Which Employers Does the Standard Apply To?
The standard applies wherever an employee has reasonably anticipated occupational exposure to blood or other potentially infectious materials. That is a broader test than most owners expect, and it is not limited to hospitals. Covered workplaces routinely include:
- Medical, dental, veterinary and chiropractic practices.
- Nursing homes, assisted living and home health agencies.
- Laboratories and blood collection facilities.
- Tattoo studios, piercing studios and some salon and spa services.
- Schools and childcare settings with designated first aid responders.
- Law enforcement, fire services and emergency responders.
- Custodial and facilities staff who handle waste or clean up spills.
- Any workplace with employees designated to render first aid as a collateral duty.
That final category catches a large number of ordinary businesses. If you have named someone as your first aid responder, you have created occupational exposure for that person, and the standard applies to them.
What Training Are You Required to Provide?
Training is required at the time of initial assignment to tasks with occupational exposure, before the employee begins that work, and at least annually thereafter. Annual means within twelve months of the previous session, not once per calendar year. Additional training is required whenever a change in tasks or procedures affects an employee’s exposure.
The session itself must cover, at minimum:
- The content of the standard and where the employee can obtain a copy.
- The epidemiology, symptoms and modes of transmission of bloodborne diseases.
- Your exposure control plan and how to obtain a copy.
- How to recognize tasks that may involve exposure.
- Engineering controls, work practice controls and personal protective equipment, including selection, use, removal, handling, decontamination and disposal.
- The hepatitis B vaccine: efficacy, safety, benefits and that it is provided free of charge.
- What to do in an emergency involving blood or other potentially infectious materials.
- How to report an exposure incident and what follow-up the employer will provide.
- Signs, labels and color coding.
Does Online Training Satisfy the Requirement?
Partly, and the distinction matters. The standard requires an opportunity for interactive questions and answers with the person conducting the training session. OSHA has been explicit about what that means in practice: employees need direct access to a qualified trainer during the session, and a qualified trainer must be immediately available whether or not questions are actually asked.
OSHA has also stated what does not satisfy it. Answering questions by email does not count as direct access unless the trainer is available at the time the questions arise. A referral system does not qualify unless the person taking the referral is immediately available and is a knowledgeable trainer. Where that access is missing, OSHA’s position is that it would not consider the employee to be properly trained.
What this means for your program
Online coursework is a legitimate and efficient way to deliver the required content. It is the trainer access that has to be arranged alongside it, not the delivery method that has to change.
Document how trainer access is provided. If OSHA reviews your program, the certificate on its own does not answer the question.
American Healthcare Academy’s bloodborne pathogens certification covers the full content required by 1910.1030(g)(2), cites the standard and the Needlestick Safety and Prevention Act directly, and carries 2.0 CE credits through the Postgraduate Institute for Medicine. Pair it with documented trainer access to meet the requirement in full.
What Must an Exposure Control Plan Contain?
A written exposure control plan is required, it must be reviewed and updated at least annually, and it must be accessible to employees. Reviewing it annually means documenting that you considered new or revised safer medical devices and the input of frontline employees in identifying and selecting them. A plan written once and filed is a citation waiting to happen.
The plan must include:
- A list of job classifications in which all employees have occupational exposure.
- A list of job classifications in which some employees have exposure, with the tasks identified.
- The methods of compliance you use: universal precautions, engineering controls, work practice controls and personal protective equipment.
- Your hepatitis B vaccination and post-exposure evaluation procedures.
- Procedures for evaluating the circumstances of an exposure incident.
- The schedule for implementing each element.
- Documentation of the annual consideration of safer devices and of frontline employee input.
The Hepatitis B Vaccination Obligation
This is the requirement employers most often get wrong. The hepatitis B vaccination series must be offered to every employee with occupational exposure within ten working days of initial assignment, at no cost to the employee, during working hours, and after they have received the required training.
It is a three-dose series, not a single shot and not an informal arrangement to get one eventually. An employee may decline, but if they do, they must sign the specific declination statement set out in the standard, and they retain the right to receive the vaccination later at no cost if they change their mind while still covered.
What Happens After an Exposure Incident?
An exposure incident means specific contact with blood or other potentially infectious materials through the eye, mouth, other mucous membrane, non-intact skin, or by a needlestick or other parenteral route. When one occurs you must provide a confidential medical evaluation and follow-up, at no cost, immediately.
