1.2 Developing, Implementing, and Auditing the Practice IPC Program

Key Takeaways

  • The CDC 2016 Summary recommends that every dental practice designate at least one qualified individual as the Infection Prevention / Control Coordinator (ICC) to oversee all infection control policies.
  • OSHA requires an annual review and update of the written Exposure Control Plan (ECP), which must document the active solicitation and evaluation of non-managerial clinical employee input regarding safety-engineered sharps.
  • Employee training records under OSHA 29 CFR 1910.1030 must be retained for at least 3 years from the training date, while confidential employee medical records must be preserved for the duration of employment plus 30 years.
  • Program auditing requires structured checklists covering administrative policies, facility layout, sterilization logs, and direct chairside observations of hand hygiene, PPE, and surface asepsis.
  • A robust safety culture relies on psychological safety, non-punitive incident reporting, and blameless root-cause analysis to systematically eliminate clinical hazards.
Last updated: September 2026

Developing, Implementing, and Auditing the Practice IPC Program

An infection prevention and control (IPC) program cannot succeed as an informal or fragmented set of clinical habits. Under modern healthcare standards, dental facilities must establish a formal, centralized, and site-specific administrative structure. In its 2016 Summary of Infection Prevention Practices in Dental Settings, the CDC elevated administrative measures to equal prominence with clinical barrier techniques, establishing that clear administrative oversight is the prerequisite for clinical safety.


1. The Infection Control Coordinator (ICC)

The CDC explicitly recommends that every dental practice designate at least one individual as the Infection Prevention Coordinator (commonly termed the Infection Control Coordinator, or ICC). In larger multi-specialty clinics or institutional health centers, an infection control committee may support this role, but individual accountability remains paramount.

Qualifications and Competencies

The coordinator should be qualified through training and knowledge of dental infection prevention and be given enough authority and resources to run the program. CDC does not require a particular professional license for this role. Key competencies include:

  • Deep comprehension of microbiology, mechanisms of disease transmission, and bloodborne pathogen risks.
  • Detailed mastery of federal (OSHA, CDC, FDA, EPA) and state regulatory mandates.
  • Technical knowledge of dental unit waterlines (DUWL), autoclave operation, biological monitoring, and chemical disinfection dynamics.
  • Leadership skills required to conduct compliance audits, deliver constructive feedback, and orchestrate staff training.

Core Administrative Responsibilities

  1. Policy Development and Maintenance: Authoring, customizing, and continually refining practice-specific Standard Operating Procedures (SOPs).
  2. Supply Chain and Equipment Oversight: Monitoring personal protective equipment (PPE) inventory, safety-engineered devices, chemical disinfectants, and autoclave maintenance.
  3. Quality Assurance and Monitoring: Ensuring weekly biological spore monitoring logs, physical run prints, and chemical indicator records are maintained without gaps.
  4. Workforce Training and Immunization Management: Facilitating new-hire orientation, annual OSHA Bloodborne Pathogens training, and monitoring employee immunization files.
  5. Post-Exposure Protocol Coordination: Serving as the point-of-contact during occupational sharps injuries, facilitating immediate confidential medical evaluations, and maintaining any OSHA-required sharps injury log.
  6. Auditing and Feedback: Conducting periodic direct observation audits of clinical workflows to identify breaches and enforce corrective actions.

Administrative Authority: Practice leadership (practice owners and corporate management) must endow the ICC with adequate administrative time, financial resources, and explicit managerial authority to enforce compliance across all team members, including senior clinicians.


2. Written Site-Specific Policies and Procedures

A critical failure point during regulatory inspections is the use of generic, off-the-shelf infection control manuals that have not been tailored to the specific facility. A generic manual may fail to describe the facility’s actual hazards, equipment, and work practices and therefore may not satisfy an applicable site-specific requirement. All policies must be site-specific and reflect the physical architecture, specific instrumentation, and exact workflows of the facility.

