TL;DR: Several infection control and compliance rules have changed or taken full effect in 2026, including updated OSHA Hazard Communication Standards, anticipated HIPAA security amendments, and evolving provincial IPAC requirements. Canadian dental practices — particularly in Ontario — should audit their chemical labelling, staff training records, and digital security protocols now to avoid regulatory gaps.
Infection prevention and control (IPAC) compliance is never static. As of March 2026, dental practices across Canada are navigating a shifting regulatory landscape that touches everything from how chemical hazards are labelled on sterilization products to how patient data is stored and transmitted electronically. For dentists, hygienists, and practice managers in Toronto and the Greater Toronto Area, staying current with these changes is not optional — it is a condition of licensure and patient safety.
OSHA Hazard Communication Standard: Full Compliance Now Required
The Globally Harmonized System of Classification and Labelling of Chemicals (GHS) revisions to OSHA's Hazard Communication Standard (HCS) have been rolling out in phases since mid-2024. As of January 2026, full compliance is required for all chemical substances used in dental settings. Mixtures must comply by July 2027.
What does this mean for your practice? If your operatory uses chemical disinfectants, glutaraldehyde-based sterilants, acid etch solutions, or any other chemical agents — and every dental practice does — you need to verify the following:
- Updated Safety Data Sheets (SDS): Every chemical product in your practice must have a current SDS that follows the revised GHS format. If your SDS binder has not been refreshed since 2024, it likely contains outdated sheets
- Container labelling: All secondary containers (spray bottles, dilution containers) must carry GHS-compliant labels with the correct hazard pictograms, signal words, and precautionary statements
- Staff training: Every team member who handles or works near chemical products must receive updated Workplace Hazardous Materials Information System (WHMIS) training. In Ontario, this falls under the Occupational Health and Safety Act, and the Royal College of Dental Surgeons of Ontario (RCDSO) considers WHMIS compliance part of the IPAC standard
While OSHA is a U.S. federal agency, the underlying GHS framework is international. Canada adopted GHS through the Hazardous Products Act and WHMIS 2015, and Health Canada continues to align Canadian chemical safety standards with global GHS revisions. Ontario dental practices must comply with both federal WHMIS requirements and provincial occupational health regulations.
Pro Tip: Schedule a 30-minute SDS audit this month. Pull out your binder (or digital folder), compare each sheet's revision date against the manufacturer's current version, and flag any product with an SDS older than two years for replacement. Many suppliers provide updated SDS documents on their websites.
HIPAA-Equivalent Privacy and Security Changes in Canada
While HIPAA is a U.S. regulation, Canadian dental practices must comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level and, in Ontario, the Personal Health Information Protection Act (PHIPA). Both frameworks have been evolving in response to the same digital security threats that prompted the U.S. HIPAA amendments.
Key digital security measures that are now considered best practice — and increasingly expected by provincial regulators — include:
- Multi-factor authentication (MFA): All practice management software, cloud-based imaging systems, and email accounts containing patient information should require MFA. The Ontario Information and Privacy Commissioner has flagged single-password access as a significant risk factor in dental practice data breaches
- Encryption at rest and in transit: Patient records stored on local servers, cloud platforms, or portable devices should be encrypted. This includes intraoral photographs, which are classified as personal health information under PHIPA
- Consent for marketing use of patient images: Using before-and-after photos on social media or your practice website requires explicit written consent. The RCDSO's advertising regulations are clear on this point, and violations can trigger professional conduct proceedings
For practices in Mississauga, Brampton, and other GTA municipalities that have recently transitioned to cloud-based practice management systems, now is the time to verify that your vendor meets current Canadian data residency and encryption requirements.
Continuing Education Requirements: What Has Changed
Provincial dental regulatory bodies across Canada periodically update their continuing education (CE) requirements. While specific Canadian CE mandates vary by province, several trends are relevant for Ontario practitioners in 2026:
- Infection control CE: Several jurisdictions now require dedicated infection control continuing education hours within the total CE requirement. Ontario dentists should ensure their CE portfolio includes current IPAC content that reflects the latest RCDSO guidelines
- Teledentistry competency: As virtual consultations become more common across the GTA, regulatory bodies are increasingly expecting practitioners who offer teledentistry services to demonstrate specific training in remote patient assessment, informed consent, and record-keeping for virtual encounters
- Jurisprudence and ethics: The RCDSO requires Ontario dentists to complete a jurisprudence module as part of their registration requirements, which includes updated content on professional obligations, mandatory reporting, and practice standards
Pro Tip: Track your CE credits quarterly rather than scrambling before your renewal deadline. The Ontario Dental Association (ODA) maintains a list of accredited CE providers, and many offer online modules that can be completed between patient appointments.
