharps or waste.
29 CFR 1910.1030(c)(1)–(2)
Ask front-line staff who use the devices for input and document it.
29 CFR 1910.1030(c)(1)(iv)
29 CFR 1910.1030(d)(2)
29 CFR 1910.1030(d)(3)
29 CFR 1910.1030(f)(2)
29 CFR 1910.1030(f)(3)
29 CFR 1910.1030(g)(2), (h)(2)
29 CFR 1910.1030(d)(4), (g)(1)
29 CFR 1910.1030(h)(1)
29 CFR 1910.1030(h)(5)
Hazard communication (chemicals)
0/4Disinfectants, peel acids, solvents, cleaning products and sterilants all count.
29 CFR 1910.1200(e)(1)
29 CFR 1910.1200(g)(8)
29 CFR 1910.1200(f)
29 CFR 1910.1200(h)(1)
Protective equipment
0/329 CFR 1910.132(d)
29 CFR 1910.132(f)
Check the device manufacturer's labeled eyewear requirement.
OSHA Laser Hazards
Emergency plans, fire and first aid
0/629 CFR 1910.38
29 CFR 1910.38(f)
29 CFR 1910.36–.37
A written full-evacuation policy can exempt you from most of this. Read 1910.157(b).
29 CFR 1910.157(e), (g)
29 CFR 1910.151(b)
29 CFR 1910.151(c)
Recordkeeping, reporting and posting
0/4Exempt employers still report severe injuries.
29 CFR 1904.1, 1904.2
29 CFR 1904.29, 1904.32
29 CFR 1904.39
29 CFR 1903.2
OSHA checklist progress
0%
0 of 27 items done. 27 still open.
- Bloodborne pathogens0/10
- Hazard communication (chemicals)0/4
- Protective equipment0/3
- Emergency plans, fire and first aid0/6
- Recordkeeping, reporting and posting0/4
Not legal advice. It does not certify OSHA compliance. Progress is saved in the page address, not on a server. Bookmark it to come back.
Medical office OSHA requirements in five groups
- Bloodborne pathogens (29 CFR 1910.1030). The core healthcare standard: exposure control plan, safer devices, PPE, hepatitis B vaccine, post-exposure follow-up, training and records.
- Hazard communication (1910.1200). A written program, a chemical list, safety data sheets, container labels and training.
- Personal protective equipment (1910.132). A written hazard assessment and training on using PPE.
- Emergency, fire and first aid (1910.38, .36–.37, .157, .151). Evacuation plan, clear exits, extinguisher upkeep if you provide them, first aid supplies and eyewash where corrosives are used.
- Recordkeeping and reporting (Part 1904). Injury logs unless exempt, and severe-injury reports for everyone.
This is the standard set for an ambulatory practice. Your state may add more, and practices that run surgical or sterilization services can have additional requirements.
OSHA checklist for med spas and aesthetic practices
Aesthetic practices are covered like any other medical office, and a few things come up more often:
- Sharps. Injectors and estheticians doing microneedling handle needles all day. Containers at the point of use, safer devices where available and a documented device review matter here.
- Chemicals. Peels, disinfectants and skin-prep solutions each need a safety data sheet and a labeled container.
- Light-based devices. Match eye protection to the device and train staff on it.
- Small teams. Under 10 employees you may skip routine injury logs, but not the bloodborne pathogens plan, training or severe-injury reporting.
Document training dates and who attended. See how Prospyr's med spa software fits a practice like yours, and use the HIPAA compliance checklist for the privacy side.
Worked example: a nine-person practice
A practice with nine employees reviews all 27 items. It marks 3 as not applicable: the sharps injury log and the OSHA 300 forms, because it has 10 or fewer employees and does not have to keep routine injury records, and fire extinguisher upkeep, because it has a written full-evacuation policy. That leaves 24 applicable items. It has done 18, so progress is 18 ÷ 24 = 75%.
The 6 open items are the annual plan review, hepatitis B offer paperwork, two safety data sheets, the written hazard assessment and the training log. The practice assigns each to a person and a date, prints the list and files it with its training records.