+------------------------------------------------------------------------------------------------+
|                       ESSENTIAL WRITTEN IPC PROGRAMS IN THE DENTAL PRACTICE                     |
+------------------------------+-----------------------------------------------------------------+
| Written Document             | Core Content or Applicability Trigger                           |
+------------------------------+-----------------------------------------------------------------+
| OSHA Exposure Control Plan   | Exposure determinations by job classification, implementation   |
| (ECP - 29 CFR 1910.1030)     | schedules for engineering controls, hepatitis B vaccination     |
|                              | protocols, post-exposure medical follow-up, biohazard signage.  |
+------------------------------+-----------------------------------------------------------------+
| Hazard Communication Program | Inventory of all hazardous chemicals, SDS location and access  |
| (29 CFR 1910.1200)           | protocol, secondary container labeling rules, PPE mandates.     |
+------------------------------+-----------------------------------------------------------------+
| Respiratory Protection Plan  | When required: administrator, medical evaluation protocols,     |
| (29 CFR 1910.134)            | annual fit test documentation, seal check instructions.         |
+------------------------------+-----------------------------------------------------------------+
| Reprocessing & Sterilization | Unidirectional flow guidelines, ultrasonic/washer operation,    |
| Standard Operating Procedures| packaging methods, sterilizer parameters per IFU, spore logs.   |
+------------------------------+-----------------------------------------------------------------+
| Environmental Asepsis & DUWL | Operatory turnaround SOPs, barrier placement, disinfectant dwell|
| Maintenance Protocols        | times, DUWL treatment/response steps per IFU, water testing logs.|
+------------------------------+-----------------------------------------------------------------+

3. Annual Program Evaluation and the Needlestick Safety Act

OSHA mandates that the Exposure Control Plan must be reviewed and updated at least annually and whenever new procedures, equipment, or technological innovations alter occupational exposure potential (29 CFR 1910.1030(c)(1)(iv)).

Mandatory Employee Solicitation

Under the Needlestick Safety and Prevention Act, employers must formally document the active solicitation and involvement of non-managerial clinical employees responsible for direct patient care in the identification, evaluation, and selection of effective engineering and work practice controls.

  • Implementation: The ICC should convene annual evaluation sessions where chairside assistants, dental hygienists, and associate dentists test and score newly available safety-engineered devices (e.g., self-sheathing anesthetic syringes, safety scalpels, blunt suture needles, automated needle recapping devices).
  • Documentation: The ECP must include written documentation of who was consulted, which devices were evaluated, the evaluation criteria utilized, and the rationale for accepting or rejecting specific safety devices.

4. Compliance Auditing and Quality Assurance

Ongoing compliance requires continuous surveillance through structured auditing. The CDC provides two comprehensive evaluation tools within its Infection Prevention Checklist for Dental Settings:

  1. Section I: Policies and Practices (Administrative Audit): Evaluates whether written policies exist, whether training records are complete, whether employee immunization statuses are documented, and whether spore logs meet regulatory frequency.
  2. Section II: Direct Observation Checklist (Clinical Audit): Evaluates chairside behaviors in real time, assessing:
    • Hand hygiene adherence before gloving and immediately after glove removal.
    • Proper donning and doffing sequence of personal protective equipment.
    • Disinfection dwell times and barrier replacement on clinical contact surfaces.
    • Handling of contaminated sharps and disposal protocols.
    • Unidirectional progression through the central sterilization area.

Audit Frequency and Actionable Remediation

  • Initial and periodic audits: Establish a baseline when the program or coordinator changes, then set the interval from the facility’s risk assessment, applicable rules, and quality-improvement plan. CDC’s checklist does not impose one universal audit interval.
  • Corrective Action Loop: Audits must not simply be filed away. If an audit reveals that surface disinfectant is being wiped dry before the manufacturer-specified contact time elapses, the ICC should conduct prompt targeted re-education, set a documented corrective-action deadline, re-audit soon enough to verify sustained correction, and document the resolution.

5. Documentation Retention Schedules

Accurate, secure documentation supports worker protection, quality assurance, and regulatory review. Retention duties differ by record type and jurisdiction, so the practice must distinguish federal minimums from state, local, manufacturer, and facility requirements.

