Who Needs a Bloodborne Pathogen Exposure Control Plan?
Most California employers assume bloodborne pathogen rules apply to hospitals, dental offices, and tattoo shops. They miss the wider net Cal/OSHA actually casts.
Most California employers assume bloodborne pathogen rules apply to hospitals, dental offices, and tattoo shops. They miss the wider net Cal/OSHA actually casts.
Under Title 8 CCR §5193, the trigger is not your industry. It is whether any of your employees can reasonably anticipate skin, eye, mucous membrane, or parenteral contact with blood or other potentially infectious materials (OPIM) as part of their job. If even one job classification meets that test, you owe a written Exposure Control Plan, annual training, and free Hepatitis B vaccination. You also owe post-exposure procedures and recordkeeping that follows the employee for the duration of employment plus 30 years.
This page is for the California employer trying to figure out whether the standard applies. If you are an individual looking for an online certificate to work in a clinic, you are in the wrong place. If you run a facility and need to know whether your operation needs a Cal/OSHA-compliant program, keep reading.
For the full overview of the standard and what a written plan contains, see our bloodborne pathogen exposure control plan pillar.
The Cal/OSHA Test: “Occupational Exposure”
The legal threshold under 8 CCR §5193 is occupational exposure: reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or OPIM during the performance of an employee’s duties. The federal analog (29 CFR 1910.1030) reads the same way, but in California you are regulated by Cal/OSHA, and 8 CCR §5193 is the operative text.
Two phrases in that definition do most of the work:
- Reasonably anticipated. You do not need daily exposure for the standard to apply. A designated first-aid responder who renders aid once a quarter still has reasonably anticipated contact with blood.
- Other potentially infectious materials (OPIM). This includes saliva in dental procedures, several specific body fluids, any body fluid visibly contaminated with blood, unfixed human tissue, and certain laboratory cultures or solutions. For a plain-English breakdown, see what is a bloodborne pathogen.
If even one employee performs duties that meet either branch of the test, the standard applies to your facility.
Roles Outside Healthcare That Trigger the Standard
When we walk an industrial or commercial facility for an exposure determination, these are the job classifications that most often land in the “covered” column without the employer realizing it:
| Job role | Why it is covered under 8 CCR §5193 |
|---|---|
| Designated first-aid responders | Rendering aid is a job duty. Reasonably anticipated blood contact. |
| Emergency Response Team members | On-site response includes trauma and bleeding scenarios. |
| Custodial and janitorial staff | Cleaning restrooms, locker rooms, and break areas; cleaning up needle-sticks, sharps, and bodily-fluid spills. |
| Laundry staff handling contaminated linens | Direct contact with OPIM-bearing fabrics. |
| Laboratory workers | Handling unfixed tissue, bloodborne cultures, or certain testing samples. |
| Maintenance personnel | Cleaning up sharps or fluids as part of facility upkeep. |
| Security and supervisory staff with documented response duties | If response to injuries is in the job description or training plan, exposure is foreseeable. |
The pattern is consistent: it is not the industry that triggers coverage. It is whether anyone on your roster is expected to respond when someone bleeds, or to clean an area where blood or OPIM may be present.
Three facility types we see most often outside healthcare:
- Food processors and distribution warehouses. Knife cuts, forklift injuries, and cleanup of restrooms used by the public are common. Designated first-aid responders are nearly universal.
- Manufacturers with a first-aid program. As soon as the facility designates first-aid responders or an emergency response team, the standard follows.
- Property managers and large commercial sites. Janitorial staff routinely encounter blood, sharps, and other OPIM in public restrooms and common areas.
“Good Samaritan” vs. Designated Responder
A common misread: if any employee is allowed to render first aid, the standard applies.
Cal/OSHA draws a line between an employee who renders aid as a Good Samaritan (no designation, no expectation, no assigned training) and an employee whose job description, written policy, or training assignment makes response a duty. The first is generally not covered. The second is.
