Introduction
Bloodborne Pathogens (BBP) training is required by OSHA for any employee with reasonably anticipated occupational exposure to blood or other potentially infectious materials. This includes specimen collectors, healthcare workers, first responders, cleanup staff, and anyone whose job duties might put them in contact with blood or OPIM. This module is the annual OSHA training mandated by 29 CFR 1910.1030.
What This Module Covers
- The OSHA Bloodborne Pathogens Standard — 29 CFR 1910.1030
- The three primary pathogens: HIV, HBV, HCV
- How bloodborne pathogens are transmitted
- Your employer's Exposure Control Plan
- Universal precautions, engineering controls, work practices, PPE
- Hepatitis B vaccination — offer, availability, declination
- What to do after an exposure incident
- Post-exposure evaluation, biohazard labels, and recordkeeping
Who Needs This Training
OSHA requires BBP training for any employee with reasonably anticipated occupational exposure to blood or OPIM. Common roles:
- Specimen collectors — urine, oral fluid, hair (potential for blood-contaminated specimens)
- Healthcare workers — nurses, MAs, phlebotomists, lab techs
- First aid responders — designated workplace responders
- Cleanup and housekeeping staff — exposure to body fluids in cleanup duties
- Tattoo / body piercing workers
- Law enforcement, corrections, fire/EMS
When Training Is Required
Before Exposure Starts
At the time of initial assignment, BEFORE performing tasks with potential exposure.
Every Year After That
Annual refresher required. Not one-and-done.
When Duties Change
Additional training when new tasks, equipment, procedures, or exposure risks are introduced.
Employer Obligations Around Training
- Provided at no cost to the employee
- Provided during working hours
- Participation must be ensured by the employer
- Trainer must be knowledgeable in the subject matter
- Opportunity for employees to ask questions
Regulatory Context — OSHA 29 CFR 1910.1030
OSHA's Bloodborne Pathogens Standard — 29 CFR 1910.1030 — has been in force since 1991. It applies to every employer whose employees have reasonably anticipated occupational exposure. Training is required before exposure starts, annually thereafter, and any time job duties or procedures introduce new exposure risks.
The OSHA Standard
- Citation: 29 CFR 1910.1030 — Bloodborne Pathogens
- Published: 1991; major revision via Needlestick Safety and Prevention Act (2000)
- Authority: Occupational Safety and Health Administration (DOL)
- Purpose: protect employees with reasonably anticipated occupational exposure
Core Elements of the Standard
- 1Exposure Control Plan — written, accessible, reviewed annually
- 2Engineering & work practice controls
- 3Personal Protective Equipment at employer expense
- 4Hepatitis B vaccination offered at no cost
- 5Hazard communication — labels, signs
- 6Training — initial + annual + change-based
- 7Recordkeeping — training records + medical records
Key Definitions
- Bloodborne pathogens — microorganisms in human blood that can cause disease (HIV, HBV, HCV, others)
- OPIM (Other Potentially Infectious Materials) — semen, vaginal secretions, CSF, synovial fluid, pleural / peritoneal / pericardial / amniotic fluid, saliva in dental procedures, any body fluid visibly contaminated with blood, unfixed human tissue
- Occupational exposure — reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood / OPIM during performance of duties
- Exposure incident — a specific eye, mouth, mucous membrane, non-intact skin, or parenteral contact with blood / OPIM
- Parenteral — piercing of mucous membranes or skin barrier (needlesticks, cuts, abrasions)
- Regulated waste — liquid / semi-liquid blood or OPIM, contaminated items that would release these if compressed, items caked with dried blood, sharps, pathological / microbiological wastes
Urine & the BBP Standard
Urine is not automatically OPIM under the OSHA standard — UNLESS it is visibly contaminated with blood. For DOT urine collectors, the practical reality is:
- Most urine specimens are not OPIM
- But you can't always tell at a glance
- So treat every specimen with universal precautions anyway
- If a specimen contains visible blood, it IS OPIM and the BBP standard applies
The Pathogens — HIV, HBV, HCV
Three pathogens drive the standard: HIV (Human Immunodeficiency Virus), HBV (Hepatitis B Virus), and HCV (Hepatitis C Virus). Others — syphilis, malaria, West Nile — can also be transmitted by bloodborne routes. Each has different survival characteristics, infection rates, and clinical consequences.
