How Often Is Infection Control Training Required?
Click to upload or drag and drop
PDF, DOCX, PPTX, TXT, JPG, JPEG, PNG, HEIC, ODP, ODT, BMP, or TIFF
up to 20MB
Uploading...
There is no single answer, because at least three different kinds of rule use the phrase "infection control training" to mean different things. OSHA requires bloodborne pathogens training at initial assignment and at least annually after that. Some states require licensed professionals to complete infection control coursework every four years. Professional boards attach their own course to each license renewal. Most healthcare employers are covered by more than one of these at the same time, and the shortest cycle is the one that sets your calendar.
That overlap is why a practice manager can get three confident, contradictory answers from three people in the same office. They are each describing a real requirement. Below is what the primary sources actually say, with citations, then how to tell which ones apply to you and what a training record has to contain to hold up.
Infection control training frequency by rule
| Who it covers | What is required | How often | Citation |
|---|---|---|---|
| Any US employee with reasonably anticipated occupational exposure to blood or OPIM | Bloodborne pathogens training, free of charge and during working hours, covering a required topic list | At initial assignment and at least annually thereafter | OSHA 1910.1030(g)(2)(ii) |
| The same employees, when their job changes | Additional training limited to the new exposures created | Whenever tasks or procedures change in a way that affects exposure | OSHA 1910.1030(g)(2)(v) |
| New York physicians, physician assistants, and specialist assistants | Coursework or training in infection control and barrier precautions, including sepsis | Every 4 years | NY Public Health Law section 239 |
| New York dentists, dental hygienists, registered nurses, LPNs, podiatrists, optometrists, and athletic trainers | Training appropriate to the practice in infection control and barrier precautions, attested at each registration | Every 4 years | NY Education Law section 6505-b |
| California dentists | A Board-approved two-unit California Infection Control course, inside the 50 CE units required for renewal | Every renewal cycle | Dental Board of California CE requirements |
| Medicare-certified nursing facilities | Mandatory staff training on the written standards, policies, and procedures of the facility IPC program | Part of the required training program; the IPC program itself is reviewed at least annually | 42 CFR 483.95(e) and 483.80 |
| Medicare-certified ambulatory surgery centers | An infection control program directed by a qualified professional trained in infection control, with documentation that nationally recognized guidelines were considered, selected, and implemented | Ongoing, as part of the ASC quality assessment and performance improvement program | 42 CFR 416.51(b) |
This is a sample of the rules that come up most, not a complete list. Many states set license-level requirements of their own and accreditors layer more on top. Confirm the current rule for your state, your license type, and your facility's certification before you build a training schedule around any of it.
Why OSHA says annually and your state board says every four years
They are regulating different things. OSHA regulates you as an employer protecting workers from a workplace hazard. The bloodborne pathogens standard does not care what license anyone holds. If an employee has reasonably anticipated contact with blood or other potentially infectious material as part of the job, that employee gets trained at initial assignment and at least annually, on your time and at your cost.
A state license board regulates the individual professional's competence to practice. New York's four-year cycle under Public Health Law section 239 and Education Law section 6505-b attaches to the license, is attested at registration, and travels with the person from job to job. It is not a substitute for your annual session, and your annual session is not a substitute for it.
So a dental hygienist in Buffalo can legitimately owe both: a four-year infection control course for the license, and an annual bloodborne pathogens session from whichever office employs her. Practices that treat the CE certificate as covering the OSHA requirement are the ones that get written up, because the certificate proves the person took a course, not that the employer trained them on this workplace's exposure control plan.
What the annual session has to cover
OSHA sets a floor at 1910.1030(g)(2)(vii). The session must include a copy of the standard with an explanation, the epidemiology and symptoms of bloodborne diseases, how they are transmitted, your exposure control plan and how to get a copy, which tasks create exposure, the use and limitations of engineering and work practice controls, PPE selection and its limits, hepatitis B vaccination information and availability, what to do in an emergency involving blood, how to report an exposure incident, the post-exposure evaluation and follow-up you provide, and the labeling and color-coding system.
The standard also requires an opportunity for interactive questions and answers with someone knowledgeable in the subject as it relates to your workplace. That last clause matters. A recorded video with no way to ask a question does not satisfy it on its own, no matter how thorough the video is.
Most facilities add topics OSHA does not require but surveyors and accreditors expect: hand hygiene, instrument reprocessing and sterilization monitoring, surface disinfectant contact times, transmission-based precautions, and safe injection practices. Those are usually the parts that go wrong in real life, which is why they belong in whatever you use to check understanding.
