AI-generated editorial illustration. Not a customer site or evidence of compliance.
OSHA Scan Editorial · AI-assisted educational guide
Based on the official sources linked below. No site-specific or independent professional review is implied. Confirm applicability and current federal or State Plan requirements with a qualified professional.
Planning aid only; it is not a medical protocol or exposure determination. Confirm 1910.1030, exceptions, confidentiality, and State Plan duties.
The bloodborne-pathogens standard is exposure-based, not a label for every office. Under 29 CFR 1910.1030, occupational exposure means reasonably anticipated skin, eye, mucous-membrane, or parenteral contact with blood or OPIM from assigned duties. Make the exposure determination without regard to PPE; a first-aid kit alone does not create a full BBP program.
Where exposure exists, maintain an accessible Exposure Control Plan (ECP) covering universal precautions, engineering and work-practice controls, PPE, training, hepatitis B vaccination, post-exposure follow-up, housekeeping, waste, and records. Review it at least annually and after task, procedure, or position changes. A photo cannot establish exposure, decontamination, or replace immediate confidential medical evaluation.
Who does this apply to?
- Use for general-industry employees whose assigned duties create occupational exposure, including workplaces outside hospitals.
- Do not classify every desk-based office as covered merely because a worker could volunteer to help. Document classifications and tasks without credit for PPE; State Plans or other standards may add duties.
- Offer hepatitis B vaccination after required training and within 10 working days of initial assignment, subject to listed exceptions. Exposure incidents require immediate confidential medical evaluation and follow-up.
Implementation Steps
Make and document the exposure determination
Interview supervisors and employees about injections, wound care, specimens, sharps, cleanup, laundry, emergency response, or other assigned contact. List classifications and tasks with exposure; gloves do not reduce the determination. Record the assigned duty, anticipated contact route, material, work location, frequency or conditions, controls, classification, decision-maker, and facts that would reopen the result. Implementation questions: is response assigned or merely volunteered, who covers an absent worker, and what changed after a new service or device arrived?
- Write the route and task that creates anticipated contact, including normal and reasonably foreseeable incidents.
- Separate assigned response from optional volunteer aid and reopen the determination after service, device, staffing, or incident changes.
Maintain an accessible Exposure Control Plan
Write a site-specific ECP covering methods, roles, schedules, PPE, housekeeping, waste, vaccination, post-exposure response, training, and records. Keep it accessible and review it at least annually and after task, procedure, or position changes. Where required, document annual safer-device consideration and employee input. Illustrative scenario: a clinic changes a sharps device; the ECP file captures exposed users’ input, the device evaluated, the selection rationale, rollout training, container or work-practice change, and follow-up observation. A revision is complete only when the active copy is accessible where the work occurs and affected employees know what changed.
- Use engineering and work-practice controls before a PPE-only solution.
- Record safer-device input and rationale; keep the active plan available and revisions controlled.
Use universal precautions and safer controls
Treat human blood and specified OPIM as infectious. Provide hand hygiene, PPE, containers, labels, decontamination, regulated-waste handling, and sharps controls. Contaminated sharps generally must not be bent, recapped, or removed except under the standard's narrow exception. Walk the complete path from point of use through disposal and record container location, replacement trigger, cleaning agent or method, responsible role, spill boundary, and handwashing access. Escalate a filled, damaged, missing, or wrongly located container before the next procedure rather than relying on a later inspection.
- Inspect containers, handwashing or antiseptic facilities, spill supplies, labels, and waste routes.
- Prohibit reaching into containers and document cleaning method, owner, and affected area.
Offer vaccination and role-based training
After training and within 10 working days of initial assignment, make hepatitis B vaccination available at no cost unless a listed exception applies. Train initially and at least annually, during work and at no cost, on the ECP, precautions, controls, PPE, reporting, and follow-up.
- Use a role matrix with exposed task, trainer, demonstration, and annual due date.
