The OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030) exists to protect workers from infections caused by contact with blood and other potentially infectious materials on the job. It targets three diseases in particular: hepatitis B, hepatitis C, and HIV. The standard requires employers to identify at-risk workers, create a written safety plan, and provide protective measures, all at no cost to employees.
Who the Standard Covers
The standard applies to any worker who can reasonably be expected to encounter blood or other potentially infectious materials as part of their job. That obviously includes nurses, doctors, and surgeons, but it extends well beyond clinical roles. Phlebotomists, lab technicians, dentists, paramedics, housekeeping staff in hospitals, laundry workers handling contaminated linens, and even some first responders all fall under its protection.
Employers are required to create a formal exposure determination: a list of job classifications where all workers have occupational exposure, and a separate list of classifications where only some workers do, along with the specific tasks that put them at risk. This determination drives every other requirement in the standard.
The Exposure Control Plan
At the heart of the standard is a written document called the Exposure Control Plan. Every covered employer must have one, and it must include three core elements: the exposure determination described above, a schedule explaining how the employer will implement each protective measure required by the standard, and a procedure for investigating exposure incidents after they happen.
This plan isn’t a one-time document. Employers must review and update it at least annually to reflect changes in technology, job roles, or procedures. If a new safer needle device hits the market, for example, the plan should address whether and how it will be adopted.
Engineering and Work Practice Controls
The standard’s most tangible protections come through engineering controls, physical devices that reduce or eliminate hazards before a worker ever has to rely on personal behavior. Sharps disposal containers, self-sheathing needles, needleless IV systems, and blunt-tip surgical suture needles are all examples. These devices isolate or remove the bloodborne pathogen hazard from the workplace entirely.
The results speak for themselves. In a large network of U.S. hospitals tracking sharps injuries, overall injury rates from hollow-bore needles dropped 34% after safety-engineered devices were introduced. Among nurses, the decline was 51%.
Work practice controls complement engineering controls by changing how tasks are performed. These include proper techniques for handling and disposing of contaminated sharps, transporting lab specimens, processing soiled laundry, and cleaning contaminated surfaces. The standard treats both types of controls as the first line of defense, with personal protective equipment like gloves, gowns, and face shields serving as a backup layer.
Free Hepatitis B Vaccination
One of the standard’s most direct protections is a requirement that employers offer the hepatitis B vaccine to every worker with occupational exposure, completely free of charge. The vaccine must be made available within 10 days of an employee’s initial assignment to an at-risk job, and it has to be offered at a reasonable time and place.
Workers can decline the vaccine, but if they change their mind later, the employer must still provide it for free as long as the employee remains in a role with occupational exposure. After vaccination, the employer must obtain a written opinion from a licensed healthcare professional within 15 days confirming the evaluation is complete.
What Happens After an Exposure Incident
If a worker gets stuck by a contaminated needle, has blood splash into their eyes, or experiences any other exposure incident, the standard triggers a series of mandatory steps. The employer must provide an immediate, confidential medical evaluation and follow-up at no cost. This includes blood testing through an accredited laboratory and, when medically appropriate, preventive treatment for HIV, hepatitis B, and hepatitis C.
The follow-up also requires identifying the source individual (the person whose blood or fluid caused the exposure) and determining their infection status, provided it’s legally feasible and the source consents. If state or local law permits testing without consent, the employer must test available blood samples. All results are shared with the exposed worker.
Beyond the medical response, the worker receives counseling about what the exposure means, how to interpret test results, and how to protect personal contacts. The employer is also required to investigate the circumstances of the incident to prevent it from happening again. Prompt reporting matters here because it enables faster medical intervention and a more accurate investigation.
Training Requirements
The standard requires employers to train every at-risk worker at the time of initial assignment and then again every year. Training covers the basics of bloodborne diseases, how the exposure control plan works, what engineering and work practice controls are in place, proper use of personal protective equipment, and what to do if an exposure incident occurs.
Workers in HIV and hepatitis B research laboratories or production facilities face additional requirements. These specialized settings must post warning signs at all access doors when infectious materials or infected animals are present, and workers receive extra initial training beyond what other covered employees get.
Recordkeeping and the Sharps Injury Log
The standard requires employers to maintain a sharps injury log that captures specific details about every incident involving a contaminated sharp object. Each entry must record the type and brand of device involved (including the specific product line, not just the manufacturer’s name), the department or work area where it happened, and an explanation of how the injury occurred.
This level of detail serves a clear purpose: it allows employers and safety evaluators to identify patterns, assess whether specific devices are failing, and make informed decisions about switching to safer alternatives. The log must protect worker privacy, so no employee-identifying information can be included. In situations where determining the device type would create additional exposure risk, such as a housekeeper stuck through a trash bag, the entry can list the brand as “Unknown.”
Universal Precautions as the Guiding Principle
The entire standard rests on a concept called universal precautions: treating all human blood and certain body fluids as if they are known to be infectious. This removes guesswork from the equation. Workers don’t need to know whether a particular patient carries hepatitis B or HIV. The same protective measures apply every time, for every patient, in every situation. This principle drives the use of gloves during blood draws, face protection during procedures that might generate splashes, and proper disposal of anything contaminated with blood or infectious material.