OSHA recordkeeping and reporting for small practices
Employers with 10 or fewer employees all of last year do not need to keep OSHA injury and illness records unless OSHA or the Bureau of Labor Statistics asks. Some low-hazard industries are also partially exempt by NAICS code. Check Appendix A of Subpart B of 29 CFR Part 1904 for yours.
No one is exempt from severe-injury reporting. Report a work-related death within 8 hours and an in-patient hospitalization, amputation or loss of an eye within 24 hours, by phone to your OSHA area office, at 1-800-321-OSHA, or online.
Frequently asked questions
What does an OSHA checklist for a medical office include?
It includes a written bloodborne pathogens exposure control plan reviewed every year, hepatitis B vaccine offers, sharps containers and PPE, a hazard communication program with safety data sheets, an emergency action plan, exit and fire safety, first aid and eyewash provisions, and recordkeeping or reporting duties. The list above groups these into five sections with a citation for each item.
Does OSHA apply to medical offices and med spas?
OSHA covers most private employers, so a practice with employees is covered. The bloodborne pathogens standard applies to any employee with reasonably anticipated contact with blood or other potentially infectious material, which includes injectors, nurses and anyone handling sharps or regulated waste. Some states run their own OSHA-approved plans, which can be stricter.
How often must bloodborne pathogens training be done?
Training is required when an employee is first assigned to a job with exposure and at least annually afterward. Training records must be kept for 3 years. The exposure control plan itself must also be reviewed and updated at least annually.
Do small practices have to keep OSHA injury logs?
Often not. An employer with 10 or fewer employees at all times in the last calendar year does not need to keep OSHA injury and illness records, and some industries are partially exempt regardless of size. Exempt employers must still report a work-related death within 8 hours, and an in-patient hospitalization, amputation or loss of an eye within 24 hours.
Do I need safety data sheets for cleaning products and peels?
Yes. Employers must keep a safety data sheet for each hazardous chemical in the workplace and make it readily accessible during each work shift, along with labels on containers and training at assignment. Disinfectants, solvents, chemical peel acids and sterilants commonly count.
Who has to be offered the hepatitis B vaccine?
Employers must offer it, at no cost to the employee, to all employees with occupational exposure. The offer must be made within 10 working days of initial assignment, after bloodborne pathogens training. An employee can decline in writing and change their mind later.
Is an OSHA inspection likely to look at lasers and IPL devices?
OSHA says laser hazards are addressed through specific general-industry standards. The checklist includes an item for matching eye protection to each device. Follow the manufacturer's labeled requirements and ask your insurer or a laser safety professional about written procedures.
Sources and scope
- OSHA: Bloodborne Pathogens and Needlestick Prevention
Overview of the standard's duties for employers.
- 29 CFR 1910.1030: Bloodborne pathogens
Exposure control plan, annual review, hepatitis B within 10 working days, training, records.
- 29 CFR 1910.1200: Hazard communication
Written program, safety data sheets, labels, training.
- 29 CFR 1910.132: Personal protective equipment, general requirements
Written hazard assessment certification and training.
- 29 CFR 1910.38: Emergency action plans
- 29 CFR 1910.37: Exit routes
- 29 CFR 1910.157: Portable fire extinguishers
Monthly visual inspection, annual maintenance check, annual training; exemption for total-evacuation policies.
- 29 CFR 1910.151: Medical services and first aid
First aid supplies and eyewash where corrosives are present.
- 29 CFR 1904.1: Partial exemption for employers with 10 or fewer employees
- 29 CFR 1904.39: Reporting fatalities and severe injuries
8-hour and 24-hour reporting deadlines.
- OSHA: Laser Hazards
States that laser hazards are addressed in specific OSHA standards for general industry.
Educational checklist, not legal advice. It summarizes federal OSHA general-industry rules and does not certify compliance. State-run OSHA plans may be stricter; confirm with your state agency, attorney or safety consultant.