Creating & Operating an OSHA Bloodborne Pathogen Compliance Program
A Complete Legal & Practical Guide for
Health Care Providers
“The Only Complete Legal and Practical Guide to Building, Operating, and Defending an OSHA Bloodborne Pathogen Compliance Program”
John Fisher
Creating and Operating an OSHA Bloodborne Pathogen Compliance Program
A Complete Legal and Practical Guide for Health Care Providers
By John Fisher, Health Care Lawyer
First Edition · 2026
Text Discussion – 344 pages |Appendix Documents – 80 Pages | Total 424 Pages
OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030) is the most cited standard in health care enforcement. A single inspection of an unprepared health care facility can generate $50,000 to $300,000 or more in proposed penalties — with willful or repeat violations reaching $165,514 per instance. This book gives you everything you need to build a program that works before the inspector arrives.
Excerpt from Creating and Operating an OSHA Bloodborne Pathogen Compliance Program
The 8 Most Common OSHA BBP Citation Deficiencies
- Missing, inadequate, or outdated Exposure Control Plan
- No documented annual ECP review
- Failure to document non-managerial employee input in device selection
- Deficient or undocumented Hepatitis B vaccination program
- Incomplete or undocumented BBP training
- Sharps Injury Log not maintained separately from OSHA 300 Log
- Biohazard labels missing from refrigerators and freezers
- No post-exposure evaluation protocol — or protocol not followed
OSHA inspectors who enter a health care facility to audit BBP compliance follow a predictable checklist. They request the Exposure Control Plan first. They review the training records. They walk the facility looking for mislabeled refrigerators, overfull sharps containers, and evidence of two-handed needle recapping. They interview employees to ask whether they know what to do after a needlestick.
The Compliance Gap – Why Most Health Care Organizations Are Exposed
Organizations that have merely filed a compliance document somewhere — rather than building a functioning program — are consistently found to be deficient.
The citations that follow are not merely administrative. They are evidence of a failure to protect the people who show up every day to care for patients.
A single OSHA inspection of an unprepared health care facility can generate $50,000–$300,000+ in proposed penalties.
Creating and Operating an OSHA Bloodborne Pathogen Compliance Program
Written For Health Care Compliance Professionals, Directors, Officers, Owners, Health Care Providers and their advisors
Whether you’re building your first program or defending an existing one, this guide addresses your specific role.
Compliance Officers & Risk Managers
The go-to reference for building an inspection-ready BBP program from the ground up, with forms and templates ready to deploy immediately.
Health Care Attorneys & Legal Counsel
A complete legal analysis of 29 CFR 1910.1030, OSHA enforcement mechanics, citation classifications, and enforcement defense strategies.
Chief Nursing Officers & Directors of Nursing
Understand your legal obligations, your role in the annual ECP review, and how to connect clinical leadership to the compliance program.
Human Resources Directors
Master the hepatitis B vaccination program obligations, training record requirements, and the 30-year medical record retention mandate.
Infection Control Professionals
Integrate the OSHA BBP standard with CDC Standard Precautions, Joint Commission infection control standards, and your facility’s clinical quality program.
Hospital Administrators & CEOs
Understand the financial exposure your organization faces and the business case for investing in a genuine — not just paper — compliance program.
Deep Legal & Practical Guidance
What’s Inside: 12 Chapters of Creating OSHA Bloodborne Pathogen Compliance Programs
340 Pages
Chapters
◆ Front Matter
1 Legal Framework
2 Exposure Control Plan
3 Exposure Determination
4 Controls & PPE
5 Hepatitis B Vaccination
6 Post-Exposure Follow-Up
7 Labels & Training
8 Recordkeeping
9 Annual Review
10 Inspections & Defense
11 Special Topics
12 Culture of Compliance
The Case for Proactive Compliance
Opens with CDC statistics on needlestick injuries and the financial consequences of OSHA enforcement. Sets the stage for the legal and moral framework of the book. Provides a comprehensive roadmap for how to use the 15-document set and integrate it into your compliance program.
•385,000 annual sharps injuries in U.S. health care
•2026 penalty schedule ($16,550 serious / $165,514 willful)
•Book structure and how to use the 15-document set
•The human cost of BBP exposure
As of 2026, a single OSHA inspection of an unprepared health care facility can generate $50,000–$300,000 or more in proposed penalties, with the instance-by-instance citation policy capable of treating each affected employee as a separate violation.
