Free Bloodborne Pathogens Exposure Control Plan Template (2026 Update)

A study found that some American healthcare workers are not adequately trained for, nor protected from bloodborne pathogens. 

The report discovered specifically that 28% of privately owned dental practices did not have a site-specific written bloodborne pathogens exposure control plan (ECP). Of this 28% – half of that number declared no intention to implement an ECP within the next 12 months.  

OSHA’s 29 CFR 1910.1030 bloodborne pathogens standard was created to safeguard workers in the United States from infectious diseases found in blood and other potentially infectious materials (OPIM). The standard mandates an exposure control plan be in place to protect workers.

What is a bloodborne pathogens exposure control plan?

An Exposure Control Plan (ECP) is a written document created by the employer that outlines how they will protect their workers from bloodborne pathogens. It is a required element of compliance with the Bloodborne Pathogens Standard.

Without an ECP, the employer has no program and there is little hope of properly protecting their employees. Additionally, not having an ECP is a violation of federal law – the employer will be deemed non-compliant and potentially fined.

Additionally, not having an ECP is a violation of Federal law, so the employer will be deemed ‘non-compliant’ and potentially fined.  

With all of this in mind, you have probably realized that if you are an employer, it’s critical that you have an ECP. But what do you need to put in it? Below there is a short Exposure Control Plan FAQ that tells you what, at a minimum, you need to include.

What to include in your bloodborne pathogen exposure control plan

At a minimum, a compliant ECP must address the following elements:

Exposure determination

A list of job classifications and tasks where occupational exposure to blood or OPIM may occur. Include department and task details for each role.

Methods of implementation and control

There are several components that you will need to include in your ECP to reduce the potential exposure risk for employees including:  

• Engineering controls and work practices: Sharps disposal, safer medical devices, work practice controls, employee involvement
• Personal protective equipment (PPE): Gloves, gowns, face protection, goggles. Must be provided at no cost to employees
• Housekeeping: Procedures for handling, cleaning, and disposing of contaminated materials. Spill cleanup protocols
• Laundry: Proper handling and containment of contaminated clothing in labeled, leak-proof bags
• Labels: Biohazard labeling for waste receptacles, refrigerators, and other locations where OPIM may be present

Hepatitis B Vaccination

The employer will provide both bloodborne pathogens certification training and offer the Hepatitis B vaccination series at no cost to at-risk employees within 10 days of initial assignment. Employees who decline must sign a declination form. If an employee changes their mind later, the vaccine must be offered immediately.

Post-Exposure evaluation and follow-up

Immediately following an exposure incident, a confidential medical evaluation must be conducted, including:

• Documenting how the exposure occurred
• Testing the source individual (with consent)
• Blood collection and testing of the exposed employee
• Follow-up counseling and prophylaxis as needed 

Communication of hazards and training

All workers with occupational exposure risk must receive BBP training:

• At the time of initial assignment
• At least annually thereafter
• Whenever new tasks or procedures affect exposure risk
• Training must include an opportunity for interactive questions and answers with the person conducting the session.

Record keeping

There are 4 types of records OSHA requires.  

• Training – must be retained for 3 years
• Medical – must be retained for Duration of employment + 30 years
• Exposure incident records – must be retained for duration of employment + 30 years
• Sharps injury log records – must be retained for 5 years

All of these must be managed and maintained by the employer.  The length of time the records must be maintained varies based on the record type. 

Administration of post exposure incidents

In a case of employee exposure, the employer is required to examine the plan, process and procedures surrounding the employee for the purpose of preventing future exposure. 

The study mentioned in the beginning of this article focused on the dental industry, but we can safely assume that there are many other organizations who are not bloodborne pathogens compliant across multiple industries. 

Download the BBP Exposure Control Plan Template

We have prepared a downloadable, editable Word document based on the official OSHA model exposure control plan. This template includes all required sections and can be customized for your business.

Simply fill in the bracketed fields with your company’s information, assign responsible persons, and add your specific job classifications and procedures.

ECP for Tattoo Shops and Body Art Studios

Tattoo studios, microblading clinics, piercing studios, and permanent makeup businesses are covered by the Bloodborne Pathogens Standard. There are no specific additional ECP requirements for these businesses beyond those which the standard already requires.

However, the training element of the ECP must be specific to body art: artists need bloodborne pathogens certification for tattoo artists that covers information essential to working in environments where needles, sharps, and blood are present. 

Bloodborne Pathogens Exposure in a Tattoo Studio

ECP for Healthcare and Dental Practices

Healthcare facilities face additional considerations. Their ECP must address:

• Needlestick prevention and safer medical device evaluation
• Clinical waste segregation and disposal
• Laboratory specimen handling
• Hepatitis B vaccination programs for all patient-facing staff
• Sharps injury log maintenance (required for healthcare settings)

Developing a BBP Exposure Control Plan: Summary

• An ECP is required by OSHA 29 CFR 1910.1030 for any employer with at-risk employees
• It must be written, site-specific, and reviewed at least annually
• Key components: exposure determination, controls, PPE, Hep B vaccination, post-exposure procedures, training, and record keeping
• Download our editable template to get compliant quickly
• Training documentation is a critical part of the ECP – ensure all employees have current, verifiable BBP certification