Healthcare Facility Waste Compliance Checklist

Last reviewed: August 17, 2026

Medical Waste Resources

Healthcare waste compliance involves multiple federal agencies and a layer of state-specific rules. OSHA governs worker safety. HIPAA governs document destruction. DOT governs shipping. EPA governs hazardous pharmaceutical waste. And your state environmental agency governs medical waste handling, storage, transport, and treatment.

Missing a requirement in any one of these areas can result in fines, citations, or liability exposure. This checklist organizes the key compliance items by regulatory body so you can systematically verify that your facility meets each requirement.

OSHA: Bloodborne Pathogens Standard (29 CFR 1910.1030)

OSHA's Bloodborne Pathogens Standard applies to every healthcare facility where employees have occupational exposure to blood or other potentially infectious materials.

Written Exposure Control Plan Maintain a written plan that identifies job classifications with exposure risk, describes engineering and work practice controls, and details post-exposure evaluation procedures. Review and update annually.

Sharps Containers at Point of Use Place puncture-resistant, leak-proof, labeled sharps containers as close as practical to every area where sharps are used. Containers must be closable and labeled with the biohazard symbol.

Safety-Engineered Sharps Devices Evaluate and implement safer needle devices and sharps with engineered injury protections. Document the evaluation process and employee input (required by the Needlestick Safety and Prevention Act).

Annual Bloodborne Pathogen Training Train all employees with occupational exposure annually. Training must cover bloodborne pathogen risks, exposure prevention, sharps handling, spill cleanup, and post-exposure procedures. Document training dates, content, and attendees.

Sharps Injury Log Maintain a sharps injury log (required for employers with 11+ employees). Record the type and brand of device, department/work area, and description of the incident. Retain for five years.

Red Bag and Container Labeling All containers of regulated waste must be labeled with the biohazard symbol or color-coded red. This includes red bags, sharps containers, and any secondary containment used during transport.

Hepatitis B Vaccination Offer the Hepatitis B vaccine series to all employees with occupational exposure at no cost, within 10 days of initial assignment. Document acceptance or declination.

HIPAA: Protected Health Information Destruction

HIPAA does not directly regulate medical waste, but it does regulate the destruction of documents and media containing protected health information (PHI). For healthcare facilities, this intersects with waste management whenever PHI-bearing materials enter the waste stream.

Secure Document Destruction Process Paper documents containing PHI must be rendered unreadable before disposal. Cross-cut shredding is the standard method. Never place PHI documents in regular recycling or trash.

Certificate of Destruction If using an off-site shredding service, obtain a Certificate of Destruction for every pickup. This documents the date, volume, and method of destruction and demonstrates compliance during audits.

Electronic Media Sanitization Hard drives, USB devices, and other electronic media containing PHI must be sanitized (wiped, degaussed, or physically destroyed) before disposal. Document the method and date of sanitization.

Business Associate Agreement (BAA) If a third-party handles PHI destruction on your behalf, a signed BAA must be in place before they access any PHI materials. This applies to both document shredding and electronic media destruction vendors.

For more on HIPAA-compliant shredding, see Where Can I Go to Shred Documents? HIPAA-Compliant Options.

DOT: Shipping Regulated Medical Waste (49 CFR 173.134)

When regulated medical waste leaves your facility for transport to a treatment facility, DOT Hazardous Materials Regulations apply.

UN 3291 Classification Regulated medical waste shipped off-site must be classified as UN 3291 (Regulated Medical Waste, n.o.s.). Ensure your waste provider is using the correct classification on all shipping documents.

Proper Packaging Waste must be packaged in containers that meet DOT performance standards: leak-proof inner packaging, absorbent material (if liquid), and a rigid outer packaging. Triple packaging is standard for most regulated medical waste shipments.

Marking and Labeling Outer packaging must display the UN 3291 marking, the biohazard symbol, and the shipper's name and address. Labels must be durable and visible.

