Quick Answer
OSHA requires bloodborne pathogens training for every employee with occupational exposure to blood, at initial assignment and at least annually thereafter, covering 14 specific content elements plus an opportunity for interactive questions and answers. Here is exactly what the standard requires, who is covered, how long records must be kept, and how teams deliver it.
Bloodborne pathogens training is required by the OSHA bloodborne pathogens standard, 29 CFR 1910.1030, for every employee with reasonably anticipated occupational exposure to blood or other potentially infectious materials. Employers must provide it at the time of initial assignment to a task where exposure may occur, and at least annually thereafter, within one year of the previous training. The program must cover the 14 content elements listed at 1910.1030(g)(2)(vii), it must be free and delivered during working hours, and it must include an opportunity for interactive questions and answers with a knowledgeable trainer. Training records are kept for three years.
Those rules sound simple until you run them across several hundred employees, multiple shifts, and a dozen job classifications with different exposure profiles. This guide covers who is included, what you must teach, why the interactive questions clause shapes your delivery model, how the Exposure Control Plan connects to training, and how teams standardize the didactic portion.
Who Needs Bloodborne Pathogens Training?
Coverage is not set by job title or industry. It is set by the exposure determination required at 1910.1030(c)(2), which every covered employer must prepare in writing. It lists job classifications where all employees have occupational exposure, classifications where only some do, and the specific tasks that create exposure for that second group.
The detail most teams miss is 1910.1030(c)(2)(ii): the determination must be made without regard to the use of personal protective equipment. You cannot exclude a phlebotomist because they always wear gloves. The test is whether exposure is reasonably anticipated absent protection.
That is why coverage reaches well beyond clinical roles. OSHA's Bloodborne Pathogens and Needlestick Prevention page notes that first responders and housekeeping personnel in some industries may be at risk alongside nurses and other healthcare personnel. In practice, determinations routinely capture environmental services, laundry, lab couriers, correctional officers, school nurses, designated first-aid responders, tattoo artists, and staff who service sharps containers.
Healthcare organizations usually fold BBP into a wider stack worth mapping first: see healthcare compliance training beyond HIPAA and the complete guide to compliance training. Where BBP sits inside a general safety program instead, see safety and EHS training with AI video.
How Often Is Bloodborne Pathogens Training Required?
Annual is the floor, not the whole answer. The standard sets four triggers, and two are easy to miss during an inspection.
| Trigger | Citation | Deadline |
|---|---|---|
| Initial assignment to a task with occupational exposure | 1910.1030(g)(2)(ii)(A) | Before the employee performs the task |
| Annual retraining | 1910.1030(g)(2)(ii)(B) and (g)(2)(iv) | Within one year of the previous training |
| New or modified tasks or procedures affecting exposure | 1910.1030(g)(2)(v) | When the change occurs; may be limited to the new exposure |
| Hepatitis B vaccination offer, which follows training element (g)(2)(vii)(I) | 1910.1030(f)(2)(i) | Within 10 working days of initial assignment |
Two clarifications. "Annually" at (g)(2)(iv) means within one year of that employee's previous training, not within your calendar or fiscal year, so a cohort trained in March cannot slide to June because that is where the compliance calendar has room. And (g)(2)(v) is event-driven: adopt a new safety-engineered sharp or move a procedure to a new unit, and affected employees need training on that change even if their annual date is nine months out.
What the OSHA Standard Requires You to Cover
Paragraph (g)(2)(vii) is a checklist, and compliance officers treat it as one. A program missing an element is deficient no matter how good the rest of it is.
| # | Required element | Citation |
|---|---|---|
| 1 | Accessible copy of the regulatory text plus an explanation of its contents | (g)(2)(vii)(A) |
| 2 | General explanation of the epidemiology and symptoms of bloodborne diseases | (g)(2)(vii)(B) |
| 3 | Explanation of the modes of transmission | (g)(2)(vii)(C) |
| 4 | Explanation of the employer's Exposure Control Plan and how to obtain a copy | (g)(2)(vii)(D) |
| 5 | Methods for recognizing tasks that may involve exposure | (g)(2)(vii)(E) |
| 6 | Use and limitations of engineering controls, work practices, and PPE | (g)(2)(vii)(F) |
| 7 | Types, use, location, removal, handling, decontamination, and disposal of PPE | (g)(2)(vii)(G) |
| 8 | Basis for PPE selection | (g)(2)(vii)(H) |
| 9 | Hepatitis B vaccine information, including that it is offered free of charge | (g)(2)(vii)(I) |
| 10 | Actions to take and persons to contact in an exposure emergency | (g)(2)(vii)(J) |
| 11 | Procedure to follow if an exposure incident occurs, including reporting | (g)(2)(vii)(K) |
| 12 | Post-exposure evaluation and follow-up the employer must provide | (g)(2)(vii)(L) |
| 13 | Explanation of signs, labels, and color coding | (g)(2)(vii)(M) |
| 14 | Opportunity for interactive questions and answers with the trainer | (g)(2)(vii)(N) |
Three requirements wrap around that list. Material must suit the education level, literacy, and language of the employees, per (g)(2)(vi). The trainer must be knowledgeable in the subject matter as it relates to that specific workplace, per (g)(2)(viii). And employees who decline the hepatitis B vaccine must sign the declination statement in Appendix A to 1910.1030, a separate record from the training roster.
