OSHA Bloodborne Pathogens Standard for Healthcare Facilities
The OSHA Bloodborne Pathogens Standard — codified at 29 CFR 1910.1030 — sets the legal floor for how healthcare facilities protect workers from exposure to infectious materials in blood and other potentially infectious materials (OPIM). It applies to roughly 5.6 million workers across US hospitals, clinics, dental offices, laboratories, and emergency response organizations, according to OSHA's standard overview. This page breaks down what the standard requires, how compliance is structured, and where facilities tend to run into trouble.
Definition and scope
The standard targets occupational exposure — meaning reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or OPIM in the course of performing job duties. That phrase "reasonably anticipated" carries weight; it covers not just physicians drawing blood but also housekeeping staff handling contaminated linens or janitorial workers disposing of sharps.
OPIM under the standard includes semen, vaginal secretions, cerebrospinal fluid, synovial fluid, pleural fluid, peritoneal fluid, pericardial fluid, amniotic fluid, saliva in dental procedures, and any body fluid visibly contaminated with blood. Sweat, tears, feces, nasal secretions, sputum, urine, and vomit are excluded — unless visibly bloody. That distinction matters considerably for triage nurses and environmental services teams sorting through the same event.
The standard's scope extends beyond patient-facing staff. Any worker with a reasonably foreseeable exposure pathway is covered. Facilities often discover this boundary is wider than assumed when OSHA bloodborne pathogens inspectors identify laundry staff or laboratory couriers who were never included in written programs.
How it works
Compliance is built around a layered framework, not a single policy. The standard requires facilities to maintain an Exposure Control Plan — a written, site-specific document updated at least annually and whenever new tasks or procedures create additional exposure potential. The plan must identify job classifications with occupational exposure, detail the schedule of implementation for each required provision, and document procedures for evaluating exposure incidents.
The hierarchy of controls follows a defined sequence:
- Engineering controls — devices that isolate or remove the hazard at the source. Safety-engineered needles and sharps with engineered sharps injury protections (ESIPs) are the primary examples. OSHA requires that facilities solicit input from frontline non-managerial workers when evaluating and selecting these devices, a requirement routinely flagged during inspections.
- Work practice controls — behavioral modifications that reduce exposure likelihood. Prohibiting recapping of needles by two hands, requiring handwashing after glove removal, and restricting eating or drinking in work areas with exposure risk all fall here.
- Personal protective equipment (PPE) — gloves, gowns, face shields, and eye protection supplied at no cost to the employee. The standard specifies that PPE must be appropriate to the task and must be accessible in the right sizes. More detail on personal protective equipment for biohazards covers how facilities structure that selection process.
Beyond controls, the standard mandates Hepatitis B vaccination offered to all at-risk employees within 10 working days of initial assignment — at no cost and at a reasonable time and place. Employees may decline via a signed declination form; they may also later reverse that declination.
Post-exposure evaluation and follow-up is a separate mandatory element. After a documented exposure incident, the employer must provide immediate confidential medical evaluation, document the route of exposure, identify the source individual where feasible, and arrange for collection and testing of blood. The biohazard exposure incidents framework explains the documentation chain in more detail.
Training is required at initial assignment and annually thereafter — not orientation-style passive acknowledgment, but interactive sessions where workers can ask questions of a knowledgeable person.
Common scenarios
The highest-risk events in healthcare settings follow predictable patterns. Needlestick injuries account for the largest share of bloodborne pathogen exposure incidents; the CDC's Sharps Safety in Healthcare Settings resource notes that an estimated 385,000 needlestick and sharps-related injuries occur among US hospital-based healthcare workers annually.
Splash events — blood or OPIM contacting the face during a procedure — represent a second major category, particularly in surgical and obstetric settings where standard face shields are sometimes treated as optional.
Handling contaminated laundry and waste bags without proper PPE is a third scenario that generates citations. The standard requires contaminated laundry to be handled as little as possible, transported in labeled or color-coded bags, and never sorted or rinsed at the location of use. Facilities with outsourced linen services must communicate contamination status to the receiving facility. The biohazardous waste categories and sharps disposal and biohazard pages address related disposal requirements.
Decision boundaries
Not every exposure-adjacent task triggers full standard compliance. OSHA distinguishes between occupational exposure — a threshold based on reasonable anticipation across the job category — and incidental exposure, where contact is not a foreseeable component of job duties.
A key contrast: a phlebotomist drawing blood is in a covered job classification regardless of whether a specific shift involves an exposure event. A security officer who responds to a medical emergency may or may not be covered depending on whether emergency response is a defined duty in their position. Facilities cannot resolve this ambiguity by simply excluding job categories from the Exposure Control Plan; OSHA's compliance officers evaluate actual job functions, not just titles.
Volunteer workers occupy contested territory. OSHA's standard applies to employees as defined by the OSH Act; volunteers at nonprofit organizations are generally excluded unless state OSHA plans extend coverage. Twelve states and territories with state plans have extended at least partial coverage to certain volunteer responders — facility compliance officers should consult applicable state plan provisions directly through OSHA's state plan provider network.
The regulatory context for biohazard and medical facility biohazard compliance pages address how the bloodborne pathogens standard intersects with broader facility obligations under CDC guidance, EPA regulated waste rules, and state health department requirements — a web of overlapping authority that rewards careful program design.