Does the training have to include a test?
No. OSHA requires the content and the question-and-answer opportunity, not a written exam. But the standard requires you to keep a record of the contents or a summary of each session, and in practice the question that follows any training file is how you know people understood it. A sign-in sheet answers attendance. A scored quiz answers comprehension.
The practical version is to build the quiz from the policy you actually handed out rather than from a generic bank, so the answers are your disinfectant, your contact time, and your reprocessing order. You can turn an infection control policy into a scored quiz by uploading the manual itself, which keeps the questions tied to the document in the file next to it. If the session you are documenting is specifically the bloodborne pathogens module, the narrower bloodborne pathogens quiz generator maps to that topic list instead.
What the training record has to contain
OSHA 1910.1030(h)(2)(i) is specific, and this is where most files fall short. The record must include the dates of the training sessions, the contents or a summary of the sessions, the names and qualifications of the people conducting the training, and the names and job titles of everyone who attended. Under (h)(2)(ii) you keep it for three years from the date of the training.
Two of those four fields are the ones commonly missing. Trainer qualifications rarely get written down, even though the standard names them explicitly. And "contents or summary" often collapses into a topic on a sign-in sheet, when the cleanest way to satisfy it is to keep the actual material and the actual quiz. Job titles matter too: the title is what shows the person was in a role with anticipated exposure, and therefore in scope.
State boards may want records longer than three years. California, for instance, tells dentists to hold CE certificates for three renewal periods, which runs well past OSHA's window. If you operate in several states, the safe default is to keep to the longest retention that applies to any of your locations rather than tracking six different clocks. Teams that manage a lot of recurring obligations like this usually end up wanting one place to track each requirement and its next due date instead of a spreadsheet per site.
How to work out your own schedule
Start from the employer side, because it is the shortest cycle and the one with a federal inspector behind it. List every role with reasonably anticipated exposure, including the ones people forget: front desk staff who handle instruments, housekeeping, maintenance, anyone who cleans a spill. Those roles get the annual session and a record with all four fields.
Then layer the license requirements on top, per person rather than per facility, because they follow the individual. A New York RN owes the four-year course whether or not you employed her when it was last due. A California dentist owes the two-unit course each renewal cycle. Ask for the certificate, record the date, and set the next due date from it.
Finally check your facility's certification and accreditation. Nursing facilities have IPC folded into the required training program under 42 CFR 483.95(e), with the program itself reviewed at least annually. ASCs have to be able to document which nationally recognized guidelines they selected and implemented, which means the training should visibly reflect those guidelines rather than a generic outline. If you want the wider picture of how a training file gets built to survive an inspection, see our guide to what OSHA training records must contain.
Frequently asked questions
Is infection control training required annually?
For employees with occupational exposure to blood, yes. OSHA 1910.1030(g)(2)(ii) requires bloodborne pathogens training at initial assignment and at least annually thereafter. The four-year and per-renewal cycles you may also have heard about come from state license requirements, which sit on top of the annual employer obligation rather than replacing it.
How often is infection control training required in New York?
Every four years for the covered professions. Public Health Law section 239 applies to physicians, physician assistants, and specialist assistants, and Education Law section 6505-b covers dentists, dental hygienists, registered nurses, LPNs, podiatrists, optometrists, and athletic trainers. Professionals attest to completion at first licensure and at every subsequent registration, and exemptions exist where the nature of the practice makes the training unnecessary.
Who has to take infection control training?
Anyone whose job creates reasonably anticipated contact with blood or other potentially infectious material, which is broader than clinical staff. It commonly includes housekeeping, laundry, maintenance, sterilization technicians, and school or workplace first responders. Separately, licensed professionals in states like New York have an individual requirement tied to the license rather than the job.
Can online infection control training satisfy OSHA?
It can, provided the content covers the required elements and employees still get an opportunity to ask questions of a person knowledgeable about your workplace. A module with no access to a knowledgeable trainer does not meet 1910.1030(g)(2)(vii)(N) on its own. Many facilities pair an online module with a short live session or a named contact who fields questions and documents that it happened.
What happens if you cannot produce training records?
The training is treated as if it did not occur. Records are the only evidence an inspector or surveyor can evaluate, and the standard sets out exactly what they must contain, so a missing trainer qualification or an undated session becomes a finding on its own. Keeping the material and a scored quiz alongside the roster is the cheapest way to make the file self-explanatory three years later.