Starting a medical courier business in Texas requires certification in federal HIPAA rules, the state privacy law known as HB 300, and OSHA standards, since this training is mandated by law and healthcare clients will insist on proof of it before assigning work. HIPAA training is required under 45 CFR § 164.530(b) and 45 CFR § 164.308(a)(5), HB 300 training is required under Texas Health and Safety Code § 181.101, and OSHA Bloodborne Pathogens training is required under 29 CFR § 1910.1030(g)(2). Medical clients will not provide work involving Protected Health Information or biological specimens to a medical courier business that cannot produce these compliance certificates.
Certification Medical Courier Clients Require Before Hiring Medical Couriers
A Texas medical courier business needs certification covering federal HIPAA requirements for handling Protected Health Information, the additional privacy obligations imposed by HB 300 under Texas Health and Safety Code Chapter 181, and OSHA standards for Bloodborne Pathogens, Hazard Communication, and Personal Protective Equipment. HB 300 certification should also address the other Texas statutes that apply alongside it, including the Texas Identity Theft Enforcement and Protection Act, the Texas Data Privacy and Security Act, the Texas Responsible AI Governance Act, SB 1188, and the Texas Medical Practice Act. Healthcare clients evaluate a courier service against these requirements before signing a service agreement, since the client’s own compliance obligations depend on working with a courier that can demonstrate this training. A courier business that holds only general HIPAA certification, without the Texas-specific HB 300 module and the required OSHA modules, does not meet the full scope of what clients typically request.
Setting up the Medical Courier Business
Registering the Medical Courier Business
A new medical courier business should be registered as a formal business entity, such as an LLC, with an Employer Identification Number obtained from the IRS and a dedicated business bank account opened before taking on client work. This structure applies whether the business will operate with employed drivers or contract with independent couriers, and it separates business finances and liability from the owner’s personal finances from the outset.
Hiring Drivers Who Meet Client Compliance Requirements
Drivers hired by a medical courier business need to meet the qualifications healthcare clients expect. This includes a valid Texas driver’s license with a clean driving record, typically no more than two moving violations in the past two to three years and no DUI convictions in the past five years, along with a reliable, fuel-efficient vehicle such as a sedan, SUV, or van. Active auto liability insurance is required, and independent contractor drivers are often required to carry higher coverage limits than a standard personal policy provides, such as $100,000 per person and $300,000 per accident in bodily injury coverage.
Equipping The Business for Safe Transport
A medical courier business needs to supply drivers with equipment suited to the materials being transported. This includes insulated cooler bags and ice packs for temperature-sensitive specimens, tamper-proof transport bags and biohazard spill kits for materials requiring secure handling, and personal protective equipment such as disposable gloves to reduce the risk of exposure during transport.
Mandatory Medical Courier Certification
The HIPAA Journal’s Medical Courier Certification in Texas provides the certification healthcare clients require in a single course bundle, covering HIPAA, HB 300, and the three required OSHA modules. The course is completed online with pause-and-resume access, includes a short quiz after each lesson with unlimited retakes, and issues a certificate on completion that can be presented to clients as documented evidence of compliance. Related content on personal qualifications for individual couriers is covered in How to Become a Medical Courier in Texas and Medical Courier Requirements in Texas.
PJ Murray is the founder and publisher of The HIPAA Journal. He has more than 10 years of experience writing about HIPAA, healthcare compliance, patient privacy, and the protection of medical records. Through The HIPAA Journal, PJ helps healthcare organizations, business associates, and their employees better understand HIPAA regulations, reduce compliance risks, and strengthen the safeguards used to protect patient information.
