HomePoliciesWorkplaceBloodborne Pathogens Exposure Control Plan

Policy  required document  Workplace

Bloodborne Pathogens Exposure Control Plan

The Exposure Control Plan is the written program OSHA requires from any employer whose workers can reasonably expect contact with blood or other potentially infectious materials.

It lists the job classifications and tasks with exposure, states how the employer will follow the standard's methods of compliance (universal precautions, engineering and work practice controls, PPE, housekeeping), lays out hepatitis B vaccination and post-exposure follow-up, and describes the sharps injury log and how sharps devices are evaluated.

It is one of the few OSHA written programs with an explicit annual review requirement, and the only one that requires documented input from front-line staff on device selection. Home health, hospice, dental, behavioral health with medical staff, tattoo studios, and any workplace with designated first aid responders are in scope.

Accreditors survey against it and OSHA cites it heavily in health care.

Also called: ECP, BBP plan, Exposure control plan, Bloodborne pathogens program
AI-compiled
Share
Sponsored
Policy  Acknowledgment  Proof
AcknowledgedECP 2026by name, on record
1910.1030 Handledwith AllyMatter
Glove Up the Modern WayYour exposure control plan, acknowledged by every exposed employee
01
Approve it, lock the version
Non-author approval, obsolete copies blocked
02
Every exposed employee on record
Re-collected at the annual review
03
Show the inspector who read what
From $29/mo, 20 editors, unlimited staff (published)

Obligation ledger

Who requires it, and what each one says.

SourceApplies whenWhat it requiresStatus
OSHA Bloodborne pathogens, exposure control plan
29 CFR 1910.1030(c)(1)
Any employee has occupational exposureA written plan with the exposure determination, schedule and method of implementing each compliance paragraph, and the procedure for evaluating exposure incidents; accessible to employees. Legally required.Mandatory
OSHA Bloodborne pathogens, annual review and device input
29 CFR 1910.1030(c)(1)(iv) and (v)
AlwaysReview and update at least annually and whenever tasks or positions change; document annual consideration of safer medical devices; solicit and document input from non-managerial employees who handle sharps. Legally required.Mandatory
OSHA Bloodborne pathogens, training and records
29 CFR 1910.1030(g)(2), (h)
AlwaysTraining at assignment and annually; medical records kept for employment plus 30 years; training records with dates, content summary, trainer and attendees kept three years; sharps injury log for employers who keep an OSHA 300 log. Legally required.Mandatory
Needlestick Safety and Prevention Act
Pub. L. 106-430; 66 FR 5318 (Jan 18, 2001)
AlwaysAdded the safer-device review, front-line input, and the sharps injury log to the standard. Legally required (now embedded in 1910.1030).Mandatory
Home health and hospice accreditation (ACHC, CHAP)
ACHC HH and HSP standards; CHAP Standards of Excellence; 42 CFR 484.70 infection control
You seek deemed status accreditationWritten infection prevention and control program, which surveyors read together with the OSHA ECP; personnel files show BBP training and hepatitis B vaccination status or declination. Accreditor expectation grounded in the CoP.Implied

Required sections

  • Exposure determination: job classifications with exposure for all employees, and classifications with some exposure plus the tasks involved (1910.1030(c)(2))
  • Schedule and method of implementation for: methods of compliance (d), HIV/HBV research labs (e) if applicable, hepatitis B vaccination and post-exposure evaluation (f), communication of hazards and training (g), recordkeeping (h)
  • Universal precautions statement and engineering and work practice controls (d)(1) to (d)(2)
  • Personal protective equipment provision, use, cleaning and disposal (d)(3)
  • Housekeeping, regulated waste, laundry (d)(4)
  • Hepatitis B vaccination offered within ten working days of assignment; declination form text from Appendix A (f)(2)
  • Post-exposure evaluation and follow-up procedure, including source individual testing and the healthcare professional's written opinion (f)(3) to (f)(5)
  • Procedure for evaluating the circumstances of an exposure incident (c)(1)(ii)(C))
  • Annual review of safer medical devices and documentation of that review (c)(1)(iv)(B))
  • Solicitation of non-managerial employee input on device selection, documented in the plan (c)(1)(v))
  • Labels and signs (g)(1)
  • Training program content and annual schedule (g)(2)
  • Sharps injury log maintenance and privacy (h)(5), for employers required to keep injury records
  • Plan review date and revision history (c)(1)(iv))

