August 27, 2026 Steven Eaton

OSHA Bloodborne Pathogens Standard: 1910.1030 Explained (2026 Guide)

Q: Who does the OSHA bloodborne pathogens standard apply to?

Any employee with reasonably anticipated skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials as part of their duties — that is the definition of occupational exposure in 1910.1030(b). It reaches well beyond healthcare: designated workplace first aid responders, tattoo and piercing studios, custodial staff who handle regulated waste, laundry workers, corrections officers, funeral services and emergency responders are all commonly covered.

Q: How long does an employer have to offer the hepatitis B vaccine?

Within 10 working days of initial assignment, and after the employee has received the required training. The exceptions are narrow: the employee has already completed the series, antibody testing shows immunity, or the vaccine is contraindicated for medical reasons.

What does the OSHA bloodborne pathogens standard actually require?

Short answer: 29 CFR 1910.1030 requires a written exposure control plan, an exposure determination by job classification, engineering and work practice controls ahead of PPE, employer-paid PPE and laundering, the hepatitis B vaccine offered within 10 working days of assignment, confidential post-exposure follow-up, annual training, and two sets of records kept for very different lengths of time. It applies to anyone with reasonably anticipated contact with blood on the job — not only to healthcare.

The bloodborne pathogens standard is the most programme-heavy rule in OSHA’s PPE-adjacent set, and it is the one employers outside healthcare most often assume does not reach them. It does. The trigger in 1910.1030(b) is occupational exposure: reasonably anticipated skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials arising from the performance of an employee’s duties. Assign someone to render first aid and you have created occupational exposure, whatever industry you are in.

Why this matters.
This standard creates eight separate written or documented duties, and OSHA cites the paperwork as readily as the practice — a missing annual review of an exposure control plan is as citable as a missing sharps container. Since the 2001 amendment implementing the Needlestick Safety and Prevention Act, the plan must also document that safer medical devices were considered each year, with input from the people who actually do the work. For violations assessed after 15 January 2026, OSHA’s maximum is $16,550 per serious violation and $165,514 per wilful or repeated violation.

The eight duties, in the order the standard imposes them

Read down this table and you have the compliance spine of 1910.1030. Each row names the paragraph that creates the duty, because that is the level a citation is written at.

#	Duty	Paragraph	What it actually means
1	Written exposure control plan	`1910.1030(c)(1)`	Reviewed and updated at least annually and whenever tasks change. Must document annual consideration of safer medical devices and record input solicited from exposed non-managerial employees.
2	Exposure determination	`1910.1030(c)(2)`	A list of job classifications where all employees have occupational exposure, a list where some do, and the tasks involved. Written without regard to whether PPE is used.
3	Engineering and work practice controls	`1910.1030(d)(2)`	Controls first, PPE only for the exposure that remains. Sharps containers, self-sheathing needles and needleless systems are named. Controls must be examined and maintained on a regular schedule.
4	Personal protective equipment	`1910.1030(d)(3)`	Provided, cleaned, laundered, disposed of, repaired and replaced at no cost. Must not permit blood or OPIM to reach skin, clothing, eyes or mouth under normal conditions of use.
5	Hepatitis B vaccination	`1910.1030(f)(1)–(2)`	Offered within 10 working days of initial assignment, after training, at no cost. Declination uses the mandatory Appendix A form. An employee who declines may accept later at any time.
6	Post-exposure evaluation and follow-up	`1910.1030(f)(3)`	Immediately available, confidential, at no cost. Documents route and circumstances, identifies and tests the source individual where lawful and feasible, offers testing, prophylaxis and counselling.
7	Hazard communication and training	`1910.1030(g)`	Fluorescent orange or orange-red biohazard labels; training at initial assignment and within one year of previous training, at no cost, during working hours, at the employees’ literacy level.
8	Recordkeeping	`1910.1030(h)`	Medical records for duration of employment plus 30 years; training records for 3 years; a sharps injury log for employers who keep OSHA 300 logs.

Who is covered — and the industries that keep being surprised

Occupational exposure is about reasonably anticipated contact, not job title. The standard covers the obvious healthcare roles, and then a long tail that rarely thinks of itself as regulated:

Designated workplace first aid and emergency responders in any industry
Tattoo artists, body piercers and permanent-makeup technicians
Custodial and janitorial staff who handle regulated waste or clean up body fluids
Laundry workers handling contaminated linen
Corrections and law enforcement officers, and security staff who respond to incidents
Funeral service, mortuary and crematory staff
Plumbers and technicians working on sewage or medical waste systems
School nurses, athletic trainers and childcare staff with assigned first aid duties

The line that decides coverage. Good Samaritan acts — an employee who assists a colleague on their own initiative, with no assigned duty to do so — are not occupational exposure. The moment an employer designates someone as a responder, or lists first aid in a job description, that changes.