Ready-to-Use Compliance Tools
10 Appendices — Complete, Ready-to-Use Compliance Forms and Templates
Every form is fully written and ready for immediate use. No fill-in-the-blank skeletons. No placeholder text. Every field, checkbox, table, and signature line is complete.
- Exposure Control Plan Template
- Exposure Determination Tables
- Engineering Control Evaluation
- Hepatitis B Vaccination Forms
- Post-Exposure Incident Forms
- BBP Training Records
- Sharps Injury Log
- Annual Program Review Checklist
- Annual Program Review Checklist
- OSHA Inspection Response Protocol
- Notice of Contest & Settlement
- Legal forms every employer needs when an OSHA citation arrives.
- Notice of Contest letter template
- Post-citation action timeline
- 10-provision ISA outline
- No-admission clause language
About the Author
John Fisher
Health Care Lawyer
John Fisher is a health care lawyer whose practice focuses on representing health care employers in OSHA enforcement proceedings and broader health care regulatory compliance matters. He has advised hospitals, physician practices, dental offices, long-term care facilities, home health agencies, and ambulatory surgical centers on developing, implementing, and defending OSHA compliance programs across every area of the health care regulatory landscape.
Fisher wrote this book because, in years of representing health care employers in OSHA enforcement proceedings, he saw the same pattern repeat itself: organizations that believed they were compliant — because they had filed a document — but that had never built a functioning program. The goal of this book is to close that gap between paper compliance and genuine protection, and to give every compliance professional who reads it the legal tools and operational frameworks to do so.
“Compliance is the floor, not the ceiling. The organizations with the lowest needlestick injury rates are not simply the ones that check compliance boxes — they are the ones that have built a culture in which every employee understands why the standard exists.”
— John Fisher,
Complete Package
Front Matter — Title Page, Copyright, Dedication, Foreword, Note from the Author, Table of Contents, Introduction
Chapter 1 — The Legal Framework of the Bloodborne Pathogens Standard
Chapter 2 — The Exposure Control Plan: The Heart of the Program
Chapter 3 — Exposure Determination and Covered Job Classifications
Chapter 4 — Engineering Controls, Work Practice Controls, and PPE
Chapter 5 — The Hepatitis B Vaccination Program
Chapter 6 — Post-Exposure Evaluation and Follow-Up
Chapter 7 — Hazard Communication, Labels, and BBP Training
Chapter 8 — Recordkeeping and the Sharps Injury Log
Chapter 9 — Annual Program Review and Evaluation
Chapter 10 — OSHA Inspections, Citations, and Enforcement Defense
Chapter 11 — Special Topics and Emerging Issues in BBP Compliance
Chapter 12 — Building a Culture of BBP Compliance
Conclusion, Glossary of 40+ Key Terms, Selected Bibliography, and Author Bio
Appendix A — Complete Exposure Control Plan Template
Appendix B — Exposure Determination Tables and Job Classification Forms
Appendix C — Engineering Control Evaluation and Selection Record
Appendix D — Hepatitis B Vaccination Forms (including OSHA-required declination language)
Appendix E — Post-Exposure Incident Report and Medical Evaluation Forms
Appendix F — BBP Training Records and Competency Verification Forms
Appendix G — Sharps Injury Log (29 CFR 1910.1030 Compliant)
Appendix H — Annual Program Review Checklist and Audit Tool (58 items)
Appendix I — OSHA Inspection Response Protocol and Document Request Tracker
Appendix J — Notice of Contest Letter Template and Informal Settlement Outline
Build the Program That Protects Your Workers — Before OSHA Asks to See It
The Bloodborne Pathogens Standard has been the most cited OSHA standard in health care for three decades. The forms have been collected, the citations have been issued, and the penalties have been paid — by organizations that thought they were compliant. This book gives you the legal framework, the practical tools, and the ready-to-use forms to build a genuine compliance program. Every chapter is fully written. Every form is complete. Every template is ready to customize.
This publication is designed to provide accurate and authoritative information regarding the subject matter covered. It is sold with the understanding that the author is not engaged in rendering legal, accounting, or other professional services. If legal advice or other expert assistance is required, the services of a competent professional should be sought. All penalty amounts reflect OSHA’s 2026 penalty schedule.