This is one reason the exposure determination matters. If your safety program lists trained first-aid responders, or your Injury and Illness Prevention Program (IIPP) names an emergency response team, those people are covered and the rest of the program flows from there. If you have never made that designation, you may not be covered. Either way, the determination needs to be in writing so the position is defensible if an inspector asks.
The Hepatitis B Vaccination Obligation
This is the requirement that catches most California employers off guard: if the standard applies, you must offer the Hepatitis B vaccine series to every covered employee, at no cost to the employee, within a short window of initial assignment to a job with occupational exposure.
You do not have to require vaccination. Employees who decline must sign a specific declination form whose language is set by the standard. If a declining employee later changes their mind, you owe them the vaccine then.
Two practical points clients regularly miss:
- The declination form’s exact wording matters. A generic liability waiver does not satisfy 8 CCR §5193.
- Medical records documenting offer, acceptance, and declination are confidential and must be retained for the duration of employment plus 30 years. The records are kept separate from the personnel file.
You do not administer the vaccine in-house. You arrange it through an occupational health provider and pay for it.
What a Compliant Program Contains
If the standard applies to your facility, the written Exposure Control Plan must include the following elements drawn directly from 8 CCR §5193:
- An exposure determination listing every covered job classification and the tasks that involve occupational exposure
- Methods of compliance: engineering controls (sharps containers, biohazard labeling), work-practice controls (handwashing, splash minimization), and PPE selection
- A schedule and procedure for housekeeping, regulated-waste handling, and contaminated laundry
- A Hepatitis B vaccination program with the declination form built in
- Post-exposure evaluation and follow-up procedures, including the source-individual evaluation process
- Hazard communication: labels, signs, and color-coding
- A training program tailored to the exposure determination (covered in our bloodborne pathogen training requirements guide)
- Recordkeeping: medical records for employment plus 30 years, training records, and a sharps injury log where applicable
The plan must be reviewed and updated at least annually and whenever new tasks, procedures, or job classifications affect exposure.
How We Figure Out Whether the Standard Applies to You
When a California facility calls and is not sure whether 8 CCR §5193 applies, the first step is the exposure determination. Our consultant comes to your site and works through a structured interview that covers:
- Which job titles have routine vs. occasional vs. no exposure
- Where blood or OPIM could realistically be present (restrooms, locker rooms, break areas, response scenarios, lab areas, laundry)
- Existing first-aid or emergency-response designations and the policies that created them
- Engineering and work-practice controls already in place
- PPE in use by role
- Vaccination and post-exposure medical-provider relationships, if any
- Existing decontamination, spill cleanup, and regulated-waste procedures
If the determination shows the standard applies, we build the written plan, the training scope, and the recordkeeping framework around what is actually happening at your site. If it does not apply, we document the reasoning so you have a defensible record if Cal/OSHA ever asks why no plan exists.
When This Comes Up
Three common entry points we see:
A safety audit, IIPP review, or gap assessment flags missing BBP coverage for a first-aid team or emergency response team.
A new RFP, customer contract, or insurance application asks for a written Exposure Control Plan as a condition of doing business.
Someone in HR or Safety notices the Hepatitis B vaccination obligation in a training matrix and asks whether the facility owes it.
In all three cases, the work is the same: a Cal/OSHA-compliant exposure determination and a written plan that maps to your actual operations, not a generic template with your logo on it.
Trusted throughout California
BSY started working with CDMS last year after our in-house EHS person departed the company. CDMS reviewed our existing operational permits as well as any additional Federal, State and Local regulations that could apply and helped us to create a comprehensive compliance calendar to track regulatory deadlines and submittal due dates. The CDMS team does an excellent job of tracking everything and can be relied upon to complete the forms accurately and assist with submittals, allowing me to focus on our business.
Speak with a CDMS EHS expert
Tell us about your facility and your deadline. You’ll get a clear read on what applies and a scoped plan to handle it.