Skip to content

Approaching: Nov 20, 2026 — HCS 2024 Deadline. Get ready →

General Industry (29 CFR 1910)

Bloodborne Pathogens

Verified vs OSHA sources · 2026-10-05

29 CFR 1910.1030

29 CFR 1910.1030 protects workers with occupational exposure to blood or other potentially infectious material from bloodborne pathogens such as HIV and hepatitis B and C. It requires a written exposure control plan, universal precautions, engineering and work-practice controls, free hepatitis B vaccination, and post-exposure evaluation and follow-up.

29 CFR 1910.1030 at a glance

What it requires
Protect workers with occupational exposure to blood and other potentially infectious materials
Who it covers
Any worker with 'reasonably anticipated' contact with blood or OPIM (healthcare, EMS, custodial, and more)
Key duty
A written Exposure Control Plan, engineering controls, PPE, free HBV vaccine, and post-exposure follow-up
HBV vaccine
Offered within 10 working days of assignment, at no cost to the employee
Max penalty (2026)
$16,550 per serious violation; $165,514 per willful
The #1 confusion
'Universal Precautions' means treat ALL blood and OPIM as infectious, regardless of known status

What 29 CFR 1910.1030 requires (plain English)

29 CFR 1910.1030 protects workers from bloodborne pathogens: disease-causing microorganisms in human blood, principally Human Immunodeficiency Virus (HIV), Hepatitis B (HBV), and Hepatitis C (HCV). It applies to any employee with "occupational exposure": reasonably anticipated skin, eye, mucous-membrane, or parenteral (needlestick) contact with blood or other potentially infectious materials (OPIM) in the course of their duties. That reaches far beyond hospitals: it covers EMS, funeral services, laboratories, tattooing, and custodial and laundry work handling contaminated items.

The centerpiece is a written Exposure Control Plan that identifies which jobs have occupational exposure and how the employer will reduce it. The plan must be built on Universal Precautions, treating all human blood and OPIM as if infectious, and a hierarchy of controls: engineering controls first (sharps disposal containers, self-sheathing needles, needleless systems), then work-practice controls, then personal protective equipment (gloves, gowns, face protection). The employer must solicit input from non-managerial frontline workers when selecting safer sharps devices, and review the plan at least annually.

The standard also mandates a medical safety net. The Hepatitis B vaccine must be offered to every exposed worker within 10 working days of initial assignment, at no cost. After any exposure incident, the employer must provide a confidential medical evaluation and follow-up, again at no cost. Training is required at initial assignment and at least annually. Medical records must be kept for the duration of employment plus 30 years; training records for 3 years.

The regulatory text

“Occupational Exposure means reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or other potentially infectious materials that may result from the performance of an employee's duties.”
29 CFR 1910.1030(b): Occupational Exposure

Key facts about 29 CFR 1910.1030

  • Applies to workers with 'occupational exposure': reasonably anticipated contact with blood or OPIM.
  • Requires a written Exposure Control Plan, reviewed at least annually and updated for new safer devices.
  • Built on Universal Precautions: treat all human blood and OPIM as if infectious.
  • Hierarchy of controls: engineering controls (sharps containers, needleless systems) first, then work practices, then PPE.
  • Hepatitis B vaccine offered within 10 working days of assignment, at no cost to the employee.
  • Confidential post-exposure medical evaluation and follow-up provided at no cost after an exposure incident.
  • Recordkeeping: medical records for employment + 30 years; training records for 3 years.

Scope: who 29 CFR 1910.1030 applies to

Regulatory framework
General Industry (29 CFR 1910)
Citation reference
29 CFR 1910.1030
Enforcement status
In force and enforced
Jurisdiction
Federal OSHA (29 State-Plan jurisdictions may be stricter)

State-Plan states (e.g. California, Washington, Michigan) operate OSHA-approved programs that must be at least as effective as federal OSHA and frequently impose higher penalties or additional requirements. Confirm the rule as adopted in your state.

