Infection Control: New OSHA Guidance Raises Compliance Costs

A peer-reviewed cost analysis published this year priced proper infection control for a single oral surgery procedure at roughly 16,539 KRW, about $13.75, and found that what practices actually spend falls short of what the standard protocol requires, with the widest gap sitting in surgery (Lee and Kim, International Journal of Dental Hygiene, 2026). That gap is not a supply problem. It is a documentation problem wearing a supply problem's clothes, because every practice with that gap also has a written exposure control plan on file claiming the money gets spent.

Here is the argument an informed owner can genuinely fight us on: 2026 raises your infection-control compliance cost even though no new federal mandate landed on dentistry, and you should voluntarily raise that spend this year rather than wait to be told. Plenty of owners will say the opposite, that a dollar nobody requires is a dollar you keep. We think that reasoning is exactly how practices end up with a beautifully bound manual that contradicts their own purchase history.

The CDC Update Didn't Add a Rule to Dentistry. It Added a Reference Point.

On Sept. 25, 2026, CDC published an update to its infection-control guidance, including a newly consolidated section on viral respiratory infections. Dentistry was explicitly excluded from new mandates. The ADA confirmed as much and said so plainly in its own coverage: there are no new dental requirements in the updated CDC infection control guidance.

Read only that headline and you'd close the tab. Read the next paragraph and the ADA is still telling practices to go update their employee health policies, their return-to-work criteria, and their exposure-reporting procedures to stay aligned with the consolidated guidance. That is not a contradiction. That is the ADA telling you the floor didn't move but the reference document everyone will read after an incident just did.

This is the part owners miss about how infection-control exposure actually works. Very few practices get hurt by a rule they never had to follow. They get hurt by the standard they wrote down, adopted by reference, trained their team on once in 2021, and then quietly stopped funding. A plaintiff's attorney, an OSHA compliance officer, or a state board investigator does not need a new mandate to make your life difficult. They need your own binder and your own invoices, and they need those two things to disagree.

385,000 Needlesticks a Year Is Why the Training Content Changed

The training side moved even though the rule side didn't. 2026 bloodborne pathogen materials for dental CE are shifting emphasis toward aerosol-generating procedure exposure risk, and the stated rationale is the roughly 385,000 needlestick injuries occurring annually across healthcare settings.

Notice what that reframing does to your practice specifically. Bloodborne pathogen training built around sharps handling is a training about instruments. Training built around aerosol-generating procedures is a training about operatory design, turnover time, evacuation, and how many minutes your assistant waits before breaking down a room. One of those you satisfy with a sharps container and a signature. The other one changes your schedule.

If your annual OSHA training is a 40-minute video your team clicks through in the break room every January, you are now training to last year's emphasis. That is not illegal. It is just stale, and stale is what an investigator writes down.

What Most Owners Get Wrong: Counting Barriers and Calling It the Budget

The specific mistake, and it is nearly universal among solo and small-group owners who came up before 2020, is treating infection control as a supply line. Gloves, masks, barriers, sterilization pouches, cassette wrap, surface disinfectant. Those items are visible, they show up on a distributor invoice, and they are easy to benchmark against last year.

The cost study that priced surgical infection control at about $13.75 per procedure is not describing a shopping list. Standard-protocol costing pulls in labor time for instrument reprocessing, equipment depreciation on the sterilizer and the ultrasonic, validation and spore testing, waste handling, and the operatory turnover minutes that are not producing anything. Most of that never appears on a supply order, so most owners never see it, so most owners assume infection control costs whatever the distributor billed them.

The owners who get this wrong most reliably are the ones running efficient offices. If you have a fast team and tight turnover, your instinct is that infection control is cheap because you never feel it. You are feeling it. It is buried in your assistant payroll and your equipment line, and when you compress turnover to squeeze in one more column, you are spending the infection-control budget without ever booking it.

Our view: measuring infection control by supply spend is the wrong metric, and it is the reason the gap in that study exists at all. You cannot underfund a cost you never counted. You can only discover, later, that you did.

