9.5 Bloodborne Pathogens & Infectious Materials Exposure Control
Key Takeaways
29 CFR 1910.1030 requires a written Exposure Control Plan that is reviewed and updated at least annually and whenever new or modified tasks and procedures affect occupational exposure.
Universal precautions treat all human blood and certain body fluids as if known to be infectious for HIV, HBV, and other bloodborne pathogens, which removes the need to diagnose a source before protecting the worker.
Hepatitis B vaccination must be made available at no cost within 10 working days of initial assignment to all employees with occupational exposure, and a declining employee must sign the standard declination statement.
Employers required to keep an OSHA 1904 log must also maintain a sharps injury log recording the type and brand of device, the department or work area, and an explanation of how the incident occurred.
The annual review must document consideration and implementation of appropriate commercially available effective safer medical devices, with input solicited from non-managerial employees responsible for direct patient care.
9.5 Bloodborne Pathogens & Infectious Materials Exposure Control
The bloodborne pathogens standard, 29 CFR 1910.1030, is the one substance-specific health standard that reaches almost every industry. Safety management professionals in manufacturing, construction, transportation, education, and hospitality routinely conclude that it does not apply to them and are wrong: designated first-aid responders, custodial staff cleaning restrooms and handling waste, maintenance workers servicing sharps disposal or wastewater equipment, security and corrections personnel, and anyone whose job could reasonably be anticipated to involve contact with blood or other potentially infectious materials (OPIM) fall within scope.
The pathogens. The standard's principal targets are hepatitis B virus (HBV), hepatitis C virus (HCV), and human immunodeficiency virus (HIV). HBV is the most transmissible of the three by percutaneous exposure and is also the only one with an effective vaccine, which is why vaccination sits at the center of the standard's medical provisions.
OPIM includes semen, vaginal secretions, cerebrospinal, synovial, pleural, pericardial, peritoneal, and amniotic fluid, saliva in dental procedures, any body fluid visibly contaminated with blood, any body fluid where differentiation is impossible, unfixed human tissue or organs, and specified cultures and experimental materials.
The Exposure Control Plan
The employer must establish a written Exposure Control Plan designed to eliminate or minimize employee exposure, accessible to employees. It has three core elements:
- The exposure determination. A list of job classifications in which all employees have occupational exposure, a list of classifications in which some employees do, and a list of the tasks and procedures in which exposure occurs for that second group. Critically, the exposure determination is made without regard to the use of personal protective equipment. A nurse is in the determination whether or not gloves are worn.
- The schedule and method of implementation for each of the standard's substantive requirements: methods of compliance, HIV and HBV research laboratory provisions, hepatitis B vaccination and post-exposure evaluation and follow-up, communication of hazards, and recordkeeping.
- The procedure for evaluating the circumstances surrounding exposure incidents.
Annual review. The plan must be reviewed and updated at least annually and whenever necessary to reflect new or modified tasks and procedures affecting occupational exposure, and to reflect new or revised employee positions with occupational exposure. The annual review must also document consideration and implementation of appropriate commercially available and effective safer medical devices designed to eliminate or minimize exposure, and the employer must solicit input in identifying, evaluating, and selecting engineering and work practice controls from non-managerial employees responsible for direct patient care who are potentially exposed, documenting that solicitation. These two requirements came from the Needlestick Safety and Prevention Act of 2000 and are where compliance audits most often find gaps: the plan exists, it is dated three years ago, and no device evaluation is documented.
Universal Precautions and the Control Hierarchy
Universal precautions are the foundational concept: all human blood and certain human body fluids are treated as if known to be infectious for HIV, HBV, and other bloodborne pathogens. Where differentiation between fluid types is difficult or impossible, all body fluids are treated as potentially infectious. The operational significance is that protection never waits on a diagnosis or a source-patient status, and never depends on an assumption about who "looks" infectious.
The standard then applies a conventional hierarchy:
| Tier | Requirement | Examples |
|---|---|---|
| Engineering controls | Isolate or remove the hazard; examine and maintain or replace on a scheduled basis | Sharps with engineered sharps injury protections, needleless systems, self-sheathing needles, puncture-resistant labeled sharps containers, splash guards |
| Work practice controls | Alter the manner in which a task is performed | Prohibition on bending, recapping, or removing contaminated needles (with narrow exceptions requiring a one-handed technique or mechanical device); no eating, drinking, smoking, applying cosmetics, or handling contact lenses in exposure areas; no food or drink in refrigerators storing blood or OPIM; handwashing immediately after glove removal |
| Personal protective equipment | Provided, cleaned, laundered, repaired, replaced and disposed of at no cost to the employee | Gloves, gowns, face shields, masks, eye protection, resuscitation devices |
| Housekeeping | Written schedule for cleaning and decontamination | Appropriate disinfectant; contaminated laundry handled with minimal agitation, bagged at the location of use, never sorted or rinsed there |
Hepatitis B Vaccination
Vaccination must be made available at no cost, at a reasonable time and place, to all employees with occupational exposure, within 10 working days of initial assignment, after the employee has received the required training. It need not be offered where the employee has previously received the complete series, antibody testing has revealed immunity, or the vaccine is contraindicated for medical reasons. An employee who declines must sign the standard declination statement in Appendix A — and may later request and receive the vaccination at any time while still covered, at no cost. Prescreening for antibodies may not be required as a condition of receiving the vaccine.