Key requirements of 29 CFR 1910.1030

#Employer obligation
1Develop written Exposure Control Plan
2Use universal precautions
3Provide Hepatitis B vaccinations at no cost
4Use engineering controls (sharps containers, safety needles)
5Provide PPE including gloves and face shields
6Train employees annually on bloodborne pathogen hazards
7Maintain sharps injury log

Summarized from the text of 29 CFR 1910.1030. Always read the full regulation for the binding language.

Common Bloodborne Pathogens violations

Deficiencies OSHA cites under 29 CFR 1910.1030 include the ones below, in no particular order. Distinct deficiencies can be cited as separate items, and each serious item carries up to $16,550 (2026). Broader per-instance stacking exists but is a discretionary, case-by-case OSHA enforcement policy, not an automatic multiplier.

  • No written Exposure Control Plan, or one not reviewed/updated at least annually (1910.1030(c)).
  • Hepatitis B vaccine not offered within 10 working days of assignment, or not at no cost (1910.1030(f)).
  • Inadequate engineering controls (no sharps containers, no safer needle devices): 1910.1030(d).
  • No or inadequate PPE provided for the task (1910.1030(d)(3)).
  • No initial/annual training, or no confidential post-exposure follow-up (1910.1030(g)/(f)).

Universal Precautions: treat everything as infectious

The concept workers most often get wrong is Universal Precautions. It does NOT mean 'take precautions only when you know a source is infected.' It means the opposite: because you can rarely know a patient's or source's infection status, you must treat ALL human blood and other potentially infectious materials as if they are infectious, every time. This is why gloves, sharps containers, and post-exposure procedures apply universally, not selectively. (Healthcare accreditation bodies use the broader term 'Standard Precautions,' which also covers non-blood body fluids; applying Standard Precautions meets and exceeds OSHA's Universal Precautions requirement.) Another common gap: assuming only nurses are covered, the standard reaches anyone with reasonably anticipated exposure, including custodial, laundry, and maintenance staff.

What OSHA inspectors look for

A compliance officer asks for the written exposure control plan and confirms it is reviewed and updated at least annually, checks that sharps have engineering controls such as safer devices and sharps containers, that hepatitis B vaccination was offered at no cost, and that a post-exposure procedure exists. A stale plan and missing sharps-injury protections are frequent findings.

Example: how a violation is cited

A clinic reuses a conventional needle with no safety device and has no current exposure control plan; a nurse suffers a needlestick and there is no post-exposure procedure. OSHA cites 1910.1030(c) for the missing plan and (d) for the lack of engineering controls: the failures behind most needlestick citations, with serious penalties from $16,550.

Illustrative example, not a specific OSHA case.

Bloodborne Pathogens compliance checklist

Use this to evaluate your compliance with 29 CFR 1910.1030. Each item is a key requirement OSHA may verify during an inspection.

  • Write an Exposure Control Plan identifying job classifications with occupational exposure.
  • Apply Universal Precautions and the hierarchy of controls (engineering controls first, then work practices, then PPE).
  • Provide sharps disposal containers and evaluate/adopt safer sharps devices, with frontline-worker input.
  • Offer the Hepatitis B vaccine within 10 working days of assignment, at no cost.
  • Provide a confidential, no-cost medical evaluation and follow-up after any exposure incident.
  • Train at initial assignment and at least annually; keep medical records 30 years and training records 3 years.

2026 penalties for 29 CFR 1910.1030

Maximums set by 29 CFR 1903.15(d). 2026 amounts unchanged from 2025 (no CPI adjustment; OMB M-26-11). Not an increase. The 2025 OSHA penalty levels remain in effect for 2026; OSHA made no inflation adjustment for 2026. 29 CFR 1903.15 identifies January 15, 2025 as the effective reference for these amounts, while OSHA's public penalties page currently references penalties assessed after Jan. 15, 2026.

Violation typeMinimumMaximumWhen it applies
Serious$1,085$16,550Substantial probability of death or serious physical harm.
Other-Than-Serious$0$16,550Relates to safety/health but unlikely to cause death or serious harm.
Willful$11,823$165,514Intentional, knowing, or voluntary disregard of the requirement.
Repeated$4,256$165,514A substantially similar violation cited within the last 5 years.
Failure to AbateNone$16,550/dayup to $16,550 per day; total capped at 30x the daily amount (FOM Ch.6)

Bloodborne pathogens is heavily enforced in healthcare and any job with blood exposure. Serious violations reach $16,550 and willful or repeat violations $165,514; a missing plan, no vaccination offer, and no sharps controls are commonly cited together.

