Creating an Exposure Control Plan for Your Organization (What OSHA Requires)

If your employees could reasonably come into contact with blood or other potentially infectious materials while performing their job, OSHA requires your organization to have a written Exposure Control Plan (ECP).

Many employers assume this only applies to hospitals or medical offices, but that’s not the case. Schools, childcare centers, manufacturing facilities, construction companies, gyms, and many other workplaces can all have situations where an employee might need to provide first aid or respond to an emergency.

An exposure control plan helps organizations prepare for those situations while protecting employees from serious infectious diseases such as Hepatitis B, Hepatitis C, and HIV.

Understanding what must be included in this plan is the first step toward OSHA compliance and a safer workplace.

What Is an Exposure Control Plan?

An Exposure Control Plan is a written document required under OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030). It outlines how an organization will:

• Identify potential exposure risks

• Protect employees from exposure

• Respond if exposure occurs

• Train staff on prevention procedures

The plan must be accessible to employees and reviewed and updated at least annually.

Step 1: Identify Job Roles with Potential Exposure

The first part of an exposure control plan identifies which job positions could reasonably expect exposure to blood or bodily fluids.

Examples may include:

• First aid responders

• School staff responsible for student injuries

• Coaches or athletic trainers

• Childcare workers

• Custodial staff cleaning bodily fluids

• Healthcare or dental staff

• Workplace safety team members

The plan should clearly list:

Job classifications with exposure risk

and

Tasks or procedures where exposure may occur

Examples of exposure tasks:

• Providing first aid or CPR

• Cleaning blood spills

• Handling contaminated materials

• Assisting injured employees

Step 2: Describe Engineering and Work Practice Controls

OSHA requires organizations to reduce exposure risk using engineering controls and safe work practices.

Examples include:

Engineering Controls

• Sharps disposal containers

• Biohazard waste containers

• Safety needles or devices

• Handwashing stations

Work Practice Controls

• Proper hand hygiene procedures

• Safe cleanup methods for blood spills

• Prohibiting eating or drinking in contaminated areas

• Safe handling of contaminated materials

These procedures should be clearly documented in the plan.

Step 3: Personal Protective Equipment (PPE)

Your plan must explain what PPE will be provided and when it must be used.

Common examples include:

• Disposable gloves

• CPR masks or breathing barriers

• Eye protection

• Face shields

• Gowns or protective clothing

The plan should state:

• Where PPE is located

• When it must be used

• How it should be disposed of

• Who is responsible for replacing it

Step 4: Hepatitis B Vaccination Policy

Under OSHA rules, employers must offer the Hepatitis B vaccination at no cost to employees who have occupational exposure.

Your exposure control plan must explain:

• Which employees qualify

• How they can receive the vaccine

• How declinations are documented

• The process for receiving the vaccine after initial refusal

This is a key compliance requirement many organizations overlook.

Step 5: Post-Exposure Procedures

Even with precautions, exposures can happen. Your exposure control plan must explain what to do if exposure occurs.

This section should include:

• Immediate first aid steps (washing, flushing, etc.)

• Reporting procedures

• Documentation of the incident

• Medical evaluation and follow-up

• Confidential recordkeeping

Quick response procedures help reduce health risks and ensure proper reporting.

Step 6: Training Requirements

Employees with potential exposure must receive bloodborne pathogens training.

Training must include:

• How bloodborne diseases are transmitted

• How exposure can occur in the workplace

• How to use PPE properly

• What to do if exposure happens

• Understanding the exposure control plan

Organizations often combine this with first aid or CPR training.

You can learn more about this type of training here:

👉 https://www.cpr411.com/bloodborne-pathogens 

Step 7: Communication and Warning Labels

OSHA also requires proper hazard communication.

Your exposure control plan should describe:

• Biohazard labeling requirements

• Warning signs for contaminated materials

• How regulated waste will be handled and disposed of

Biohazard labels must be used for items such as:

• Contaminated waste containers

• Sharps containers

• Laundry or materials with blood contamination

Step 8: Recordkeeping

Organizations must maintain documentation for:

• Employee training records

• Hepatitis B vaccination status

• Exposure incident reports

• Medical follow-up documentation

Proper recordkeeping is critical for both safety and OSHA compliance.

How Often Must an Exposure Control Plan Be Updated?

OSHA requires the plan to be:

• Reviewed at least once per year

• Updated whenever job tasks change

• Updated when new safety technologies become available

Regular review ensures the plan reflects the actual risks in your workplace.

Why Many Organizations Overlook This Requirement

Many employers assume they don’t need an exposure control plan because they don’t operate in healthcare. However, any workplace where employees may provide first aid or respond to injuries can fall under the standard.

That includes workplaces such as:

• Manufacturing facilities

• Schools and childcare centers

• Fitness centers

• Construction companies

• Camps and youth programs

• Churches and community organizations

Preparing ahead of time helps protect employees and ensures compliance if OSHA ever audits your workplace safety program.

✅ Bottom line:

An exposure control plan is not just paperwork. It is a structured system that helps organizations protect employees from infectious disease risks during emergencies.

Combined with proper training in first aid, CPR, and bloodborne pathogens safety, it creates a safer and more prepared workplace.