What the examiner asks for

Written planThe ECP with the current annual review date and the documented device review and employee input. Occupational health consultants, infection control consultants, safety consultants; policy tools hold versions
AttestationAnnual training records per employee (dates, content summary, trainer qualifications); signed hepatitis B declination forms using the Appendix A wording. Policy tools, LMS, occupational health providers
Operational recordsSharps injury log, exposure incident reports, post-exposure follow-up records, vaccination records, regulated waste manifests. The employer; occupational health clinics; medical waste vendors
Technical controlsSafer sharps devices in use; sharps containers; eyewash stations where required by other standards. Medical supply vendors

What changed

Change log.

2012-04-03OSHA published a compliance directive update (CPL 02-02-069 remains the enforcement directive; verify current version).
2001-04-18Revised standard effective, implementing the Needlestick Safety and Prevention Act: safer device evaluation, employee input, sharps injury log. Verify.
2001-01-18Final rule revising 1910.1030 published at 66 FR 5318.
1992-03-06Original Bloodborne Pathogens Standard effective. Verify.

Frameworks

Where this document is required.

Who looks at it

Where this document gets checked.

No one certifies a document like this on its own. It is read during the audits and inspections below, and by the agency behind each rule.

Where it is looked atWho looks at it
ACHC/CHAPACHC and CHAP surveyors employed or contracted by each accreditor, typically clinicians with home care or hospice experience. Surveys for Medicare deemed programs are unannounced
CARFCARF surveyors, who are peer professionals employed in accredited or comparable organizations, trained and assigned by CARF. Surveys are scheduled and on site for two to three days
ISNetworld/AvettaPlatform reviewers (ISN's RAVS team, Avetta's review specialists) grading documents against client and regulatory checklists; hiring clients may additionally audit contractors in the field. No independent certification or accreditation exists
OSHA written programsOSHA compliance safety and health officers, or State Plan inspectors (government inspection). No certification exists; voluntary recognition programs such as VPP and SHARP involve OSHA or consultation program evaluation

Who helps write it

Consultants.

Firms that name these standards in their own material.

No firm has claimed a listing for this document yet. Claim yours →

Where it lives

Software.

Tools that hold documents like this one and record who has read them.

Need a hand implementing it?

Find a Consultant for Bloodborne Pathogens Exposure Control Plan

Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.

From the publisher

Manage This Document in AllyMatter

Route it for approval, keep every version, and record a named acknowledgment from everyone who has to read it.

See how AllyMatter works From $29/mo, 20 editors, unlimited staff

Questions

What people ask.

Our staff only give first aid occasionally. Are we in scope?

If you designate employees as first aid responders as part of their job, yes. OSHA's 1993 compliance policy allows some flexibility on when the hepatitis B vaccine is offered for collateral-duty first aiders, but the written plan and training still apply.

What does the annual review have to show?

A dated record that the plan was reviewed, that safer sharps devices available on the market were considered, and that non-managerial employees with sharps exposure were asked for input. Inspectors look for the date and the input record, not just a revised cover page.

Can we use a template?

OSHA publishes a model plan. The exposure determination and the device review must be specific to your workplace, which is where templates fail inspection.

How long do we keep training records?

Three years from the training date. Medical records, including vaccination and post-exposure records, for the duration of employment plus 30 years.

Who owns this site?

AllyMatter, a policy management tool that may appear in listings on this page. It is labeled every time, excluded from picks, and receives nothing from the matching form unless you name it.

About this data

Pages on this site are compiled with AI from two or more linked sources, rewritten in our words, and reviewed by people in stages. Each record shows its stage and date. Nothing here is legal, audit or tax advice, and policyandcompliance.com accepts no responsibility for errors or for decisions made on it. Read the source, then decide.
How we compile and verify →

Think something is wrong?

[email protected]
Tell us the page and what you found. We check it against the source and fix it.
Corrections log →

Want to advertise here?

[email protected]
A primary ad and a secondary placement, flat fee. Buying one changes nothing else on the page.