Maximums and the willful minimum are set by 29 CFR 1903.15(d); the serious and repeated minimums are OSHA policy floors from its annual penalty adjustment memo. OSHA applies gravity-based and size, good-faith and history reductions (FOM CPL 02-00-164 Ch.6). Estimates only, not legal advice.

The business case for Bloodborne Pathogens compliance

A single needlestick can transmit hepatitis B, hepatitis C, or HIV, and the resulting infections are lifelong. The standard's engineering controls, vaccination, and universal precautions have sharply cut occupational infections since 1991, but only where the exposure control plan is real and current, not a binder left on a shelf.

Free compliance tools for 29 CFR 1910.1030

Bloodborne Pathogens penalties by state

Penalties and enforcement vary by state. State-Plan states may impose higher penalties and additional requirements beyond federal 29 CFR 1910.1030.

Frequently asked questions about 29 CFR 1910.1030

Who is covered by the Bloodborne Pathogens standard?

Any employee with 'occupational exposure': reasonably anticipated skin, eye, mucous-membrane, or parenteral contact with blood or other potentially infectious materials (OPIM) during their duties. That includes nurses, phlebotomists, EMTs and paramedics, funeral-home workers, laboratory staff, tattoo artists, and custodial and laundry workers who handle contaminated items. The employer must identify which job classifications have occupational exposure in its written Exposure Control Plan.

When must the Hepatitis B vaccine be offered?

Within 10 working days of initial assignment to a job with occupational exposure, and at no cost to the employee (1910.1030(f)(1)). If an employee declines, they must sign a declination statement but may accept the vaccine later at any time while still covered. The employer must also provide confidential, no-cost post-exposure medical evaluation and follow-up after any exposure incident.

What are Universal Precautions?

Universal Precautions is the required approach of treating all human blood and other potentially infectious materials as if they are infectious for bloodborne pathogens, regardless of any perceived or known status of the source. It is the foundation of the standard's work practices: gloves, sharps handling, and post-exposure procedures apply universally rather than selectively. Applying the broader 'Standard Precautions' used in healthcare meets and exceeds this requirement.

How long must bloodborne pathogens records be kept?

Medical records for each employee with occupational exposure must be kept for the duration of employment plus 30 years, reflecting the long latency of diseases like hepatitis and the confidentiality of medical information. Training records must be kept for 3 years from the date of the training. Employers subject to the Needlestick Safety and Prevention Act amendments must also maintain a sharps injury log.

Regulatory history of 29 CFR 1910.1030

OSHA issued the Bloodborne Pathogens standard in 1991 in response to the HIV and hepatitis epidemics. Congress directed a significant revision through the Needlestick Safety and Prevention Act of 2000, which took effect in 2001: it required employers to evaluate and adopt safer engineering controls (such as needleless systems and sharps with engineered protections), to solicit input from frontline workers on device selection, and to maintain a sharps injury log.

Related glossary terms

Key terms that appear in 29 CFR 1910.1030, each with a full plain-English explainer.

Primary sources

OSHA figures on this page are imported from HazComFast's verified regulatory module (verified 2026-10-05 against eCFR, OSHA.gov, and the Federal Register).

This page is an educational summary, not legal advice. OSHA standards and penalty amounts change; confirm requirements against the current regulation and your applicable State-Plan before acting.

Get the Binder in Order Before the Inspector Arrives. Are You Ready?

OSHA does not give advance notice of inspections (29 CFR 1903.6). Get the binder in order before the opening conference, not during it.

Serious Violation

$16,550

per violation (max)

HazComFast Pro

$199/mo

10 jobsites, unlimited chemicals, unlimited workers

New sign-ups are paused. The free tools below need no account, and customers can log in as usual.

Your account keeps working as usual. Cancel anytime.