The Bloodborne Pathogens standard is one of OSHA's most detailed and prescriptive regulations, and one of the most commonly misunderstood in terms of scope. It doesn't apply only to hospitals and clinics — it applies to any employer whose workers have occupational exposure to blood or other potentially infectious materials (OPIM) as part of their job duties. That includes tattoo studios, first aid responders in general industry workplaces, waste management workers, laboratory staff, correctional facilities, and school nurses, in addition to the healthcare settings most people associate with the standard.
Who Is Covered
Coverage is determined by job classification and reasonably anticipated exposure — not by industry alone. A worker is covered if their job duties involve reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or OPIM. This includes:
- Healthcare workers of all kinds — nurses, physicians, technicians, dental staff
- Designated first aid and CPR responders in any workplace, even a general office
- Laboratory and research personnel who handle human blood, tissue, or cell lines
- Housekeeping and custodial staff who clean areas where blood exposure is reasonably anticipated
- Correctional officers, law enforcement, and emergency responders
- Tattoo and body piercing studio employees
- Waste management and laundry workers who handle contaminated materials
A common gap: general industry employers who designate a handful of employees as first aid responders often don't realize this triggers full Bloodborne Pathogens compliance obligations for those specific employees, even though the rest of the workforce has no exposure at all.
The Exposure Control Plan
Every covered employer must maintain a written Exposure Control Plan (ECP) — the central compliance document for this standard. The ECP must:
- Identify job classifications and specific tasks where occupational exposure occurs
- Describe the methods of compliance — engineering controls, work practice controls, and PPE used to eliminate or minimize exposure
- Document the procedure for evaluating circumstances surrounding exposure incidents
- Include the schedule and method for implementing the standard's other requirements
- Be reviewed and updated at least annually, and whenever new or modified tasks affect occupational exposure
- Reflect changes in technology that reduce or eliminate exposure — specifically, the plan must document annual consideration of safer medical devices as they become available
- Involve non-managerial employees who perform direct patient care or handle sharps in evaluating and selecting engineering controls, with that involvement documented
The employee involvement requirement is frequently missed. A written plan that doesn't document input from frontline workers who actually use sharps and safety devices is incomplete, even if every other element is present.
The Hierarchy of Controls for Bloodborne Hazards
Engineering controls (highest priority)
Engineering controls isolate or remove the bloodborne pathogen hazard from the workplace. These are legally required where they will reduce exposure, and take priority over PPE:
- Sharps with engineered sharps injury protection — safety needles, retractable devices, self-sheathing needles
- Needleless systems for medication delivery and fluid access where feasible
- Puncture-resistant, labeled sharps containers located as close as feasible to the point of use
- Biological safety cabinets for laboratory work with concentrated infectious materials
Work practice controls
- No recapping, bending, or breaking needles by hand
- Handwashing immediately after glove removal and after any contact with blood or OPIM
- No eating, drinking, smoking, or applying cosmetics in areas where occupational exposure is likely
- Prohibition on mouth pipetting
- Proper labeling and containment of contaminated materials during handling, storage, and transport
Personal protective equipment
Gloves, gowns, face shields, and masks appropriate to the anticipated exposure must be provided at no cost. PPE selection follows the same hazard-assessment logic as general PPE requirements — see our PPE requirements guide — but the exposure control plan should specifically document PPE selection for bloodborne hazard tasks.
Hepatitis B Vaccination
Employers must make the Hepatitis B vaccination series available, at no cost, to all employees with occupational exposure. Specific requirements:
- Vaccination must be offered within 10 working days of initial assignment to a job with occupational exposure
- Vaccination must be made available at a reasonable time and place, performed by or under the supervision of a licensed healthcare professional
- Pre-screening cannot be required as a condition of receiving the vaccine
- Workers who decline must sign a specific declination statement — OSHA provides the required wording in the standard's Appendix A
- A worker who initially declines may request the vaccine at any later date, still at no cost, if they change their mind while employment continues
- Workers who have already completed the vaccination series, or who have documented immunity, are not required to repeat it
Post-Exposure Procedures
Following any exposure incident — a needlestick, a splash to the eyes or mucous membranes, or any other contact meeting the definition of exposure — the employer must immediately make available a confidential medical evaluation and follow-up, at no cost to the employee. This includes:
- Documenting the route of exposure and circumstances under which it occurred
- Identifying and testing the source individual for HBV and HIV status, if feasible and legally permitted, with results shared with the exposed worker
- Testing the exposed employee's blood as soon as feasible, with consent
- Post-exposure prophylaxis when medically indicated
- Counseling and evaluation of any reported illness following the exposure
The healthcare professional evaluating the exposed employee must be provided with a copy of the standard, a description of the exposed employee's duties, documentation of the exposure incident, and the source individual's test results if available. The healthcare professional's written opinion to the employer is limited to whether the vaccine was recommended and whether the employee was informed of evaluation results — not the full medical record, which remains confidential.
The Sharps Injury Log
Employers required to maintain OSHA 300 logs must also maintain a separate sharps injury log recording each percutaneous injury from a contaminated sharp. This log must include, at minimum, the type and brand of device involved, the department or work area where the incident occurred, and an explanation of how the incident occurred. The sharps log must protect the confidentiality of the injured employee and be maintained for the same period as the OSHA 300 log — five years.
Employers exempt from routine OSHA recordkeeping due to small size or low-hazard industry classification are still required to maintain the sharps injury log if they have employees with bloodborne pathogen exposure — this is a separate requirement from general recordkeeping and does not share the same size-based exemption.
Labeling and Signage
Containers of regulated waste, refrigerators and freezers containing blood or OPIM, and other containers used to store, transport, or ship blood or OPIM must be labeled with the biohazard symbol and the word "BIOHAZARD," or color-coded red as an alternative in some circumstances. Contaminated laundry must be bagged at the location of use, not sorted or rinsed at that location.
Employee Training
Training is required at the time of initial assignment to a job with occupational exposure, and annually thereafter. Training must be provided during work hours and at no cost to employees. Required content includes:
- An accessible copy of the standard's text and explanation of its contents
- General epidemiology and symptoms of bloodborne diseases
- Modes of transmission
- The employer's written exposure control plan and how to obtain a copy
- How to recognize tasks that may involve exposure
- Use and limitations of engineering controls, work practices, and PPE
- PPE selection basis
- Hepatitis B vaccine information — efficacy, safety, and availability
- Emergency procedures for exposure incidents and the reporting process
- Post-exposure evaluation and follow-up procedures
- Signs, labels, and color-coding used at the facility
Training must be interactive — allowing opportunity for questions — and conducted by someone knowledgeable in the subject matter. A video with no opportunity for follow-up questions does not satisfy this requirement on its own.
Common Violations
| Violation | Fix |
|---|---|
| No written exposure control plan, or one that's outdated | Write and review annually; document consideration of safer sharps devices |
| No employee input on safety device selection | Document a process for involving frontline staff and keep records of that input |
| Hepatitis B vaccine not offered within 10 days | Build vaccination into new-hire onboarding for exposed job classifications |
| No declination statement on file | Use OSHA's Appendix A wording; keep signed declinations on file |
| No sharps injury log maintained | Create and maintain a dedicated log, separate from the general OSHA 300 log |
| Recapping needles by hand | Retrain on prohibited work practices; provide proper sharps disposal at point of use |
| Training not conducted annually | Schedule and document annual refresher training for all exposed employees |