A 576-Surgery Year: Where the $7,920 Sits

Take a single-doctor practice that does a meaningful surgical volume. Twelve surgical-category procedures a week, extractions, implant placements, perio surgery, across a 48-week clinical year.

That is 576 surgical procedures a year.

At the standard-protocol infection-control cost of about $13.75 per surgical procedure, the fully loaded requirement is $7,920 a year for that category alone.

Now the uncomfortable part, and this input is yours, not ours: go figure out what you actually spend against those procedures once you include reprocessing labor, sterilizer depreciation, spore testing, and turnover time. If you land at 60% of the requirement, you are spending $4,752.

That leaves an annual shortfall of $3,168 between your written protocol and your funded protocol.

Spread across the year, closing that gap costs $264 a month.

Per procedure, it is $5.50.

On a $350 surgical fee, $5.50 is a 1.6% price adjustment.

Set that against the downside. One exposure event pulls two clinical staff for two hours each, for source testing coordination, post-exposure evaluation, documentation, and the meeting that follows. That is four hours of clinical time, and at $450 an hour of chair production it costs $1,800 in lost production before you have paid a single medical bill.

Add one such event to the funding gap and the year costs $4,968 in real money, against a $3,168 fix.

And the policy rewrite the ADA is actually asking for, three documents covering employee health, return-to-work, and exposure reporting, is maybe six hours of administrative time. At a $45 loaded hourly rate, that is $270.

So the entire alignment move the ADA recommends costs less than one exposure event costs in lost chair time, by a factor of roughly seven.

We'd write the $270 check and stop arguing about it. There is no version of this analysis where six hours of policy work is the expensive option.

Why We'd Fund the Gap With Nobody Forcing Us

The counterargument is decent, so let's take it seriously. No new dental mandate means no new enforcement hook, and a practice with thin margins has better places to put $3,168 than voluntary compliance spend. Buy the intraoral scanner. Fund the hygiene bonus. Pay down the equipment note.

We still wouldn't. Three reasons.

• The underfunding is already documented. A published cost analysis now sits in the literature saying standard-protocol infection control costs more than practices spend, with the worst gap in surgery. That is a citable, expert-friendly benchmark that did not exist before, and it points at the exact procedures where your liability is highest.
• Your own plan is the evidence. Your exposure control plan is a document you signed claiming a protocol you follow. The cheapest defense in any infection-control dispute is showing that the written plan and the operational reality match. The most expensive position is the opposite, and you reach it by doing nothing.
• The training emphasis moved before the rule did. That's the sequence it always follows. Training content shifts toward aerosol-generating procedures, the expert standard of care shifts with it, and enforcement arrives last. Owners who move when the training moves pay retail. Owners who wait for the mandate pay retail plus the scramble.

Nobody gets penalized for the rule that didn't apply to them. They get penalized for the policy they wrote and then stopped paying for.

Three Documents and One Invoice Review, Starting Monday

Pull your exposure control plan and check the revision date; if it predates 2024, it is describing a practice you no longer run. Rewrite the three items the ADA named, employee health, return-to-work criteria, and exposure reporting, and date the revision so the file shows you responded to the September update. Then run one invoice review: total your reprocessing labor hours, spore testing, sterilizer and ultrasonic depreciation, and turnover minutes against your surgical procedure count, and compare the per-procedure result to $13.75. If you come in under it, you have found your number, and $264 a month closes it.

Infection control belongs in your overhead picture, not in a compliance folder nobody opens between inspections, and most practices have never seen it as a percentage of collections. If you want to know whether your reprocessing and sterilization costs are actually sitting where they should against practices your size, run your own numbers through the overhead calculator and see what the infection-control line does to your total once you count the labor and the equipment rather than just the gloves.

What we're watching next: whether CDC's consolidated viral respiratory section gets adopted by reference into state dental board rules over the next two quarters. That is the quiet path by which a federal document with no dental mandate becomes a state requirement with teeth, and it would move this from a voluntary spend to a deadline. If it doesn't happen by spring, we'll say so, and owners who funded the gap early will have bought insurance instead of compliance. We'd still take that trade.