Blood, OPIM, and the fluids people get wrong

"Other potentially infectious materials" is a defined term, not a judgement call. Getting it wrong in either direction is expensive: too narrow and you have an uncontrolled exposure, too broad and you are paying regulated-waste disposal rates for ordinary refuse.

Material	Covered?	Note
Human blood, blood components and products made from human blood	Yes — blood	Always covered.
Semen and vaginal secretions	Yes — OPIM	Named explicitly in the definition.
Cerebrospinal, synovial, pleural, pericardial, peritoneal and amniotic fluid	Yes — OPIM	Named explicitly. These are the fluids most often missed in training.
Saliva in dental procedures	Yes — OPIM	Only in dental procedures. Saliva elsewhere is not OPIM unless visibly contaminated with blood.
Any body fluid visibly contaminated with blood	Yes — OPIM	Visible contamination is the test.
Any body fluid where it is impossible to differentiate	Yes — OPIM	The catch-all. In an emergency response you will normally be here.
Unfixed human tissue or organ (other than intact skin)	Yes — OPIM	From a living or dead human.
HIV- or HBV-containing cell, tissue or organ cultures	Yes — OPIM	Also culture medium and blood from experimental animals infected with HIV or HBV.
Urine, faeces, vomit, sweat, tears, nasal secretions — no visible blood	No	Not OPIM under 1910.1030. Other standards and infection-control practice may still apply.

The vaccine clock, step by step

The hepatitis B sequence has an order, and doing it out of order is itself a violation — the vaccine must be offered after training, not before.

Employee is assigned to a task with occupational exposure.
Employee receives the bloodborne pathogens training required by 1910.1030(g)(2)(vii)(I).
Within 10 working days of that initial assignment, the employer makes the hepatitis B vaccination series available at no cost, at a reasonable time and place.
If the employee declines, they sign the Appendix A declination form — a mandatory appendix, reproduced verbatim.
A declining employee who later changes their mind must be offered the vaccine at that point, still at no cost, for as long as they remain covered.
Post-vaccination antibody testing is provided where recommended by the U.S. Public Health Service at the time the evaluation takes place.

Two record types, two retention periods

This is the detail most programmes get wrong, because the numbers are not close to each other.

Record	Retention	Authority
Employee medical records — vaccination status, post-exposure evaluations, healthcare professional’s written opinion	Duration of employment plus 30 years	1910.1030(h)(1)(iv), via 1910.1020
Training records — dates, contents or summary, trainer names and qualifications, attendee names and job titles	3 years from the date of training	1910.1030(h)(2)
Sharps injury log — device type and brand, work area, how the incident occurred	As required by 29 CFR 1904.33 (5 years for the OSHA 300 record set)	1910.1030(h)(5)

How this sits against the rest of the OSHA set

1910.1030 is a general industry standard, so it does not reach construction work of its own force. That does not mean construction sites have no bloodborne duty — 1926.50 requires first aid provision, and OSHA has used the General Duty Clause where a site responder was exposed without protection. The safest reading is that the hazard is real wherever you assign someone to respond, and the citation route is a detail. The full mapping of which rulebook governs which workplace is set out in the OSHA standards index.

The standard also overlaps three others worth reading alongside it: OSHA first aid kit requirements for what has to be in reach, What Is OSHA 29 CFR 1910.132? General PPE Requirements Explained for the parent PPE duty, and OSHA HazCom program requirements for the disinfectants used in cleanup, which are themselves hazardous chemicals.

Frequently asked questions

Who does the OSHA bloodborne pathogens standard apply to?

Any employee with reasonably anticipated skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials as part of their duties — that is the definition of occupational exposure in 1910.1030(b). It reaches well beyond healthcare: designated workplace first aid responders, tattoo and piercing studios, custodial staff who handle regulated waste, laundry workers, corrections officers, funeral services and emergency responders are all commonly covered.

What is an exposure control plan and how often must it be updated?

A written plan designed to eliminate or minimise employee exposure, required by 1910.1030(c)(1). It must be reviewed and updated at least annually, and also whenever new or modified tasks affect exposure. The annual update has to document consideration and implementation of safer medical devices, and the employer must solicit input from non-managerial employees who actually perform the exposed work — and document that they did.

Does OSHA require employers to pay for the hepatitis B vaccine?

Yes. The vaccine and vaccination series must be offered at no cost to the employee, at a reasonable time and place, under 1910.1030(f)(1). An employee who declines signs the declination form in Appendix A — which is a mandatory appendix, unlike most OSHA appendices — and may change their mind and receive the vaccine later at any time while still covered.

How long does an employer have to offer the hepatitis B vaccine?

Within 10 working days of initial assignment, and after the employee has received the required training. The exceptions are narrow: the employee has already completed the series, antibody testing shows immunity, or the vaccine is contraindicated for medical reasons.

What are universal precautions?

