Universal Precautions and Bloodborne Pathogens

Why This Topic Matters

Bloodborne pathogens (BBP) are one of the most heavily tested industrial hygiene and occupational health topics on the BCSP Associate Safety Professional (ASP) exam. The reason is simple: OSHA's Bloodborne Pathogens Standard, 29 CFR 1910.1030, is one of the most frequently cited health standards in general industry, and it applies far beyond hospitals. Any worker who could reasonably be expected to contact blood or other potentially infectious materials (OPIM) as part of their job is covered. That includes first-aid responders in manufacturing plants, custodians, laundry workers, laboratory staff, tattoo artists, correctional officers, funeral home staff, and emergency responders.

From a safety professional's perspective, the stakes are high. Hepatitis B virus (HBV) can survive in dried blood on surfaces for up to seven days and is roughly 100 times more infectious than HIV. Hepatitis C virus (HCV) is the most common chronic bloodborne infection in the United States and has no vaccine. A single needlestick can transmit a lifelong or fatal disease. Understanding universal precautions and the structure of the OSHA standard is therefore essential both for protecting workers and for passing the exam.

What Are Bloodborne Pathogens?

OSHA defines bloodborne pathogens as pathogenic microorganisms that are present in human blood and can cause disease in humans. The three pathogens of primary concern are:

1. Hepatitis B Virus (HBV) - attacks the liver; a highly effective vaccine exists; the virus is hardy and survives on surfaces for about a week.
2. Hepatitis C Virus (HCV) - attacks the liver; no vaccine; frequently becomes chronic; leading cause of liver transplants.
3. Human Immunodeficiency Virus (HIV) - attacks the immune system and leads to AIDS; no vaccine; fragile outside the body.

Other bloodborne diseases include syphilis, malaria, brucellosis, and viral hemorrhagic fevers, but the exam focuses on HBV, HCV, and HIV.

Other Potentially Infectious Materials (OPIM)

You must know what counts as OPIM, because exam questions often test whether a given body fluid triggers the standard. OPIM includes: semen, vaginal secretions, cerebrospinal fluid, synovial fluid, pleural fluid, pericardial fluid, peritoneal fluid, amniotic fluid, saliva in dental procedures, any body fluid visibly contaminated with blood, any body fluid where it is difficult or impossible to differentiate between fluids, any unfixed human tissue or organ (other than intact skin), and HIV- or HBV-containing cell or tissue cultures and experimental animal blood.

Critically, the following are NOT considered OPIM unless they contain visible blood: feces, urine, vomit, sweat, tears, nasal secretions, sputum, and saliva (outside dental settings). This is a classic exam trap.

What Are Universal Precautions?

Universal Precautions is an infection control approach in which all human blood and certain body fluids are treated as if they are known to be infectious for HBV, HCV, HIV, and other bloodborne pathogens. The philosophy is that you cannot tell who is infected by looking at them, so every exposure is handled as a potential exposure. OSHA requires universal precautions to be observed to prevent contact with blood or OPIM.

Related terms you may see on the exam:

- Standard Precautions - a broader CDC concept that combines universal precautions with body substance isolation. It applies to all body fluids, secretions, and excretions (except sweat), regardless of visible blood. OSHA accepts standard precautions as an acceptable alternative to universal precautions.
- Body Substance Isolation (BSI) - treats all moist body substances as potentially infectious.
- Transmission-Based Precautions - additional CDC precautions (contact, droplet, airborne) used for specific known infections.

If a question asks what OSHA requires, the answer is universal precautions (or standard precautions as an equivalent).

Routes of Exposure

An occupational exposure is reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or OPIM that may result from the performance of an employee's duties. An exposure incident is a specific eye, mouth, other mucous membrane, non-intact skin, or parenteral contact with blood or OPIM that results from the performance of duties.

Routes of entry include:
- Parenteral - piercing of the skin barrier by needlesticks, cuts, human bites, or abrasions (the highest-risk route).
- Mucous membranes - splashes to the eyes, nose, or mouth.
- Non-intact skin - contact with cuts, dermatitis, acne, chapped skin, or hangnails.

Intact skin is an effective barrier. Bloodborne pathogens are not transmitted by casual contact, coughing, sneezing, or sharing food.

How the OSHA Standard Works: Key Elements of 29 CFR 1910.1030

The standard is built around a written plan supported by the hierarchy of controls. Know each element and the associated numbers.

