Bloodborne pathogens training is required once a year. Under the federal OSHA standard (29 CFR 1910.1030), every employee with occupational exposure to blood or other potentially infectious materials must complete initial training when first assigned to those tasks, then refresher training at least annually. The annual session must fall within one year of the previous training, not just within the same calendar year.
Who Needs This Training
The training requirement applies to any employee whose job could reasonably expose them to blood or other potentially infectious materials. That obviously includes healthcare workers, but it also covers custodial staff who clean up biohazard waste, laboratory technicians, first responders, tattoo artists, school nurses, and anyone else whose duties create a realistic chance of contact with blood or bodily fluids.
The key phrase in the standard is “occupational exposure.” If a task could bring you into contact with blood or infectious materials, even if contact hasn’t actually happened yet, your employer is required to provide the training before you start that work and every year after.
Initial Training vs. Annual Refresher
Initial training happens before or at the time you’re first assigned to tasks involving potential exposure. You can’t start the work and then get trained later. This first session covers the full scope of the standard, including how bloodborne diseases spread, how to protect yourself, what to do after an exposure incident, and the details of your workplace’s specific exposure control plan.
Annual refresher training covers the same ground but also addresses any new or modified tasks, procedures, or equipment introduced since the last session. If your employer has updated its exposure control plan, switched to a new type of safety needle, or changed waste disposal procedures, the annual training is where those changes get communicated. The clock resets from the date of each completed session, so if you complete training on March 15, your next session is due by March 15 of the following year.
What the Training Must Cover
OSHA specifies a minimum list of topics that every session must include. These aren’t suggestions. Skipping any of them means the training doesn’t count as compliant:
- Disease transmission: How bloodborne pathogens like HIV, hepatitis B, and hepatitis C spread, along with their symptoms.
- Exposure recognition: How to identify tasks and situations that carry exposure risk, and what counts as an exposure incident.
- Protective equipment: The types of gloves, gowns, masks, and other gear available, where to find them, how to use them correctly, and how to dispose of them.
- Engineering controls: Safer devices and work practices designed to reduce exposure, such as self-sheathing needles or sharps containers, along with their limitations.
- Hepatitis B vaccination: Information on the vaccine’s safety, effectiveness, and how to get it. Employers must offer it free of charge.
- Emergency procedures: What to do immediately after an exposure incident, who to contact, and how to report it.
- Post-exposure follow-up: What medical evaluation and treatment the employer is required to provide after an incident.
- Labels and signs: The meaning of biohazard labels, color-coded containers, and other warning systems used in your workplace.
- The exposure control plan: An explanation of your employer’s written plan and how to access a copy.
Online Training Has Specific Rules
Many employers use online or computer-based training modules, and OSHA allows this, but with an important condition. Every training session must include an opportunity for interactive questions and answers with a qualified trainer. That person must be accessible in real time while the training is happening.
A phone hotline staffed during training hours satisfies this requirement. A voicemail system does not. OSHA has explicitly stated that a setup where employees leave a message and wait for a callback violates the standard. The trainer doesn’t have to be physically in the room, but they need to be reachable the moment a question comes up.
Penalties for Non-Compliance
Failing to provide bloodborne pathogens training on time, or providing training that doesn’t meet the content requirements, is an OSHA violation. As of January 2025, a serious violation carries a maximum fine of $16,550 per occurrence. A willful or repeated violation can reach $165,514 per occurrence. If an employer is cited and fails to correct the problem, OSHA can assess $16,550 per day until the issue is resolved.
Each untrained employee can count as a separate violation, so the costs add up quickly for employers who let training lapse across a team.
State Requirements May Differ
Twenty-two states and several territories run their own OSHA-approved workplace safety programs. These state plans must be at least as protective as the federal standard, but they can impose stricter requirements. Some states require additional training topics, more detailed recordkeeping, or specific trainer qualifications beyond what federal OSHA mandates. If you work in a state-plan state (California, Washington, Oregon, and Michigan are among the most notable), check your state’s occupational safety agency for any requirements that go beyond the federal annual minimum.
Regardless of location, the baseline is the same everywhere: initial training before exposure tasks begin, then at least once every 12 months after that.