9.5 Bloodborne Pathogens & Infectious Materials Exposure Control

Key Takeaways

  • 29 CFR 1910.1030 requires a written Exposure Control Plan that is reviewed and updated at least annually and whenever new or modified tasks and procedures affect occupational exposure.
  • Universal precautions treat all human blood and certain body fluids as if known to be infectious for HIV, HBV, and other bloodborne pathogens, which removes the need to diagnose a source before protecting the worker.
  • Hepatitis B vaccination must be made available at no cost within 10 working days of initial assignment to all employees with occupational exposure, and a declining employee must sign the standard declination statement.
  • Employers required to keep an OSHA 1904 log must also maintain a sharps injury log recording the type and brand of device, the department or work area, and an explanation of how the incident occurred.
  • The annual review must document consideration and implementation of appropriate commercially available effective safer medical devices, with input solicited from non-managerial employees responsible for direct patient care.
Last updated: September 2026

9.5 Bloodborne Pathogens & Infectious Materials Exposure Control

The bloodborne pathogens standard, 29 CFR 1910.1030, is the one substance-specific health standard that reaches almost every industry. Safety management professionals in manufacturing, construction, transportation, education, and hospitality routinely conclude that it does not apply to them and are wrong: designated first-aid responders, custodial staff cleaning restrooms and handling waste, maintenance workers servicing sharps disposal or wastewater equipment, security and corrections personnel, and anyone whose job could reasonably be anticipated to involve contact with blood or other potentially infectious materials (OPIM) fall within scope.

The pathogens. The standard's principal targets are hepatitis B virus (HBV), hepatitis C virus (HCV), and human immunodeficiency virus (HIV). HBV is the most transmissible of the three by percutaneous exposure and is also the only one with an effective vaccine, which is why vaccination sits at the center of the standard's medical provisions.

OPIM includes semen, vaginal secretions, cerebrospinal, synovial, pleural, pericardial, peritoneal, and amniotic fluid, saliva in dental procedures, any body fluid visibly contaminated with blood, any body fluid where differentiation is impossible, unfixed human tissue or organs, and specified cultures and experimental materials.


The Exposure Control Plan

The employer must establish a written Exposure Control Plan designed to eliminate or minimize employee exposure, accessible to employees. It has three core elements:

  1. The exposure determination. A list of job classifications in which all employees have occupational exposure, a list of classifications in which some employees do, and a list of the tasks and procedures in which exposure occurs for that second group. Critically, the exposure determination is made without regard to the use of personal protective equipment. A nurse is in the determination whether or not gloves are worn.
  2. The schedule and method of implementation for each of the standard's substantive requirements: methods of compliance, HIV and HBV research laboratory provisions, hepatitis B vaccination and post-exposure evaluation and follow-up, communication of hazards, and recordkeeping.
  3. The procedure for evaluating the circumstances surrounding exposure incidents.

Annual review. The plan must be reviewed and updated at least annually and whenever necessary to reflect new or modified tasks and procedures affecting occupational exposure, and to reflect new or revised employee positions with occupational exposure. The annual review must also document consideration and implementation of appropriate commercially available and effective safer medical devices designed to eliminate or minimize exposure, and the employer must solicit input in identifying, evaluating, and selecting engineering and work practice controls from non-managerial employees responsible for direct patient care who are potentially exposed, documenting that solicitation. These two requirements came from the Needlestick Safety and Prevention Act of 2000 and are where compliance audits most often find gaps: the plan exists, it is dated three years ago, and no device evaluation is documented.


Universal Precautions and the Control Hierarchy

Universal precautions are the foundational concept: all human blood and certain human body fluids are treated as if known to be infectious for HIV, HBV, and other bloodborne pathogens. Where differentiation between fluid types is difficult or impossible, all body fluids are treated as potentially infectious. The operational significance is that protection never waits on a diagnosis or a source-patient status, and never depends on an assumption about who "looks" infectious.