1. Exposure Determination
The employer must identify job classifications in which all employees have occupational exposure, job classifications in which some employees have exposure, and the tasks and procedures that create exposure. This determination is made without regard to the use of PPE.

2. Exposure Control Plan (ECP)
A written plan is required and must contain the exposure determination, the schedule and method of implementing each element of the standard, and the procedure for evaluating exposure incidents. The ECP must be reviewed and updated at least annually and whenever new tasks or procedures affect exposure. Since the Needlestick Safety and Prevention Act of 2000, the annual review must document consideration and implementation of safer medical devices, and employers must solicit input from non-managerial front-line employees in the selection of engineering controls. The ECP must be accessible to employees.

3. Engineering Controls
These isolate or remove the hazard from the workplace. Examples include sharps disposal containers, self-sheathing needles, needleless systems, sharps with engineered sharps injury protections (SESIPs), biosafety cabinets, and splash guards. Engineering controls must be examined and maintained or replaced on a regular schedule. Sharps containers must be puncture-resistant, leak-proof on sides and bottom, labeled or color-coded, closable, and kept upright, easily accessible, and not allowed to overfill.

4. Work Practice Controls
These reduce exposure by changing the way a task is performed. Key requirements include: hand washing immediately after glove removal and after any contact with blood or OPIM (antiseptic hand cleanser or towelettes may be used when hand washing facilities are not feasible, but hands must then be washed as soon as feasible); no bending, recapping, or removing contaminated needles unless no alternative is feasible, in which case a one-handed scoop technique or mechanical device must be used; no shearing or breaking needles; no eating, drinking, smoking, applying cosmetics or lip balm, or handling contact lenses in areas where exposure is reasonably likely; no storing food or drink in refrigerators or cabinets where blood or OPIM is kept; minimizing splashing and spraying; no mouth pipetting; and placing specimens in leak-proof, labeled containers.

5. Personal Protective Equipment (PPE)
PPE is required whenever occupational exposure remains after engineering and work practice controls. The employer must provide, clean, launder, repair, replace, and dispose of PPE at no cost to the employee. PPE is considered appropriate only if it does not permit blood or OPIM to pass through to the employee's clothing, skin, eyes, mouth, or other mucous membranes under normal conditions of use. Gloves must be worn when hand contact with blood, OPIM, mucous membranes, or non-intact skin is anticipated. Hypoallergenic gloves or alternatives must be provided for employees with latex sensitivity. Disposable gloves are never washed or decontaminated for reuse. Masks with eye protection (goggles or face shield) are required when splashes or sprays are reasonably anticipated. Contaminated PPE must be removed before leaving the work area. An employee may temporarily decline PPE in rare, extraordinary circumstances if they judge that using it would prevent delivery of care or pose an increased hazard, but the employer must investigate and document such instances.

6. Housekeeping and Decontamination
The employer must maintain a clean and sanitary workplace with a written schedule for cleaning and decontamination. Work surfaces must be decontaminated with an appropriate disinfectant after completion of procedures, immediately when overtly contaminated, and at the end of the shift. An EPA-registered tuberculocidal disinfectant or a fresh solution of household bleach diluted between 1:10 and 1:100 is acceptable. Broken glassware must never be picked up by hand; use tongs, brush and dustpan, or forceps. Contaminated laundry must be handled as little as possible, bagged at the point of use, labeled or color-coded, and handled with gloves. Laundry workers must wear gloves and appropriate PPE.

7. Regulated Waste
Regulated waste includes liquid or semi-liquid blood or OPIM, items that would release blood or OPIM if compressed, items caked with dried blood capable of releasing it during handling, contaminated sharps, and pathological and microbiological wastes. Regulated waste must be placed in closable, leak-proof containers that are labeled with the biohazard symbol or color-coded red. Disposal must follow applicable federal, state, and local regulations.

8. Labels and Signs
Warning labels must be fluorescent orange or orange-red with the universal biohazard symbol and the word BIOHAZARD in a contrasting color. Labels are required on containers of regulated waste, refrigerators and freezers containing blood or OPIM, and containers used to store, transport, or ship blood or OPIM. Red bags or red containers may be substituted for labels. Exceptions: containers of blood products labeled as to their contents and released for transfusion or clinical use, and individual containers placed inside a labeled container during storage or transport, do not require a separate label.

