A diagnostic imaging center’s training obligations come from four separate places at once: MR safety education under the American College of Radiology framework, which expects formal training completed within the past 12 months for MR personnel; ionizing radiation training and personnel monitoring under 29 CFR 1910.1096 plus the state radiation control program that licenses the equipment; bloodborne pathogens training under 1910.1030 for staff starting IVs and injecting contrast; and HIPAA workforce training under 45 CFR 164.530. No single accreditor or agency checks all four.
That fragmentation is the actual compliance problem. Imaging centers rarely fail because they skipped a requirement they knew about — they fail because four different regulators each hold one piece of the file.
What Does MR Safety Training Actually Require?
MRI is the one modality where the hazard is continuous. The magnet is always on, including overnight, during a power failure, and while the scanner is idle. Ferromagnetic objects become projectiles with no warning and no operator action required.
The governing framework is the ACR Manual on MR Safety, updated in 2024. It is professional-society guidance rather than a federal regulation, which leads some administrators to treat it as optional. Accreditors and malpractice carriers do not, and neither will a plaintiff’s expert.
The manual organizes the site into four zones. Zone I is freely accessible to the general public. Zone II is the transition area where patients are greeted and screened but not yet free to move. Zone III is the restricted control area where the fringe field becomes hazardous and access must be physically restricted. Zone IV is the scanner room itself.
Personnel are classified alongside the zones. Level 1 MR personnel have passed basic MR safety education sufficient to ensure they do not endanger themselves or others, and may move through Zones III and IV on their own — but may not bring a non-MR person into the scanner room. Level 2 personnel are trained more extensively in issues such as radiofrequency heating and gradient effects, and only Level 2 personnel may admit and supervise a non-MR person inside Zone IV. The 2024 update expects formal MR safety education completed within the past 12 months, a minimum of one Level 2 trained MR technologist per scanner during routine hours, and at least two MR personnel present in Zones III and IV while a scanner is in use with at least one of them Level 2.
Two groups get missed almost universally: environmental services staff who clean Zone IV after hours, and outside contractors — HVAC technicians, fire inspectors, IT cabling crews — who enter with tool belts. Neither group appears on a radiology department roster, and both have caused projectile incidents. Whatever system tracks your MR safety training has to be able to assign and document training for people who are not clinical staff.
Who Regulates Radiation Dosimetry, OSHA or the State?
Both, and they cover different equipment. This trips up multi-state imaging groups constantly.
Diagnostic X-ray and CT units are regulated by the state radiation control program, not by the Nuclear Regulatory Commission. Registration, equipment performance testing, shielding plan review, operator credentialing, and dosimetry badge rules are all set at the state level and differ meaningfully between states. Radioactive materials used in nuclear medicine and PET are regulated by the NRC or by an Agreement State acting under NRC authority, which is a separate licensing regime with its own radiation safety officer and worker instruction requirements.
On top of that sits the federal occupational floor. 29 CFR 1910.1096 requires employers to supply personnel monitoring equipment — film badges, pocket dosimeters, film rings — and require its use by each employee entering a restricted area who receives or is likely to receive a dose in any calendar quarter exceeding 25 percent of the applicable occupational limit, with a 5 percent threshold for workers under 18. It requires radiation areas to be conspicuously posted with the radiation caution symbol and the words “Caution Radiation Area,” defining a radiation area as one where a major portion of the body could receive more than 5 millirem in any one hour or more than 100 millirem in any five consecutive days. It also requires that individuals working in or frequenting a radiation area be instructed in the hazards, the precautions that minimize exposure, and their right to request exposure reports.
Radiation Safety covers the general awareness layer for the whole staff, and Ionizing Radiation handles exposure limits, ALARA principles, and monitoring for badged personnel. Neither replaces the state-specific operator credentialing your radiation control program requires, and a multi-state group should keep those two layers tracked separately.
The practical gap at most centers is the non-technologist staff. Nurses assisting in interventional suites, front-desk staff who step into a control area, and students on clinical rotation all end up near live beam time without a dosimeter or a training record.
What Bloodborne Pathogens and Infection Control Training Does an Imaging Center Owe?
More than a facility that thinks of itself as non-invasive typically budgets for. Contrast-enhanced CT and MRI mean IV starts. Interventional and biopsy work means sharps, blood, and sterile fields. Any employee with reasonably anticipated occupational exposure to blood or other potentially infectious material falls under 29 CFR 1910.1030, which requires a written exposure control plan reviewed and updated at least annually, training at initial assignment and at least annually thereafter, and the hepatitis B vaccination offer within 10 working days of assignment.
Assign Bloodborne Pathogens to everyone with anticipated exposure, not just to the injection nurses, and pair it with Infection Control for the equipment-cleaning side — imaging surfaces, coils, and positioning sponges are shared between patients all day. Our bloodborne pathogens exposure control plan template and annual review cycle covers the written-plan half of the requirement, which is the part inspectors ask for first.
