The OSHA Bloodborne Pathogens standard, 29 CFR 1910.1030, requires any employer whose workers can reasonably be expected to contact blood or other potentially infectious materials on the job to have a written exposure control plan, use universal precautions and engineering controls, offer the hepatitis B vaccine free, and provide post-exposure follow-up.
It is one of the few OSHA health standards written around an infectious agent rather than a machine, and manufacturers routinely assume it does not touch them. It often does, through one door: the designated first-aid responder. This post explains what the standard requires, who it covers on a plant floor, and how to run the parts that matter. It is educational, not legal advice.
What is the bloodborne pathogens standard?
The bloodborne pathogens standard is OSHA's rule, 29 CFR 1910.1030, protecting workers from occupational exposure to blood and other potentially infectious materials (OPIM) that can carry hepatitis B (HBV), hepatitis C (HCV), and HIV. It sets out a written plan, work controls, a free vaccine offer, training, labeling, and medical follow-up after an exposure. The standard's foundation is universal precautions: treat all human blood and OPIM as if it is infectious, because you cannot tell by looking.
The trigger for the whole standard is "occupational exposure," defined as reasonably anticipated skin, eye, mucous-membrane, or needlestick contact with blood or OPIM as part of the job. If that exposure is reasonably anticipated for any employee, the standard applies, and it applies whether or not the worker chooses to wear gloves.
Does the bloodborne pathogens standard apply in manufacturing?
Often, yes, but not for everyone. The standard does not cover the routine plant population. It covers employees with occupational exposure, and in a factory that usually means people designated to render first aid or medical assistance as part of their duties, plus anyone assigned to clean up blood after an injury. An employee who happens to help a bleeding coworker as a one-time Good Samaritan, with no assigned responsibility to do so, is generally not "occupationally exposed" under the rule.
The line that catches manufacturers is the first-aid team. The moment you name people as responders on a shift, or assign someone to clean the area after a laceration, those individuals have occupational exposure and the standard's protections attach to them. There is a narrow provision that lets employers offer the hepatitis B vaccine to designated first-aid providers after a first exposure incident rather than in advance, but only if specific conditions are met, including a reporting procedure that gets the vaccine started within the required window. Read the standard before relying on it.
What must a written exposure control plan contain?
The exposure control plan is the core document, and OSHA requires it in writing, accessible to employees, and reviewed and updated at least annually and whenever tasks change. At minimum it must include the exposure determination (which job classifications and tasks have occupational exposure, listed without regard to PPE), the methods of compliance you use, the hepatitis B vaccination program, post-exposure evaluation and follow-up procedures, training recordkeeping and how you evaluate exposure incidents. It must also document your consideration and use of safer sharps devices where relevant.
Writing the exposure determination well is the part plants skip. It forces you to name, on paper, who on the floor could contact blood, which is exactly the analysis a job safety analysis does for physical hazards. If a job classification is on that list, every downstream protection follows for those people.
How do you actually control the exposure?
The standard uses the same logic as the hierarchy of controls, adapted to an infectious hazard. Universal precautions come first as the mindset; then engineering controls, then work-practice controls, then PPE, then medical backstops.
Every layer here is an employer cost, by rule. PPE such as gloves and eye protection must be provided at no charge, and the employer, not the worker, launders or disposes of contaminated protective clothing. That mirrors the free-of-charge principle across OSHA health standards and is worth stating to a plant manager plainly: the worker never pays for protection. Contaminated cleanup also intersects with your sanitation and chemical safety program, because disinfecting a blood spill introduces its own chemical hazards.
What does the hepatitis B vaccine offer require?
The employer must make the hepatitis B vaccine and vaccination series available to every covered employee, at no cost, at a reasonable time and place, after they complete training and within 10 working days of initial assignment. A worker may decline, but must sign the specific declination statement in Appendix A of the standard, and can still ask for and receive the vaccine free later if they change their mind. The employer cannot make the worker pay, cannot require pre-screening antibody testing as a condition, and must follow current U.S. Public Health Service recommendations for the series and any titer testing.
