The Needlestick Safety and Prevention Act amended 1910.1030 to require safety-engineered devices as the primary engineering control. Non-safety devices may only be used where no commercially available safety alternative exists, or where a clinician documents that a safety device is contraindicated for a specific patient. The ECP must be updated annually to reflect currently available safer devices.

1910.1030(d)(4)(iii)(A): Sharps containers must be closable, puncture-resistant, leakproof on sides and bottom, and labelled with the biohazard symbol. They must be located as close as feasible to the area where sharps are used. An overfilled container forces employees to push sharps down, causing needlesticks. The fill line is marked on the container — replace before reaching it.

1910.1030(d)(2)(vii): Bending, recapping, or removing contaminated needles by hand is prohibited. If recapping is medically necessary (e.g. drawing multiple blood tubes with one needle), only single-hand scoop or a mechanical device may be used. The two-hand recap — holding the cap in one hand while inserting the needle with the other — is one of the most common causes of needlestick injuries and is explicitly prohibited.

1910.1030(d)(2)(v): Handwashing is a primary work practice control. Facilities must be immediately accessible — not down the hall or in a different area. Where soap and water are not feasible (EMS, home care), waterless antiseptic hand cleaner plus thorough handwashing at the earliest opportunity is required. Glove removal followed by handwashing must be a routine and enforced practice, not optional.

1910.1030(g)(1): Biohazard labels must be affixed to all regulated waste containers, refrigerators and freezers used to store blood or OPIM, and all other containers used to store, transport, or ship blood or OPIM. The label must be fluorescent orange or orange-red with the biohazard symbol and the word BIOHAZARD. Red bags or red containers may be substituted for labels. Labels are not required on individual containers inside a labelled secondary container.

1910.1030(c)(1)(iv)(B): This requirement was added by the Needlestick Safety and Prevention Act. The employer must solicit input from non-managerial employees who are responsible for direct patient care and who are potentially exposed to injuries from contaminated sharps. Their input must be documented in the ECP. Asking managers on behalf of frontline workers does not satisfy this requirement.

1910.1030(c)(1): The ECP is the cornerstone of BBP compliance. It must identify: every job classification where all employees have occupational exposure, every job classification where some employees have occupational exposure, the tasks and procedures in which exposure occurs, and the schedule for implementing the standard. A generic hospital ECP downloaded from the internet does not satisfy this requirement for your specific facility.

1910.1030(c)(1)(iv): The ECP must be reviewed at least annually and updated to reflect changes in technology, available safety devices, and new tasks. The annual review must also document the consideration of newly available safer devices and the input from non-managerial workers. An ECP that has not been reviewed in more than 12 months is automatically non-compliant regardless of how complete it was when first written.

1910.1030(d)(3)(i): The employer must provide PPE at no cost, in accessible locations, and in appropriate sizes. Requiring employees to purchase their own gloves or masks is a violation. PPE must be accessible in the work area — not stored in a central supply room that requires a trip to retrieve. Workers who must go looking for gloves will often skip them in an emergency.

1910.1030(d)(3)(ii): Employers must ensure workers use appropriate PPE. Simply providing PPE is not sufficient — its use must be enforced. Torn, punctured, or contaminated gloves must be removed and replaced immediately. Workers who remove gloves before completing a procedure, or who work with compromised PPE, must be corrected. Enforcement is an employer obligation, not a worker option.

1910.1030(f)(1)(i): HBV vaccination must be offered within 10 working days of assignment, at no cost, at a reasonable time and place, under supervision of a licensed healthcare professional. Workers who decline must sign a declination form. A worker who later changes their mind must be offered vaccination. Vaccination must be provided even to workers who believe they are already immune — pre-screening for antibodies may only substitute when specifically documented.

1910.1030 Appendix A: The exact language of the declination statement is specified by OSHA. Workers who decline must sign the exact prescribed form — not a paraphrased version. The form acknowledges that declining creates a continued risk of HBV infection and that vaccination remains available if they change their mind. Employers who cannot produce a declination form for an unvaccinated worker are in violation.

1910.1030(f)(3): Immediately following an exposure incident, the employer must make a confidential medical evaluation and follow-up available. The procedure must include: documentation of the route of exposure, identification of the source individual (with consent), collection and testing of the exposed employee’s blood, post-exposure prophylaxis where indicated (HIV PEP within 72 hours), counselling, and evaluation of reported illness. Workers must know this procedure before an exposure occurs.

1910.1030(h)(5): Employers with 11 or more employees must maintain a Sharps Injury Log. The log must record: the type and brand of device involved in the incident, the department or work area where the exposure incident occurred, and an explanation of how the incident occurred. The log must be kept in a way that protects the confidentiality of the injured employee. OSHA inspectors review the log to identify patterns in sharps injuries and evaluate whether device selection decisions are appropriate.

Prior exposure incidents are the strongest indicator of programme failures. Every exposure incident must trigger: an immediate post-exposure evaluation, a review of the engineering controls in place at the time, an investigation of whether a safety device was available, and an update to the ECP and Sharps Injury Log. OSHA frequently revisits facilities with prior BBP citations and looks for corrective action evidence.

1910.1030(g)(2)(i): Training must be provided at the time of initial assignment to tasks where occupational exposure may take place — before any exposure risk begins. A worker who draws blood on their first day without having received BBP training has not been given required training. Training must include an explanation of the BBP standard itself, the ECP, signs and labels, engineering and work practice controls, PPE, and the post-exposure procedure.

1910.1030(g)(2)(ii): Annual training must be provided within one year of the previous training session. A video presentation is not sufficient alone — the training must provide an opportunity for workers to ask questions of a person knowledgeable in BBP. Training must address any new tasks or procedures that have been added since the last session, and must reflect any changes to the ECP or engineering controls.

1910.1030(h)(2): Training records must be maintained for 3 years from the training date. Records must include: dates of training sessions, content or a summary of what was covered, names and qualifications of the persons conducting training, and names and job titles of all persons who attended. Training records are separate from medical records and have a shorter 3-year retention period.

1910.1030(h)(1): Medical records must be kept confidential and retained for the duration of employment plus 30 years. They must not be disclosed or reported to anyone without the employee’s written consent, except as required by law. Medical records must be kept separate from general personnel files. Supervisors may not have access to employee medical records — only the employee and specified medical personnel may review them.