Let me paint you a picture.
A housekeeper at your hotel picks up a used syringe from a bathroom floor with her bare hands. A dental assistant gets stuck with a contaminated needle while recapping it. A janitor at your medical clinic reaches into a trash bag and gets cut by a broken glass vial smeared with blood.
Three different industries. Three different employees. One common thread: every single one of these exposures was preventable, and every single one of them exposes your organization to OSHA citations, workers' comp claims, potential lawsuits, and — most importantly — a human being who now has to spend months wondering if they've contracted HIV, Hepatitis B, or Hepatitis C.
The Bloodborne Pathogens standard — 29 CFR 1910.1030 — exists to prevent exactly these scenarios. It's one of OSHA's most frequently cited standards because employers consistently fail to implement it properly. And the failures aren't usually dramatic. They're mundane. A missing plan. An expired vaccination record. A sharps container that's overflowing. Training that never happened.
Mundane failures with potentially catastrophic consequences.
Exposure Determination: Who's at Risk?
The foundation of your entire BBP program is the exposure determination. This is the formal identification of which job classifications in your organization involve occupational exposure to blood or other potentially infectious materials (OPIM).
There are two categories:
**Category 1:** Job classifications in which ALL employees have occupational exposure. Every person in this role is expected to encounter blood or OPIM as part of their normal duties. Think: phlebotomists, surgeons, dental hygienists, paramedics, crime scene technicians.
**Category 2:** Job classifications in which SOME employees have occupational exposure. The exposure depends on specific tasks within the role. Think: housekeeping staff who clean patient rooms (but not the administrative housekeepers who stock supply closets), maintenance workers who repair plumbing in clinical areas (but not those working in office buildings).
For Category 2, you must list the specific tasks and procedures that create exposure. Not just "housekeeping duties." The specific tasks: "Cleaning patient rooms, handling regulated waste, laundering contaminated linens."
This determination must be made without regard to the use of PPE. You don't get to say "they wear gloves, so they're not exposed." The exposure exists whether they're protected or not. The determination drives the protections, not the other way around.
And here's the part most employers miss: this applies beyond healthcare. Hospitality (housekeeping encounters blood, needles, bodily fluids). Tattoo and piercing studios. Correctional facilities. Funeral homes. Schools (nurses, custodians, coaches providing first aid). Any workplace where employees could reasonably encounter blood or OPIM.
The Written Exposure Control Plan
You must have a written Exposure Control Plan (ECP). Not a generic template you pulled off the internet. A plan specific to your workplace, your operations, your employees.
The ECP must contain three things:
- **The exposure determination** described above
- **The schedule and method of implementation** for every requirement in the BBP standard — engineering controls, work practice controls, PPE, housekeeping, hepatitis B vaccination, post-exposure evaluation, training, and recordkeeping
- **Procedures for evaluating exposure incidents**
And here's the requirement that trips up nearly every employer: the ECP must be reviewed and updated at least annually. Not just re-dated. Actually reviewed. When you add new positions, change procedures, adopt new technology, or experience an exposure incident, the plan must reflect those changes.
The ECP must also document your annual consideration of safer medical devices — specifically, needleless systems and sharps with engineered sharps injury protections. OSHA wants evidence that you're actively evaluating whether safer alternatives exist for the sharps your employees use.
The plan must be accessible to employees. Not locked in the HR director's office. Accessible. Available for review by any employee at any time.
Universal Precautions: The Non-Negotiable Mindset
Universal precautions — or standard precautions, as they're now commonly called — is the foundational principle: treat ALL human blood and OPIM as if they are infectious.
Not "treat blood from known HIV-positive patients as infectious." ALL blood. ALL the time. From every source.
This isn't paranoia. It's math. You cannot tell by looking at blood whether it contains HIV, Hepatitis B, or Hepatitis C. You cannot tell by looking at a patient whether they're infected. You cannot make assumptions based on demographics, appearance, or medical history.
Every drop of blood. Every splash of OPIM. Every time. Treat it as infectious. Period.
This principle drives every other element of the program. Engineering controls, work practices, PPE — all of it flows from the assumption that exposure to blood means exposure to bloodborne pathogens.
Engineering Controls: Eliminating the Hazard
Engineering controls are physical devices or systems that isolate or remove the bloodborne pathogen hazard from the workplace. They are the first line of defense — before work practices, before PPE.
**Sharps disposal containers:** Closable, puncture-resistant, leakproof, labeled with the biohazard symbol. They must be easily accessible, maintained upright, and replaced routinely — never allowed to overfill. An overflowing sharps container is both a citation magnet and a genuine danger.
**Needleless systems:** IV connectors, jet injection systems, and other devices that eliminate the need for needles in situations where needle alternatives exist.
**Self-sheathing needles and safety scalpels:** Devices with built-in mechanisms that shield the sharp after use. The Needlestick Safety and Prevention Act of 2000 made the adoption of these devices mandatory where feasible.
**Specimen transport containers:** Leakproof, labeled, closed containers for moving blood and OPIM.
These controls must be examined and maintained on a regular schedule. A safety needle that's jammed. A sharps container that's cracked. An IV system that's been jury-rigged to bypass the needleless connector. All failures. All preventable.
Personal Protective Equipment
When engineering and work practice controls don't fully eliminate exposure, PPE fills the gap. Your employer must provide PPE at no cost, and employees must use it when exposure is reasonably anticipated.
