The short answer: 29 CFR 1910.1030 requires every employer whose staff have occupational exposure to blood or other potentially infectious materials to maintain a written Exposure Control Plan, use engineering and work-practice controls led by safer sharps devices, provide the hepatitis B vaccine at no cost, and keep a sharps injury log. The 2001 revision, driven by the Needlestick Safety and Prevention Act, made two things mandatory rather than optional: the annual evaluation and adoption of safer medical devices, and the solicitation of input from frontline, non-managerial staff who use those devices.
What does the Bloodborne Pathogens standard require of a nursing employer?
29 CFR 1910.1030 requires a written Exposure Control Plan designed to eliminate or minimize employee exposure, and 1910.1030(c)(1)(iv) requires that plan to be reviewed and updated at least annually and whenever tasks or procedures change. The plan identifies which job classifications have occupational exposure and the controls in place, and 1910.1030(d)(1) requires universal precautions, meaning all blood and body fluids are treated as if infectious when differentiation is difficult. The Exposure Control Plan is the spine of the standard: it is the document a compliance officer asks for first, and the one every other requirement connects back to.
For a nursing unit that means the plan cannot be a binder written once and shelved. Because 1910.1030(c)(1)(iv)(B) requires the employer to document annually the consideration and implementation of appropriate commercially available and effective safer medical devices, the plan has to record an active, dated decision each year about the sharps in use. A plan that has not changed in a decade is itself evidence that the annual evaluation did not happen.
Where do safer sharps devices fit in the control hierarchy?
Engineering and work-practice controls come first, and personal protective equipment only covers the exposure that remains after them. 1910.1030(d)(2)(i) requires engineering and work-practice controls to be used to eliminate or minimize exposure, with PPE added where exposure remains, and safer medical devices, needleless systems and sharps with engineered sharps injury protections, are the primary engineering control against needlestick. The order is not arbitrary: a device that retracts or shields its own needle protects the nurse even when the unit is busy and attention lapses, which is exactly when sticks happen.
The controls stack in a defined order:
- Eliminate the needle where possible. Needleless IV connectors and systems remove the sharp from the task entirely, the most reliable control because there is nothing left to stick anyone.
- Use sharps with engineered injury protection. Retractable or shielded needles and safety-engineered blood collection devices reduce the exposed sharp after use, per the definitions in 1910.1030.
- Put a compliant sharps container at the point of use. 1910.1030(d)(4)(iii)(A) requires contaminated sharps to be discarded immediately or as soon as feasible in containers that are closable, puncture resistant, leakproof on the sides and bottom, and labeled or color-coded.
- Enforce safe work practices. No recapping by hand, no bending or shearing needles, and no passing an uncapped sharp hand to hand.
- Add PPE for the remaining exposure. Gloves, gowns, and face protection for the splash and contact risk that controls do not remove.
Because 1910.1030(c)(1)(v) requires the employer to solicit input from non-managerial employees responsible for direct patient care in identifying, evaluating, and selecting these controls, the device decision is not a purchasing choice made in an office. The nurses who use the catheter or the blood collection set have to be part of choosing it.
Did the Needlestick Safety and Prevention Act change the standard?
Yes. The Needlestick Safety and Prevention Act was signed into law on November 6, 2000, and OSHA's revised Bloodborne Pathogens standard took effect on April 18, 2001. The revision added the sharps injury log, clarified that safer medical devices are engineering controls, required the annual documented evaluation of those devices, and made frontline employee input mandatory. It turned a general duty to control exposure into a specific, auditable cycle of evaluating and adopting safer sharps.
The human stakes behind that revision are documented. In a study published in the CDC journal Emerging Infectious Diseases, Occupational Deaths among Healthcare Workers, investigators reported that from 1992 to 2002 a total of 67,363 workers died of occupational injuries, including 28 healthcare workers who died of complications related to needlestick exposures, and that among documented occupational HIV transmissions, 24 (42%) of 57 occurred in nurses. Those numbers are why the standard treats a sharps injury as a recordable event that has to change what devices the unit buys. The transferable point is that a needlestick is not a minor incident to clean and forget: it is data the Exposure Control Plan is required to act on before the next one transmits an infection.
What does the hepatitis B vaccination requirement involve?
The employer must make the hepatitis B vaccine available at no cost to every employee with occupational exposure, and 1910.1030(f)(2)(i) requires that it be offered within 10 working days of initial assignment, after the employee has received the required training. Under 1910.1030(f)(1)(ii)(A), the vaccination, along with any post-exposure evaluation and follow-up, is provided at no cost to the employee. The vaccine is a control the employer owns, not a personal health choice left to the worker.
An employee who declines must sign the specific declination statement in the standard, and can request and receive the vaccine later at no cost if they change their mind. After an exposure incident, the standard requires a confidential medical evaluation and follow-up, including testing and post-exposure prophylaxis where indicated. Building the vaccine offer and the declination form into onboarding is what keeps the ten-working-day clock defensible, because the date of hire and the date of the offer both have to be on record.
How does the sharps injury log turn incidents into prevention?
The sharps injury log required by 1910.1030(h)(5) records each percutaneous injury from a contaminated sharp, and it captures three specific fields: the type and brand of device involved, the department or work area where the incident occurred, and an explanation of how it happened. Those fields are chosen so a facility can see which device and which task keep producing injuries, which is precisely the input the annual safer-device evaluation under 1910.1030(c)(1)(iv)(B) is supposed to act on. The log is the bridge between an individual injury and a purchasing decision.
Read the log against the Exposure Control Plan, not in isolation. A cluster of sticks tied to one winged steel needle or one recapping habit is the signal to change the device or the practice, and to record that change in the plan's annual update. Feeding the log and the frontline input from 1910.1030(c)(1)(v) back into the plan is what makes the standard a prevention cycle rather than a filing exercise.