9. Hepatitis B Vaccination
The employer must make the HBV vaccine series available at no cost, at a reasonable time and place, within 10 working days of initial assignment to a job with occupational exposure, after training has been completed. The vaccine is not required if the employee has previously received the series, antibody testing shows immunity, or the vaccine is medically contraindicated. Employees who decline must sign the declination statement using the exact language in Appendix A of the standard. An employee who declines may later change their mind and receive the vaccine at no cost. Post-vaccination antibody testing is recommended by CDC/USPHS and, when recommended, must be offered. Pre-screening is not a condition for receiving the vaccine. Booster doses must be provided if later recommended by the U.S. Public Health Service.

10. Post-Exposure Evaluation and Follow-Up
After an exposure incident, the employer must immediately make available a confidential medical evaluation and follow-up at no cost, including: documentation of the route of exposure and circumstances; identification and testing of the source individual's blood (if consent is obtained or consent is not required by law) for HBV and HIV; making the results available to the exposed employee along with confidentiality obligations; collection and testing of the exposed employee's blood with consent (if the employee consents to baseline collection but not HIV testing, the sample must be preserved for 90 days); post-exposure prophylaxis when medically indicated per current USPHS recommendations; counseling; and evaluation of reported illnesses. The employer must provide the healthcare professional with a copy of the standard, a description of the employee's duties, documentation of the exposure route and circumstances, the source individual's results if available, and relevant medical records. The healthcare professional's written opinion must be provided to the employee within 15 days and is limited to whether the vaccine is indicated and whether the employee has been informed of results and of any conditions requiring further evaluation. All other findings remain confidential.

11. Information and Training
Training is required at the time of initial assignment, at least annually thereafter, and whenever changes in tasks or procedures affect exposure. Training must be provided during working hours at no cost, in a language and at an educational level the employee understands, and must include an opportunity for interactive questions and answers with a knowledgeable trainer. Content must include a copy of the standard, epidemiology and symptoms of bloodborne diseases, modes of transmission, the ECP, recognition of exposure tasks, controls and PPE, HBV vaccine information, emergency procedures, exposure incident reporting, post-exposure evaluation, and labels and signs.

12. Recordkeeping
- Medical records for each exposed employee must be kept confidential and retained for the duration of employment plus 30 years (consistent with 29 CFR 1910.1020). They include HBV vaccination status, exposure incident results, and the healthcare professional's written opinion.
- Training records must be retained for 3 years and include dates, content summary, trainer names and qualifications, and attendee names and job titles.
- Sharps injury log is required for employers who must keep OSHA 300 logs. It must record the type and brand of device, the department or work area, and an explanation of how the incident occurred, while protecting employee confidentiality. It is retained for 5 years following the end of the calendar year it covers.

13. Research Laboratories and Production Facilities
HIV and HBV research labs and production facilities face additional requirements such as biosafety cabinets, autoclaves, special signage, and restricted access, but the exam generally emphasizes general industry provisions.

The Needlestick Safety and Prevention Act (2000)

This act amended the standard to clarify that engineering controls include safer medical devices, require annual documentation in the ECP of consideration and implementation of safer devices, require solicitation of input from non-managerial employees, and require the sharps injury log. Expect at least one question that connects these requirements to the Act.

Applying the Hierarchy of Controls

The exam loves to frame BBP questions through the hierarchy of controls. Rank your answers accordingly:
1. Elimination or substitution (needleless systems, eliminating unnecessary sharps).
2. Engineering controls (self-sheathing needles, sharps containers, splash shields).
3. Work practice controls (no recapping, hand washing, proper disposal).
4. Administrative controls (training, ECP, vaccination, scheduling).
5. PPE (gloves, gowns, face shields) - always the last line of defense.

If a question asks for the most effective or preferred control, choose engineering over PPE every time.

Handling an Exposure Incident: Step-by-Step

1. Immediately wash the affected skin with soap and water; flush mucous membranes with water or saline for 15 minutes.
2. Report the incident immediately to a supervisor.
3. Document the route and circumstances of exposure.
4. Identify and attempt to test the source individual.
5. Refer the employee for confidential medical evaluation and baseline testing.
6. Provide post-exposure prophylaxis if indicated (HIV PEP is most effective when started within hours, ideally within 2 hours; HBV immune globulin and vaccine if non-immune).
7. Provide the healthcare professional's written opinion within 15 days.
8. Record on the sharps injury log and OSHA 300 log as required (needlesticks and cuts from contaminated sharps are always recordable under 1904.8, and privacy case rules apply).