Sterilization Monitoring: Biological Indicators Remain the Standard
The RCDSO's IPAC guidelines require dental practices to use biological indicators (spore tests) to verify sterilizer efficacy at least weekly. This requirement has not changed in 2026, but compliance audits are increasingly checking for documentation of:
- Weekly spore test results with lot numbers and incubation times
- Mechanical monitoring logs for each autoclave cycle (temperature, pressure, time)
- Chemical indicator results on every sterilization pouch
- Maintenance and calibration records for all sterilization equipment
Practices that cannot produce these records during an RCDSO inspection may face remediation orders. The standard of documentation expected has risen, and handwritten logs are being supplemented — and in some practices replaced — by digital sterilization tracking systems.
Aerosol Management and Ventilation Standards
The heightened awareness of aerosol transmission that emerged during the COVID-19 pandemic has become embedded in standard IPAC practice. The Canadian Dental Association (CDA) continues to recommend enhanced ventilation and aerosol mitigation strategies for all dental procedures that generate splatter or aerosols.
Current best practices for Ontario dental clinics include:
- High-volume evacuation (HVE) during all aerosol-generating procedures
- Pre-procedural antimicrobial rinses to reduce the bioburden in aerosols
- HEPA filtration units in operatories without adequate natural ventilation
- Minimum air exchange rates as recommended by CSA Group standards for healthcare facilities
Practices in older buildings across Toronto, Scarborough, Etobicoke, and North York should pay particular attention to ventilation adequacy. If your operatory relies solely on a standard HVAC system without supplemental filtration, consider a risk assessment with an HVAC professional familiar with healthcare ventilation requirements.
Pro Tip: Place a simple smoke pencil test near your operatory's return air vent during a simulated procedure to visualize airflow patterns. If the smoke does not move toward the vent within a few seconds, your air exchange rate may be insufficient for aerosol-generating procedures.
What Dental Practices Should Do Now
Compliance is not a one-time project — it is an ongoing practice management function. Here is a practical checklist for Ontario dental practices reviewing their IPAC and regulatory compliance as of March 2026:
- Audit all chemical product SDS documents and replace outdated sheets
- Verify that all secondary chemical containers carry current GHS-compliant labels
- Confirm that WHMIS training records are current for every staff member
- Enable MFA on all systems storing patient health information
- Review patient photo consent forms to ensure PHIPA compliance
- Document weekly biological indicator spore test results
- Assess operatory ventilation and aerosol mitigation strategies
- Update your CE tracking to include infection control and IPAC content
Regulatory compliance protects your patients, your staff, and your licence. The cost of a proactive audit is a fraction of the cost of a remediation order or, worse, a patient safety incident.
EBIKO Dental will continue monitoring regulatory developments that affect dental practices across Canada and the GTA. For the latest news and clinical insights, visit ebiko.ca.
Frequently Asked Questions
Q: What infection control regulations changed for dental practices in 2026?
The most significant change is full compliance with the revised OSHA/GHS Hazard Communication Standard for chemical substances, effective January 2026. Canadian dental practices must also ensure alignment with updated WHMIS requirements, maintain weekly biological indicator sterilization monitoring as required by the RCDSO, and adopt enhanced digital security measures for patient data under PIPEDA and PHIPA.
Q: Do Ontario dental practices need to use biological indicators for sterilization monitoring?
Yes. The Royal College of Dental Surgeons of Ontario (RCDSO) requires dental practices to perform biological indicator spore testing at least weekly on all sterilizers. Results must be documented with lot numbers, incubation times, and pass/fail outcomes. Mechanical and chemical monitoring must also be performed and recorded for every sterilization cycle.
Q: What digital security measures should Canadian dental practices implement in 2026?
Canadian dental practices should implement multi-factor authentication on all systems containing patient health information, encrypt patient records both at rest and in transit, obtain written consent before using patient images for marketing, and ensure their cloud-based systems meet Canadian data residency requirements under PIPEDA and Ontario's PHIPA.