The Bloodborne Pathogen Standard is a federal workplace safety regulation, numbered 1910.1030, issued by the Occupational Safety and Health Administration (OSHA). It requires any employer whose workers could be exposed to blood or other potentially infectious materials on the job to create and follow a written plan that eliminates or minimizes that exposure. The standard covers everything from protective equipment and vaccination to what happens if an exposure actually occurs.
Who the Standard Covers
The standard applies to any employee with “occupational exposure,” meaning a reasonably anticipated contact with blood or other potentially infectious materials as part of their job duties. Healthcare workers are the most obvious example, but the regulation reaches well beyond hospitals. It covers dentists, laboratory technicians, phlebotomists, paramedics, firefighters, custodial staff who clean up biohazardous waste, laundry workers who handle contaminated linens, and anyone else whose job puts them in contact with human blood or body fluids.
The key word is “reasonably anticipated.” An office worker who happens to help a coworker with a nosebleed isn’t covered. But a designated first-aid responder in a manufacturing plant is, because exposure is a foreseeable part of that role.
The Exposure Control Plan
At the heart of the standard is a written document called the Exposure Control Plan. Every covered employer must create one, and it must be reviewed and updated at least once a year or whenever job tasks change in ways that affect exposure risk. The plan is not a generic template that sits in a binder. It needs to be tailored to the specific workplace and must include:
- A determination of which employees are exposed and what tasks put them at risk
- Methods of exposure control, including universal precautions, engineering controls, work practice controls, personal protective equipment, and housekeeping procedures
- Hepatitis B vaccination provisions
- Post-exposure evaluation and follow-up procedures
- Hazard communication and training for employees
- Recordkeeping requirements
- Procedures for evaluating exposure incidents after they happen
Employees must be able to obtain a copy of the plan whenever they want it. It is not meant to be a behind-the-scenes document that only management sees.
Universal Precautions
The standard requires the use of universal precautions, which means treating all human blood and certain body fluids as if they are known to be infectious. Workers don’t wait for a confirmed diagnosis before protecting themselves. Every blood sample, every soiled bandage, every splash of body fluid gets handled the same way. The CDC later expanded this concept into what it calls “standard precautions,” which also includes hand hygiene, safe injection practices, and protocols for managing patients suspected of being infectious. OSHA’s regulation still uses the term universal precautions, but the practical overlap is significant.
Engineering and Work Practice Controls
The standard prioritizes controls that remove the hazard before it reaches the worker. Engineering controls are physical devices or equipment designed to isolate or eliminate the risk. Sharps disposal containers are a familiar example. These containers must be puncture-resistant, leakproof on the sides and bottom, closable with a lid or flap, and kept upright so contents don’t spill. They must be labeled with the biohazard symbol or color-coded red. Employers need to replace them routinely and never let them overfill, since an overstuffed sharps container increases the chance of a needlestick injury. Reusable sharps containers cannot be opened, emptied, or cleaned by hand.
If a sharps container could leak, it must be placed inside a secondary container that is also closable, labeled, and leakproof. Self-sheathing needles and needleless IV systems are other examples of engineering controls the standard encourages.
Work practice controls are behavioral rules that reduce exposure. These include things like not recapping needles by hand, not eating or drinking in areas where blood or body fluids are handled, and washing hands immediately after removing gloves.
Personal Protective Equipment
When engineering and work practice controls alone aren’t enough, employers must provide personal protective equipment (PPE) at no cost to the worker. This includes gloves, gowns, face shields, masks, and eye protection, depending on the type and degree of anticipated exposure. The employer is also responsible for cleaning, laundering, repairing, replacing, and disposing of PPE. Workers cannot be expected to supply their own protective gear or take contaminated items home to wash.
Hepatitis B Vaccination
Employers must offer the hepatitis B vaccine to every worker with occupational exposure, free of charge, within 10 days of their initial job assignment. The only exceptions are workers who have already been vaccinated, those whose blood tests show they are already immune, or those for whom the vaccine is medically contraindicated.
Workers can decline the vaccine, but there is a formal process for doing so. Anyone who declines must sign a declination form that spells out the ongoing risk of hepatitis B infection. The form also makes clear that if the worker changes their mind later, the employer must provide the vaccine at no cost, as long as that person still has occupational exposure.
What Happens After an Exposure Incident
If a worker is exposed to blood or infectious material through a needlestick, splash to the eyes, cut from a contaminated instrument, or similar event, the employer must provide an immediate, confidential medical evaluation and follow-up at no cost. This evaluation must be performed by or supervised by a licensed healthcare professional and must follow current U.S. Public Health Service recommendations.
The follow-up includes several specific steps. The employer must try to identify the source individual (the person whose blood or fluid was involved) and determine their infection status for hepatitis B, hepatitis C, and HIV, provided the source consents or state law permits testing without consent. The exposed worker can have their own blood drawn to establish a baseline infection status but has the right to refuse HIV testing at that time. If the worker declines the HIV test, the employer must preserve the blood sample for at least 90 days in case the worker reconsiders.
Post-exposure preventive treatment for HIV, hepatitis B, and hepatitis C must be offered when medically indicated. The follow-up also includes counseling about the possible implications of the exposure, interpretation of all test results, and guidance on how to protect personal contacts. Any illness that may be related to the exposure must be evaluated as part of the follow-up process.
Training Requirements
Every covered employee must receive training at the time of their initial assignment and at least once a year after that. If job tasks change in a way that creates new exposure risks, additional training is required, though it can focus specifically on the new hazards rather than repeating the full program.
The training must cover a broad set of topics: how bloodborne diseases spread, how to recognize tasks that carry exposure risk, what protective methods are available and how to use them, how to handle and dispose of PPE, what the hepatitis B vaccine does and why it matters, what to do in an emergency involving blood, and how to report an exposure incident. Workers must also receive an accessible copy of the regulatory text itself and an explanation of the employer’s Exposure Control Plan.
One requirement that sets this training apart from a simple online module: the session must include an opportunity for interactive questions and answers with the person conducting the training. A pre-recorded video with no live component does not satisfy the standard on its own.
Labeling and Color Coding
The standard requires that containers of regulated waste, refrigerators storing blood or infectious materials, and other items that pose a biohazard risk be labeled with the universal biohazard symbol or color-coded red. This system ensures that anyone who encounters the material, whether or not they were part of the initial training, can recognize the hazard at a glance. Sharps containers, waste bags, and contaminated laundry bags all fall under these labeling rules.
Recordkeeping Obligations
Employers must maintain two types of records. Medical records for each employee with occupational exposure must be kept for the duration of employment plus 30 years, reflecting the long latency period of some bloodborne infections. These records include vaccination status, exposure incident reports, and post-exposure follow-up documentation. They are confidential and cannot be shared without the employee’s written consent.
Training records must be kept for three years and must document the dates of training sessions, the content covered, the trainer’s name and qualifications, and the names and job titles of all attendees. Both types of records must be made available to employees, their representatives, and OSHA upon request.