- Teach contaminated-PPE removal, washing or flushing, reporting, and immediate care; document questions and ECP access.
Respond immediately to an exposure incident
An exposure incident requires immediate confidential medical evaluation and follow-up. Document route and circumstances, address source testing when feasible and consented, provide indicated care, and give the professional required information; do not defer this to training. The operational handoff should capture time, first-aid action, contact route, who activated medical support, information sent to the professional, and corrective owner while keeping medical details in the confidential record. Ask whether the worker can reach care on every shift and whether the event reveals a control or training gap; do not close until the response path and workplace correction are separately verified.
- Post a response card with first aid, contacts, urgent-care route, and confidentiality reminder.
- Keep medical details out of general corrective-action files and review controls after the response.
Protect medical and training records
Maintain confidential medical records for employment plus 30 years and training records for 3 years under 1910.1030. A sharps log applies to qualifying percutaneous injuries when the employer otherwise keeps Part 1904 logs; preserve confidentiality and required device facts. Use separate permissions and file names for the ECP, training, medical follow-up, and sharps information. Completion evidence should show access was limited, the required device details were captured without unnecessary identity or medical detail, and the retention owner knows when to review the file.
- Separate medical, training, ECP, and general incident files with role-based access.
- Check recordkeeping and severe-event reporting separately; a BBP record is not automatically a Part 1904 decision.
Document planning checklist
Use this planning list to organize applicable records. Suggested owners and review triggers are workflow recommendations; the linked standards determine which documents and retention periods are legally required.
| Document / Record | Purpose | Owner | Review Cadence |
|---|---|---|---|
| Occupational-exposure determination | Lists exposed classifications, tasks, routes of contact, and the facts supporting the scope. | Employer with clinical or operations leads | At least annually and after a task, service, position, or incident change |
| Exposure Control Plan | Documents methods of compliance, controls, PPE, vaccination, follow-up, housekeeping, and records. | BBP program administrator | At least annually and whenever tasks, procedures, or positions change |
| Safer-device evaluation and input record | Shows annual consideration, employee input where required, selection, implementation, and rationale. | Clinical or exposure-control committee | At least annually and when a device or procedure changes |
| BBP training and vaccination offer record | Tracks initial and annual training, accessible ECP, questions, and hepatitis B offer or exception. | Training and occupational-health coordinator | At assignment, annually, and after a role or procedure change |
| Exposure incident response file | Separates route, circumstances, source information, medical referral, follow-up, and corrective review. | Occupational-health record custodian | Immediately after an incident and after professional follow-up |
| Confidential medical and sharps-injury records | Maintains required medical, training, and qualifying sharps-log information with limited access. | Authorized record custodian | At each record event and before retention or access decisions |
Common Pitfalls
Calling every office BBP-covered
The trigger is occupational exposure from assigned duties, not the possibility of seeing blood. Document the determination without relying on PPE.
Delaying post-exposure care
Medical evaluation and follow-up must be immediately available after an exposure incident; a later training date is not a response.
Putting medical facts in a public incident log
Operational files need useful facts, but medical records are confidential and have a separate retention and access path.
Frequently Asked Questions
Does a normal office need a full BBP program?
When must hepatitis B vaccination be offered?
What happens after a needlestick?
Can a photo prove that a contaminated-sharps task is safe?
What the AI can and can't detect
OSHA Scan reads a single photo. That makes it fast and easy for anyone on site — but it also means it has real limits. Here's an honest look at both.
What it can catch from a photo
- Missing or incorrect PPE that is visible in the frame
- Unprotected edges, open holes, and visible fall hazards
- Housekeeping, trip, and blocked walkway or exit hazards
- Visible electrical, struck-by, and equipment-guarding hazards
What a photo can't tell it
- Hazards hidden from view or anything outside the photo
- Exact heights, distances, weights, or measurements
- Training records, procedures, or how equipment is actually used
- Full legal compliance or an official OSHA pass/fail determination