A medical device sales representative does not just clear a hiring background check once and move on. To walk into an operating room, a cath lab, or an interventional suite, the same rep usually has to pass through a second layer of screening that the hospital itself controls. That second layer, often called vendor credentialing, is what decides whether a rep can badge into a sterile field, not the employer’s HR file alone. Understanding how the two systems fit together helps device companies hire correctly and helps reps know what to expect before they ever reach a hospital loading dock.
Two separate screens, two separate owners
The first screen belongs to the employer. A device manufacturer or distributor that wants to run a criminal history check, verify education, confirm employment, or check a driving record on a sales candidate is acting as a user of a consumer report under the Fair Credit Reporting Act. That means a standalone disclosure, a signed authorization, and, if the employer later decides not to hire or to take action based on the report, a pre adverse action notice, a copy of the report and the Summary of Rights, and then an adverse action notice once the waiting period passes.
The second screen belongs to the hospital or health system. Hospitals do not want to repeat an employer level background check for every rep who sets foot in the facility, so most require any outside vendor employee who needs physical access to clinical areas to complete a vendor credentialing process before a badge is issued. This typically includes a facility level criminal background check, exclusion list screening, proof of immunizations, and completion of orientation or safety training modules. The hospital sets the rules; the device company and the rep simply have to meet them.
What hospital vendor credentialing generally checks
| Requirement | What it verifies | Why it matters for OR access |
|---|---|---|
| Criminal history check | State and often national criminal record search | Hospitals restrict clinical area access based on disqualifying convictions, similar to employee hiring standards |
| OIG exclusion list (LEIE) | Whether the individual is barred from federal health care programs | A facility that allows an excluded person into patient care areas risks its own program participation |
| SAM.gov exclusion check | Whether the individual or company is debarred from federal contracts, grants, or programs | Many hospitals, especially those tied to federal research or VA contracts, screen against both lists |
| Immunization and TB records | Documentation of required vaccines or a medical or declination record, plus TB screening | Reduces infection risk in sterile and semi sterile environments |
| Facility training modules | Bloodborne pathogen exposure control, HIPAA privacy, infection control, OR etiquette | Confirms the rep understands the clinical environment before entering it |
The OIG exclusion list, explained
The Department of Health and Human Services Office of Inspector General maintains the List of Excluded Individuals and Entities, generally referred to as the LEIE. Individuals and companies can land on this list for program related fraud, patient abuse or neglect, felony convictions tied to controlled substances, or loss of a health care license, among other grounds. The statute behind both mandatory and permissive exclusions is codified at 42 U.S.C. 1320a-7. Anyone on the LEIE is barred from being paid, directly or indirectly, by federal health care programs such as Medicare and Medicaid, which is why hospitals that bill those programs will not let an excluded device rep near patient care areas. The OIG explains how the list works and how facilities are expected to screen against it on its official exclusions page.
A SAM.gov exclusion check serves a related but distinct purpose. SAM.gov is the federal government’s system of record for entities and individuals excluded or debarred from receiving federal contracts, grants, and certain other forms of federal assistance. A hospital that participates in federally funded research, holds Department of Veterans Affairs contracts, or otherwise touches federal procurement may screen vendor personnel against SAM in addition to the LEIE, since the two databases do not track identical populations. SAM.gov describes the scope of its exclusion records on its exclusions page. Vendor credentialing platforms generally run both checks together so a hospital only has to review one result.
Immunizations and training before a rep can enter a sterile area
Hospitals set their own infection control policy, but that policy is shaped by federal workplace safety rules written for anyone with occupational exposure to blood or other potentially infectious material, a category that can include device reps who handle instrumentation or are present during a procedure. The Occupational Safety and Health Administration’s bloodborne pathogens standard requires covered employers to offer the hepatitis B vaccine series to workers with that exposure risk and to maintain an exposure control plan; the full standard is published by OSHA at 1910.1030, with a plain language overview on OSHA’s bloodborne pathogens page. Hospitals typically ask outside vendor personnel to document the same category of immunizations, or a signed declination, along with a current tuberculosis screening result, before issuing OR access, mirroring the standard they apply to their own clinical staff.