The "Big Three"
| Pathogen | Disease | Vaccine? | Curable? |
|---|---|---|---|
| HIV | HIV / AIDS | No | Treatable, not curable |
| HBV | Hepatitis B | Yes (3-dose series) | Often clears; chronic cases treatable |
| HCV | Hepatitis C | No | Curable with modern antivirals |
HIV (Human Immunodeficiency Virus)
- Attacks the immune system (CD4 T cells)
- Untreated → AIDS over years
- Modern antiretroviral therapy → near-normal lifespan when adherent
- Survives poorly outside the body (minutes to hours on surfaces)
- Needlestick transmission risk: ~0.3% from known HIV-positive source
HBV (Hepatitis B Virus)
- Attacks the liver; can cause acute or chronic infection
- Highly contagious — survives in dried blood for ≥ 7 days on surfaces
- Needlestick transmission risk: 6–30% from infected source (varies by viral load)
- Effective vaccine since 1981 — 3-dose series with ~95% effectiveness
- Most occupationally acquired HBV is preventable through vaccination
HCV (Hepatitis C Virus)
- Attacks the liver; chronic infection in ~50% of cases
- Long-term → cirrhosis, liver cancer (if untreated)
- Modern direct-acting antivirals (DAAs) → 95%+ cure rate
- No vaccine
- Needlestick transmission risk: ~1.8% from infected source
Other Bloodborne Pathogens
The standard covers ALL bloodborne pathogens — not just the big three:
- Syphilis (rare via occupational exposure but possible)
- Malaria (in endemic areas)
- Brucellosis, leptospirosis, viral hemorrhagic fevers
- Hepatitis D (only co-infects with HBV)
- West Nile virus, Zika, others rarely
How Transmission Happens
Bloodborne pathogens spread when infected blood or OPIM enters the bloodstream of an uninfected person. The four main routes — needlestick / sharps injury, mucous membrane contact, broken-skin contact, and human bites — all involve direct exposure. Knowing the routes tells you what to defend against.
The Four Main Routes
Percutaneous / Parenteral
Needlestick, cut from a contaminated sharp, puncture wound. Highest-risk route for HBV and HCV. Most occupational transmissions happen here.
Mucous Membrane Contact
Splash into eyes, nose, or mouth. Can transmit all three primary pathogens.
Non-Intact Skin Contact
Open wound, dermatitis, abrasion, cracked / chapped skin. Lower risk than mucous membrane but real.
Human Bites
Less common but possible. Bite-recipient exposed to saliva + blood; biter exposed to recipient's blood if skin breaks.
NOT Transmission Routes
- Casual contact (handshakes, hugs)
- Sharing dishes or utensils
- Toilets / bathrooms (when used normally)
- Air / coughing / sneezing
- Mosquitos or other insects (for HIV, HBV, HCV)
Bloodborne pathogens require infected blood / OPIM to enter the bloodstream of an uninfected person. Casual contact does not provide that entry route.
Risk by Route (Sharps Injury, Known Positive Source)
| Pathogen | Transmission Risk |
|---|---|
| HBV (no vaccine) | ~6–30% |
| HCV | ~1.8% |
| HIV | ~0.3% |
The Exposure Control Plan
OSHA requires every covered employer to have a written Exposure Control Plan (ECP). The ECP is the document that says: here are the tasks with exposure risk, here's how we control them, here's what we do when something goes wrong. Without an ECP, you're out of compliance even if everything else is correct.
What the ECP Is
A written document that describes how your employer protects employees from bloodborne pathogen exposure. OSHA requires every covered employer to have one — accessible to employees, updated at least annually, and updated when tasks or procedures change.
Required ECP Contents
- 1Exposure determination — list of job classifications + tasks with occupational exposure
- 2Schedule and methods for implementing engineering and work practice controls, PPE, HBV vaccination, and post-exposure response
- 3Procedure for evaluating exposure incidents
- 4Annual review + update when new tasks / procedures / engineering controls are introduced
- 5Input from non-managerial employees on selecting effective engineering and work practice controls (per the 2000 Needlestick Safety and Prevention Act)
Accessibility
The ECP must be accessible to employees on request. It can be paper or electronic. Most workplaces post it in a break room or shared drive — employees should know where to find it.
