OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030) applies to every US phlebotomist, no exceptions. Hospital, clinic, mobile, doctor’s office, school nurse — if you have reasonably anticipated occupational exposure to blood or other potentially infectious materials, you are covered. Your employer has specific, legally enforceable obligations. So do you.
Here’s what the regulation actually requires, what your employer must provide, and where US phlebotomists most commonly run into trouble.
What the standard actually covers
OSHA’s Bloodborne Pathogens Standard, enforced since 1991, is built to reduce occupational exposure to HIV, hepatitis B, hepatitis C, and other bloodborne diseases. The legal framework rests on a few pillars:
- Written Exposure Control Plan (ECP)
- Universal Precautions / Standard Precautions
- Engineering controls (safer devices, sharps containers)
- Work practice controls (no recapping, designated procedures)
- Personal Protective Equipment (PPE)
- Hepatitis B vaccination offer
- Post-exposure evaluation and follow-up
- Communication of hazards (labels, signs)
- Annual training
- Recordkeeping
What your employer MUST provide (at no cost to you)
This is the part many phlebotomists don’t realize is non-negotiable. Your employer cannot charge you for any of this:
- Hepatitis B vaccine series. Three doses, offered within 10 working days of your initial assignment. Free. If you decline, you sign a specific OSHA-mandated declination form, and you can change your mind and accept it later at any time, still free.
- All required PPE. Gloves, gowns, masks, face shields, eye protection. Replacement when damaged. Different sizes available so it actually fits.
- Annual bloodborne pathogen training. Within one year of your last training, every year you remain in the role. Free, paid time.
- Sharps containers within arm’s reach of every draw station.
- Engineered safer needle devices. Since the Needlestick Safety and Prevention Act of 2000, OSHA requires safety-engineered devices (retractable needles, butterflies with shielding) whenever clinically appropriate.
- Post-exposure medical evaluation after any needlestick or exposure. Free. Confidential. Immediate.
- Laundering of contaminated reusable PPE. You don’t take it home to wash it.
If your employer is asking you to pay for any of these, that’s an OSHA violation. You can report anonymously through OSHA’s online whistleblower system.
What you’re required to do
- Complete the annual training. Within your anniversary date. Sign the documentation.
- Follow Standard Precautions. Treat every patient as if their blood is infectious. No exceptions based on appearance, demographics, or chart history.
- Wear required PPE — minimum gloves for every venipuncture, additional PPE for splash-risk procedures.
- Use safety-engineered devices as your employer’s ECP specifies.
- Never recap needles. Activate the safety mechanism, dispose immediately in a sharps container.
- Report exposures immediately — needlestick, splash to mucous membrane, blood on broken skin.
The Exposure Control Plan: ask to see yours
Every US employer subject to the standard must have a written Exposure Control Plan, reviewed and updated at least annually. It must be available to employees on request, during your shift, without delay. Ask to see it. Many new phlebotomists never do, and the ECP is where the site-specific rules live.
The ECP covers things like which safety devices your facility uses, what to do during a needlestick at 2am, how the post-exposure follow-up works at your specific hospital, and which staff are authorized to manage exposure incidents.
What “annual training” actually has to cover
OSHA specifies the content. If your annual training doesn’t include all of this, your employer is non-compliant:
- Copy of the OSHA Bloodborne Pathogens Standard
- General explanation of bloodborne diseases (HIV, HBV, HCV)
- Modes of transmission
- Your employer’s Exposure Control Plan
- Tasks involving exposure risk
- How to use PPE
- Engineering and work practice controls
- How to handle exposure incidents
- Hepatitis B vaccine information
- Visual warnings (biohazard labels)
- Q&A with a knowledgeable trainer (this is the part most online-only trainings fail)
OSHA does allow online training, but it must include an opportunity to ask questions of a knowledgeable trainer — either live, by phone, or by email. A pure click-through video without Q&A access does not meet the standard.
What to do after a needlestick
The order matters and the steps are protected by law:
- Wash the site immediately with soap and water. Mucous membrane splash: flush with water or saline for 15 minutes.
- Report it. Tell your supervisor and go to Employee Health or Emergency Department per your ECP. Don’t wait for the end of your shift.
- Source patient testing for HIV, HBV, HCV. The source patient must consent, but in most US states there are streamlined processes for occupational exposures.
- Your baseline testing for HIV, HBV, HCV.
- Post-exposure prophylaxis (PEP) decision. For HIV, PEP starts within hours, not days. The choice is made jointly with infectious disease.
- Follow-up testing at 6 weeks, 12 weeks, and 6 months post-exposure.
- Confidential documentation. Your medical records are confidential. Only the exposure event itself is recorded in the OSHA log.
All of this is at no cost to you. All of this is on the clock. Your employer cannot retaliate against you for reporting an exposure — that’s a separate OSHA whistleblower protection.
Where US employers most commonly fail
OSHA citations on bloodborne pathogens follow patterns:
- Sharps containers overfilled or out of reach. A sharps container is full at 3/4 capacity, not when needles are protruding.
- Missing safety-engineered devices when clinically appropriate. Old-style needles without retraction mechanisms are out of compliance.
- HBV vaccine not offered within the 10-day window.
- Outdated Exposure Control Plan — not reviewed annually.
- Online training without Q&A access.
- Recapping needles being tolerated as a practice.
If you spot any of these and your employer won’t correct them after you raise it, you can file a confidential complaint with OSHA. The whistleblower provisions are real and enforced.
The 10-second exposure prevention checklist
Before every draw:
- Gloves on, fit verified.
- Sharps container within arm’s reach.
- Safety device functional.
- Patient confirmed, site selected.
After every draw:
- Activate safety mechanism immediately on withdrawal.
- Drop the needle directly into sharps. No recap, no transfer, no setting it down.
- Gauze pressure, bandage, glove change before next patient.
Most needlesticks happen because someone tried to recap, walked across the room with an uncovered needle, or rushed the disposal. The standard exists because of decades of data on those exact preventable injuries.
