Compliance
Medical Office Cleaning: OSHA and HIPAA Basics for Vendors
What your cleaning vendor needs to know about bloodborne pathogens, PHI, and infection control.
Medical office cleaning has two separate compliance layers: OSHA (worker safety, bloodborne pathogens) and HIPAA (patient privacy). Your cleaning vendor needs both — or you have a risk.
OSHA Bloodborne Pathogens Standard
29 CFR 1910.1030 — if your cleaning staff could reasonably be expected to contact blood or body fluids, they need training, PPE, and a hepatitis B vaccine offer. They don't handle sharps or regulated medical waste, but they do clean around it.
HIPAA for cleaning staff
Cleaning staff don't process PHI, so they're not 'business associates' under HIPAA. But they're in the space where PHI lives. Your vendor should brief them on: what not to look at, what not to move, what not to photograph, and how to handle an incident.
What we do
- OSHA BBP training annually for medical-assigned crews
- Hepatitis B vaccine offered to all medical-assigned employees
- HIPAA awareness training (what not to touch, what not to look at)
- GBAC-trained technicians for infection-control environments
- EPA-registered hospital-grade disinfectants