The standard then applies a conventional hierarchy:

TierRequirementExamples
Engineering controlsIsolate or remove the hazard; examine and maintain or replace on a scheduled basisSharps with engineered sharps injury protections, needleless systems, self-sheathing needles, puncture-resistant labeled sharps containers, splash guards
Work practice controlsAlter the manner in which a task is performedProhibition on bending, recapping, or removing contaminated needles (with narrow exceptions requiring a one-handed technique or mechanical device); no eating, drinking, smoking, applying cosmetics, or handling contact lenses in exposure areas; no food or drink in refrigerators storing blood or OPIM; handwashing immediately after glove removal
Personal protective equipmentProvided, cleaned, laundered, repaired, replaced and disposed of at no cost to the employeeGloves, gowns, face shields, masks, eye protection, resuscitation devices
HousekeepingWritten schedule for cleaning and decontaminationAppropriate disinfectant; contaminated laundry handled with minimal agitation, bagged at the location of use, never sorted or rinsed there

Hepatitis B Vaccination

Vaccination must be made available at no cost, at a reasonable time and place, to all employees with occupational exposure, within 10 working days of initial assignment, after the employee has received the required training. It need not be offered where the employee has previously received the complete series, antibody testing has revealed immunity, or the vaccine is contraindicated for medical reasons. An employee who declines must sign the standard declination statement in Appendix A — and may later request and receive the vaccination at any time while still covered, at no cost. Prescreening for antibodies may not be required as a condition of receiving the vaccine.


Post-Exposure Evaluation and Follow-Up

Following a reported exposure incident, the employer must make immediately available a confidential medical evaluation and follow-up including documentation of the route of exposure and the circumstances, identification and documentation of the source individual (unless infeasible or prohibited by law), source testing where consent is obtained or where law permits testing without consent, collection and testing of the exposed employee's blood with consent, post-exposure prophylaxis when medically indicated, counseling, and evaluation of reported illness. The healthcare professional's written opinion furnished to the employer is deliberately narrow: for post-exposure evaluation it is limited to whether vaccination is indicated and whether the employee has received it, plus confirmation that the employee has been informed of the results and of any condition requiring further evaluation. All other findings stay confidential and are not disclosed to the employer.


Labels, Training, and Records

Labels and signs. Warning labels bearing the biohazard legend, fluorescent orange or orange-red, must be affixed to containers of regulated waste, refrigerators and freezers holding blood or OPIM, and containers used to store, transport, or ship blood or OPIM. Red bags or containers may substitute for labels.

Training. Required at the time of initial assignment to tasks where occupational exposure may take place and at least annually thereafter, with additional training when modified tasks or procedures affect exposure. The session must provide opportunity for interactive questions and answers with a knowledgeable trainer.

Records.

RecordRetention
Employee medical records (vaccination status, post-exposure evaluation results, healthcare professional written opinions)Duration of employment plus 30 years, per 29 CFR 1910.1020
Training records (dates, contents, trainer, attendees)3 years from the date of training
Sharps injury log (type and brand of device involved, department or work area where the incident occurred, explanation of how it occurred)Maintained by employers required to keep an OSHA 1904 log; recorded so as to protect the injured employee's confidentiality

Senior manager pitfall. Deciding the standard does not apply because the site is not a healthcare facility, and then designating a first-aid response team. The moment employees are designated to render first aid as a collateral duty, the employer has created occupational exposure and owes them the exposure determination, training, PPE, and — subject to the limited exception OSHA allows for some designated first aiders in non-healthcare settings, which requires pre-exposure availability of a full post-exposure regimen and a written policy — the hepatitis B vaccination program.

Test Your Knowledge

A metal fabrication plant with 220 employees designates and trains eight production workers as a collateral-duty first-aid response team. The plant safety manager has not developed an Exposure Control Plan, reasoning that 29 CFR 1910.1030 applies to healthcare employers rather than manufacturers. Which evaluation is correct?

A
B
C
D
Test Your Knowledge

During an OSHA inspection of an outpatient surgical center, the compliance officer finds a written Exposure Control Plan that is thorough and well organized but was last reviewed and dated 34 months earlier. In the interim the center adopted a new suturing procedure and hired a new category of surgical technician. Which citation is most directly supported?

A
B
C
D
Test Your Knowledge

A newly hired phlebotomist completes bloodborne pathogens training on their first day. Fourteen working days later they have not been offered hepatitis B vaccination. When the safety manager raises this, the clinic administrator responds that the clinic requires all employees to undergo antibody prescreening at their own expense before the vaccine will be authorized, and that employees who decline vaccination forfeit the right to request it later. Identify the compliance failures.

A
B
C
D
Test Your Knowledge

A hospital's infection control committee proposes addressing a rise in percutaneous injuries during intravenous catheter insertion by increasing the frequency of annual bloodborne pathogens training from once to twice per year and issuing a reminder memorandum about safe technique. Which critique best reflects the requirements and the underlying control logic of 29 CFR 1910.1030?

A
B
C
D