**Gloves:** Required whenever there's potential for hand contact with blood, OPIM, mucous membranes, or non-intact skin. Single-use gloves (latex, nitrile, vinyl) for patient care and procedures. Utility gloves for housekeeping tasks involving blood cleanup. Gloves must be replaced when contaminated, torn, or punctured.
**Gowns, lab coats, and protective clothing:** Required when exposure to the torso is anticipated. The level of protection must match the anticipated exposure — a fluid-resistant gown for procedures likely to generate splashes, a lab coat for routine tasks.
**Face protection:** Masks and eye protection (or face shields) when splashes, sprays, or spatters of blood or OPIM may be generated. Think: surgical procedures, wound irrigation, dental work, cleaning up large blood spills.
**Resuscitation devices:** Mouthpieces, pocket masks, or bag-valve masks must be available for employees who may need to perform CPR.
The employer provides it. The employer maintains it. The employer replaces it. The employer ensures it's used. No excuses.
Hepatitis B Vaccination
Every employee with occupational exposure must be offered the Hepatitis B vaccination series — at no cost — within 10 working days of initial assignment to duties with exposure.
Not within 10 days of hire. Within 10 days of initial assignment to exposed duties.
The vaccination must be:
- Offered at a reasonable time and place
- Performed by or under the supervision of a licensed healthcare professional
- Provided according to current USPHS recommendations
If an employee declines the vaccination, they must sign a specific declination statement — the exact language is prescribed in the standard. And here's the important part: if they later change their mind, you must provide the vaccination at that time.
You cannot require the vaccination as a condition of employment. You cannot penalize employees who decline. But you absolutely must offer it, document the offer, and either administer the vaccine or obtain the signed declination.
Post-Exposure Evaluation and Follow-Up
When an exposure incident occurs — a needlestick, a cut with a contaminated sharp, contact of blood with mucous membranes or non-intact skin — the employer must provide an immediate, confidential medical evaluation and follow-up.
The evaluation must include:
- **Documentation of the route and circumstances of exposure**
- **Identification and testing of the source individual** (if feasible and legally permitted)
- **Collection and testing of the exposed employee's blood** (with consent)
- **Post-exposure prophylaxis** as recommended by current USPHS guidelines
- **Counseling**
- **Evaluation of reported illnesses**
The healthcare professional conducting the evaluation must provide the employer with a written opinion stating whether the Hepatitis B vaccination is indicated and whether the employee received it. The opinion must NOT include any other findings or diagnoses — medical confidentiality applies.
You must provide this evaluation regardless of whether the employee was wearing PPE. Regardless of whether the employee followed procedures. Regardless of whether the exposure was the employee's "fault." The standard doesn't care about fault. It cares about response.
Training: Initial and Annual
Training must be provided at the time of initial assignment to tasks with occupational exposure, and at least annually thereafter. The trainer must be knowledgeable in the subject matter.
Training must cover:
- The BBP standard itself and where to access it
- The epidemiology and symptoms of bloodborne diseases
- Modes of transmission
- The employer's Exposure Control Plan and how to access it
- How to recognize tasks that involve exposure
- Use and limitations of engineering controls, work practices, and PPE
- PPE selection, use, removal, handling, and disposal
- Hepatitis B vaccination information
- Post-exposure evaluation procedures
- Signs, labels, and color-coding used to identify biohazards
The training must allow for interactive questions and answers. A video alone doesn't cut it. Employees need the opportunity to ask questions specific to their workplace, their tasks, their concerns.
And if an employee's tasks change — if they take on new duties with different exposure risks — additional training must be provided at that time. Annual training is the minimum, not the ceiling.
Recordkeeping: The Evidence Trail
Two types of records must be maintained:
**Medical records:** For each employee with occupational exposure, maintain a record that includes the employee's name, Social Security number, Hepatitis B vaccination status, and results of any post-exposure evaluations. These records are confidential and must be maintained for the duration of employment plus 30 years.
**Training records:** Must include dates, content summary, trainer qualifications, and names/job titles of attendees. Maintained for 3 years.
Additionally, you must maintain a **sharps injury log** — a record of every percutaneous injury from contaminated sharps. The log must record the type and brand of device involved, the department or work area, and a description of the incident. This log is used to evaluate the effectiveness of your engineering controls and guide your annual review of safer devices.
The Industries That Forget
Healthcare facilities generally know about the BBP standard, even if they don't always comply perfectly. But the industries that truly get blindsided are the ones that don't think of themselves as "healthcare":
**Hospitality:** Housekeepers encounter blood, needles, and bodily fluids in guest rooms. If your hotel doesn't have a BBP program, you're exposed.
**Tattoo and piercing studios:** Constant blood exposure. High-risk needle use. Often small businesses with no dedicated safety program.
**Schools:** Nurses provide first aid. Custodians clean up blood spills. Coaches treat nosebleeds and lacerations on the field.
**Correctional facilities:** Officers and medical staff face exposure daily.
If your employees can reasonably anticipate contact with blood or OPIM, you need a program. The standard doesn't ask what industry you're in. It asks whether exposure exists.
The Real Cost of Non-Compliance
An OSHA citation for BBP violations is expensive. But the real cost isn't the fine. It's the employee who gets stuck with a contaminated needle and spends six months waiting for test results. It's the worker who contracts Hepatitis C because you didn't provide a sharps container in the break room. It's the lawsuit. The workers' comp claim. The morale destruction.
Build the plan. Provide the training. Supply the equipment. Offer the vaccine. Respond to exposures.
This is not complicated work. It's essential work. And the only thing standing between your employees and a preventable, life-altering infection is whether you take it seriously enough to do it right.
