Is OSHA training mandatory every year for medical and dental offices?

Yes. OSHA Standard 29 CFR 1910.1030(g)(2) mandates annual Bloodborne Pathogens training for all employees with occupational exposure to blood or OPIM. Training must be interactive and provided at no cost during working hours.

Does a medical practice need a custom OSHA safety manual or is a generic template acceptable?

Generic boilerplates routinely fail OSHA inspections. OSHA requires a site-specific exposure control plan, hazard assessment, and chemical inventory tailored to your specific staff, floor plan, and clinical workflows.

How often does a healthcare practice need to perform a HIPAA Security Risk Assessment (SRA)?

Under 45 CFR § 164.308(a)(1)(ii)(A), a Security Risk Assessment must be conducted periodically. Best practice and MIPS/Promoting Interoperability guidelines require an annual comprehensive assessment or whenever new technology or operational changes occur.

What are the four complexity categories under CLIA 88?

The four CLIA complexity categories are: 1) Certificate of Waiver (COW), 2) Provider-Performed Microscopy Procedures (PPMP), 3) Moderate Complexity, and 4) High Complexity. Each category carries distinct personnel, QC, QA, and inspection requirements.

Can Point Of Care Consults represent our practice during a surprise OSHA or OCR inspection?

Yes. Point Of Care Consults provides on-call regulatory assistance, mock audits, citation defense, and direct guidance during federal or state regulatory inspections.

Legal

Privacy policy

What we collect through this website, why we collect it, how long we keep it, and the choices you have.

Last updated 1 January 2026

Who we are

Point Of Care Consults is a regulatory compliance consultancy based in Mount Laurel, New Jersey, providing OSHA, HIPAA and CLIA assistance to medical practices. This policy covers the website at pocconsults.com and the forms on it. It does not cover information handled under a signed consulting engagement, which is governed by that agreement and, where applicable, by a business associate agreement.

You can reach us about this policy at info@pocconsults.com or +1 856-580-0801.

Information we collect

We collect only what the site needs to function and to respond to you.

Information you submit through the appointment or contact forms: your name, email address, telephone number, job title, practice or company name, approximate staff numbers, state, practice specialty, the compliance area you are asking about, and anything you write in the message field.
Technical information recorded when you view a page: your IP address, the page path, the referring page and your browser user agent string. We record at most one entry per IP address and page per hour.
Server logs generated by our infrastructure, which include request timestamps, response status codes and error diagnostics.

What we do not collect

We do not ask for and do not want protected health information through this website. Please do not include patient names, medical record numbers, dates of birth or any clinical details in a contact form. If you need to send us information of that kind during an engagement, we will arrange a secure channel governed by a business associate agreement.

We do not collect payment card details on this website, and we do not run third-party advertising or cross-site tracking networks.

How we use your information

We use what you provide for a small number of specific purposes.

To respond to your enquiry or appointment request and to arrange a consultation.
To send you the brochures, newsletter issue or materials you have asked for.
To maintain a record of enquiries so that a consultant picking up your file understands the history.
To understand aggregate site usage, such as which compliance topics generate the most interest.
To detect and prevent abuse of the forms, including automated submissions.

Legal bases and your choices

Where the GDPR applies to you, we rely on your consent for optional communications, on the performance of a contract or steps taken at your request before entering one for responding to enquiries, and on our legitimate interest in operating and securing this website for technical logging.

Where the CCPA and CPRA apply to you, we do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioural advertising.

Your rights

Subject to your jurisdiction, you may request access to the personal information we hold about you, correction of inaccurate information, deletion, restriction of processing, a portable copy, or that we stop contacting you. We will not discriminate against you for exercising any of these rights.

Send any request to info@pocconsults.com. We respond within thirty days and will tell you if we need longer and why.

Cookies and similar technologies

This site uses strictly necessary cookies only. Where you sign in to the administrative area or the member portal, a session cookie holds your signed authentication token; it is HTTP-only, expires after eight hours, and is marked secure in production. There are no advertising, analytics or cross-site tracking cookies.

Our visitor counter is server-side and does not place a cookie on your browser.

Sharing and service providers

We do not sell, rent or trade your information. We share it only where necessary: with the email provider that transmits form notifications to our staff, with our hosting provider as an inherent part of serving the site, and where we are required to do so by law or to establish or defend a legal claim.

The map on our contact page is not loaded until you press “Show map”. Only then does your browser contact Google, which is subject to Google’s own privacy policy. If you never press it, no request leaves your browser.

Retention

Appointment and enquiry records are retained for as long as needed to serve you and to maintain a reasonable business record, and are reviewed periodically for deletion. Visitor log entries are retained in aggregate for traffic reporting. Where you ask us to delete your information we do so unless we are required to keep it.

Security

The site is served over TLS. Passwords for the administrative area and the member portal are stored as bcrypt hashes and are never recoverable in plain text. Sessions are signed, time-limited and HTTP-only. Form submissions are rate-limited and validated on the server. Access to stored enquiries is restricted to authorised staff.

No system is perfectly secure. If you believe you have found a vulnerability in this website, please tell us at info@pocconsults.com rather than disclosing it publicly.

Children

This website is directed at medical and dental professionals. It is not intended for children, and we do not knowingly collect information from anyone under thirteen.

Changes to this policy

We update this policy when our practices change. The date at the top reflects the most recent revision. Material changes will be noted prominently on this page.