Occupational Exposure Response, Testing & Follow-Up

Key Takeaways

  • Wash needlesticks and cuts with soap and water; flush mucous membranes with water promptly, then report the exposure immediately.
  • The employer provides confidential medical evaluation and follow-up immediately and at no cost, using current U.S. Public Health Service guidance.
  • Begin indicated HIV PEP as soon as possible and no later than 72 hours after exposure; the recommended course is 28 days.
  • HCV has no PEP; current follow-up uses baseline testing and HCV RNA testing at 3–6 weeks when follow-up is indicated.
  • The employer provides the employee the healthcare professional’s written opinion within 15 days and retains confidential medical records for employment plus 30 years.
Last updated: August 2026

Recognize a true exposure incident

Under OSHA, an exposure incident is a specific eye, mouth, other mucous-membrane, non-intact-skin, or parenteral contact with blood or OPIM resulting from an employee's duties. A contaminated needlestick, blood splash to an eye, or saliva/blood contact with dermatitis qualifies. Blood on intact skin generally is not an exposure incident, but wash it and report uncertainty under office policy.

Immediate actions

Wash needlesticks, cuts, and contaminated skin with soap and water. Flush the eyes, nose, or mouth promptly with water; use an eyewash where appropriate. Remove contaminated clothing. Do not apply bleach or another caustic agent to tissue. Current federal guidance does not establish one universal fifteen-minute mucous-membrane flush for every blood exposure, so the best exam answer is immediate, thorough flushing followed by urgent reporting—not delaying medical evaluation to meet an invented timer.

Do not aggressively squeeze or “milk” a puncture. Evidence does not support it as a prevention method. Report the incident immediately to the designated person so evaluation is not delayed. Document the route, device, depth, visible blood, fluid, PPE, source, and time without making your own risk conclusion.

Employer-provided evaluation

The employer makes confidential medical evaluation and follow-up available immediately, at no cost and at a reasonable time and place. Send the clinician the Bloodborne Pathogens Standard, a description of the employee's duties and exposure, available source results, and relevant employee vaccination records. The clinician evaluates urgency and uses current U.S. Public Health Service recommendations.

Identify and document the source individual when feasible and lawful. Test source blood as soon as feasible after consent is obtained when consent is required; if consent is not required by law, document that. Tell the exposed employee the source results and applicable laws on disclosure. State law governs source-consent details, so a universal written-consent rule should not be assumed.

Collect the employee's blood as soon as feasible with consent. If the employee consents to collection but not HIV testing, preserve the baseline sample for at least 90 days; test it if consent is provided during that period.

Pathogen-specific follow-up

HIV: Determine whether PEP is indicated urgently. CDC's 2025 occupational guidance says to start as soon as possible, up to 72 hours after exposure, and continue the recommended regimen for 28 days. Older “ideally within two hours” phrasing is not the current stated threshold. Do not wait for all source results when the clinician judges that delay would matter; the regimen can be modified or stopped as information changes.

HBV: Management depends on the source status and the worker's vaccination and documented immune response. A documented responder generally needs no HBV post-exposure prophylaxis. An unvaccinated or inadequately protected worker may need hepatitis B vaccine and/or HBIG under current guidance. The evaluating clinician determines the regimen.

HCV: There is no vaccine and no recommended PEP. CDC recommends source testing and baseline testing of the exposed healthcare worker as soon as possible, preferably within 48 hours. When follow-up is indicated, test the worker for HCV RNA at 3–6 weeks, with final antibody testing at 4–6 months (with reflex RNA when positive). Current CDC estimates average percutaneous transmission risk at about 0.2% when the source is HCV infected.

Confidential documentation

The healthcare professional gives the employer a limited written opinion; diagnoses and test results remain confidential. The employer must obtain and provide a copy to the employee within 15 days after completion of the evaluation. Employee medical records are kept confidential for employment plus 30 years.

Analyze the incident after urgent care is underway. Review device selection, container placement, staffing, lighting, transfer technique, and training. Correct the system without blaming the exposed worker. Formal Part 1904 and sharps-log obligations depend on coverage and exemptions, but internal reporting and prevention review are always essential.

Do not delay for paperwork

The employee should know the after-hours clinic or emergency contact before an incident occurs. Consent forms, source-testing procedures, the clinician referral packet, and transportation arrangements should be prepared in advance. Incident documentation follows first aid and urgent referral rather than becoming a barrier to care.

The evaluating clinician counsels the employee about medication adherence, adverse effects, follow-up appointments, precautions during the follow-up period, and symptoms that require care. Pregnancy, breastfeeding, kidney function, drug interactions, and source resistance information are clinical considerations, not reasons for an office manager to delay referral.

Follow-up results are confidential. Supervisors receive only information needed for work restrictions or the limited OSHA opinion, not the employee's HIV, HBV, or HCV laboratory details. Apply the same privacy discipline to source-patient information and do not place it in a shared incident spreadsheet.

Quick decision sequence

  • Wash or flush immediately.
  • Report and obtain urgent confidential clinical evaluation.
  • Complete source/employee testing and pathogen-specific follow-up under current guidance.
Test Your Knowledge

What should an employee do immediately after a contaminated needlestick?

A
B
C
D
Test Your Knowledge

What is the current timing boundary for initiating indicated occupational HIV PEP?

A
B
C
D
Test Your Knowledge

Which statement describes HCV post-exposure management?

A
B
C
D