OSHA's Bloodborne Pathogen Standard requires healthcare facilities to maintain a written exposure control plan, but genuine compliance extends well beyond having the document itself on file — actual OSHA inspections and enforcement actions consistently focus on whether the plan's requirements are being implemented in practice, not simply whether the paperwork exists.
The Exposure Control Plan Must Be a Living Document, Reviewed Annually
The standard specifically requires annual review and updating of the exposure control plan, reflecting changes in technology, procedures, and job classifications — a plan drafted once and never revisited fails this requirement regardless of how thorough it was at initial creation, and OSHA inspections specifically look for evidence of this ongoing review process, not just the plan's existence.
Engineering and Work Practice Controls Take Priority Over Personal Protective Equipment
The standard establishes a specific hierarchy of controls, with engineering controls (safety-engineered devices, sharps containers) and work practice controls (specific safe handling procedures) taking priority over personal protective equipment as the primary prevention mechanism, with PPE serving as an additional layer rather than the first-line defense. Facilities that rely primarily on PPE while underinvesting in engineering controls are not meeting the standard's actual hierarchy, even if their PPE supply and training are otherwise adequate.
Hepatitis B Vaccination Must Be Genuinely Offered, Not Merely Available
The standard requires that hepatitis B vaccination be offered to all employees with occupational exposure risk at no cost, within a specific timeframe of assignment to exposure-risk duties — this is an active offering requirement, not simply making vaccination available for employees who happen to ask, and facilities must maintain documentation showing this offer was actually made to each eligible employee, including documentation of any employee who declined vaccination.
Training Must Occur at Specific Required Intervals With Documented Content
Bloodborne pathogen training is required at initial assignment and then annually thereafter, with specific required content elements including transmission modes, exposure control plan details, and the post-exposure evaluation process — training documentation must reflect that these specific required elements were actually covered, and generic or incomplete training content that technically occurred but did not address the standard's specific required topics does not satisfy the actual requirement.
Recordkeeping Requirements Extend Well Beyond the Sharps Injury Log
Beyond the sharps injury log discussed in the reporting context, the standard requires maintained medical records for each exposed employee, training records, and documentation of the hepatitis B vaccination offer and any declination — comprehensive recordkeeping across all these categories, not just the most commonly emphasized sharps log, is what OSHA inspections typically examine in detail.
Common Citation Patterns Reveal Where Facilities Most Often Fall Short
OSHA citation history for the bloodborne pathogen standard consistently shows recurring gaps in specific areas: incomplete or outdated exposure control plans, inadequate documentation of the hepatitis B vaccination offer, and insufficient annual training documentation — facilities conducting internal compliance audits benefit from specifically checking these commonly cited gap areas rather than assuming general good safety practice implies full compliance across every specific documented requirement.
Conclusion
Genuine OSHA bloodborne pathogen compliance depends on an actively maintained and annually reviewed exposure control plan, proper control hierarchy implementation, documented vaccination offers, and complete training and recordkeeping — considerably more than the existence of a written plan alone. Facilities depend on reliable PPE and safety supplies to support the engineering and work practice controls this standard prioritizes.
