3.2 OSHA Standards and EPA-Registered Disinfectants

Why OSHA and EPA sit on the same Domain 1 items

Quick Answer: OSHA (29 CFR 1910.1030 Bloodborne Pathogens and 1910.1200 Hazard Communication) protects workers. The EPA registers disinfectants as pesticides and puts an EPA Registration Number and contact time on the label. New Jersey does not accept a vague hospital-grade bottle for implements: N.J.A.C. 13:28-3.2 requires clean first, then an EPA-registered disinfectant labeled tuberculocidal for the label contact time, or an FDA-registered autoclave. Reusable nail implements add enzyme pre-soak and ultrasonic cleaning. Discard what cannot be sanitized.

NIC Domain 1.A.4 asks which federal agency does which job. Mixing them is a classic miss. OSHA does not stamp disinfectant labels. EPA does not write your hepatitis B vaccine clock. The New Jersey State Board of Cosmetology and Hairstyling does not waive OSHA for employees just because a bottle says “salon.”

OSHA Bloodborne Pathogens (29 CFR 1910.1030) in a salon

If the shop has employees with occupational exposure, the employer must:

1. Write an Exposure Control Plan, keep it accessible to employees, and review it at least annually and whenever tasks that affect exposure change.
2. Use Universal Precautions — all blood treated as infectious for HIV, HBV, and other bloodborne pathogens.
3. Use engineering controls (puncture-resistant sharps containers) and work practice controls (no two-handed recapping; no eating, drinking, smoking, applying lip balm, or handling contact lenses where blood or OPIM is reasonably anticipated — including coffee over a bloody pedicure setup).
4. Provide personal protective equipment (PPE) at no cost: gloves, and eye or face protection when splashes are reasonably anticipated. PPE is “appropriate” only if blood cannot soak through to skin, undergarments, or street clothes under normal use. Remove PPE before leaving the work area. Place it in the designated laundry or waste container. Repair or replace damaged PPE at no cost. Supply hypoallergenic glove options if needed. Never reuse disposable gloves.
5. Offer the hepatitis B vaccination series after the required training and within 10 working days of initial assignment, at no cost, unless the employee already completed the series, antibody testing shows immunity, or vaccine is medically contraindicated. The employee may decline in writing on OSHA’s mandatory declination form and may still request the vaccine later.
6. Provide confidential post-exposure evaluation and follow-up after an exposure incident, including prophylaxis as recommended by the U.S. Public Health Service, at no cost.
7. Train at initial assignment and at least annually. Keep training records 3 years from the session date (dates, summary, trainer, names and job titles of attendees). Keep employee medical records for the duration of employment plus 30 years and keep them confidential.
8. Label regulated waste and, when required, contaminated laundry with the biohazard symbol or allowed color-coding.

OSHA’s standard is an employer–employee rule. A true sole proprietor with no employees is generally outside federal OSHA. The New Jersey theory exam still tests the OSHA content as Domain 1.A.4 material, and 13:28-3.2 still binds the licensee who sanitizes implements.

OSHA Hazard Communication (29 CFR 1910.1200) — SDS, labels, PPE

Disinfectants, relaxers, bleach, and acrylic liquids are hazardous chemicals. OSHA’s Hazard Communication Standard (HazCom) — the right-to-know rule — requires a written program, a list of hazardous chemicals in the workplace, GHS labels (product identifier, signal word Danger or Warning, pictograms, hazard and precautionary statements), Safety Data Sheets (SDS) in English (additional languages are allowed as extras), and employee training before exposure under normal work or foreseeable emergencies.

An SDS uses 16 numbered sections in a fixed order. Salon items most often pull Section 2 (hazards), Section 4 (first aid — including eye rinse), Section 7 (handling, storage, incompatibilities), and Section 8 (exposure controls and PPE). Never mix bleach (sodium hypochlorite) with ammonia or with acids — that is an SDS/Section 7 trap that produces toxic gas, not a stronger disinfectant.

The SDS is not “the owner’s binder in the car.” Employees who may be exposed must be able to get to it during the shift. If the disinfectant jug has no EPA Reg. No. and no readable label, you cannot prove EPA registration or HazCom compliance.

EPA registration, hospital-grade, and tuberculocidal

Under the Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA), a disinfectant is a pesticide. Selling it as a disinfectant without EPA registration, or using it in a way that contradicts the label, is unlawful. The Directions for Use — dilution, surfaces, and contact time (how long the surface must stay wet) — are the legal instructions. EPA states that using an EPA-registered product consistent with its labeling is how users meet OSHA’s bloodborne-pathogen disinfectant expectation.

Find EPA Reg. No. on the label (two parts such as 12345-12, or three parts for a supplemental distributor such as 12345-12-678). The first two segments identify the primary registered formula. If those numbers are missing, it is not an EPA-registered disinfectant no matter how strongly the front panel says “kills germs.”

Hospital disinfectant (the claim people nickname hospital-grade) is an EPA efficacy class. To carry it, the product must kill three test bacteria: Staphylococcus aureus, Pseudomonas aeruginosa, and Salmonella (the historic AOAC organism Salmonella choleraesuis, now discussed as Salmonella enterica). CDC calls an EPA hospital disinfectant without a tuberculocidal claim a low-level disinfectant.

Tuberculocidal means the product is also registered to kill Mycobacterium tuberculosis on hard, non-porous surfaces when used as directed. Mycobacteria have a waxy cell wall and are harder to kill than typical vegetative bacteria and many viruses. CDC therefore treats an EPA hospital disinfectant with a tuberculocidal claim as an intermediate-level disinfectant. The salon reason for the TB claim is not that clients catch tuberculosis from a comb. The TB claim is a potency benchmark: if the product can kill mycobacteria on the label’s wet time, it sits in the class used against a broad set of pathogens, including the bloodborne viruses that scare exam writers.

