OSHA Bloodborne Pathogens Standard & Exposure Control Plan
Key Takeaways
- Determine occupational exposure by job tasks without considering whether PPE is used; job title alone is insufficient.
- Review the written Exposure Control Plan at least annually and whenever tasks or technology change exposure.
- Use universal precautions, engineering controls, work-practice controls, and PPE; document consideration of safer devices with input from nonmanagerial exposed employees.
- Offer hepatitis B vaccination at no cost and at a reasonable time and place within 10 working days of initial assignment after required training.
- Provide confidential post-exposure evaluation and follow-up immediately after a reported exposure and maintain medical records confidentially.
Who is covered
OSHA's Bloodborne Pathogens Standard, 29 CFR 1910.1030, protects employees who can reasonably anticipate skin, eye, mucous-membrane, or parenteral contact with blood or other potentially infectious material (OPIM) while performing their duties. In dentistry, saliva is OPIM because dental procedures can contaminate it with blood.
The employer performs an exposure determination without considering PPE. List job classifications in which all employees have occupational exposure and tasks in classifications where only some employees are exposed. Labels such as “Category I, II, III” are not OSHA's required classification scheme. The actual tasks—assisting surgery, cleaning contaminated instruments, handling specimens, or providing first aid—control.
The written Exposure Control Plan
The plan must be accessible to employees and include the exposure determination, schedule and method of compliance, hepatitis B vaccination, post-exposure evaluation, communication of hazards, and recordkeeping. Review and update it at least annually and whenever new or modified tasks, procedures, or employee positions affect exposure.
The annual review documents consideration and implementation of appropriate commercially available safer medical devices. Solicit input from nonmanagerial employees responsible for direct patient care who use the devices, and document that input. The plan should identify who receives reports, where immediate evaluation is obtained, and how records remain confidential.
Methods of compliance
Treat blood and OPIM as infectious. Use engineering controls that isolate or remove the hazard, such as sharps containers and needle-safety features, together with work-practice controls that change how tasks are performed. Examine and maintain controls regularly and replace them when needed. Prohibited practices include bending, breaking, removing, or recapping contaminated needles unless no feasible alternative exists or the action is required by a specific procedure; an allowed recap or removal uses a mechanical device or one-handed technique.
Provide appropriate PPE at no cost and train employees to use and remove it. Establish housekeeping schedules based on the area and contamination. Contain regulated waste and contaminated laundry correctly. Food, drink, cosmetics, contact-lens handling, and food storage are prohibited in work areas where occupational exposure is reasonably likely.
Hepatitis B vaccination
After required bloodborne-pathogens training, offer the hepatitis B vaccination series to employees with occupational exposure within 10 working days of initial assignment, at no cost and at a reasonable time and place. The employee may decline by signing OSHA's statement and may later accept at no cost while covered. Vaccination is not conditioned on prescreening, although current U.S. Public Health Service recommendations guide clinical testing and follow-up.
The evaluating healthcare professional, not the office manager, interprets vaccination history, response testing, boosters, and post-exposure prophylaxis under current guidance. OSHA requires the employer to make the service available; it does not authorize unqualified staff to prescribe a clinical regimen.
Information, training, and records
Provide interactive training at initial assignment, at least annually, and when new tasks create additional exposure. It must cover transmission, the standard, the plan, controls, PPE, hepatitis B, emergencies, reporting, post-exposure evaluation, signs and labels, and an opportunity for questions with a knowledgeable person. Training records include dates, content, trainer names/qualifications, and attendee names/job titles and are kept for three years.
Maintain confidential employee medical records for the duration of employment plus 30 years as required by 29 CFR 1910.1020. They include vaccination status and relevant evaluation documents and are not placed in ordinary personnel files. The employer receives only the limited written opinion permitted by the standard, not confidential diagnoses or laboratory results.
Apply the standard as a system
An Exposure Control Plan sitting unopened in a binder is not compliance. Observe work, review injuries, involve frontline staff in safer-device selection, repair broken controls, update the plan, and retrain when practice changes. State dental rules and CDC recommendations may add patient-safety details, but they do not replace OSHA's employee-protection duties.
Accessibility during real work
Employees must be able to obtain the Exposure Control Plan during their shift, including where exposure procedures and contact information are located. A manager-only file that staff cannot access when an injury occurs is ineffective. Review the plan in training and during drills.
The plan also describes schedules for cleaning and decontamination and the methods used for contaminated equipment before service or shipment. Affix a biohazard label identifying contaminated portions when complete decontamination is not feasible and communicate the status to service personnel.
An employee's signed hepatitis B declination does not waive post-exposure care, PPE, training, or other protections. The employee may revoke the declination and accept vaccination later. Employers cannot charge for required vaccination or medical follow-up or require an employee to obtain it only outside normal access without compensation where applicable.
Quick decision sequence
- Identify tasks with occupational exposure.
- Apply engineering/work-practice controls and PPE.
- Train, vaccinate, evaluate exposures, and preserve required records.
How is occupational exposure determined under the Bloodborne Pathogens Standard?
When must hepatitis B vaccination be offered to a newly assigned employee with occupational exposure?
Whose input must be sought when the employer evaluates safer medical devices?