7.3 Key Standards, Regulations & Governing Bodies

Standards vs. Regulations — Know the Difference

The CRCST exam draws a sharp line the SPD technician must internalize: a standard is a voluntary best practice written by a professional body, while a regulation is law enforced by a government agency. A standard such as AAMI ST79 carries weight on its own, but it acquires real teeth when an accreditor (TJC) surveys against it or a regulator (CMS, FDA, OSHA) adopts or references it. So the practical answer to "Do we have to follow ST79?" is yes — because TJC and CMS expect compliance with recognized national standards.

Standards-Setting Organizations

AAMI (Association for the Advancement of Medical Instrumentation) writes the technical consensus standards that define how SPD work is done. Know which standard owns which topic — mixing them up is the single most common ST-series exam trap.

AORN (Association of periOperative Registered Nurses) publishes the Guidelines for Perioperative Practice, updated every year, covering cleaning, packaging, sterile technique, and environmental controls; it is cited alongside AAMI on the exam.

CDC (Centers for Disease Control and Prevention) issues the Guideline for Disinfection and Sterilization in Healthcare Facilities, which is the source of the Spaulding classification (critical, semi-critical, non-critical) that drives reprocessing decisions.

Regulatory and Accrediting Bodies

The Joint Commission (TJC)

TJC accredits hospitals and ambulatory surgery centers through unannounced surveys. CS-relevant focus areas include environmental controls (temperature, humidity, air exchanges), sterilization monitoring (mechanical/chemical/biological), competency documentation, IFU availability, and record-keeping. Crucially, TJC accreditation confers CMS deemed status — a TJC-accredited facility is presumed to meet CMS requirements, so a failed survey can threaten reimbursement.

CMS (Centers for Medicare & Medicaid Services)

CMS sets the Conditions of Participation (CoPs) — the federal rules a hospital must meet to bill Medicare and Medicaid. The CoPs require an effective infection-control and sterilization program. CMS can survey directly or rely on a deemed accreditor.

OSHA (Occupational Safety and Health Administration)

OSHA enforces worker safety law, the most exam-relevant being:

• 29 CFR 1910.1030 — Bloodborne Pathogens Standard (exposure control plan, hepatitis B vaccine offer, sharps handling)
• 29 CFR 1910.1200 — Hazard Communication (Safety Data Sheets, GHS labeling for sterilants like OPA and EtO)
• 29 CFR 1910.132–138 — Personal protective equipment requirements

FDA (Food and Drug Administration)

The FDA regulates medical devices. It requires manufacturers to supply validated IFUs, manages device recalls classified Class I (reasonable probability of serious harm or death), Class II (temporary or reversible harm), and Class III (unlikely to cause harm). It regulates single-use device (SUD) reprocessing — only FDA-registered third-party reprocessors may legally reprocess approved SUDs — and enforces Medical Device Reporting (MDR), under which facilities must report device-related deaths and serious injuries.

State Health Departments

States may impose requirements stricter than federal law, conduct licensing surveys, and — in a handful of states — mandate SPD personnel certification. New Jersey was the first state to require certification of sterile processing technicians, and several others (such as New York, Tennessee, and Connecticut) have enacted or pursued similar requirements. Always defer to the strictest applicable rule when federal, state, accreditor, and manufacturer requirements differ.

How the Bodies Fit Together

It helps to picture the framework as layers stacked from guidance to enforcement. AAMI and AORN write what good practice looks like. The CDC supplies the scientific rationale (the Spaulding classification that decides whether an item needs sterilization, high-level disinfection, or low-level disinfection). The FDA controls the devices and the IFUs that flow into the department. OSHA protects the people doing the work. CMS sets the financial conditions a hospital must meet, and TJC performs the survey that verifies it all — converting voluntary standards into accreditation requirements with real consequences.

A single deficiency, such as an unavailable IFU at the point of use, can simultaneously be a TJC citation, a CMS Condition-of-Participation problem, and an FDA compliance gap.

High-Yield Exam Distinctions

• AAMI publishes standards; it does not enforce them. Enforcement comes from regulators and accreditors.
• TJC accredits; CMS regulates. Deemed status is the bridge between them.
• OSHA protects workers, the FDA protects patients/devices. A sharps-injury question points to OSHA; a recall or IFU question points to the FDA.
• CDC defines Spaulding; AAMI operationalizes sterilization. A classification question is CDC; a steam-cycle parameter question is AAMI ST79.

Practical Takeaway

The technician who can name the right body for a given question — and recognize that a standard becomes mandatory the moment a regulator or accreditor adopts it — will handle both the exam's regulatory items and a real survey. When any two requirements collide, the safe and defensible answer is always to follow the most stringent one, document the rationale, and escalate the conflict to the SPD manager and infection-prevention team rather than improvising at the workstation.