Annual Review
- ECP reviewed at least annually
- Updates triggered by new tasks, procedures, equipment, or job classifications
- Annual review must reflect changes in technology that reduce / eliminate exposure (e.g., newer safer sharps devices)
- Annual review must document consideration / use of safer medical devices
Universal & Standard Precautions
Universal Precautions (used in the OSHA standard) and the related Standard Precautions (CDC) share one principle: treat all blood and body fluids as if they're infectious. You don't pick and choose based on who looks "safe." This single mindset prevents most exposure incidents.
The Principle
Treat all human blood and OPIM as if known to be infectious for HIV, HBV, HCV, and other bloodborne pathogens. Don't try to assess who looks "safe" — the visual judgment is unreliable and a lot of carriers don't know themselves.
Universal vs Standard Precautions
| Term | Source | Scope |
|---|---|---|
| Universal Precautions | OSHA standard, CDC 1985 | Blood + OPIM only |
| Standard Precautions | CDC 1996 expansion | All body fluids, non-intact skin, mucous membranes — except sweat |
OSHA accepts Standard Precautions as an acceptable alternative — but the underlying principle is the same: assume infectious unless proven otherwise.
What Universal Precautions Looks Like in Practice
- 1Gloves on for every blood / OPIM contact
- 2Eye protection when splash is foreseeable
- 3Sharps disposed in approved sharps containers — never re-capped
- 4Hands washed after every glove removal, even if you don't think contamination occurred
- 5Spills cleaned immediately with EPA-registered disinfectant
- 6Specimens handled as if infectious
- 7Surfaces cleaned and disinfected between donors
Why It Matters
Most occupational HIV/HBV/HCV cases involve a source whose status the worker did NOT know in advance. Many sources don't know their own status. Universal precautions eliminate the "I didn't think they had anything" failure mode.
Engineering & Work Practice Controls
Engineering controls (sharps containers, self-sheathing needles, splash guards) and work practice controls (handwashing, no recapping, proper disposal) are the second layer of defense. Both are required by the standard — and engineering controls take priority over PPE because they isolate the hazard rather than just containing it.
The Hierarchy of Controls
OSHA prefers — in order — controls that ELIMINATE the hazard, ISOLATE workers from the hazard, then PROTECT workers with PPE. Engineering and work practice controls come BEFORE PPE.
- 1Engineering controls — isolate or remove the hazard (sharps containers, safer needles, splash guards)
- 2Work practice controls — change how tasks are performed (no recapping, hands washing, proper disposal)
- 3PPE — barrier between worker and hazard (gloves, eye protection)
Engineering Controls — Common Examples
- Sharps containers — puncture-resistant, leakproof, labeled, located close to use
- Self-sheathing needles, retractable lancets, blunt suture needles
- Needleless IV systems
- Splash guards in countertop labs
- Sealable biohazard transport bags
- Centrifuges with covered rotors
Work Practice Controls
- 1Handwashing — after glove removal, after any contact, before leaving work area. Soap + water. Alcohol-based sanitizer is supplementary, not a substitute.
- 2No recapping needles — except by one-handed technique or mechanical device when no alternative is feasible
- 3No eating, drinking, smoking, applying cosmetics, handling contact lenses in work areas with potential exposure
- 4No mouth pipetting / suctioning of blood or OPIM
- 5Storage of food / drink separate from refrigerators / counters where blood or OPIM is present
- 6Specimen handling — containers labeled or color-coded, leakproof, closed during transport
- 7Spill response — clean immediately with EPA-registered tuberculocidal disinfectant; absorb liquids before wiping
- 8Equipment decontamination — clean and decontaminate before service or shipping
Regulated Waste Handling
- Liquid / semi-liquid blood or OPIM → closable, leakproof, labeled / color-coded container
- Items caked with dried blood/OPIM that could release if compressed → same
- Contaminated sharps → puncture-resistant, leakproof on sides + bottom, biohazard-labeled
- Pathological / microbiological waste → same labeling
Personal Protective Equipment (PPE)
Personal Protective Equipment is the last line of defense — the barrier between you and the hazard when engineering and work practice controls aren't enough. Gloves, eye protection, masks, and gowns. Employer must provide them at no cost.
PPE — The Last Line of Defense
When engineering controls and work practices don't eliminate exposure, PPE is the barrier. The employer must provide it at no cost, in appropriate sizes, accessible at the worksite.