Why both words matter on the New Jersey exam

• NIC / national theory often keys “EPA-registered, hospital-grade disinfectant.”
• N.J.A.C. 13:28-3.2 is stricter. The Board’s 2009 amendment removed the old alternative that allowed a product merely “effective against HIV and HBV at recommended dilution.” The live rule is: EPA-registered and labeled tuberculocidal for the contact time specified on the product label, or process implements in an FDA-registered autoclave.
• A bottle that is hospital-grade only (low-level, HIV/HBV claim, no TB claim) does not satisfy 13:28-3.2 for implements.
• EPA List B is the Agency’s current list of registered products with TB claims. List S is registered products effective against HIV, HBV, and HCV. Older Lists C–F were retired into List S. New Jersey shop law still keys off the label word tuberculocidal and the EPA registration, not off memorizing list letters. Use the lists to verify a product; use the label to use it.

Contact time is product-specific. EPA List B tables show TB wet times that can be 1 minute on one product and 10 minutes on another. The exam answer is not “always 10 minutes.” The exam answer is follow the tuberculocidal contact time on that label and keep the surface wet the whole time. Wiping dry at 20 seconds fails. Mixing a mystery 1:10 bleach bucket with no EPA label for that use also fails — except where 13:28-3.2(c) itself writes bleach math for pedicure tubs.

N.J.A.C. 13:28-3.2 — New Jersey’s implement rule

(a) All implements and tools (shears, combs, removable clipper blades, and other sanitizable tools):

1. Clean thoroughly with a mild alkaline detergent to remove soil, blood, or other foreign material.
2. Rinse with tap water.
3. Process with an EPA-registered chemical disinfectant labeled tuberculocidal for the label contact time, or process in an FDA-registered autoclave.
4. Follow the manufacturer’s instructions when using the chemical disinfectant (dilution, when to change the bath, what metals it will corrode).
5. Air-dry and store in a clean drawer.

(b) Reusable implements used in manicuring add steps before the kill step:

1. Enzyme pre-soak prior to cleaning.
2. Place the implement in an ultrasonic unit for a 10-minute cycle, or as the manufacturer recommends. Change water and cleaning solution when visibly soiled or at least daily. Disinfect the ultrasonic chamber at day’s end with 70 percent isopropyl alcohol. Each time the chamber is filled, degas 5 to 10 minutes per manufacturer directions so air bubbles do not block cavitation.
3. Inspect for pitting and rust; remove damaged implements from use. Pits harbor biofilm that disinfectant will not reach.
4. Rinse, dry, then EPA tuberculocidal for label contact time or FDA autoclave.
5. Rinse, dry, store in a clean drawer.

(d) Discard after each use emery boards, orangewood sticks, and all implements and tools that cannot be sanitized. Blood on a porous file is not a “wipe and reuse” event.

(c) Pedicure tubs use the same tuberculocidal idea with written bleach alternatives. Between clients: brush interior surfaces with mild detergent to remove debris, salts, and oils; drain, rinse, and wipe dry with a disposable paper towel; then spray EPA tuberculocidal for label contact time or apply a 6% sodium hypochlorite bleach wipe for a two-and-a-half-minute contact time. End of day: remove, clean, and disinfect the screen, filter, and removable parts; detergent-brush the tub; run the machine 30 minutes in 100 ppm bleach (the rule states 1 teaspoon of 6% bleach to one gallon of water); soak brushes 30 minutes in 2,600 ppm (¾ cup of 6% bleach to one gallon of water). That math is in the regulation. Do not substitute “a capful.”

Putting the labels together on test day

If the stem says New Jersey shop / Board rule, look for clean → rinse → EPA tuberculocidal contact time or FDA autoclave, plus enzyme + ultrasonic + inspect for reusable nail metal, plus discard for emery boards, orangewood sticks, and anything porous or pitted. If the stem says OSHA, look for Universal Precautions, PPE at no cost, HBV vaccine within 10 working days, exposure incident, SDS, 3-year training records, and employment-plus-30-year medical records. If the stem says EPA, look for registration number, the label is the law, tuberculocidal claim, and wet contact time. Hospital-grade without TB is the trap on a New Jersey sanitation item.

Autoclave language is easy to over-read. 13:28-3.2 allows an FDA-registered autoclave as the alternative to the chemical tuberculocidal step after cleaning. Autoclaving is sterilization (destruction of microbial life including bacterial endospores) when used as directed. It is not a reason to skip cleaning, and it is not required in every New Jersey shop — it is the legal substitute for the EPA tuberculocidal soak. A microwave, a UV drawer, or a “dry sanitizer” cabinet is not that autoclave.

Exam traps for Domain 1.A.4 and 13:28-3.2

• “Hospital-grade is always enough in New Jersey.” False for implements after 2009 — the label must say tuberculocidal, or you autoclave.
• “HIV/HBV claim equals New Jersey-legal disinfectant.” That used to be an alternative in 13:28-3.2; the Board deleted it.
• “Contact time is always 10 minutes.” Contact time is whatever the tuberculocidal directions say for that EPA-registered product.
• “Ultrasonic replaces disinfectant.” Ultrasonic plus enzyme is the manicure cleaning path; you still need tuberculocidal or autoclave.
• “SDS is only for hospitals.” HazCom applies where employees may be exposed to hazardous chemicals, including salon disinfectants.
• “OSHA registers Barbicide.” EPA registers the disinfectant; OSHA tells the employer how to protect workers who use it and who see blood.