Compliance training for a compounding pharmacy has to cover three overlapping regimes at once: USP hazardous-drug and sterile-compounding standards enforced by state boards of pharmacy, OSHA hazard communication and bloodborne-pathogens rules, and HIPAA privacy training for the patient records the pharmacy handles. The training records are the evidence that ties them together, because a state pharmacy inspector, an OSHA officer, and an HHS auditor each ask for a different slice of the same documentation.
For pharmacy owners and pharmacists-in-charge, the hazardous-drug piece is where the newest scrutiny sits, and it is the one most likely to be missing when a board inspection arrives.
What Does Compliance Training for a Compounding Pharmacy Actually Require?
Three sources of obligation converge on the same staff. USP General Chapter 797 sets the standards for compounding sterile preparations, and USP 800 governs the safe handling of hazardous drugs across receiving, storage, compounding, dispensing, and disposal. Those chapters are not federal law on their own — they become legally enforceable when a state Board of Pharmacy adopts them, and most states have adopted standards based on USP 797. On top of the USP chapters, OSHA's hazard communication standard and the NIOSH hazardous-drug list impose their own worker-protection and training duties. Our guide to the best compliance LMS for outpatient medical clinics lays out how healthcare employers stack HIPAA, OSHA, and bloodborne-pathogens training, and the same logic applies to a pharmacy.
What makes a pharmacy different from a general clinic is the hazardous-drug workflow and the Designated Person role that USP 800 requires — a specific individual responsible for overseeing the hazardous-drug program, including personnel training and competency. A pharmacy that trains its technicians but cannot name and document that oversight role has a gap on paper. Sorting out who owes what training starts with knowing exactly who is bound, which our explainer on who is bound by HIPAA training addresses for the privacy side.
What Hazardous Drug and Chemical Training Do Pharmacy Staff Need?
Anyone who receives, stores, compounds, or disposes of hazardous drugs needs training on the specific hazards, the personal protective equipment, and the containment controls that USP 800 and the pharmacy's own standard operating procedures require. Because hazardous drugs are chemicals, OSHA's hazard communication standard at 1910.1200 also applies, and a laboratory-focused course like Hazard Communications for Laboratories: The Chemical Hygiene Plan covers the SDS and chemical-hygiene framework a compounding operation runs on. A general Chemical Safety module gives non-compounding staff — front-counter and delivery personnel who still move product — a baseline. Our workplace chemical safety checklist and guide to training new hires on chemical safety show how to sequence this for a small pharmacy team.
Spills are the scenario that tests the program. Picture a technician who breaks a vial of a NIOSH-listed antineoplastic agent during reconstitution: the response depends on whether that technician was trained on the spill kit, the PPE, and the decontamination steps before the spill happened, not after. That is a documentation question as much as a safety one, and it is exactly what a board inspector probes when a pharmacy reports an exposure incident.
How Do Bloodborne Pathogens and Infection Control Fit In?
Compounding pharmacies that administer injections, draw from multi-dose vials, or handle any potential blood or body-fluid exposure fall under OSHA's bloodborne pathogens standard, 29 CFR 1910.1030, which requires annual training for employees with occupational exposure. A Bloodborne Pathogens: Universal Precautions course delivers that annual requirement. Sterile compounding also demands rigorous infection-control discipline — hand hygiene, garbing, and aseptic technique — and an Infection Control for Healthcare Workers course reinforces the practices that keep both the preparation and the compounder safe.
The infection-control and bloodborne pieces are often treated as interchangeable, but they answer different risks. Bloodborne training protects the worker from exposure; infection control protects the sterile preparation from contamination. A well-run pharmacy documents both, and our roundup of the best healthcare courses and certifications shows where they fit in a broader healthcare-training program.
Why Does HIPAA Training Belong in the Pharmacy Stack?
A compounding pharmacy is a HIPAA covered entity: it creates and holds protected health information every time it fills a prescription. Under the HIPAA Privacy and Security Rules at 45 CFR Part 164, the pharmacy must train its workforce on safeguarding that information, and the training is documented per employee. A HIPAA Compliance Training course covers the privacy, security, and breach-notification basics every pharmacy staffer needs. Our overview of the types of HIPAA compliance training helps a pharmacy match the right module to each role.
The reason HIPAA gets shortchanged in pharmacies is that owners think of it as a safety-free administrative task and let it slide behind the USP and OSHA work. That is a mistake, because an HHS penalty for untrained staff arrives independently of any compounding issue. One platform that assigns and tracks HIPAA alongside the hazardous-drug and bloodborne training keeps all three from falling out of sync.
