Written and maintained by CASRAI Editorial Board
Last updated
General regulatory information for lab and clinic staff and for people evaluating a delivery arrangement. It is not legal or medical advice.
Short answer
A medical supply delivery business moves sealed supplies, such as consumables, kits and equipment, to clinics, labs and other buyers under a contract. Three rules decide most of what such a contract has to address: whether drivers are employees or independent contractors (IRS and U.S. Department of Labor tests), whether the carrier is a HIPAA business associate (only if it handles protected health information), and whether OSHA’s bloodborne pathogens standard applies (only where exposure to blood or other potentially infectious materials is reasonably anticipated).
Definition and scope
This page treats a medical supply delivery business as a supplier-side arrangement: a company or an individual carries supplies for a distributor, clinic or lab. It is different from the buyer-side question of how to choose a courier vendor, which CASRAI covers in medical courier company and lab courier service, and from the wider flow of stock covered in medical supply logistics. It also differs from specimen transport, where the cargo is a biological sample; see UN3291 and specimen bag biohazard labelling for that material.
The related phrases people search, such as medical supply courier contracts, medical supply transportation business, medical supply delivery contractor and how to become a medical supply courier, all come down to the same three questions below: how the worker is classified, what information the carrier touches, and what exposure the cargo creates.
Independent contractor or employee: what the contract has to get right
Many delivery arrangements are written as independent-contractor contracts, so the first question is whether that label holds. Two federal sources frame it.
The IRS test
The IRS page Independent Contractor (Self-Employed) or Employee? groups the evidence into three categories and asks one question in each:
- Behavioral control: does the company control or have the right to control what the worker does and how the worker does the job?
- Financial control: are the business aspects of the worker’s job controlled by the payer?
- Relationship of the parties: will the relationship continue, and is the work performed a key aspect of the business?
The IRS says the keys are to look at the entire relationship and consider the extent of the right to direct and control the worker. A delivery contract that dictates routes, schedules and methods in detail, for work that is central to the buyer’s operation, points toward the employee side of these questions.
The Department of Labor position
The Wage and Hour Division describes misclassification as occurring when an employer treats a worker who is an employee under the Fair Labor Standards Act as an independent contractor, and states that employers are responsible for determining whether a worker is an employee. Its page describes a final rule published January 10, 2024, effective March 11, 2024, with guidance in regulations at 29 CFR Part 795, which rescinded the January 7, 2021 rule. Check the Wage and Hour Division page for the current status before relying on it.
Does the carrier become a HIPAA business associate?
Under the definition at 45 CFR 160.103, a business associate is a person who, on behalf of a covered entity and other than as a member of its workforce, creates, receives, maintains or transmits protected health information. The test is therefore about what the carrier handles, not about the industry it serves. A contractor that only carries sealed cartons of supplies and does not receive patient information is not described by that wording. A contractor that receives patient names, addresses or order details tied to a patient on behalf of a clinic is. When protected health information is involved, the arrangement needs the written terms HIPAA requires; CASRAI’s business associate agreement guide and HIPAA-aware versus HIPAA-compliant comparison explain what those terms are.
Does OSHA’s bloodborne pathogens standard apply?
OSHA’s standard at 29 CFR 1910.1030 applies to all occupational exposure to blood or other potentially infectious materials. It defines occupational exposure as reasonably anticipated skin, eye, mucous membrane or parenteral contact with such materials while performing the employee’s duties. It also requires regulated-waste containers to be labeled or color-coded (paragraph (g)(1)(i)). The standard is triggered by exposure that is reasonably anticipated, which is a different thing from the product category. Delivering sealed supply cartons is not described as covered by the wording above; collecting specimens or regulated waste is where the exposure question arises.
A three-test checklist for a delivery contract
| Question | Test from the source | Source |
|---|---|---|
| Is the driver truly a contractor? | Behavioral control, financial control and the relationship of the parties, looked at as a whole | IRS; DOL Wage and Hour Division, 29 CFR Part 795 |
| Is the carrier a business associate? | Does it create, receive, maintain or transmit protected health information on behalf of a covered entity? | 45 CFR 160.103 |
| Does the bloodborne pathogens standard reach the work? | Is skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials reasonably anticipated? | 29 CFR 1910.1030 |
A contract that answers all three in writing, and that matches how the work is actually done, covers the ground these sources describe. A change in the work, such as adding specimen pickup to a supply route, changes the third answer and may change the second.
Common misunderstandings
- “A signed contractor agreement settles classification.” The IRS looks at the entire relationship, and the Department of Labor places the responsibility for the determination on the employer.
- “Anything in healthcare makes a carrier a HIPAA business associate.” The definition turns on handling protected health information on behalf of a covered entity.
- “Medical cargo always triggers the OSHA bloodborne pathogens standard.” The trigger is reasonably anticipated exposure to blood or other potentially infectious materials.
- “Supply delivery and specimen transport are the same job.” The cargo, and therefore the rules, differ; specimen transport carries biological material.
FAQ
Is a medical supply delivery driver an independent contractor?
It depends on the whole relationship, not the label. The IRS asks about behavioral control, financial control and the relationship of the parties, and the Department of Labor says the employer must determine whether a worker is an employee under the FLSA.
What should medical supply delivery contracts cover?
At minimum, how the worker is classified, whether protected health information is handled (and under what written terms), and whether any task creates reasonably anticipated exposure to blood or other potentially infectious materials. Other terms, such as insurance and pricing, vary by buyer and are outside this page.
Do I need a business associate agreement to deliver medical supplies?
Only if you create, receive, maintain or transmit protected health information on behalf of a covered entity. Carrying sealed supplies without receiving patient information does not fit that wording.
How is a medical supply transportation business different from a specimen courier?
The cargo. Supplies are products moving to a buyer; specimens are biological material, which brings packaging, labelling and exposure rules. See the linked UN3291 and specimen bag pages.
How do I become a medical supply courier?
Whatever route a courier takes, the arrangement on offer can be checked against the three tests above: how the worker is classified, whether protected health information is handled, and whether exposure to blood or other potentially infectious materials is reasonably anticipated.
Sources
- IRS, Independent Contractor (Self-Employed) or Employee?, checked 2026-10-30.
- U.S. Department of Labor, Wage and Hour Division, Misclassification, checked 2026-10-30.
- OSHA, 29 CFR 1910.1030, Bloodborne pathogens, checked 2026-10-30.
- U.S. Department of Health and Human Services, 45 CFR 160.103, Definitions (business associate), checked 2026-10-30.