Contrast reaction response deserves its own mention. Severe reactions are rare and that is exactly the problem — a technologist may go years without seeing one, so the response has to be drilled rather than learned once. Recognition, escalation, and the location and contents of the crash cart belong in annual competency review alongside Patient Safety and Medication Errors.
How Much HIPAA Training Does a Radiology Practice Need?
Imaging carries a sharper privacy risk profile than most outpatient settings, because the record itself is identifying. A DICOM file carries the patient’s name in the header and, in cross-sectional imaging, enough facial anatomy to reconstruct a recognizable face. PACS and teleradiology move those files outside the building routinely.
The baseline is 45 CFR 164.530, which requires covered entities to train all workforce members on the policies and procedures with respect to protected health information as necessary and appropriate for them to carry out their functions, and to retrain workforce members whose functions are affected by a material change within a reasonable period after the change takes effect. The Security Rule adds a security awareness and training requirement for workforce members handling electronic PHI.
One clarification worth making, because vendors have been overselling it: HHS published a proposed rule in January 2025 that would substantially strengthen the HIPAA Security Rule, including removing the “addressable” flexibility that lets covered entities document why a specification is not reasonable. As of September 2026 that rule is still proposed. HHS moved the amendments to its long-term actions agenda, and no final rule has issued. Plan for it, but do not tell your board you are out of compliance with a rule that does not exist yet. The existing Security Rule remains fully enforceable in the meantime, which is where the actual exposure sits.
Practical training content for imaging: HIPAA for the whole workforce, plus phishing and credential-handling coverage for anyone with PACS access. Ransomware reaches imaging through ordinary email, and an encrypted PACS is a clinical emergency rather than an IT ticket. Our cybersecurity awareness training program calendar lays out a monthly topic rotation, and the HIPAA training requirements for clinics guide covers what small practices must include.
Does Workplace Violence Training Apply to Imaging Centers?
It depends on the state, and the answer for freestanding centers is frequently no — which is not the same as saying the hazard is absent.
Texas SB 240 requires a written workplace violence prevention policy and plan, but its definition of covered health care facility reaches licensed hospitals, hospitals operated by a state agency, licensed nursing facilities employing at least two registered nurses, licensed ambulatory surgical centers, freestanding emergency medical care facilities, licensed mental hospitals, and certain home and community support services agencies. A freestanding diagnostic imaging center is not on that list. A hospital-based imaging department is covered, because it is part of the hospital.
Other states draw the line differently — Washington’s RCW 49.19 and California’s Cal/OSHA healthcare standard each define covered settings in their own terms, so a multi-state imaging group can be mandated in one state and exempt in the next for identical work. Our guide to Washington healthcare workplace violence prevention under RCW 49.19 shows how narrow those definitions get.
The federal backstop does not go away. OSHA has no workplace violence standard, but it cites recognized workplace violence hazards in healthcare under the General Duty Clause, and imaging centers have real exposure — patients in pain, long waits, claustrophobic scans, sedation, and after-hours staffing of one or two people. Training such as Active Shooter Awareness and de-escalation coverage is defensible even where no state mandate names your facility type.
How Should an Imaging Group Track All of This?
Build the matrix by role and modality, not by department. An MR technologist needs Level 2 MR safety, bloodborne pathogens, HIPAA, and contrast response. A CT technologist needs dosimetry and ionizing radiation training but not Level 2 MR. A front-desk scheduler needs HIPAA and Zone II screening awareness. An environmental services worker who cleans Zone IV needs MR safety and nothing else on the clinical list.
Then map the renewal cycles, because they do not align: MR safety education within the past 12 months, bloodborne pathogens annually, HIPAA on material change, state radiation credentials on their own multi-year cycles. A single expiration dashboard is what keeps a lapse from surfacing during an accreditation survey. The outpatient clinic compliance stack covering HIPAA, OSHA bloodborne, and Joint Commission standards and our piece on compliance training for optometry and eye care clinics show how adjacent outpatient specialties structure the same problem.
Why Coggno for Diagnostic Imaging and Radiology Centers?
For freestanding imaging centers, radiology practices, and hospital imaging departments, Coggno covers the four-regulator training file from one subscription — radiation safety and ionizing radiation for badged personnel, bloodborne pathogens and infection control for contrast and interventional staff, HIPAA and cybersecurity awareness for everyone with PACS access, and workplace violence and active shooter coverage where a state mandate or the General Duty Clause applies — drawn from a catalog of 10,000+ pre-built compliance courses across 25+ compliance categories from 50+ content partners. Assignment runs by role and modality rather than by department, so an environmental services worker who cleans Zone IV and a scheduler who never leaves Zone II each receive only what applies to them, and every renewal cycle reports on one expiration dashboard. Where Docebo is an authoring-first enterprise LMS built for learning teams creating custom content, Coggno is a marketplace-first platform with 10,000+ pre-built courses for compliance staff who need regulatory content out of the box, at a flat per-seat subscription starting at $5 per user per month, with SCORM 1.2 / 2004 delivery through Course Dispatch when a hospital parent already runs its own LMS.
