The Complete Compliance Checklist for Hospitals and Clinics in India
A practical compliance checklist for Indian hospitals and clinics covering Clinical Establishments registration, biomedical waste, labour laws, fire safety and POSH.
Hospitals and clinics in India sit at the intersection of healthcare regulation and standard employer compliance, which means a longer checklist than most sectors - from clinical establishment registration to biomedical waste to patient data protection.
Key facts at a glance
- Biomedical waste authorisation from the state pollution control board is mandatory for any facility generating clinical or infectious waste, regardless of size.
- ESI applies once a hospital or clinic crosses 10 employees, with a wage ceiling of Rs 21,000/month.
- EPF becomes mandatory at 20 or more employees, with a Rs 15,000/month wage ceiling and 12% employee / 12% employer contribution.
- A POSH Internal Committee is mandatory once staff strength reaches 10 or more employees.
- The DPDP Act's full substantive obligations - notice, consent, security safeguards, breach reporting - become enforceable from 13 May 2027.
- Clinical establishment registration requirements vary by state, since many states have adopted their own version of, or opted out of, the central Clinical Establishments Act.
Clinical establishment registration
Most states require hospitals, nursing homes, diagnostic centres, and standalone clinics to register as a clinical establishment before commencing operations, though the governing law differs - some states follow the central Clinical Establishments Act, others have their own state legislation, and a few have not adopted either in full. Registration typically covers minimum standards for staffing, infrastructure, and equipment, and is renewed periodically.
Diagnostic centres and labs handling radiology equipment also need clearances under the Atomic Energy Regulatory Board framework for X-ray, CT, and similar machines, separate from general clinical establishment registration.
Biomedical waste and environmental compliance
Every healthcare facility - from a single-doctor clinic to a multi-specialty hospital - that generates biomedical waste needs authorisation under the Biomedical Waste Management Rules from the state pollution control board, along with a contract with an authorised common bio-medical waste treatment facility for collection and disposal. Segregation at source (colour-coded bins for sharps, infectious waste, and general waste) is a standard inspection point.
Larger hospitals with in-house labs, incinerators, or effluent discharge also need Consent to Establish and Consent to Operate from the pollution control board under air and water pollution laws.
Fire and premises safety
Hospitals generally face stricter fire safety scrutiny than typical commercial premises, given the presence of bed-ridden patients, oxygen cylinders or piped oxygen systems, and continuous power requirements for ICUs and operation theatres. A Fire NOC is standard, and several states now require periodic fire safety audits rather than a one-time clearance, especially after high-profile hospital fire incidents prompted tighter state-level rules.
Labour compliance across a mixed workforce
Hospitals employ a wide mix of doctors, nurses, technicians, administrative staff, and contract housekeeping or security personnel, which makes labour compliance more layered than in a typical office.
| Requirement | Threshold | Applies to |
|---|---|---|
| EPF | 20+ employees | Eligible staff up to Rs 15,000 wages |
| ESI | 10+ employees | Eligible staff up to Rs 21,000 wages |
| POSH Internal Committee | 10+ employees | All employees, including resident doctors and nurses |
| Contract labour compliance | Applies where housekeeping/security is outsourced | Principal employer obligations under contract labour rules |
Resident doctors and visiting consultants are sometimes engaged on arrangements that blur the line between employment and professional engagement - hospitals should be deliberate about how these are classified, since it affects PF, ESI, and POSH coverage.
POSH: a sector with particular sensitivity
Healthcare workplaces - with round-the-clock shifts, close doctor-nurse working relationships, and a largely female nursing workforce in many facilities - are a sector where POSH compliance carries outsized real-world stakes. Courts and the Supreme Court's recent push for district-wise POSH audits have specifically flagged healthcare and hospitality as sectors needing closer scrutiny of Internal Committee functioning, not just its existence on paper.
DPDP and patient data
Patient records - diagnosis, treatment history, billing, insurance details - are personal data, and increasingly sensitive personal data, under the DPDP Act, 2023. While the Act's substantive obligations become enforceable from 13 May 2027, hospitals that already run electronic health record systems, patient portals, or third-party diagnostic integrations should start reviewing consent capture, data retention, and breach-response processes well before that date, since penalties for security-safeguard failures can reach up to Rs 250 crore per instance.
If you are not sure where your hospital or clinic stands across labour, safety, and statutory compliance, ComplianceCheck's statutory health assessment gives you a clear picture in a few minutes.
Sources
- Ministry of Health and Family Welfare - mohfw.gov.in
- Central Pollution Control Board / respective State Pollution Control Board
- Employees' Provident Fund Organisation (EPFO) - epfindia.gov.in
- Employees' State Insurance Corporation (ESIC) - esic.gov.in
- Ministry of Electronics and Information Technology (DPDP Rules) - meity.gov.in
- Respective state health department and fire department
This guide is general information, not legal advice. Requirements vary by state, sector and headcount - confirm specifics with a compliance professional or the relevant authority.
Frequently Asked Questions
- Do all hospitals need to register under the Clinical Establishments Act?
- Clinical establishment registration is required in states that have adopted the central Clinical Establishments Act or have their own equivalent state law - coverage and exact requirements vary by state, so hospitals should confirm the applicable regime for their location.
- Is biomedical waste management mandatory for small clinics too?
- Yes, the Biomedical Waste Management Rules apply to any healthcare facility generating biomedical waste, including small clinics and diagnostic centres, not just large hospitals - authorisation from the state pollution control board is required.
- Does ESI apply to hospital staff?
- Yes, once a hospital or clinic employs 10 or more persons, ESI becomes mandatory for eligible staff earning up to Rs 21,000 a month, with a 0.75% employee and 3.25% employer contribution.
- Is POSH compliance different for hospitals?
- The core POSH obligation is the same - an Internal Committee is mandatory once a hospital or clinic has 10 or more employees - but hospitals should also extend safe-reporting channels to resident doctors, nurses, and visiting consultants, whose employment status can be ambiguous.
- Do hospitals need a separate fire NOC from other commercial buildings?
- Yes, hospitals typically face stricter fire safety norms than standard commercial premises because of bed-ridden patients, oxygen storage, and ICU equipment, and many states require periodic fire safety audits in addition to the initial NOC.
- Does patient data fall under DPDP obligations?
- Yes, patient records containing personal and health information are personal data under the Digital Personal Data Protection Act 2023, and hospitals should plan for consent, notice, and security-safeguard obligations as the Act's substantive provisions come into force.
Check your status
Statutory Health Check
A 12-question health check of PF, ESI, Professional Tax, Gratuity and Bonus compliance for Indian employers.