Exam Tips: Answering Questions on Universal Precautions and Bloodborne Pathogens

Tip 1: Memorize the numbers. ASP questions frequently test specific time frames and retention periods. Know these cold: HBV vaccine offered within 10 working days; healthcare professional's written opinion within 15 days; blood sample held 90 days if HIV testing is initially declined; training annually and ECP review annually; training records 3 years; medical records duration of employment plus 30 years; sharps injury log 5 years; bleach dilution 1:10 to 1:100; HBV survives up to 7 days in dried blood.

Tip 2: Know what is and is not OPIM. If a scenario involves urine, feces, vomit, sweat, tears, or saliva with no visible blood, the BBP standard does not apply. If the fluid is cerebrospinal, synovial, pleural, amniotic, or blood-contaminated, it does.

Tip 3: Universal precautions means treating everything as infectious. Any answer suggesting precautions should depend on the known status of the source individual is wrong. You never wait for test results before protecting yourself.

Tip 4: Apply the hierarchy of controls. When asked for the best, most effective, or first control, select engineering controls (safer devices, sharps containers) over work practices and PPE. PPE is the last resort and is only used when exposure remains after other controls.

Tip 5: Remember the no-cost rule. Vaccination, PPE, training, post-exposure evaluation, and follow-up must all be provided at no cost to the employee. Any answer that shifts cost to the worker is incorrect.

Tip 6: Recapping is the classic trap. The correct answer is that contaminated needles are not recapped, bent, sheared, or removed unless no alternative exists, and then only with a mechanical device or one-handed scoop technique. Two-handed recapping is never acceptable.

Tip 7: Labels and colors. Biohazard labels are fluorescent orange or orange-red with contrasting lettering; red bags or containers may substitute for labels. Do not confuse these with other OSHA color codes (yellow for caution, etc.).

Tip 8: Declination form language is fixed. If a question asks about an employee refusing the HBV vaccine, the answer involves signing the Appendix A declination statement, and the employee retains the right to receive the vaccine later at no cost. The employer cannot require antibody screening before offering the vaccine.

Tip 9: Distinguish exposure determination from exposure incident. Exposure determination is the planning step done without regard to PPE and identifies jobs and tasks at risk. An exposure incident is an actual contact event that triggers medical follow-up.

Tip 10: Link the Needlestick Safety and Prevention Act to its three outcomes. Safer medical devices as engineering controls, annual documentation of device evaluation with front-line employee input, and the sharps injury log.

Tip 11: Read scenario questions for the trigger word. Words like reasonably anticipated signal coverage under the standard. Words like Good Samaritan or unanticipated may indicate a situation outside the standard, although OSHA still encourages post-exposure follow-up for Good Samaritan acts.

Tip 12: Confidentiality limits. The written opinion given to the employer after an exposure incident is restricted to vaccine indication and confirmation that the employee was informed of results. Specific diagnoses are not disclosed to the employer.

Tip 13: Recordability. Needlesticks and cuts contaminated with blood or OPIM are always OSHA 300 recordable and are treated as privacy concern cases. Splashes to mucous membranes are recordable only if they result in a diagnosed bloodborne illness or meet other recording criteria.

Quick Review Summary

- Standard: 29 CFR 1910.1030.
- Core pathogens: HBV (vaccine available, hardy), HCV (most common chronic, no vaccine), HIV (fragile, no vaccine).
- Universal precautions: treat all blood and OPIM as infectious.
- Written Exposure Control Plan reviewed annually with employee input on safer devices.
- Controls in order: engineering, work practice, PPE.
- HBV vaccine within 10 working days at no cost; signed declination if refused.
- Post-exposure: immediate confidential evaluation, source testing, 90-day sample hold, written opinion in 15 days.
- Training at assignment and annually; records 3 years.
- Medical records employment plus 30 years; sharps log 5 years.
- Labels fluorescent orange/orange-red or red bags/containers.
- Bleach 1:10 to 1:100 or EPA-registered tuberculocidal disinfectant.

Master these concepts and numbers, apply the hierarchy of controls, and remember that universal precautions means assuming every exposure is infectious, and you will handle any bloodborne pathogen question the ASP exam presents.