Bloodborne Pathogens Exposure Control Plan Template (US)
An employer with employees who have reasonably anticipated occupational exposure to blood or other potentially infectious materials (OPIM) needs a written, accessible exposure control plan (ECP). It must identify exposed jobs and tasks, specify how the employer implements the OSHA Bloodborne Pathogens Standard, and be reviewed at least annually and when tasks or positions change. Do not assume every workplace needs this plan just because someone may occasionally see an injury; evaluate exposure by job and task under 29 CFR 1910.1030. Conversely, a job title that sounds low risk does not exempt workers whose assigned duties foreseeably expose them.
OSHA publishes its own model Exposure Control Plan and model plans publication. Use those and the regulation as controlling references. The form below is a practical *adaptation worksheet* for the actual facility; it is not an OSHA-approved plan or a substitute for a competent occupational health and safety review. Federal OSHA and an OSHA-approved State Plan may differ; check the jurisdiction of the workplace before release.
Plan identification and exposure determination
| Field | Complete for the employer |
|---|---|
| Employer/facility, address and covered locations | |
| Plan administrator, role, contact and alternate | |
| Effective date, review date and version | |
| Where workers can access the plan during each shift | |
| Roles with occupational exposure in all positions in the classification | |
| Roles where some positions have occupational exposure | |
| Tasks/procedures for the “some” roles that create exposure | |
| Method of obtaining worker input, if the sharps provision applies |
OSHA requires exposure determination without considering PPE: a glove does not make an exposure-prone task disappear from the list. For partial-exposure job classes, identify the tasks and procedures. Describe actual work, such as drawing blood, handling contaminated sharps, cleaning equipment or responding as a designated first-aider, rather than writing “all employees” without analysis. 29 CFR 1910.1030(c)(2).
Implementation schedule and responsible people
| Required plan element | Facility method/location | Responsible role | How workers receive information | Evidence/review date |
|---|---|---|---|---|
| Universal precautions | ||||
| Engineering and work-practice controls | ||||
| Handwashing, sharps and specimen handling | ||||
| PPE selection, supply, cleaning/disposal | ||||
| Housekeeping, laundry and regulated waste | ||||
| Hepatitis B vaccination offer | ||||
| Exposure incident reporting and evaluation | ||||
| Hazard labels/signs and training | ||||
| Medical, training and sharps-injury records |
The ECP must include the schedule and method of implementation for the applicable standard sections and the procedure for evaluating circumstances surrounding exposure incidents. Write the site method: which sharps container, where it is, who replaces it and what happens if it is full. A list of regulatory headings alone is not a working plan. 29 CFR 1910.1030(c)(1).
Controls and safer devices
Apply universal precautions and use engineering and work-practice controls to eliminate or minimize exposure. Select sharps disposal, needleless or safer devices where applicable; describe how workers use them, how exceptions are assessed and how damaged supplies are replaced. PPE is necessary where exposure remains, but do not describe it as the sole control. OSHA requires annual review to reflect changes in technology and annual documentation of consideration and implementation of appropriate safer medical devices. For employers with non-managerial direct patient-care employees potentially exposed to contaminated-sharps injuries, document their input into selecting effective controls. 29 CFR 1910.1030(c)(1)(iv)–(v); OSHA standard overview.
Device/work practice: ___ . Where used: ___ . Workers consulted: ___ . Alternative considered: ___ . Reason chosen/rejected: ___ . Date and reviewer: ___ . Apply the sharps-input requirement to the employers and workers it actually covers; it is not a universal rule that every office must form a sharps committee.
Vaccination, exposure response and records
The plan should specify who offers the hepatitis B vaccination, how eligible workers are informed, and how decline/acceptance is handled under the standard. Following an exposure incident, the employer must arrange prompt confidential post-exposure evaluation and follow-up under the rule. Keep emergency contact and reporting steps readily available to affected workers. Do not put individual diagnosis, test result or medical record into a general safety-program file that all supervisors can view. 29 CFR 1910.1030(f), (h).
Immediate response card: Provide appropriate first aid; report to ___ by ___; contact designated healthcare professional ___; preserve the incident facts needed for evaluation; protect confidential medical information. The healthcare professional determines clinical care. This template does not give treatment instructions or substitute for emergency medical advice.
Record training for exposed employees as required by the standard, including at initial assignment and at least annually, and include the required content and interactive questions. Maintain medical, training and, where applicable, sharps-injury records under their respective retention and confidentiality rules. Refer to the current text of 1910.1030(g)(2) and (h) for precise time periods; do not apply one generic retention date to all records.
Annual review and change log
| Review question | Finding/action | Owner | Completed/date |
|---|---|---|---|
| New or modified jobs and tasks with exposure? | |||
| New technology or safer devices evaluated? | |||
| Direct patient-care worker input documented where required? | |||
| Engineering/work-practice controls effective in practice? | |||
| Exposure incidents analysed and procedures changed? | |||
| Vaccination, training, labels and records current? | |||
| State Plan or federal standard changes checked? |
Approved by: ___ . Next review due: ___ . Where revised plan is accessible: ___ . An annual review is a floor, not a reason to wait when a new procedure introduces exposure tomorrow.
Example: multi-site cleaning contractor
A contractor assigns some workers to clean ordinary offices and others to decontaminate medical treatment rooms. The exposure determination identifies the tasks and affected job classifications rather than automatically including or excluding every cleaner. The plan describes the site's sharps and regulated-waste arrangements, PPE, training, vaccination offer and incident response. Each host site shares its local controls. A generic template that names no locations, tasks or responsible people cannot guide the crew.
Page ownership and Complys boundary
This page gives a facility-adaptation worksheet, links directly to OSHA's official model, and explains which entries must be site-specific. It does not reproduce the regulator's entire model as if Complys authored it. Targeted search found no exact live Complys US ECP template; final repository and in-flight owner search remains. The observed US Complys host is a neutral link. The proposed /us/written-safety-program-software route and any claim of automated plan generation, vaccine tracking or confidential medical record handling require direct product and access-control proof before CTA. Software cannot make a deficient plan compliant merely by formatting it.
Primary sources reviewed 6 October 2026: 29 CFR 1910.1030, OSHA model ECP, OSHA model-plan publication, standard overview. Writer-side QA: exposure determination, controls, annual review, applicable sharps input, vaccination, incident response and records included; State Plan and product gates explicit. Disposition: READY subject to publication gate.