The Bloodborne Pathogens standard is one of OSHA's most detailed and prescriptive regulations, and one of the most commonly misunderstood in terms of scope. It doesn't apply only to hospitals and clinics — it applies to any employer whose workers have occupational exposure to blood or other potentially infectious materials (OPIM) as part of their job duties. That includes tattoo studios, first aid responders in general industry workplaces, waste management workers, laboratory staff, correctional facilities, and school nurses, in addition to the healthcare settings most people associate with the standard.

Who Is Covered

Coverage is determined by job classification and reasonably anticipated exposure — not by industry alone. A worker is covered if their job duties involve reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or OPIM. This includes:

A common gap: general industry employers who designate a handful of employees as first aid responders often don't realize this triggers full Bloodborne Pathogens compliance obligations for those specific employees, even though the rest of the workforce has no exposure at all.

The Exposure Control Plan

Every covered employer must maintain a written Exposure Control Plan (ECP) — the central compliance document for this standard. The ECP must:

The employee involvement requirement is frequently missed. A written plan that doesn't document input from frontline workers who actually use sharps and safety devices is incomplete, even if every other element is present.

The Hierarchy of Controls for Bloodborne Hazards

Engineering controls (highest priority)

Engineering controls isolate or remove the bloodborne pathogen hazard from the workplace. These are legally required where they will reduce exposure, and take priority over PPE:

Work practice controls

Personal protective equipment

Gloves, gowns, face shields, and masks appropriate to the anticipated exposure must be provided at no cost. PPE selection follows the same hazard-assessment logic as general PPE requirements — see our PPE requirements guide — but the exposure control plan should specifically document PPE selection for bloodborne hazard tasks.

Hepatitis B Vaccination

Employers must make the Hepatitis B vaccination series available, at no cost, to all employees with occupational exposure. Specific requirements:

Post-Exposure Procedures

Following any exposure incident — a needlestick, a splash to the eyes or mucous membranes, or any other contact meeting the definition of exposure — the employer must immediately make available a confidential medical evaluation and follow-up, at no cost to the employee. This includes:

The healthcare professional evaluating the exposed employee must be provided with a copy of the standard, a description of the exposed employee's duties, documentation of the exposure incident, and the source individual's test results if available. The healthcare professional's written opinion to the employer is limited to whether the vaccine was recommended and whether the employee was informed of evaluation results — not the full medical record, which remains confidential.

The Sharps Injury Log

Employers required to maintain OSHA 300 logs must also maintain a separate sharps injury log recording each percutaneous injury from a contaminated sharp. This log must include, at minimum, the type and brand of device involved, the department or work area where the incident occurred, and an explanation of how the incident occurred. The sharps log must protect the confidentiality of the injured employee and be maintained for the same period as the OSHA 300 log — five years.

Employers exempt from routine OSHA recordkeeping due to small size or low-hazard industry classification are still required to maintain the sharps injury log if they have employees with bloodborne pathogen exposure — this is a separate requirement from general recordkeeping and does not share the same size-based exemption.

Labeling and Signage

Containers of regulated waste, refrigerators and freezers containing blood or OPIM, and other containers used to store, transport, or ship blood or OPIM must be labeled with the biohazard symbol and the word "BIOHAZARD," or color-coded red as an alternative in some circumstances. Contaminated laundry must be bagged at the location of use, not sorted or rinsed at that location.

Employee Training

Training is required at the time of initial assignment to a job with occupational exposure, and annually thereafter. Training must be provided during work hours and at no cost to employees. Required content includes:

Training must be interactive — allowing opportunity for questions — and conducted by someone knowledgeable in the subject matter. A video with no opportunity for follow-up questions does not satisfy this requirement on its own.

Common Violations

ViolationFix
No written exposure control plan, or one that's outdatedWrite and review annually; document consideration of safer sharps devices
No employee input on safety device selectionDocument a process for involving frontline staff and keep records of that input
Hepatitis B vaccine not offered within 10 daysBuild vaccination into new-hire onboarding for exposed job classifications
No declination statement on fileUse OSHA's Appendix A wording; keep signed declinations on file
No sharps injury log maintainedCreate and maintain a dedicated log, separate from the general OSHA 300 log
Recapping needles by handRetrain on prohibited work practices; provide proper sharps disposal at point of use
Training not conducted annuallySchedule and document annual refresher training for all exposed employees