Bloodborne Pathogens
Training Manual

What Are Bloodborne Pathogens?

Bloodborne pathogens (BBP) are infectious microorganisms present in human blood and other potentially infectious materials (OPIM) that can cause disease in humans. In a med spa environment, staff are routinely exposed to blood and bodily fluids during injectable procedures, microneedling, laser treatments, and any service that penetrates the skin.

OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030) requires that all employers with employees who have occupational exposure to blood or OPIM must establish a written Exposure Control Plan and provide annual training to all at-risk employees. This training is not optional — it is a federal legal requirement.

The Three Primary Bloodborne Pathogens

Pathogen	Disease	Transmission Risk	Med Spa Relevance
Hepatitis B (HBV)	Liver infection, potentially chronic	High — survives on surfaces up to 7 days	Needle sticks, contaminated surfaces
Hepatitis C (HCV)	Chronic liver disease	Moderate — blood-to-blood contact	Shared/reused equipment, needle sticks
HIV	Immune system failure	Lower — fragile outside the body	Needle sticks, open wound contact

Other Potentially Infectious Materials (OPIM)

Beyond blood, OSHA's standard also covers "other potentially infectious materials" that med spa staff may encounter:

• Semen, vaginal secretions, and any bodily fluid visibly contaminated with blood
• Cerebrospinal, synovial, pleural, peritoneal, pericardial, and amniotic fluids
• Saliva in dental procedures (relevant for facilities offering dental aesthetics)
• Any unfixed human tissue or organ
• Cell or tissue cultures containing HIV, HBV, or HCV

Your Exposure Control Plan

OSHA requires every med spa to maintain a written Exposure Control Plan (ECP) that identifies employees with occupational exposure, details the procedures for preventing exposure incidents, and outlines the steps to take when an exposure occurs. The ECP must be reviewed and updated at least annually.

Exposure Determination by Role

Your ECP must classify every job title in the facility based on exposure risk:

Category	Definition	Typical Med Spa Roles
Category I	Tasks routinely involve exposure to blood/OPIM	Injectors, nurses, medical director, laser technicians, microneedling staff
Category II	Tasks may involve exposure under certain conditions	Estheticians, treatment room cleaners, front desk (if handling specimens)
Category III	Tasks do not involve exposure	Marketing staff, remote admin, billing (no client contact)

All Category I and Category II employees must receive BBP training upon hire and annually thereafter. Category III employees do not require BBP training but should still understand basic hygiene practices.

Engineering & Work Practice Controls

The most effective way to prevent bloodborne pathogen exposure is to eliminate or reduce the hazard at the source. OSHA requires employers to implement a hierarchy of controls, starting with engineering controls and supplemented by work practice controls and personal protective equipment (PPE).

Engineering Controls

Engineering controls are physical devices or systems that isolate or remove the BBP hazard from the workplace. In a med spa, the most critical engineering controls include:

• Self-sheathing needles — Needles that automatically retract or cover after use, eliminating the need for manual recapping
• Sharps disposal containers — FDA-approved, puncture-resistant, leak-proof containers placed within arm's reach of every treatment area where needles are used
• Biohazard waste containers — Clearly labeled, closeable, leak-proof bags/containers for contaminated materials (gauze, gloves, drapes with blood)
• Hand-washing stations — Accessible sinks with antimicrobial soap in every treatment room
• Splash guards or eye protection — For procedures where blood or OPIM splatter is possible

Work Practice Controls

Work practice controls are changes in behavior that reduce the likelihood of exposure. Every med spa employee with occupational exposure must follow these practices:

1. Hand hygiene — Wash hands immediately after removing gloves and after any contact with blood or OPIM. Use soap and running water for at least 20 seconds.
2. No eating, drinking, or applying cosmetics in treatment areas or anywhere blood/OPIM may be present.
3. No mouth pipetting or suctioning of blood or any potentially infectious material.
4. Specimens — Transport all blood or OPIM specimens in leak-proof, labeled containers.
5. Contaminated equipment — Decontaminate all reusable equipment before servicing or reuse. Label any equipment that cannot be fully decontaminated before transport.

Personal Protective Equipment (PPE)

When engineering and work practice controls alone cannot eliminate exposure, employers must provide appropriate PPE at no cost to employees. PPE must be readily accessible, available in appropriate sizes, and replaced as needed.

PPE Item	When Required	Key Requirements
Disposable gloves	Any client contact involving blood or OPIM	Single use only. Replace when torn, punctured, or contaminated. Nitrile or latex (check for client allergies).
Face shields / goggles	Procedures with splash/splatter risk	Must protect eyes, nose, and mouth. Required for any procedure generating aerosols or spray.
Gowns / lab coats	When clothing may become contaminated	Must cover the torso. Disposable or laundered by the employer — employees may not launder at home.
Resuscitation masks	Emergency CPR situations	Must be available in all treatment areas. One-way valve to prevent fluid transfer.

Hepatitis B Vaccination

OSHA mandates that employers offer the Hepatitis B vaccine series to all employees with occupational exposure, free of charge, within 10 working days of initial assignment. This is one of the most frequently cited BBP violations because many med spas either fail to offer it or fail to document the offer properly.

Vaccination Requirements

• The vaccine must be offered after the employee has received BBP training and within 10 days of starting duties with exposure risk
• Employees may decline the vaccine but must sign a specific OSHA declination statement (the exact language is prescribed by OSHA)
• If an employee initially declines but later wishes to receive the vaccine, the employer must provide it at that time at no cost
• The employer must maintain vaccination records for the duration of employment plus 30 years

Post-Exposure Procedures

Despite the best preventive measures, exposure incidents can occur. Every employee must know exactly what to do if they experience a needle stick, splash to mucous membranes, or contact with blood through broken skin. The speed and accuracy of the post-exposure response can significantly affect the outcome.

Immediate Response Steps

If an exposure incident occurs, the exposed employee must take the following steps immediately — do not wait for a supervisor or manager:

1. Wash the exposed area — For needle sticks or cuts, wash the wound thoroughly with soap and running water for at least 20 seconds. For splashes to the eyes, nose, or mouth, flush with clean running water for at least 15 minutes.
2. Report the incident immediately — Notify your supervisor and the designated Exposure Control Officer. Do not delay reporting, even if you believe the risk is minimal.
3. Document the incident — Complete an Exposure Incident Report form (included in your Compliance Kit). Record the date, time, circumstances, source individual (if known), and the type of exposure.
4. Seek medical evaluation — The employer must provide a confidential medical evaluation and follow-up at no cost to the employee, including baseline blood testing and post-exposure prophylaxis (PEP) if recommended by the evaluating physician.

Source Individual Testing

After an exposure incident, the source individual (the client whose blood or OPIM caused the exposure) should be asked to consent to blood testing for HBV, HCV, and HIV. If consent is obtained, the results must be shared with the exposed employee's evaluating physician.

If the source individual is already known to be positive for any bloodborne pathogen, testing does not need to be repeated. If the source individual refuses testing or cannot be identified, the exposed employee must be informed of any limitations this places on the evaluation.