Types of PPE
- Gloves — required when contact with blood / OPIM / mucous membranes / non-intact skin is reasonably anticipated. Hypoallergenic alternatives provided to employees with allergies.
- Eye protection / face shields — when splashes, sprays, splatters, or droplets are anticipated
- Masks — when splashes / sprays to mouth / nose are anticipated
- Gowns / aprons / lab coats — when contact with body is anticipated
- Shoe covers / boots — when feet may be exposed
PPE Rules
- Employer provides at no cost
- Appropriate sizes available
- Replaced when contaminated, torn, punctured, or otherwise no longer effective
- Removed before leaving work area
- Contaminated PPE placed in designated containers for laundering / disposal
- Employer pays for laundering — not the employee
PPE for Specimen Collectors
For DOT and non-DOT urine collectors:
- Gloves are baseline — every collection, every donor
- Eye protection / face shield if the donor's history suggests blood-contaminated specimens or splash is foreseeable
- Hand hygiene before and after every donor
- Surface disinfection between donors
Glove Removal Technique
Pinch the outside
Pinch one glove at the wrist (outside) — don't touch your skin.
Peel inside-out
Pull the glove off, turning it inside-out as it comes off. Hold it in your other (still gloved) hand.
Slide fingers under
Slide your bare fingers under the cuff of the remaining glove — touching only the inside.
Peel and contain
Peel the second glove off inside-out, enclosing the first glove inside it.
Dispose + wash
Dispose in biohazard / regulated-waste container. Wash hands.
Hepatitis B Vaccination
The Hepatitis B vaccine is one of the most successful occupational protections ever developed. OSHA requires employers to offer it at no cost within 10 working days of initial assignment to any employee with reasonably anticipated exposure. The employee can decline, but the decision is documented.
The Offer
OSHA requires employers to offer the HBV vaccine at no cost, within 10 working days of initial assignment, to every employee with reasonably anticipated occupational exposure.
The Vaccine
- 3-dose series over 6 months (0 / 1 month / 6 months — exact intervals vary)
- ~95% effective in healthy adults
- Post-vaccination titer recommended in occupational settings (confirms response)
- Booster generally not recommended for healthy immunocompetent adults after a confirmed response
- Newer 2-dose Heplisav-B (separate product) is an alternative for healthy adults
Declination
An employee can decline. The standard requires a signed declination statement in OSHA-specified language. The employee can change their mind later and the employer must offer the vaccine at that point at no cost.
Timing & Pre-Exposure
- Offer within 10 working days of initial assignment
- Vaccine series given BEFORE exposure ideally — but exposure-naive employees can still start at any time
- Already-vaccinated employees (documented) don't need to repeat the series
- Employees who started but didn't complete elsewhere can pick up where they left off
Post-Exposure HBV Prophylaxis
If you're exposed and unvaccinated (or non-responder), the post-exposure protocol may include:
- Hepatitis B immune globulin (HBIG) injection
- First dose of HBV vaccine
- Best within 24 hours of exposure; up to 7 days
Exposure Incidents — Immediate Response
An exposure incident means a specific contact of eye, mouth, mucous membrane, non-intact skin, or parenteral contact with blood / OPIM. The first minutes matter most. Clean, report, and start the post-exposure protocol.
What Counts as an Exposure Incident
A specific contact during job performance of:
- ! Eye, mouth, or other mucous membrane
- ! Non-intact skin (wound, dermatitis, abrasion)
- ! Parenteral contact (needlestick, sharps injury, bite)
...with blood or OPIM.
⏱️ Immediate Response — The First 5 Minutes
Wash / Flush Immediately
Skin / needlestick: wash with soap + water. Eye: flush with water or saline for at least 15 minutes. Mouth / nose: rinse with water repeatedly. Don't scrub or use harsh agents.
Don't Try to "Bleed Out" the Wound
The old myth — squeezing the wound to expel virus — has no evidence and can worsen tissue damage.
Report to Your Supervisor / DER
Immediately. Get the source's identity if possible and known.
Document the Incident
Date, time, route, source identity (if known), circumstances, PPE in use, immediate actions taken.
Seek Medical Evaluation
Within hours, not days. Time-sensitive for HIV PEP (started within 72 hours, ideally within 2 hours) and HBV PEP.
