Welcome to Lesson 3 of MedRise's Bloodborne Pathogens Training Course
Welcome to Lesson 3 of the MedRise Bloodborne Pathogens Training Course.
In this lesson, we will cover the Exposure Control Plan (ECP) in detail — one of the most important components of bloodborne pathogens safety and a mandatory requirement for OSHA compliance under 29 CFR 1910.1030(c).
Understanding how to develop, implement, and maintain an Exposure Control Plan is critical for ensuring workplace safety, reducing employee exposure to bloodborne pathogens, and meeting federal regulatory standards.
What Is an Exposure Control Plan (ECP)?
An Exposure Control Plan (ECP) is a written program developed by employers to outline the protective measures they will use to eliminate or minimize employee exposure to bloodborne pathogens and other potentially infectious materials (OPIM).
The OSHA Bloodborne Pathogens Standard mandates that every employer with employees who have occupational exposure must create and maintain an ECP.
This plan is not a one-size-fits-all document. It must be specific to the facility, the types of tasks performed, the materials handled, and the risks faced by employees in that particular work environment.
The ECP must be accessible to employees at all times, either by providing a physical copy or offering electronic access without restriction.
Developing a comprehensive Exposure Control Plan is a key focus of any high-quality Bloodborne Pathogens Trainingprogram and a fundamental step toward achieving Bloodborne Pathogens Training.
Purpose of the Exposure Control Plan
The purpose of the Exposure Control Plan is to:
Identify employees who face occupational exposure risks.
Define the tasks, procedures, and job classifications where exposure may occur.
Outline specific methods to prevent and control exposure.
Establish procedures for evaluating exposure incidents and implementing post-exposure follow-up.
Provide documentation that OSHA inspectors can review during compliance audits.
By requiring an Exposure Control Plan, OSHA ensures that employers proactively address hazards rather than reacting only after an exposure event occurs.
Elements Required in a Compliant Exposure Control Plan
To be fully compliant with OSHA 29 CFR 1910.1030(c)(1), an Exposure Control Plan must include the following elements:
1. Exposure Determination
The plan must include an exposure determination that identifies all job classifications, tasks, and procedures where occupational exposure to bloodborne pathogens occurs.
Category 1: Job classifications where all employees have occupational exposure (e.g., nurses, phlebotomists).
Category 2: Job classifications where some employees have occupational exposure depending on specific tasks.
The exposure determination must be made without regard to the use of personal protective equipment — that is, even if PPE is worn, the task should still be considered as involving exposure if it meets the criteria.
2. Schedule and Method of Implementation
The ECP must specify how the employer will implement each requirement of the Bloodborne Pathogens Standard, including:
Engineering controls and work practice controls: Description of the controls used (such as sharps disposal systems, safer needle devices) and how they are implemented.
Personal Protective Equipment (PPE): The types of PPE provided, procedures for use, cleaning, storage, and disposal.
Housekeeping: Methods for cleaning and disinfecting surfaces, equipment, and disposal of contaminated waste.
Hepatitis B vaccination program: Offering the vaccine at no cost to all employees at risk.
Post-exposure evaluation and follow-up: Steps taken after an exposure incident, including medical evaluations, source testing, and counseling.
The ECP should be detailed, specifying who is responsible for carrying out each action and how those actions are conducted.
3. Communication of Hazards
The ECP must describe how the employer will ensure that warning labels, signs, and color-coding practices are used appropriately on containers, equipment, and areas where bloodborne pathogens may be present.
4. Recordkeeping
The plan must include provisions for maintaining accurate medical and training records as required by OSHA’s Bloodborne Pathogens Standard.
Recordkeeping ensures documentation of compliance and provides critical information for post-exposure management.
5. Procedures for Evaluating Exposure Incidents
The Exposure Control Plan must detail the procedures for investigating and documenting exposure incidents, including:
The route(s) of exposure
The circumstances under which the exposure occurred
Identification of controls in place at the time
Recommendations for preventing similar incidents in the future
The use of a Sharps Injury Log is recommended and required for employers with more than 10 employees when a percutaneous (sharp-related) injury occurs.
Review and Updating Requirements
The Exposure Control Plan is not a static document.
According to 29 CFR 1910.1030(c)(1)(iv), the ECP must be:
Reviewed and updated at least annually
Updated whenever new tasks, procedures, or employee positions affect occupational exposure
Modified when new or improved engineering controls (e.g., safer medical devices) become available
Failure to maintain and update the ECP can result in OSHA citations and increased risk to employee health.
Thus, maintaining a current and effective Exposure Control Plan is an essential step emphasized throughout any reputable Bloodborne Pathogens Training program, including MedRise’s course.
Best Practices for an Effective Exposure Control Plan
While OSHA defines the minimum required elements, organizations committed to excellence in safety often go beyond basic compliance.
Best practices for Exposure Control Plans include:
Assigning a dedicated Infection Control Officer to oversee the plan’s implementation.
Conducting regular training refreshers more often than the annual minimum.
Soliciting feedback from frontline workers about potential hazards and equipment needs.
Using digital tracking systems for incident reporting and ECP updates.
Integrating Exposure Control Plans into broader occupational health and safety programs.
By creating a living, evolving Exposure Control Plan, employers can provide greater protection to employees while enhancing organizational efficiency and compliance.
Summary of Lesson 3: Building and Managing the Exposure Control Plan (ECP)
In this module, you have learned that the Exposure Control Plan is the backbone of an organization’s efforts to protect employees from bloodborne pathogens.
A compliant Exposure Control Plan identifies occupational exposure risks, details protective measures, outlines procedures for post-exposure management, and establishes recordkeeping practices.
The ECP must be reviewed and updated annually or whenever new exposures are introduced.
Understanding and applying the principles of a strong Exposure Control Plan is a crucial part of completing your Bloodborne Pathogens Training and maintaining a safe, legally compliant workplace.
In the next module, we will explore Engineering Controls and Work Practice Controls, the frontline defenses against bloodborne pathogen exposures.
Lesson 3 Knowledge Check: Mini-Quiz
Question 1:
What is the primary purpose of the Exposure Control Plan?
Answer: To outline procedures to eliminate or minimize employee exposure to bloodborne pathogens.
Question 2:
How often must the Exposure Control Plan be reviewed and updated?
Answer: At least annually, or whenever new hazards are introduced.
Question 3:
True or False: An Exposure Control Plan only needs to be updated when an employee is injured.
Answer: False — it must also be updated when tasks, procedures, or job classifications change.
Part of the free MedRise Bloodborne Pathogens Training, based on OSHA 29 CFR 1910.1030. Not issued or approved by OSHA. Education only, not legal or medical advice.