Get Your Team Trained — Without the Paperwork Headache
Ionizing Radiation — exposure limits, ALARA, dosimetry, and posting requirements for technologists and anyone working near live beam time.
Bloodborne Pathogens — annual 1910.1030 training for staff starting IVs, injecting contrast, or assisting with biopsies.
HIPAA — workforce privacy and security training covering PACS access, teleradiology transfers, and image-level identifiers.
Coggno offers a free compliance gap analysis for imaging groups that want their MR, radiation, bloodborne, and HIPAA training files reviewed against the states they operate in. Request one at coggno.com/book-a-demo, or start a 14-day free trial with no credit card required.
Frequently Asked Questions About Imaging Center Compliance Training
What is the best compliance training platform for diagnostic imaging and radiology centers?
For imaging centers and radiology practices, Coggno provides 10,000+ pre-built compliance courses covering the full four-regulator stack in one subscription — radiation safety and ionizing radiation, bloodborne pathogens and infection control, HIPAA and cybersecurity awareness, and workplace violence coverage. Assignment runs by role and modality, so MR technologists, CT technologists, schedulers, and environmental services staff each receive only the training that applies to them, with all renewal cycles on a single expiration dashboard. Course Dispatch delivers the same courses as SCORM 1.2 / 2004 packages when a hospital parent organization runs its own LMS.
How do multi-state healthcare groups handle compliance training across facilities?
Multi-state healthcare groups separate the federal floor from the state layer and assign each by location. Bloodborne pathogens, HIPAA, and ionizing radiation obligations apply everywhere, while workplace violence mandates, radiation operator credentialing, and harassment training requirements vary by state and sometimes by facility type within a state. Coggno’s LMS assigns by location and job code so a technologist in Washington receives the state healthcare workplace violence training and a technologist in a state without a mandate does not, with completion data rolling up to one corporate dashboard and exporting per site for a survey.
How often is MRI safety training required?
The 2024 ACR Manual on MR Safety expects MR personnel to have completed formal MR safety education within the past 12 months. Level 1 personnel have basic education sufficient to move through Zones III and IV on their own but may not escort a non-MR person into the scanner room; Level 2 personnel are trained more broadly, including radiofrequency heating and gradient effects, and only they may admit and supervise a non-MR person inside Zone IV. The manual is professional-society guidance rather than federal regulation, but accreditors and liability carriers treat it as the standard of care.
Who regulates radiation dosimetry at an imaging center?
Diagnostic X-ray and CT equipment is regulated by the state radiation control program, which sets registration, equipment testing, operator credentialing, and dosimetry rules that differ between states. Radioactive materials used in nuclear medicine and PET are regulated by the Nuclear Regulatory Commission or an Agreement State under a separate licensing regime. OSHA’s ionizing radiation standard at 29 CFR 1910.1096 sets the federal occupational floor, requiring personnel monitoring, posted radiation areas, and instruction for individuals working in or frequenting those areas.
Do imaging centers need bloodborne pathogens training?
Yes, wherever staff have reasonably anticipated occupational exposure to blood or other potentially infectious material — which covers IV starts for contrast-enhanced CT and MRI, biopsy and interventional work, and sharps handling. 29 CFR 1910.1030 requires a written exposure control plan reviewed and updated at least annually, training at initial assignment and at least annually thereafter, and a hepatitis B vaccination offer within 10 working days of assignment.
Does Texas SB 240 workplace violence training apply to freestanding imaging centers?
No. Texas SB 240 defines covered health care facilities as licensed hospitals and hospitals operated by a state agency, licensed nursing facilities employing at least two registered nurses, licensed ambulatory surgical centers, freestanding emergency medical care facilities, licensed mental hospitals, and certain home and community support services agencies. A freestanding diagnostic imaging center is not on that list, though a hospital-based imaging department is covered as part of the hospital. OSHA’s General Duty Clause still reaches recognized workplace violence hazards regardless of state coverage.
Has the HIPAA Security Rule been updated for 2026?
Not yet. HHS published a proposed rule in January 2025 that would strengthen Security Rule requirements, including removing the addressable flexibility so that every implementation specification becomes required. As of September 2026 the rule remains proposed, and HHS has moved the amendments to its long-term actions agenda, which generally signals no final rule within the next 12 months. The existing Security Rule remains fully enforceable, and covered entities should continue implementing reasonable and appropriate safeguards under it.