Dental Sterilization Compliance Requirements by State

Frequently asked questions

How often do dental sterilizers need to be tested?

The CDC recommends weekly biological monitoring (spore testing) for every heat sterilizer. Most US states adopt this directly. Florida is the exception, requiring a test every 40 hours of use OR every 30 days for steam autoclaves. Arkansas requires monthly minimum. Indiana additionally requires a fresh spore test within 7 days before any use after the sterilizer has been idle.

How long do dental sterilization records need to be kept?

It varies dramatically by state. Washington requires 5 years, the longest explicit period. California requires 12 months. Oregon and several others require 3 years. Many states — including Texas, New York, Florida, Illinois, and Massachusetts — do not specify a retention period in rule. Where retention is unspecified, the ADA and most malpractice insurers recommend keeping sterilization records as long as patient records, typically 7 or more years.

Are paper sterilization logs acceptable, or do I need to go digital?

Both are acceptable in every US state. No state explicitly forbids digital records, and no state explicitly requires paper. The functional requirement everywhere is that the records are "available for inspection on request" — paper, spreadsheet, or purpose-built software all qualify, provided they capture the required data points and can be produced when asked.

Who actually audits dental sterilization records?

In a private US dental practice, the agency that practically matters is the state dental board. OSHA has authority via the Bloodborne Pathogens Standard but rarely focuses on cycle logs specifically. The FDA regulates the sterilizers themselves but does not inspect practices. Inspections are almost universally complaint-driven — triggered by a patient complaint, an employee whistleblower, an alleged transmission event, or a Medicaid audit at participating practices. Iowa is one of the few states that explicitly permits routine random inspections.

What happens if a biological indicator (spore test) fails?

A positive spore test means the sterilizer did not work for that cycle, and any instruments processed since the last passing test may be compromised. The recommended response per CDC and most state rules: stop using the sterilizer, retest immediately, identify and quarantine affected loads, retest with a fresh BI from the manufacturer, and document the entire event. If a second test also fails, take the device out of service until it can be repaired. Several states (Ohio explicitly) have written this into rule. Cuspid automates this remediation workflow.

What is an "infection control coordinator" and is one required?

The CDC recommends every dental practice designate an infection control coordinator (ICC) — a single staff member responsible for sterilization protocols, training, and compliance documentation. Some states (e.g. California) name this role explicitly in rule; most reference CDC by extension. Cuspid lets you designate an ICC and routes BI test confirmations and audit-ready exports to that role.