Shipping Papers A shipping paper (manifest) must accompany every shipment. It must include the proper shipping name, UN number, quantity, and emergency contact information.

Driver Training Drivers transporting regulated medical waste must have hazmat training appropriate for the materials they carry. Verify that your transporter's drivers are current on DOT hazmat training requirements.

For more on UN 3291 requirements, see What Is UN-3291? Understanding Regulated Medical Waste Classification.

EPA: RCRA Pharmaceutical Waste (40 CFR Part 266, Subpart P)

The EPA's RCRA regulations apply to pharmaceutical waste that meets the definition of hazardous waste. The 2019 Subpart P rule created streamlined management standards specifically for healthcare facilities.

Pharmaceutical Waste Formulary Maintain a list of all pharmaceuticals in your facility, coded by disposal category: RCRA hazardous (P-list, U-list, or characteristic), non-hazardous, and DEA controlled. Post reference versions near waste containers.

Proper Container Segregation RCRA hazardous pharmaceuticals go in black containers. Non-hazardous pharmaceuticals go in separate designated containers. Never mix hazardous and non-hazardous pharmaceutical waste.

No Sewering of Hazardous Pharmaceuticals Federal law prohibits pouring RCRA hazardous pharmaceuticals down drains. This is a strict prohibition with no exceptions.

Accumulation Time Limits Healthcare facilities operating under Subpart P are not subject to the traditional 90/180/270-day accumulation limits. Instead, they must manage hazardous pharmaceutical waste in containers at or near the point of generation and ship it for disposal in a timely manner.

DEA Controlled Substance Disposal Controlled substances require DEA-compliant disposal (reverse distribution, on-site witnessed destruction, or law enforcement take-back). Maintain chain-of-custody records, DEA Form 41 (when applicable), and witness signatures. Retain records for a minimum of two years.

For more on pharmaceutical waste categories, see Pharmaceutical Waste Disposal: A Complete Guide and What Goes in Black Pharmaceutical Waste Containers.

State Environmental Agency: Medical Waste Regulations

Your state environmental agency regulates the handling, storage, transport, and treatment of regulated medical waste. Requirements vary by state, but the following items apply broadly. For state-specific details, see Medical Waste Regulations by State.

Generator Registration If your facility generates medical waste above your state's threshold (50 lbs/month in TX, 40 lbs/month in AZ, 100 lbs/month in GA), register with the appropriate state agency.

Storage Time and Conditions Store untreated medical waste within state-specified time limits (commonly 30 days). Keep the storage area secure, labeled, and separate from clean supplies and public areas.

Authorized Transporter Use only state-registered or authorized transporters for medical waste pickup. Verify your transporter's current registration with the state agency.

Manifests and Tracking Documents Retain a copy of the manifest or tracking document for every medical waste shipment. Manifests should include generator information, transporter details, waste quantity and type, and destination facility.

Treatment Certificates Obtain certificates from your treatment facility confirming that waste was properly autoclaved or incinerated. File with the corresponding manifest.

Record Retention Retain all medical waste records (manifests, treatment certificates, training records, incident reports) for a minimum of three years or as required by your state. Some states may require longer retention periods.

Putting It Into Practice

No single person in a healthcare facility is responsible for every item on this checklist. OSHA compliance typically falls to safety officers and infection control. HIPAA compliance is managed by privacy officers. DOT compliance involves the waste transporter. EPA and state compliance is shared between environmental services, pharmacy, and the waste management provider.

The key is to assign clear ownership for each area and conduct periodic audits across all five regulatory domains. An annual compliance review that walks through each section of this checklist will identify gaps before they become citations.

Simplify Your Compliance Program

remedi manages regulated medical waste, sharps disposal, pharmaceutical waste, and document destruction for healthcare facilities. Fully integrated model with own fleet, own personnel, and own facilities. We handle the compliance so you can focus on patient care.

Get a Free Compliance Review

Prefer to talk first? Book a consultation