+------------------------------------------------------------------------------------------------+
|                            REGULATORY RECORD RETENTION SCHEDULES                               |
+-----------------------------+-----------------------+------------------------------------------+
| Record Type                 | Governing Body        | Mandatory Retention Period               |
+-----------------------------+-----------------------+------------------------------------------+
| OSHA Training Records       | OSHA 29 CFR 1910.1030 | Minimum 3 years from date of training    |
+-----------------------------+-----------------------+------------------------------------------+
| Employee Medical Records    | OSHA 29 CFR 1910.1020 | Duration of employment PLUS 30 years     |
| (HBV, titers, exposures)    |                       | (confidential, separate from personnel)  |
+-----------------------------+-----------------------+------------------------------------------+
| Sharps Injury Log (when     | OSHA 29 CFR 1910.1030 | Minimum 5 years following the end of the |
| OSHA recordkeeping applies) | and 29 CFR Part 1904  | calendar year covered                    |
+-----------------------------+-----------------------+------------------------------------------+
| Sterilization Monitoring    | State Dental Boards   | Follow applicable state/local rules and |
| (Physical, Chemical, Spore) | & facility policy     | the facility retention policy           |
+-----------------------------+-----------------------+------------------------------------------+
| DUWL Water Quality Logs     | State/local rules     | Follow applicable rules and facility policy |
+-----------------------------+-----------------------+------------------------------------------+
| Amalgam Separator Logs      | EPA 40 CFR Part 441   | Minimum 3 years                          |
+-----------------------------+-----------------------+------------------------------------------+

6. Safety Culture, Psychological Safety, and Root Cause Analysis

The most sophisticated written infection control manual is useless if the clinical team operates in an atmosphere of fear, blame, or clinical rush. A true culture of safety shifts the focus from individual culpability to systemic error prevention.

Psychological Safety and Safety Stops

  • Psychological Safety: A team dynamic where any employee, regardless of hierarchy (e.g., a junior sterile processing tech or dental assistant), feels completely secure pointing out an aseptic breach to a senior practitioner without fear of ridicule, retaliation, or disciplinary blowback.
  • The Immediate "Safety Stop": Practices should institute a protocol where uttering a standardized phrase (e.g., "Safety Check") instantly pauses a clinical procedure so that a contaminated instrument can be replaced or an aseptic breach corrected.

Non-Punitive Incident Reporting and Root Cause Analysis (RCA)

When an occupational exposure or infection control breach occurs (e.g., a needlestick injury during tray transport, or an unsterilized instrument packet placed on an operative tray), management must avoid immediate punitive actions against the employee. Instead, the ICC should lead a Root Cause Analysis (RCA) utilizing the "5 Whys" methodology:

  1. Why did the needlestick occur? The assistant was recapping a syringe by hand.
  2. Why was it recapped by hand? The mechanical recapping device was missing from the tray.
  3. Why was the device missing? The sterilization room ran out of recapping stands that morning.
  4. Why did they run out? Several stands were broken and had not been reordered.
  5. Why were they not reordered? There was no minimum inventory threshold established in the purchasing system.

Systemic Resolution: Establish automatic inventory replenishment and supply safety-engineered syringes, permanently removing the reliance on individual human vigilance.

Loading diagram...
Closed-Loop Infection Prevention Administrative & Quality Assurance Cycle
Test Your Knowledge

Under the OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030), what is the statutory requirement regarding the retention of employee occupational medical records, such as Hepatitis B vaccination documentation and post-exposure evaluations?

A
B
C
D
Test Your Knowledge

When the Infection Control Coordinator (ICC) performs the mandatory annual review of the practice's written Exposure Control Plan (ECP), which specific procedural action is required by the Needlestick Safety and Prevention Act?

A
B
C
D
Test Your Knowledge

An Infection Control Coordinator is auditing sterilization quality assurance protocols. Which combination of records must be maintained to demonstrate compliance with biological spore monitoring standards?

A
B
C
D