That follow-up includes documenting the route of exposure and the circumstances, identifying and testing the source individual where permitted by law, testing the exposed employee’s blood with their consent, providing post-exposure prophylaxis where medically indicated, counseling, and evaluating any reported illness. The evaluating healthcare professional must be given a copy of the standard and the relevant exposure details, and must provide you a written opinion, which you supply to the employee within fifteen days.
Employers required to keep an OSHA 300 log must also maintain a sharps injury log recording the device involved, the department or work area, and how the incident occurred, with employee identity protected.
What Records Do You Have to Keep?
| Record | Retention period |
| Training records | 3 years from the date of training |
| Employee medical records | Duration of employment plus 30 years |
| Sharps injury log | 5 years from the end of the year it covers |
| Exposure control plan | Current version, reviewed and updated at least annually |
Training records must show the dates of each session, a summary of its contents, the names and qualifications of the trainers, and the names and job titles of everyone who attended. The trainer qualification element is one more reason to record how trainer access was provided rather than filing a certificate alone.
Certify Your Team This Week
Online coursework covers the full content required by the standard and lets staff complete it without taking a shift off the floor. Group enrollment is available for teams.
Get Compliant Before Your Next Deadline!
The bloodborne pathogens standard is not difficult to comply with, but it has several moving parts and three of them run on clocks: training before assignment, training again within twelve months, and the vaccination offer within ten working days. Put the training content in place first, since everything else is easier once staff understand why it exists. Bloodborne pathogens training covers the full required content in about an hour, and if you are also building out first aid responder coverage, first aid certification pairs with it for the staff you designate.
FAQs
Six questions, each answered in one self-contained paragraph. These target the exact-match requirement queries and the conversational phrasings that trigger AI Overview.
1. How often is bloodborne pathogens training required?
Training is required at the time of initial assignment to tasks involving occupational exposure, before the employee begins that work, and at least annually thereafter. Annual means within twelve months of the previous session rather than once per calendar year, so a session held in March sets a March deadline the following year. Additional training is required whenever a change in tasks, procedures or job assignment affects an employee’s exposure, and that retraining only needs to cover the new exposure rather than repeating the whole program. Keep training records for three years from the date of each session.
2. Does online bloodborne pathogens training meet OSHA requirements?
Online delivery of the content is acceptable, but by itself it does not satisfy the standard. OSHA requires an opportunity for interactive questions and answers with the person conducting the training, and has clarified that employees need direct access to a qualified trainer during the session, with that trainer immediately available whether or not questions are asked. Answering questions by email does not count unless the trainer is available when the questions arise, and a referral system does not qualify unless the person taking it is immediately available and knowledgeable. Document how you provide that access.
3. Which businesses need bloodborne pathogens training?
Any employer whose workers have reasonably anticipated occupational exposure to blood or other potentially infectious materials, which reaches well beyond healthcare. Covered workplaces include medical, dental and veterinary practices, nursing homes and home health agencies, laboratories, tattoo and piercing studios, schools and childcare settings, law enforcement and fire services, and custodial staff who handle waste or clean up spills. It also covers any business that has designated an employee to render first aid as a collateral duty, which catches a great many ordinary workplaces whose owners assume the standard does not apply to them.
4. What must an exposure control plan include?
A written plan listing the job classifications where all employees have occupational exposure, those where some do with the specific tasks identified, and your methods of compliance including universal precautions, engineering controls, work practice controls and personal protective equipment. It must also set out hepatitis B vaccination and post-exposure procedures, procedures for evaluating an exposure incident, and the implementation schedule. Review and update it at least annually, documenting that you considered safer medical devices and sought input from frontline employees. The plan must be accessible to employees.
5. Does an employer have to pay for the hepatitis B vaccine?
Yes. The hepatitis B vaccination series must be offered to every employee with occupational exposure within ten working days of initial assignment, at no cost to the employee, during working hours, and after they have completed the required training. It is a three-dose series rather than a single shot. An employee may decline, but must then sign the specific declination statement set out in the standard, and retains the right to receive the vaccination at no cost later if they change their mind while still in a position with occupational exposure.
6. What counts as an exposure incident?gens training required?
An exposure incident is specific contact with blood or other potentially infectious materials through the eye, mouth, another mucous membrane, non-intact skin, or by a needlestick or other parenteral route, arising from the performance of an employee’s duties. When one occurs, the employer must provide a confidential medical evaluation and follow-up at no cost, immediately. That includes documenting the route and circumstances, testing the source individual where law permits, testing the employee’s blood with consent, post-exposure prophylaxis where medically indicated, and counseling. The written opinion must reach the employee within fifteen days.