Post-Exposure Evaluation and Follow-Up
Following a reported exposure incident, the employer must make immediately available a confidential medical evaluation and follow-up including documentation of the route of exposure and the circumstances, identification and documentation of the source individual (unless infeasible or prohibited by law), source testing where consent is obtained or where law permits testing without consent, collection and testing of the exposed employee's blood with consent, post-exposure prophylaxis when medically indicated, counseling, and evaluation of reported illness. The healthcare professional's written opinion furnished to the employer is deliberately narrow: for post-exposure evaluation it is limited to whether vaccination is indicated and whether the employee has received it, plus confirmation that the employee has been informed of the results and of any condition requiring further evaluation. All other findings stay confidential and are not disclosed to the employer.
Labels, Training, and Records
Labels and signs. Warning labels bearing the biohazard legend, fluorescent orange or orange-red, must be affixed to containers of regulated waste, refrigerators and freezers holding blood or OPIM, and containers used to store, transport, or ship blood or OPIM. Red bags or containers may substitute for labels.
Training. Required at the time of initial assignment to tasks where occupational exposure may take place and at least annually thereafter, with additional training when modified tasks or procedures affect exposure. The session must provide opportunity for interactive questions and answers with a knowledgeable trainer.
Records.
| Record | Retention |
|---|---|
| Employee medical records (vaccination status, post-exposure evaluation results, healthcare professional written opinions) | Duration of employment plus 30 years, per 29 CFR 1910.1020 |
| Training records (dates, contents, trainer, attendees) | 3 years from the date of training |
| Sharps injury log (type and brand of device involved, department or work area where the incident occurred, explanation of how it occurred) | Maintained by employers required to keep an OSHA 1904 log; recorded so as to protect the injured employee's confidentiality |
Senior manager pitfall. Deciding the standard does not apply because the site is not a healthcare facility, and then designating a first-aid response team. The moment employees are designated to render first aid as a collateral duty, the employer has created occupational exposure and owes them the exposure determination, training, PPE, and — subject to the limited exception OSHA allows for some designated first aiders in non-healthcare settings, which requires pre-exposure availability of a full post-exposure regimen and a written policy — the hepatitis B vaccination program.
A metal fabrication plant with 220 employees designates and trains eight production workers as a collateral-duty first-aid response team. The plant safety manager has not developed an Exposure Control Plan, reasoning that 29 CFR 1910.1030 applies to healthcare employers rather than manufacturers. Which evaluation is correct?
The reasoning is incorrect. The standard applies wherever employees have reasonably anticipated contact with blood or other potentially infectious materials, and designating collateral-duty first aid responders creates occupational exposure requiring an exposure determination, training, personal protective equipment, and a written Exposure Control Plan.
The reasoning is correct, because 29 CFR 1910.1030 applies only to employers whose primary North American Industry Classification System code falls within health care and social assistance.
The reasoning is correct provided the plant posts emergency numbers and instructs the response team to call emergency medical services rather than render care directly.
The reasoning is incorrect only with respect to training; a written Exposure Control Plan is required solely for employers with more than ten employees who have occupational exposure.
During an OSHA inspection of an outpatient surgical center, the compliance officer finds a written Exposure Control Plan that is thorough and well organized but was last reviewed and dated 34 months earlier. In the interim the center adopted a new suturing procedure and hired a new category of surgical technician. Which citation is most directly supported?
No citation is supported, because the plan's content remains technically accurate and the standard specifies no review interval.
Failure to conduct post-exposure evaluation and follow-up, because an outdated plan necessarily means exposure incidents were not evaluated.
Failure to review and update the Exposure Control Plan at least annually and whenever necessary to reflect new or modified tasks and procedures affecting occupational exposure and new or revised employee positions with occupational exposure.
Failure to maintain training records, because training records must be retained for the same interval as the Exposure Control Plan review cycle.
A newly hired phlebotomist completes bloodborne pathogens training on their first day. Fourteen working days later they have not been offered hepatitis B vaccination. When the safety manager raises this, the clinic administrator responds that the clinic requires all employees to undergo antibody prescreening at their own expense before the vaccine will be authorized, and that employees who decline vaccination forfeit the right to request it later. Identify the compliance failures.
Only the timing is deficient; requiring prescreening and treating a declination as final are both permissible administrative practices under the standard.
There are no compliance failures, because the 10 working day clock runs from the completion of the probationary period rather than from initial assignment.
The prescreening requirement is the sole violation; the standard sets no deadline for offering vaccination and permits employers to treat a signed declination as irrevocable.
Three failures: vaccination must be made available within 10 working days of initial assignment, antibody prescreening may not be required as a condition of receiving the vaccine, and an employee who initially declines must be permitted to receive the vaccination at any time thereafter while still covered, at no cost.
A hospital's infection control committee proposes addressing a rise in percutaneous injuries during intravenous catheter insertion by increasing the frequency of annual bloodborne pathogens training from once to twice per year and issuing a reminder memorandum about safe technique. Which critique best reflects the requirements and the underlying control logic of 29 CFR 1910.1030?
The proposal is sound because training frequency is the principal determinant of sharps injury rates in clinical settings, and the standard establishes annual training as a minimum rather than a maximum.
The proposal inverts the control hierarchy and misses a specific regulatory duty: the employer must document annual consideration and implementation of appropriate commercially available and effective safer medical devices, and must solicit and document input from non-managerial employees responsible for direct patient care in identifying, evaluating, and selecting those controls.
The proposal is adequate provided the additional training sessions are delivered by a knowledgeable trainer and include an opportunity for interactive questions and answers.
The proposal should be rejected because 29 CFR 1910.1030 prohibits training more frequently than annually in order to prevent training fatigue among clinical staff.
Sections you finish are checked off in the contents.