An approach to infection control under which all human blood and certain human body fluids are handled as if known to be infectious for HIV, HBV and other bloodborne pathogens. The standard defines it in 1910.1030(b) and requires it in (d)(1) — you do not get to decide a particular patient or sample is low risk and relax the controls.

What counts as other potentially infectious materials (OPIM)?

Semen, vaginal secretions, cerebrospinal, synovial, pleural, pericardial, peritoneal and amniotic fluid, saliva in dental procedures, any body fluid visibly contaminated with blood, and any body fluid where it is impossible to differentiate. It also covers unfixed human tissue or organs and HIV- or HBV-containing cultures. Ordinary saliva outside a dental procedure is not OPIM.

Does the bloodborne pathogens standard apply to construction?

1910.1030 sits in Part 1910, so it does not apply to construction work of its own force. OSHA has nonetheless cited construction employers for bloodborne hazards under the General Duty Clause and through 1926.50, which requires first aid provision on construction sites. If you designate a site first aid responder, the exposure is real regardless of which part the citation comes under — see the OSHA standards index for how the two rulebooks divide.

Is a workplace first aid responder covered by 1910.1030?

Yes, if rendering first aid is part of their assigned duties — a designated responder on a workplace first aid kit programme has occupational exposure. OSHA does allow a limited exemption for those whose sole exposure is collateral first aid at a non-healthcare workplace: the hepatitis B vaccine may be offered after an exposure incident rather than in advance, but only where the employer meets the conditions in OSHA's interpretation, including having a full reporting procedure in place.

What must a sharps injury log contain?

Three things at minimum, under 1910.1030(h)(5): the type and brand of device involved, the department or work area where the incident occurred, and an explanation of how it occurred. It must be maintained so the injured employee's confidentiality is protected. Only employers required to keep OSHA 300 logs under 29 CFR part 1904 must keep a sharps log.

How long must bloodborne pathogens records be kept?

Medical records for the duration of employment plus 30 years, under 1910.1030(h)(1)(iv) and 1910.1020. Training records for 3 years from the date of the training. The two retention periods are different and are among the most commonly missed details in the standard.

How often is bloodborne pathogens training required?

At initial assignment to tasks where occupational exposure may occur, and at least annually thereafter — specifically within one year of the previous training, not merely once each calendar year. Additional training is required when tasks or procedures change. Training must be at no cost, during working hours, and pitched to the education level, literacy and language of the employees receiving it.

What PPE does the bloodborne pathogens standard require?

Whatever prevents blood or OPIM from passing through to skin, clothing, eyes or mouth under normal conditions of use — the standard names gloves, gowns, laboratory coats, face shields or masks, eye protection, and resuscitation devices such as pocket masks. It sets a performance test rather than a product list. Hypoallergenic alternatives must be readily accessible to employees allergic to the gloves normally provided.

Does the employer have to pay for and launder PPE?

Yes on both counts, and this goes further than the general PPE rule in 1910.132(h). Under 1910.1030(d)(3), PPE is provided at no cost, and the employer must also clean, launder, dispose of, repair and replace it at no cost. Employees may not take contaminated PPE home to wash.

What is an engineered sharps injury protection?

A physical attribute built into a device that effectively reduces the risk of an exposure incident — a self-sheathing needle, a retracting lancet, a blunted suture needle. Needleless systems achieve the same end without a needle at all. Since the 2001 revision implementing the Needlestick Safety and Prevention Act, the annual exposure control plan review must document that these devices were considered and, where appropriate and available, implemented.

What colour must a biohazard label be?

Fluorescent orange or orange-red, or predominantly so, with lettering and symbols in a contrasting colour, carrying the biohazard legend — 1910.1030(g)(1). Red bags or red containers may be substituted for labels. Signs at the entrance to HIV and HBV research laboratory work areas follow the same colour rule.

What has to happen after an exposure incident?

A confidential medical evaluation and follow-up, made immediately available at no cost. It has to document the route of exposure and the circumstances, identify and document the source individual unless that is infeasible or prohibited by law, test the source individual's blood as soon as feasible where consent is obtained or not required, and offer the exposed employee blood collection and testing, post-exposure prophylaxis as medically indicated, and counselling.

Is regulated waste the same as anything contaminated with blood?

No, and the distinction decides your disposal cost. Regulated waste is liquid or semi-liquid blood or OPIM; items that would release those in a liquid or semi-liquid state if compressed; items caked with dried blood or OPIM capable of releasing them during handling; contaminated sharps; and pathological or microbiological wastes. A lightly stained bandage generally is not regulated waste.

Do I need a bloodborne pathogens program if I just keep a first aid kit?

Keeping a kit does not by itself create occupational exposure — the trigger is assigning someone to render first aid. If a named employee is expected to respond, the standard applies to them. If your kit exists purely for self-treatment of minor injuries, it does not. Sizing that programme is covered in workplace first aid needs assessment.