On top of immunization proof, most facilities require a short set of online or in person training modules covering bloodborne pathogen exposure control, general infection prevention, HIPAA privacy basics, and facility specific safety rules for the sterile core and OR suite. Completion is usually tracked the same way employer background check status is tracked, through a credential that either clears the rep for badge access or flags a gap that has to be resolved before the next scheduled case.
Why the Sunshine Act and CMS Open Payments come up in this role
Device sales involves direct, ongoing contact with physicians, which is exactly the relationship Congress targeted when it created the Physician Payments Sunshine Act. The resulting program, administered by the Centers for Medicare and Medicaid Services as Open Payments, requires applicable manufacturers to publicly report payments and other transfers of value made to physicians and teaching hospitals, including many of the meals, travel, consulting fees, and device demonstrations that a sales rep is directly involved in arranging. CMS maintains the program’s current information on its Open Payments page, and the underlying federal regulation sits at 42 CFR Part 403, Subpart I in the electronic Code of Federal Regulations.
Open Payments is not a background check on the sales rep personally, and it does not replace exclusion screening or criminal history review. It is a transparency and reporting obligation that sits on the manufacturer. It matters here as context because it shapes how device companies train and monitor the same reps who go through vendor credentialing: a company already tracking exclusion status and licensure for compliance reasons is generally well positioned to keep its reporting accurate too.
What a standard employer background check adds
Hospital vendor credentialing does not replace the employer’s own hiring background check, it sits alongside it. A device company typically still wants criminal history, education and employment verification, and, because most field reps drive a company vehicle or their own car between accounts, a motor vehicle record check. If the role involves access to expense accounts or purchasing, some employers add a credit check, subject to state law limits on when credit history may be used for employment decisions. Any of these searches that come from a third party consumer reporting agency triggers the full FCRA process: standalone written disclosure, signed authorization, and, before any adverse decision is finalized, a pre adverse action notice with a copy of the report and the Summary of Rights, followed by a formal adverse action notice if the employer proceeds.
What shows up on either screen, and how far back it reaches, varies by state. Some states limit how far back a criminal record can be reported or considered, and a disqualifying offense at one hospital system may not be disqualifying at another, since credentialing standards are set facility by facility rather than through a single national rule. A device company and a rep should both expect to check the specific requirements of each health system rather than assume one hospital’s standard applies everywhere.
Frequently asked questions
Does a medical device sales rep need a separate background check for every hospital they visit?
Often yes, though many hospitals accept a single vendor credentialing result shared across a network of affiliated facilities rather than requiring a brand new check at each building. The rep’s employer should confirm which credentialing system a given hospital or health system uses and how long that clearance remains valid.
What is checked on the OIG exclusion list?
The LEIE identifies individuals and entities barred from participating in federal health care programs because of program fraud, patient abuse or neglect, license revocation, or other grounds for exclusion. Hospitals and device companies both have reason to confirm a rep is not on this list before granting clinical area access.
Is a SAM.gov exclusion check the same thing as an OIG exclusion check?
No. The two lists track different populations and different legal authorities, so a clean result on one does not promise a clean result on the other. Many hospital credentialing processes run both searches together for that reason.
Does the Sunshine Act or Open Payments reporting affect a rep personally?
Open Payments is a reporting obligation on the device manufacturer, not a background check performed on the individual rep. It is relevant context because it reflects the same compliance culture, tracking who interacts with which physicians, that also drives exclusion and credentialing checks.
What immunization records do hospitals typically ask device reps to provide?
Requirements vary by facility, but commonly requested items include proof of hepatitis B vaccination or a signed declination, a current tuberculosis screening result, and documentation of other vaccines the facility requires for anyone entering clinical or sterile areas.
Can a past criminal record disqualify a device sales rep from hospital access?
It can, depending on the offense, how long ago it occurred, and the specific hospital’s credentialing standard, since there is no single rule that applies to every facility. A conviction that one hospital treats as disqualifying may not stop access at another, so each facility’s requirement needs to be checked rather than assumed.
Related reading
For a look at how this compares to a related field role, see our piece on the pharmaceutical sales rep background check process. For a broader explanation of how facility credentialing and a standard background check fit together across health care roles, see credentialing versus background checks in health care. Employers building a compliant screening program for field sales or clinical access roles can learn more at Reveal Background.
This article is general information, not legal or medical advice. Employers should confirm current requirements with each hospital’s credentialing office and with qualified counsel before making hiring or access decisions.