What are the steps after an exposure incident?
An exposure incident is a specific contact, such as a needlestick or a splash of blood to the eye, and the standard requires a fast, confidential, no-cost medical response. Run it as a defined sequence so nothing is improvised on a bad day.
- Provide immediate care. Wash needlesticks and cuts with soap and water; flush splashes to eyes, nose, or mouth with water or saline.
- Report the incident under your written procedure so the clock on evaluation and any prophylaxis starts right away. Fast reporting is why the procedure must be simple and blame-free.
- Refer for confidential medical evaluation by a licensed healthcare professional, at no cost to the employee and at a reasonable time.
- Identify and test the source individual's blood for HBV and HIV where feasible and legally permitted, to inform the exposed worker's care.
- Test the exposed employee's blood with consent, and offer post-exposure prophylaxis when medically indicated per current U.S. Public Health Service guidance.
- Provide counseling and evaluation of reported illness, and give the employee the healthcare professional's written opinion within 15 days.
- Document and retain the record confidentially for the duration of employment plus 30 years, and record the incident where required alongside your other OSHA recordkeeping.
Who is covered and who is not?
The distinction is worth a table, because getting it wrong runs in both directions: some plants over-scope and train the whole site, others under-scope and leave their first-aid team unprotected. Coverage turns on assigned responsibility and reasonably anticipated exposure.
| Role on a plant floor | Covered by 1910.1030? | Why |
|---|---|---|
| Designated first-aid or emergency responder | Yes | Rendering first aid is an assigned duty with anticipated blood contact |
| Employee assigned to clean up blood after an injury | Yes | Cleanup of blood or OPIM is anticipated exposure |
| On-site nurse or medical staff | Yes | Occupational exposure is inherent to the role |
| Operator who one-time helps a bleeding coworker, no assigned duty | Generally no | A Good Samaritan act is not anticipated occupational exposure |
| Office and general production staff with no exposure duties | No | No reasonably anticipated contact with blood or OPIM |
When in doubt, err toward writing the person into the exposure determination and offering protection. The cost of an extra vaccine offer is trivial next to an unprotected exposure.
What training and labeling does the standard require?
Covered employees must be trained at the time of assignment and at least annually after, during working hours and at no cost, in a form they understand. Training covers the standard, the plant's exposure control plan, how to recognize exposure, the controls and PPE, the vaccine, and what to do after an incident. Containers of regulated waste, refrigerators holding blood or OPIM, and contaminated equipment must carry the biohazard label or be red-bagged, so the hazard is visible to everyone who might handle it, including maintenance crews who may also need energy isolation before servicing contaminated equipment.
What do the numbers say?
The scope and the primary sources:
- OSHA estimates its bloodborne pathogens rule covers workers across many industries where occupational exposure occurs; the standard itself is 29 CFR 1910.1030 free to read in full.
- The exposure record must be kept for the duration of employment plus 30 years under paragraph (h) of the standard.
- The CDC's bloodborne infectious diseases resources from NIOSH cover exposure prevention and post-exposure management for HBV, HCV, and HIV.
Behind the paperwork is a simple aim: when someone bleeds on your floor, the person who helps them is protected before, during, and after.
Where the plan usually falls apart
The exposure control plan is typically a binder that was written once, met the letter of the rule, and has not been opened since. Meanwhile the first-aid roster changed, a new line added a laceration risk, and the annual review slipped. Harmony is an AI-native layer that connects machines, software, and paperwork into one operational layer, with no rip-and-replace: the exposure control plan, training records, and post-exposure documentation become structured data instead of a binder nobody can find on a night shift, part of the everyday shape of connected worker technology. AI search returns cited answers across those records, so a first-aider on the floor can pull the post-exposure steps in seconds, and Harmony's digital workflows flag the annual training and plan review before they lapse. It is not a medical or compliance product; it keeps the right procedure findable at the moment it is needed. Confined-space rescue teams and other responders can live in the same system through your confined space program.