The Occupational Safety and Health Administration (OSHA) was created with the Occupational Safety and Health Act of 1970 to ensure worker and workplace safety. In addition to setting and enforcing standards, the agency provides training, outreach, education, and assistance. There are many risks associated with OSHA violations, such as potential chemical and drug exposures, fire and electrical hazards, respiratory hazards, and others. OSHA standards require that you train your employees in the safety and health aspects of their jobs to ensure that they do not get hurt.

The Bloodborne Pathogens (BBP) Standard applies specifically to all of your employees who are exposed to blood or any other potentially infectious materials. This safeguards against health hazards caused by bloodborne pathogens. One of the requirements of the standard is the development of an Exposure Control Plan. Let’s look at why this plan is so important and how to develop one for your practice.

What Is an Exposure Control Plan?

An Exposure Control Plan is a facility-specific written program that:

• Identifies which job roles are at risk of exposure

• Describes engineering and work practice controls

• Outlines personal protective equipment (PPE) requirements

• Defines post-exposure procedures

• Documents training and vaccination protocols

It is essentially your organization’s “battle plan” for preventing bloodborne pathogen exposure.

OSHA Exposure Control Plan Requirements (29 CFR 1910.1030)

Under OSHA’s Bloodborne Pathogens Standard, your plan must:

1. Be written specifically for your facility

2. Be accessible to all employees

3. Be reviewed and updated at least annually

4. Reflect changes in tasks, procedures, and technology

5. Include employee input on safer medical devices

OSHA inspectors routinely request this document during audits.

What Must an Exposure Control Plan Include?

Your OSHA Exposure Control Plan must contain:

1. Exposure Determination

A list of:

• Job classifications with occupational exposure

• Tasks and procedures involving exposure

• Employees in Category I (all exposure) and Category II (some exposure)

2. Methods of Compliance

This section explains how exposure is minimized through:

Engineering Controls

• Sharps containers

• Needleless systems

• Safer medical devices

Work Practice Controls

• Handwashing protocols

• Proper sharps handling

• Prohibited behaviors (no recapping needles)

Personal Protective Equipment (PPE)

• Gloves

• Face shields

• Gowns

• Eye protection

3. Hepatitis B Vaccination Program

• Offered at no cost to exposed employees

• Provided within 10 days of initial assignment

• Documented acceptance or declination

4. Post-Exposure Evaluation & Follow-Up

Must include:

• Immediate medical evaluation

• Documentation of exposure

• Confidential medical records

• Counseling and testing procedures

5. Communication of Hazards

• Biohazard labeling

• Signage requirements

• Regulated medical waste container labeling

6. Training Requirements

• Annual Bloodborne Pathogens training

• Documentation of training dates

• Trainer qualifications

• Employee attendance records

How Often Must Exposure Control Plans Be Updated?

OSHA requires that Exposure Control Plans be:

• Reviewed at least annually

• Updated whenever:

  • New tasks or procedures are introduced

  • New equipment or safer devices are adopted

  • Job classifications change

  • Exposure risks are modified

If there are no changes, the plan must still be reviewed and documented annually.

Failure to update annually is one of the most common OSHA violations.

Why Is an Exposure Control Plan Important?

An effective Exposure Control Plan:

• Protects employees from bloodborne diseases (HIV, Hepatitis B, Hepatitis C)

• Reduces workers’ compensation claims

• Minimizes OSHA fines

• Protects patients from secondary transmission

• Reduces operational liability

Exposure incidents are expensive — medically, legally, and reputationally.

A properly maintained plan significantly reduces those risks.

Common OSHA Violations Related to Exposure Control Plans

Medical facilities are often cited for:

• Not having a written plan

• Failing to update annually

• Not documenting employee training

• Not offering Hepatitis B vaccination

• Inadequate exposure determination documentation

These violations frequently appear during routine OSHA inspections.

Where Should the Exposure Control Plan Be Kept?

The plan must be:

• Readily accessible to all employees

• Available during OSHA inspections

• Known by staff (employees must know where it is located)

It should not be stored in a manager-only file cabinet or inaccessible digital system.

Does Every Medical Office Need an Exposure Control Plan?

Yes — if employees have reasonably anticipated exposure to blood or OPIM.

This includes:

• Doctors

• Nurses

• Medical assistants

• Dental staff

• Lab technicians

• Housekeeping staff handling regulated medical waste

Even administrative employees may fall under exposure categories depending on duties.

Need Help Maintaining Compliance?

Managing OSHA documentation, annual training, and regulated medical waste procedures can be overwhelming.

Partnering with a knowledgeable medical waste and compliance provider can help ensure your:

• Exposure Control Plan stays updated

• Staff receive proper annual training

• Medical waste handling procedures align with OSHA standards

Key Takeaways

• OSHA requires a written Exposure Control Plan under 29 CFR 1910.1030.

• It must be facility-specific and updated at least annually.

• The plan must include exposure determination, engineering controls, PPE, vaccination, training, and post-exposure procedures.

• Failure to maintain or update the plan can result in OSHA penalties.

• A strong Exposure Control Plan protects your employees, patients, and your practice.