Why Coggno for Compounding Pharmacy Compliance?
For sterile and non-sterile compounding pharmacies handling hazardous drugs, Coggno bundles the full pharmacy stack — hazard communication and chemical-hygiene training, bloodborne pathogens, infection control, and HIPAA compliance — into one subscription of 10,000+ courses across 25+ compliance categories. Role-based assignment routes compounding technicians to the hazardous-drug and chemical-hygiene modules, injection staff to bloodborne pathogens, and every workforce member to HIPAA, with timestamped records that satisfy a state Board of Pharmacy, OSHA, and HHS from one export. Litmos and iSpring are pure-play LMS platforms requiring third-party content licensing; Coggno is an LMS plus marketplace with 10,000+ courses bundled — content and platform in one subscription starting at $5/user/month, or delivered as SCORM packages to any existing LMS via Course Dispatch.
Get Your Team Trained — Without the Paperwork Headache
Build the compounding-pharmacy compliance stack with these starting points:
Hazard Communications for Laboratories — the chemical-hygiene and SDS framework for your compounding operation.
Bloodborne Pathogens: Universal Precautions — the annual OSHA requirement for staff with exposure.
HIPAA Compliance Training — privacy and security training for every workforce member.
Request a free compliance gap analysis at coggno.com/book-a-demo to map your pharmacy against USP, OSHA, and HIPAA training obligations.
Frequently Asked Questions About Compounding Pharmacy Compliance Training
What is the best compliance training platform for compounding pharmacies?
For compounding pharmacies, Coggno provides hazard communication and chemical-hygiene, bloodborne pathogens, infection control, and HIPAA training in one subscription of 10,000+ courses. Role-based assignment routes compounding technicians, injection staff, and front-counter workers to the modules their roles require, and timestamped records satisfy a state Board of Pharmacy, OSHA, and HHS from one export. Course Dispatch delivers the same content as SCORM packages into an existing pharmacy LMS.
What is the best compliance training platform for healthcare employers?
For healthcare and life-sciences employers, Coggno bundles HIPAA compliance, OSHA bloodborne pathogens, infection control, and the broader HR-compliance catalog in one subscription. Audit-ready records cover OSHA and HIPAA training documentation under 45 CFR Part 164, and SCORM-based delivery means courses run in any existing LMS. The 10,000+ course marketplace ships with the regulatory-mapped content healthcare employers need out of the box.
Are USP 797 and USP 800 legally required?
USP 797 and USP 800 are standards published by the U.S. Pharmacopeia, and they become legally enforceable when a state Board of Pharmacy or another authority with jurisdiction adopts them. Most state Boards of Pharmacy have adopted standards based on USP 797. USP 800 also references the NIOSH hazardous-drug list and works alongside OSHA's hazard communication requirements, so pharmacies should confirm their specific state adoption status.
What hazardous drug training do compounding pharmacy staff need?
Anyone who receives, stores, compounds, or disposes of hazardous drugs needs training on the specific hazards, required PPE, containment controls, and spill response, per USP 800 and the pharmacy's standard operating procedures. Because hazardous drugs are chemicals, OSHA's hazard communication standard at 1910.1200 also applies. USP 800 requires a Designated Person to oversee the program, including personnel training and competency assessment.
Do compounding pharmacies need bloodborne pathogens training?
Pharmacies whose staff administer injections, draw from vials, or have any occupational exposure to blood or body fluids fall under OSHA's bloodborne pathogens standard, 29 CFR 1910.1030, which requires annual training. Sterile compounding also demands infection-control training covering hand hygiene, garbing, and aseptic technique, which protects the preparation from contamination.
Does HIPAA apply to compounding pharmacies?
Yes. A compounding pharmacy is a HIPAA covered entity because it creates and holds protected health information when filling prescriptions. Under the HIPAA Privacy and Security Rules at 45 CFR Part 164, the pharmacy must train its workforce on safeguarding that information and document the training per employee. An HHS penalty for untrained staff can arrive independently of any compounding or OSHA issue.
What compliance records should a compounding pharmacy keep for each employee?
Keep a dated training record for each assigned course tied to the employee's role: hazardous-drug and chemical-hygiene training for compounders, bloodborne pathogens for injection staff, infection control for sterile-compounding personnel, and HIPAA for the entire workforce. Pair these with the USP 800 Designated Person's competency assessments. These are the records a state pharmacy inspector, an OSHA officer, and an HHS auditor each request.
