The OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030) is the most-cited OSHA standard in janitorial enforcement actions — and one of the most misunderstood. The frequently-heard operator position is that "we're not healthcare, so it doesn't apply." That position has been rejected in OSHA letters of interpretation and citation records for over twenty years.
What triggers the standard
The standard applies to employees with "occupational exposure" — defined as "reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or other potentially infectious materials (OPIM) that may result from the performance of an employee's duties."
The 1992 OSHA Compliance Directive (CPL 02-02-069) and subsequent letters of interpretation have consistently held that the following categories trigger the standard:
- Designated first-aid responders in any workplace.
- Janitorial personnel who clean restrooms where exposure to feminine hygiene products, used needles, or blood is reasonably foreseeable.
- School and daycare cleaning staff who handle vomit, blood, or bodily fluid spills.
- Hospitality housekeepers who clean rooms with reasonably-foreseeable blood exposure.
- Crime-scene, trauma, or remediation contractors — explicit.
OSHA has rejected the "we just clean buildings" defense because cleaning workers handle waste streams that include sharps, sanitary product disposal, and unmarked spills — and because employers cannot in good faith claim they did not anticipate exposure to bodily fluids in restroom-cleaning duties.
What compliance actually requires
Six elements:
- Written Exposure Control Plan (ECP): site-specific, reviewed and updated annually, available to employees.
- Employee training at initial assignment and annually: at least 1 hour, conducted by a person knowledgeable in the subject (not an online module alone), opportunity for Q&A.
- Hepatitis B vaccination offered free to all employees with occupational exposure, within 10 working days of initial assignment.
- PPE: gloves, gowns, face protection appropriate to the task — supplied free, replacement available.
- Engineering and work-practice controls: sharps containers if any sharps handling, no recapping, hand-washing facilities.
- Post-exposure follow-up: confidential medical evaluation within reasonable time of any exposure incident, source individual testing offered, baseline blood draw, treatment per current CDC guidelines.
The penalty structure
Bloodborne pathogen citations are typically Serious ($16,131 per violation in 2026) or Willful ($161,323 per violation). The most common citations:
- No written Exposure Control Plan: Serious.
- No initial or annual training: Serious, often Repeat after first citation.
- HBV vaccination not offered or improperly documented: Serious.
- Failure to provide PPE: Serious.
Cleaning contractors in school districts and hospital settings have been cited with multiple Serious violations per inspection, resulting in fines of $40,000–$100,000 per facility.
The training-vendor problem
The market is saturated with $9.99 online BBP training certificates. OSHA's standard does not recognize self-paced video-only training as adequate. The training must include opportunity for interactive Q&A with a knowledgeable trainer. Records-only paper trails routinely get cited if the trainer's credentials and the live-interaction component aren't documentable.
The needlestick/sharps gap
Restroom cleaning in shelters, schools, and certain office buildings includes risk of contact with discarded needles. Few cleaning contracts include sharps response procedures. The Needlestick Safety and Prevention Act of 2000 amended the BBP standard to require sharps engineering controls — but enforcement against janitorial contractors has been inconsistent. Best practice: written sharps response procedure, sharps containers in restrooms when client allows, training on safe handling.
Practical first step
If your company does not have a current written ECP, get one. Sample templates are available from state OSHA programs (CalOSHA, Oregon OSHA, NCDOL). Customize to actual job sites. Distribute, train, document. The single highest-leverage compliance action available is documented training records showing each employee completed the annual training with a named instructor, date, and topic list.