Element 4 is site-specific by definition, so a generic off-the-shelf course cannot satisfy it. It does not know what your Exposure Control Plan says or where an employee goes to read it.
The Interactive Questions Requirement and What It Means for Video
Element 14 decides your delivery model, and OSHA has interpreted it repeatedly.
In a 1996 letter on the appropriateness of video presentations in bloodborne training, OSHA stated that training an employee solely by film or video without the opportunity for discussion is a violation, while video is "certainly appropriate for use as an aid in training" when supplemented with the required site-specific information and a person accessible for interaction.
A 2003 interpretation on electronic mail systems and bloodborne pathogens training went further. "Interactive" means direct access to a qualified trainer during the session. Email does not qualify unless the trainer answers at the time the question arises, and a referral to the exposure control coordinator does not qualify unless that person is immediately available and meets the trainer standard at (g)(2)(viii).
A 2008 interpretation on trainer requirements and access to the trainer confirmed the flexible half: the trainer need not be physically in the classroom, and need not be a healthcare professional, only knowledgeable in the subject matter as it applies to that workplace.
Together these produce a clear architecture. The didactic content (epidemiology, transmission modes, PPE, engineering controls, post-exposure procedure) can be standardized video every employee sees identically. The live channel, whether a webinar block, a staffed phone line, or a trainer on chat, has to be open while the employee is training. Video plus an open Q and A channel plus site-specific content is compliant. Video alone is not.
The Exposure Control Plan and Its Annual Review
Training element 4 points at a document, so the document has to exist and be current. Paragraph (c)(1) requires a written Exposure Control Plan containing the exposure determination, the schedule and method of implementation for methods of compliance, hepatitis B vaccination and post-exposure follow-up, hazard communication and recordkeeping, plus the procedure for evaluating circumstances around exposure incidents.
Paragraph (c)(1)(iv) requires the plan to be reviewed and updated at least annually and whenever new or modified tasks affect exposure. That review must reflect technology changes that reduce exposure and must document annually that the employer considered and implemented appropriate commercially available safer medical devices, with input from non-managerial direct-care employees under (c)(1)(v).
The practical consequence: your annual plan review and your annual training refresh should be one coordinated cycle, not two calendar events that drift apart. When the review swaps a device or changes a waste-handling step, that triggers additional training under (g)(2)(v). Teams running the two in sync catch it automatically, which is why many pair BBP with their infection control training program.
Bloodborne Pathogens Recordkeeping: What to Keep and How Long
Paragraph (h) sets three retention clocks, and confusing them is a common finding.
| Record type | Required contents | Retention | Citation |
|---|---|---|---|
| Training records | Dates of sessions, contents or summary, names and qualifications of trainers, names and job titles of all attendees | 3 years from the date of training | 1910.1030(h)(2) |
| Medical records | Vaccination status and dates, results of exams and follow-up, the healthcare professional's written opinion, information provided to that professional | Duration of employment plus 30 years, per 29 CFR 1910.1020 | 1910.1030(h)(1) |
| Sharps injury log | Type and brand of device, department or work area, explanation of how the incident occurred, recorded to protect employee confidentiality | The period required by 29 CFR 1904.33 | 1910.1030(h)(5) |
Note the specificity of the training record. A completion timestamp from a learning platform is not sufficient on its own, because the standard also requires the contents or a summary of the session and the qualifications of the person who conducted it. If you deliver by video, keep the script or module outline and the trainer's credentials attached to the record. Medical records must stay confidential and cannot be disclosed without the employee's written consent except as law requires.
Is There a Bloodborne Pathogens Certification?