What to Document
- Date and time of incident
- Route of exposure (eye / mouth / non-intact skin / parenteral)
- Type of fluid (blood / OPIM / specimen with blood / etc.)
- Source identity if known and consents to testing
- PPE in use at the time
- Activity being performed
- Engineering / work practice controls in place
- Immediate actions taken
Sharps Injury Log (Healthcare Employers)
Healthcare employers with >10 employees must maintain a Sharps Injury Log separate from the OSHA 300 — recording each sharps injury, the device involved, the department / work area, and an explanation of how the incident occurred. Confidential to the employee.
Post-Exposure Evaluation & Follow-Up
After an exposure, the employer must offer a free, confidential medical evaluation and follow-up. The healthcare professional may recommend testing, post-exposure prophylaxis (PEP), vaccination, and counseling. The employee gets a written opinion.
Employer Obligation
OSHA requires the employer to make available a free, confidential medical evaluation and follow-up to any employee who experiences an exposure incident.
What the Evaluation Includes
- 1Documentation of route + circumstances of exposure
- 2Source individual identification + (with consent) HBV/HCV/HIV testing of source blood
- 3Exposed employee blood collection for baseline testing (with consent)
- 4Post-exposure prophylaxis (PEP) when medically indicated:
- HIV PEP: 28-day antiretroviral course, started within hours, ideally within 2, no later than 72
- HBV: HBIG + vaccine series if unvaccinated
- HCV: no PEP available — monitoring only
- 5Counseling — risk discussion, safer practices, mental health support
- 6Evaluation of reported illnesses in the months following exposure
Follow-Up Testing Schedule
| Test | Timing |
|---|---|
| Baseline (HIV, HBV, HCV) | At exposure |
| HIV | 6 weeks, 12 weeks, 6 months |
| HCV | 3–6 weeks (RNA) and 4–6 months (antibody) |
| HBV | If exposed + not immune — 1–2 months post-PEP |
The Healthcare Professional's Written Opinion
The healthcare professional must provide the employer with a written opinion limited to:
- Whether HBV vaccination was indicated and whether it was received
- Whether the employee was told about test results and any medical conditions resulting from exposure
- Nothing else — specific findings and diagnoses are confidential to the employee
Confidentiality
Medical records related to exposure are confidential. Not part of the personnel file. Not shared with supervisors. Kept by the employer for the duration of employment + 30 years.
Labels, Signs, Recordkeeping & Compliance
Biohazard labels, regulated waste handling, and recordkeeping are the closing pieces of compliance. Training records, exposure incident records, medical records — each has a specific retention period under the standard.
The Biohazard Symbol
The orange or orange-red biohazard symbol on a contrasting background is the universal warning. Required on:
- Regulated waste containers
- Sharps containers
- Refrigerators / freezers containing blood or OPIM
- Specimen containers (with some exceptions for universal-precautions facilities)
- Equipment that may contain blood / OPIM
- Bags for contaminated laundry
Training Records
The employer must maintain a record for each training session that includes:
- Dates of training session(s)
- Summary of training content / outline
- Name and qualifications of person conducting training
- Names and job titles of attending employees
- Certificate of completion (if issued — common practice)
Retention: 3 years from the date of training. Provided to OSHA on request.
Medical Records
Separate from training records. Kept confidentially and include:
- Name + SSN of employee
- Copy of HBV vaccination status (including dates) and any declination
- Results of exam / testing / follow-up after exposure incidents
- Healthcare professional's written opinion
- Description of incident exposure
Retention: Duration of employment plus 30 years.
Compliance Checklist for Employers
- 1Written Exposure Control Plan — accessible, annually reviewed
- 2Engineering and work practice controls in place
- 3PPE provided at no cost, in appropriate sizes
- 4HBV vaccination offered within 10 working days, declination signed when applicable
- 5Initial + annual + change-based training delivered
- 6Training records retained 3 years
- 7Medical records retained employment + 30 years
- 8Post-exposure procedures documented
- 9Biohazard labels / signs in place
- 10Sharps Injury Log (if healthcare and >10 employees)
Your Certificate of Completion satisfies the OSHA-required annual training under 29 CFR 1910.1030. Remember — OSHA requires this every year. Set a reminder to retake the module in 12 months.