There is no OSHA-issued bloodborne pathogens certification, and OSHA does not accredit BBP courses or certify individuals. What vendors sell as "bloodborne pathogens certification" is a course completion certificate: useful documentation, but not by itself proof of compliance.
Compliance rests with the employer and is judged against the standard. Was training provided at initial assignment and annually, did it cover all 14 elements including your Exposure Control Plan, was a knowledgeable trainer accessible for questions, and do records contain all four required data points? A third-party certificate that lacks your facility's plan, device inventory, and incident reporting path leaves several of those unchecked.
Standardizing the Didactic Content With Knowlify
The bottleneck for most BBP programs is production, not regulation. The 14 required elements already exist in your Exposure Control Plan, PPE policy, and post-exposure procedure. Turning those into training every shift receives identically is the work, and rebuilding it whenever a device changes is what makes annual refreshers expensive.
Book a demo handles that step. Upload the Exposure Control Plan or the policy PDF and it reads the document, writes a narrated script, and generates an animated explainer you refine by typing plain-language edits. Because the document stays the single source of truth, the annual review that updates the plan is also what regenerates the video, so the module and the plan do not drift apart. That frees your qualified trainer to staff the live Q and A channel element 14 requires instead of delivering the same lecture nine times to cover every shift. Our guidance on ideal video length by use case covers segmenting a long module.
Key Takeaways
- Coverage is set by the written exposure determination at 1910.1030(c)(2), made without regard to PPE, so it reaches housekeeping, first responders, and other non-clinical roles.
- Training is due at initial assignment and within one year of each employee's previous session, plus additional training whenever new or modified tasks change exposure.
- The program must cover all 14 elements at (g)(2)(vii), including a site-specific explanation of your own Exposure Control Plan.
- Video and online modules are acceptable, but OSHA has repeatedly held that video alone is a violation. A knowledgeable trainer must be directly accessible during the session.
- Training records run 3 years and must include dates, content summary, trainer qualifications, and attendee names and job titles. Medical records run employment plus 30 years.
- The Exposure Control Plan must be reviewed at least annually, with documented consideration of safer medical devices and input from frontline clinical staff.
FAQ
How often is bloodborne pathogens training required by OSHA?
At the time of initial assignment to a task where occupational exposure may occur, and at least annually thereafter. Under 1910.1030(g)(2)(iv), annual training must be provided within one year of the employee's previous training, not simply once per calendar year. Additional training is required whenever new or modified tasks affect exposure, and that session may be limited to the new exposure created.
Can bloodborne pathogens training be done online or by video?
Yes, but not by video alone. OSHA's 1996 interpretation states that training solely by film or video without an opportunity for discussion violates 1910.1030(g)(2)(vii)(N). The 2003 and 2008 interpretations clarify that the trainer does not need to be physically present but must be directly accessible during the session. Email answered later does not satisfy the requirement, and neither does a referral to someone unavailable.
Who is required to take bloodborne pathogens training?
Every employee with reasonably anticipated occupational exposure to blood or other potentially infectious materials, as identified in the employer's written exposure determination. That determination is made without regard to PPE, so gloves and gowns exclude no one. Beyond clinicians, it commonly covers environmental services, laundry, lab couriers, first responders, correctional officers, school health staff, and tattoo artists.
How long must bloodborne pathogens training records be kept?
Three years from the date the training occurred, under 1910.1030(h)(2)(ii). Each record must include the training dates, the contents or a summary of the session, the names and qualifications of the people who conducted it, and the names and job titles of everyone who attended. Employee medical records under paragraph (h)(1) are separate and run for the duration of employment plus 30 years.
Is bloodborne pathogens certification issued by OSHA?
No. OSHA does not issue, accredit, or endorse bloodborne pathogens certifications. Completion certificates from training vendors document that someone finished a course, but compliance is assessed against the employer's program: timing of training, coverage of all 14 required elements including your own Exposure Control Plan, access to a knowledgeable trainer, and complete recordkeeping.
References
- OSHA bloodborne pathogens standard, 29 CFR 1910.1030
- Bloodborne Pathogens and Needlestick Prevention
- healthcare compliance training beyond HIPAA
- complete guide to compliance training
- safety and EHS training with AI video
- Appendix A to 1910.1030
- appropriateness of video presentations in bloodborne training
- electronic mail systems and bloodborne pathogens training
- trainer requirements and access to the trainer
- infection control training program
- 29 CFR 1910.1020
- Book a demo
- ideal video length by use case